WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

2026-09-22 16:19:06 +08:00
commit f7fc992f57
3929 changed files with 1006607 additions and 0 deletions
@@ -0,0 +1,157 @@
+package service
+
+import (
+	"context"
+	"encoding/json"
+	"testing"
+	"time"
+
+	"github.com/Tencent/WeKnora/internal/accesspolicy"
+	"github.com/Tencent/WeKnora/internal/application/repository"
+	"github.com/Tencent/WeKnora/internal/im"
+	"github.com/Tencent/WeKnora/internal/im/wechat"
+	"github.com/Tencent/WeKnora/internal/types"
+	"github.com/google/uuid"
+	"github.com/stretchr/testify/require"
+	"gorm.io/driver/sqlite"
+	"gorm.io/gorm"
+)
+
+type digitalHumanTestChannels struct {
+	items   map[string]im.IMChannel
+	created int
+}
+
+func (c *digitalHumanTestChannels) InvalidateDeletedChannels([]string) {}
+func (c *digitalHumanTestChannels) ListChannelsByAgent(agent string, tenant uint64) ([]im.IMChannel, error) {
+	result := []im.IMChannel{}
+	for _, item := range c.items {
+		if item.AgentID == agent && item.TenantID == tenant {
+			result = append(result, item)
+		}
+	}
+	return result, nil
+}
+func (c *digitalHumanTestChannels) GetChannelByIDAndTenant(id string, tenant uint64) (*im.IMChannel, error) {
+	item, exists := c.items[id]
+	if !exists || item.TenantID != tenant {
+		return nil, gorm.ErrRecordNotFound
+	}
+	return &item, nil
+}
+func (c *digitalHumanTestChannels) CreateChannel(item *im.IMChannel) error {
+	item.ID = uuid.NewString()
+	c.items[item.ID] = *item
+	c.created++
+	return nil
+}
+func (c *digitalHumanTestChannels) UpdateChannel(item *im.IMChannel) error {
+	c.items[item.ID] = *item
+	return nil
+}
+func (c *digitalHumanTestChannels) DeleteChannel(id string, _ uint64) error {
+	delete(c.items, id)
+	return nil
+}
+
+type digitalHumanTestQR struct{ calls int }
+
+func (q *digitalHumanTestQR) GetLoginQRCode(context.Context) (*wechat.QRCodeResult, error) {
+	return &wechat.QRCodeResult{QRCode: "upstream-ticket", QRCodeURL: "https://example.com/login"}, nil
+}
+func (q *digitalHumanTestQR) PollQRCodeStatus(context.Context, string) (*wechat.LoginResult, error) {
+	q.calls++
+	return &wechat.LoginResult{Status: "confirmed", BotToken: "private-bot-token", ILinkBotID: "bot-id", ILinkUserID: "wechat-user"}, nil
+}
+
+func setupDigitalHumanWeChat(t *testing.T) (*DigitalHumanService, context.Context, *types.DigitalHuman, *digitalHumanTestChannels, *digitalHumanTestQR) {
+	t.Helper()
+	db, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{})
+	require.NoError(t, err)
+	sqlDB, err := db.DB()
+	require.NoError(t, err)
+	sqlDB.SetMaxOpenConns(1)
+	t.Cleanup(func() { sqlDB.Close() })
+	require.NoError(t, db.AutoMigrate(&types.CustomAgent{}, &types.DigitalHuman{}, &types.DigitalHumanVersion{}, &types.DigitalHumanBinding{}, &types.DigitalHumanJob{}))
+	require.NoError(t, db.Exec("CREATE TABLE users (id TEXT PRIMARY KEY, username TEXT, deleted_at DATETIME)").Error)
+	require.NoError(t, db.Exec("CREATE TABLE im_channels (id TEXT PRIMARY KEY, agent_id TEXT, tenant_id INTEGER, enabled BOOLEAN, updated_at DATETIME, deleted_at DATETIME)").Error)
+	repo := repository.NewDigitalHumanRepository(db)
+	human := &types.DigitalHuman{ID: uuid.NewString(), TenantID: 7, OwnerID: "owner", Name: "Teacher", PrimaryAgentID: uuid.NewString(), LatestVersion: 1, Revision: 1, Status: "draft"}
+	require.NoError(t, repo.Create(context.Background(), human, map[string]string{"tone": "clear"}))
+	ctx := context.WithValue(context.Background(), types.TenantIDContextKey, uint64(7))
+	ctx = context.WithValue(ctx, types.UserIDContextKey, "owner")
+	channels := &digitalHumanTestChannels{items: map[string]im.IMChannel{}}
+	qr := &digitalHumanTestQR{}
+	return &DigitalHumanService{repo: repo, channels: channels, qr: qr}, ctx, human, channels, qr
+}
+
+func TestDigitalHumanWeChatScopeAndIdempotency(t *testing.T) {
+	service, ctx, human, channels, qr := setupDigitalHumanWeChat(t)
+	ticket, err := service.WeChatQRCode(ctx, human.ID)
+	require.NoError(t, err)
+	require.NotEqual(t, "upstream-ticket", ticket.QRCode)
+	for _, other := range []context.Context{
+		context.WithValue(ctx, types.UserIDContextKey, "other"),
+		context.WithValue(ctx, types.TenantIDContextKey, uint64(8)),
+		context.WithValue(context.WithValue(ctx, types.UserIDContextKey, "admin"), types.TenantRoleContextKey, types.TenantRoleAdmin),
+		accesspolicy.WithSnapshot(context.WithValue(ctx, types.UserIDContextKey, "shared-reader"), &accesspolicy.Snapshot{Grants: map[string]bool{"digital-humans:" + human.ID: true}}),
+	} {
+		require.ErrorIs(t, service.CheckOwner(other, human.ID), types.ErrDigitalHumanNotFound)
+		_, err := service.WeChatQRCode(other, human.ID)
+		require.ErrorIs(t, err, types.ErrDigitalHumanNotFound)
+		_, err = service.WeChatPoll(other, human.ID, ticket.QRCode)
+		require.ErrorIs(t, err, types.ErrDigitalHumanNotFound)
+		_, err = service.WeChatChannels(other, human.ID)
+		require.ErrorIs(t, err, types.ErrDigitalHumanNotFound)
+	}
+	// A valid owner cannot use a ticket issued for another human.
+	service.qrLogins[ticket.QRCode].humanID = "other-human"
+	_, err = service.WeChatPoll(ctx, human.ID, ticket.QRCode)
+	require.Error(t, err)
+	service.qrLogins[ticket.QRCode].humanID = human.ID
+	result, err := service.WeChatPoll(ctx, human.ID, ticket.QRCode)
+	require.NoError(t, err)
+	require.Equal(t, human.PrimaryAgentID, result.Channel.AgentID)
+	_, err = service.WeChatPoll(ctx, human.ID, ticket.QRCode)
+	require.NoError(t, err)
+	require.Equal(t, 1, channels.created)
+	require.Equal(t, 1, qr.calls)
+	encoded, err := json.Marshal(result)
+	require.NoError(t, err)
+	require.NotContains(t, string(encoded), "private-bot-token")
+	require.NotContains(t, string(encoded), "credentials\"")
+	list, err := service.WeChatChannels(ctx, human.ID)
+	require.NoError(t, err)
+	require.Len(t, list, 1)
+	sharedReader := accesspolicy.WithSnapshot(context.WithValue(ctx, types.UserIDContextKey, "shared-reader"), &accesspolicy.Snapshot{Grants: map[string]bool{"digital-humans:" + human.ID: true}})
+	require.ErrorIs(t, service.SetWeChatChannelEnabled(sharedReader, human.ID, result.Channel.ID, false), types.ErrDigitalHumanNotFound)
+	require.ErrorIs(t, service.DeleteWeChatChannel(sharedReader, human.ID, result.Channel.ID), types.ErrDigitalHumanNotFound)
+	require.True(t, channels.items[result.Channel.ID].Enabled)
+	require.NoError(t, service.SetWeChatChannelEnabled(ctx, human.ID, result.Channel.ID, false))
+	require.False(t, channels.items[result.Channel.ID].Enabled)
+	require.NoError(t, service.DeleteWeChatChannel(ctx, human.ID, result.Channel.ID))
+	require.Empty(t, channels.items)
+	_, err = service.WeChatPoll(ctx, human.ID, ticket.QRCode)
+	require.ErrorIs(t, err, types.ErrDigitalHumanNotFound)
+	require.Equal(t, 1, channels.created)
+}
+
+func TestDigitalHumanWeChatRejectsExpiredAndForeignChannels(t *testing.T) {
+	service, ctx, human, channels, qr := setupDigitalHumanWeChat(t)
+	ticket, err := service.WeChatQRCode(ctx, human.ID)
+	require.NoError(t, err)
+	service.qrLogins[ticket.QRCode].expires = time.Now().Add(-time.Minute)
+	_, err = service.WeChatPoll(ctx, human.ID, ticket.QRCode)
+	require.Error(t, err)
+	require.Zero(t, qr.calls)
+	for _, channel := range []im.IMChannel{
+		{ID: "foreign-agent", TenantID: 7, AgentID: "other", Platform: "wechat"},
+		{ID: "foreign-tenant", TenantID: 8, AgentID: human.PrimaryAgentID, Platform: "wechat"},
+		{ID: "foreign-platform", TenantID: 7, AgentID: human.PrimaryAgentID, Platform: "feishu"},
+	} {
+		channels.items[channel.ID] = channel
+		require.ErrorIs(t, service.DeleteWeChatChannel(ctx, human.ID, channel.ID), types.ErrDigitalHumanNotFound)
+		require.ErrorIs(t, service.SetWeChatChannelEnabled(ctx, human.ID, channel.ID, false), types.ErrDigitalHumanNotFound)
+	}
+	require.Len(t, channels.items, 3)
+}