WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

internal/application/service/vectorstore_healthcheck_ssrf_test.go

@@ -0,0 +1,46 @@
+package service
+
+import (
+	"context"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/Tencent/WeKnora/internal/types"
+)
+
+func TestTestConnection_MilvusBlocksUnsafeAddrAtDialSink(t *testing.T) {
+	svc := NewVectorStoreService(&mockVectorStoreRepo{}, nil, nil, nil, nil)
+
+	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+	defer cancel()
+
+	_, err := svc.TestConnection(ctx, types.MilvusRetrieverEngineType, types.ConnectionConfig{
+		Addr: "169.254.169.254:19530",
+	})
+	if err == nil {
+		t.Fatal("expected milvus connectivity probe to reject unsafe address")
+	}
+	if !strings.Contains(err.Error(), "failed to connect to milvus") {
+		t.Fatalf("unexpected error: %v", err)
+	}
+}
+
+func TestTestConnection_DorisBlocksUnsafeAddrAtDialSink(t *testing.T) {
+	svc := NewVectorStoreService(&mockVectorStoreRepo{}, nil, nil, nil, nil)
+
+	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+	defer cancel()
+
+	_, err := svc.TestConnection(ctx, types.DorisRetrieverEngineType, types.ConnectionConfig{
+		Addr:     "169.254.169.254:9030",
+		Database: "weknora",
+		Username: "root",
+	})
+	if err == nil {
+		t.Fatal("expected doris connectivity probe to reject unsafe address")
+	}
+	if !strings.Contains(err.Error(), "failed to connect to doris") {
+		t.Fatalf("unexpected error: %v", err)
+	}
+}