book-comic-library/backend/cmd/webui/handlers/uploads_test.go

package handlers_test

import (
	"bytes"
	"encoding/json"
	"fmt"
	"net/http"
	"net/http/httptest"
	"os"
	"path/filepath"
	"strings"
	"testing"
)

func initUpload(t *testing.T, h http.Handler, tok, libID, name string, size, chunk int64) (map[string]any, *httptest.ResponseRecorder) {
	t.Helper()
	w := do(h, "POST", "/api/libraries/"+libID+"/upload/init", tok,
		map[string]any{"name": name, "size": size, "chunkSize": chunk})
	var m map[string]any
	json.Unmarshal(w.Body.Bytes(), &m)
	return m, w
}

func putPart(h http.Handler, tok, uid string, idx int, data []byte) *httptest.ResponseRecorder {
	req := httptest.NewRequest("PUT", "/api/uploads/"+uid+"/parts/"+fmt.Sprint(idx), bytes.NewReader(data))
	req.Header.Set("Authorization", "Bearer "+tok)
	req.Header.Set("Content-Type", "application/octet-stream")
	ww := httptest.NewRecorder()
	h.ServeHTTP(ww, req)
	return ww
}

func mkLib(t *testing.T, h http.Handler, tok, name string) string {
	t.Helper()
	w := do(h, "POST", "/api/libraries", tok, map[string]string{"name": name})
	if w.Code != 201 {
		t.Fatalf("create lib %d %s", w.Code, w.Body)
	}
	var m map[string]any
	json.Unmarshal(w.Body.Bytes(), &m)
	return itoa(m["id"])
}

func TestUploadChunkedHappyPath(t *testing.T) {
	_, _, h, booksDir := setupAPI(t)
	tok := adminToken(t, h)
	libID := mkLib(t, h, tok, "s2")

	content := bytes.Repeat([]byte("調教開關第二季!"), 40000) // ~880KB, <1MB 测试上限
	size := int64(len(content))
	chunk := int64(400000)
	m, w := initUpload(t, h, tok, libID, "調教開關：第二季.zip", size, chunk)
	if w.Code != 200 || m["uploadId"] == "" {
		t.Fatalf("init %d %s", w.Code, w.Body)
	}
	uid := m["uploadId"].(string)

	n := int((size + chunk - 1) / chunk) // 乱序上传
	for _, i := range []int{2, 0, 1} {
		lo, hi := int64(i)*chunk, int64(i+1)*chunk
		if hi > size {
			hi = size
		}
		if ww := putPart(h, tok, uid, i, content[lo:hi]); ww.Code != 202 {
			t.Fatalf("part %d: %d %s", i, ww.Code, ww.Body)
		}
	}
	w = do(h, "GET", "/api/uploads/"+uid, tok, nil)
	var st struct{ Received []int }
	json.Unmarshal(w.Body.Bytes(), &st)
	if len(st.Received) != n {
		t.Fatalf("status want %d got %v", n, st.Received)
	}
	w = do(h, "POST", "/api/uploads/"+uid+"/complete", tok, nil)
	if w.Code != 202 {
		t.Fatalf("complete %d %s", w.Code, w.Body)
	}
	var res map[string]any
	json.Unmarshal(w.Body.Bytes(), &res)
	if res["path"] != "調教開關：第二季.zip" {
		t.Fatalf("path: %v", res["path"])
	}
	got, err := os.ReadFile(filepath.Join(booksDir, "s2", "調教開關：第二季.zip"))
	if err != nil || !bytes.Equal(got, content) {
		t.Fatalf("assembled file wrong: err=%v eq=%v", err, bytes.Equal(got, content))
	}
	if entries, _ := os.ReadDir(filepath.Join(booksDir, ".uploads")); len(entries) != 0 {
		t.Fatalf("session not cleaned: %v", entries)
	}
}

func TestUploadChunkedResumeKeepsParts(t *testing.T) {
	_, _, h, _ := setupAPI(t)
	tok := adminToken(t, h)
	libID := mkLib(t, h, tok, "s2")
	content := bytes.Repeat([]byte("x"), 900000)
	m, _ := initUpload(t, h, tok, libID, "r.cbz", 900000, 400000)
	uid := m["uploadId"].(string)
	putPart(h, tok, uid, 0, content[:400000])
	// 同指纹重复 init → 复用会话,已传分片保留
	m2, _ := initUpload(t, h, tok, libID, "r.cbz", 900000, 400000)
	if m2["uploadId"] != uid {
		t.Fatalf("resume want same uid got %v", m2["uploadId"])
	}
	w := do(h, "GET", "/api/uploads/"+uid, tok, nil)
	if !strings.Contains(w.Body.String(), "[0]") {
		t.Fatalf("resumed status: %s", w.Body)
	}
}

func TestUploadChunkedErrors(t *testing.T) {
	_, _, h, _ := setupAPI(t)
	tok := adminToken(t, h)
	libID := mkLib(t, h, tok, "s2")

	// 总量超 UPLOAD_MAX_MB(测试=1MB)→ 413,消息带限额
	_, w := initUpload(t, h, tok, libID, "big.cbz", 2<<20, 400000)
	if w.Code != 413 || !strings.Contains(w.Body.String(), "too_large") {
		t.Fatalf("oversize want 413 got %d %s", w.Code, w.Body)
	}
	// 扩展名白名单
	_, w = initUpload(t, h, tok, libID, "virus.exe", 100, 10)
	if w.Code != 400 || !strings.Contains(w.Body.String(), "bad_format") {
		t.Fatalf("bad ext want 400 got %d %s", w.Code, w.Body)
	}
	// chunkSize 超 32MB
	_, w = initUpload(t, h, tok, libID, "ok.cbz", 100, 40<<20)
	if w.Code != 400 {
		t.Fatalf("huge chunk want 400 got %d %s", w.Code, w.Body)
	}
	m, _ := initUpload(t, h, tok, libID, "p.cbz", 1000, 400)
	uid := m["uploadId"].(string)
	// 越界 index
	if ww := putPart(h, tok, uid, 9, bytes.Repeat([]byte("y"), 400)); ww.Code != 400 {
		t.Fatalf("index oob want 400 got %d %s", ww.Code, ww.Body)
	}
	// 分片超期望体积
	if ww := putPart(h, tok, uid, 0, bytes.Repeat([]byte("y"), 500)); ww.Code != 413 {
		t.Fatalf("part too big want 413 got %d %s", ww.Code, ww.Body)
	}
	// 缺片 complete
	putPart(h, tok, uid, 0, bytes.Repeat([]byte("y"), 400))
	w = do(h, "POST", "/api/uploads/"+uid+"/complete", tok, nil)
	if w.Code != 400 {
		t.Fatalf("missing parts want 400 got %d %s", w.Code, w.Body)
	}
	// 未知 uid → 404
	w = do(h, "GET", "/api/uploads/deadbeefdeadbeefdeadbeefdeadbeef", tok, nil)
	if w.Code != 404 {
		t.Fatalf("unknown uid want 404 got %d", w.Code)
	}
	// 非法 uid → 400
	w = do(h, "GET", "/api/uploads/zzz", tok, nil)
	if w.Code != 400 {
		t.Fatalf("bad uid want 400 got %d %s", w.Code, w.Body)
	}
}