Codex Local
bf1233d5df
ci / verify (push) Canceled after 0s
Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.
77 lines
2.9 KiB
Go
77 lines
2.9 KiB
Go
package config
|
|
|
|
import (
|
|
"encoding/json"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func accountFixture() string {
|
|
var b strings.Builder
|
|
for _, name := range volcAccountNames {
|
|
b.WriteString(name + "=\n")
|
|
}
|
|
return b.String()
|
|
}
|
|
|
|
func TestVolcAccountRejectsInvalidWithoutSecretLeak(t *testing.T) {
|
|
for _, suffix := range []string{"SECRET_SENTINEL=do-not-print", "RTC_APP_KEY=do-not-print", "not-valid do-not-print"} {
|
|
p := filepath.Join(t.TempDir(), "account.env")
|
|
if err := os.WriteFile(p, []byte(accountFixture()+suffix), 0600); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
_, err := ReadVolcAccountFile(p)
|
|
if err == nil || strings.Contains(err.Error(), "do-not-print") {
|
|
t.Fatal("invalid configuration accepted or secret leaked")
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestVolcAccountLiteralParsingAndAuthoritativeSecrets(t *testing.T) {
|
|
p := filepath.Join(t.TempDir(), "account.env")
|
|
raw := strings.Replace(accountFixture(), "RTC_APP_KEY=\n", "RTC_APP_KEY='literal=$value#secret'\n", 1)
|
|
if err := os.WriteFile(p, []byte("\xef\xbb\xbf# worksheet\r\n"+raw), 0600); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
values, err := ReadVolcAccountFile(p)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Setenv("RTC_APP_KEY", "old-secret")
|
|
t.Setenv("RTC_APP_KEY_FILE", filepath.Join(t.TempDir(), "missing-legacy-file"))
|
|
t.Setenv("ARK_API_KEY", "obsolete-ark-secret")
|
|
secrets, err := loadSecretValuesWithAccount(values, "RTC_APP_KEY", "ARK_API_KEY")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if secrets["RTC_APP_KEY"] != "literal=$value#secret" || secrets["ARK_API_KEY"] != "" {
|
|
t.Fatal("account file did not supersede obsolete credentials")
|
|
}
|
|
}
|
|
|
|
func TestVolcAccountTemplateCredentialsAndPrompts(t *testing.T) {
|
|
c := Config{volcAccount: map[string]string{"S2S_APP_ID": "new-app", "S2S_ACCESS_TOKEN": "new-token", "S2S_MODEL": "O", "S2S_SPEAKER": "new-speaker"}}
|
|
raw := []byte(`{"schema_version":"voice-chat-template-bundle-v1","templates":{"s2s_hybrid":{"Config":{"S2SConfig":{"Provider":"volcano","ProviderParams":{"app":{"appid":"old-app","token":"old-token"},"dialog":{"system_role":"keep this prompt","extra":{"model":"old-model"}},"tts":{"speaker":"old-speaker"}}}}}}}`)
|
|
updated, err := c.ApplyVolcVoiceTemplate(raw)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if strings.Contains(string(updated), "old-") || !strings.Contains(string(updated), "keep this prompt") {
|
|
t.Fatal("old credentials retained or prompt lost")
|
|
}
|
|
var root map[string]any
|
|
if json.Unmarshal(updated, &root) != nil {
|
|
t.Fatal("invalid updated JSON")
|
|
}
|
|
conf := root["templates"].(map[string]any)["s2s_hybrid"].(map[string]any)["Config"].(map[string]any)
|
|
pp := conf["S2SConfig"].(map[string]any)["ProviderParams"].(map[string]any)
|
|
if pp["app"].(map[string]any)["token"] != "new-token" || pp["dialog"].(map[string]any)["extra"].(map[string]any)["model"] != "O" {
|
|
t.Fatal("account voice parameters not applied")
|
|
}
|
|
if _, err := c.ApplyVolcVoiceTemplate([]byte(`{"Config":{}}`)); err == nil {
|
|
t.Fatal("missing S2S accepted")
|
|
}
|
|
}
|