mirror of
https://github.com/azaion/missions.git
synced 2026-06-21 19:21:07 +00:00
ccd85a09df
ci/woodpecker/push/build-arm Pipeline failed
Scaffold the blackbox test project the rest of epic AZ-575 (AZ-577..AZ-586) will build on. Two new csprojs under tests/, plus the TLS materials and TRX->CSV reporting hand-off the existing docker-compose.test.yml already calls for. JWKS mock (tests/Azaion.Missions.JwksMock/): - ASP.NET Core minimal API on .NET 10, no NuGet deps; JWS is hand-rolled to keep the surface tight and avoid version drift with the SUT - KeyStore with one in-memory ECDSA P-256 keypair + retired-key grace window for NFT-RES-07 / NFT-SEC-11 rotation observability - Endpoints: GET /.well-known/jwks.json, POST /sign, POST /rotate-key - Mock-only alg_override / kid_override switches drive NFT-SEC-09/10/11 - TLS keypair committed under tls/; tests/jwks-mock-ca.crt is a copy mounted into both missions and e2e-consumer per docker-compose.test.yml E2E consumer (tests/Azaion.Missions.E2E.Tests/): - xUnit 2.9.2 + Bogus 35.6.1 + Npgsql 10.0.2 + Xunit.SkippableFact 1.4.13 - TestBase / TokenMinter scaffolding for downstream tasks - Fixtures/ for DbReset, DbSeed, ComposeRestart, JwksRotate, JwksMockReverse - Helpers/ for DbAssertions (side-channel), HttpAssertions, FixtureSql - 8 Tests/<category>/Sanity.cs discovery smoke tests (AC-3) - Tests/InfrastructureSanity.cs SkippableFacts for AC-1/2/5/6 - Tests/AaaPatternEnforcement.cs greps source files for AC-7 - Tests/Reporting/TrxToCsvPostProcessorTests.cs covers AC-4 - Reporting/TrxToCsvPostProcessor.cs handles VSTest TRX -> environment.md CSV; xUnit traits are not propagated by the TRX logger so the converter reflects them out of the test DLL via GetCustomAttributesData - Reporting.Cli/ is a separate console csproj that links the converter source files (test project excludes Reporting.Cli/** from compile) - Dockerfile + entrypoint.sh wire dotnet test -> trx -> csv inside the e2e-consumer container the compose file already references Local verification: 13 pass, 3 skip (with explicit reasons), 0 fail. End-to-end TRX->CSV manually verified against environment.md header spec. Docker stack build is handed off to autodev Step 7 (test-run skill). Reports under _docs/03_implementation/. AZ-576 task spec moved to _docs/tasks/done/. Co-authored-by: Cursor <cursoragent@cursor.com>
55 lines
1.9 KiB
C#
55 lines
1.9 KiB
C#
using Npgsql;
|
|
using Xunit;
|
|
|
|
namespace Azaion.Missions.E2E.Helpers;
|
|
|
|
/// <summary>
|
|
/// Side-channel database assertions. Used to verify state the API does not
|
|
/// expose directly (default-vehicle invariants, mission row counts after
|
|
/// cascade-delete, audit-table side effects).
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// Marked with <c>[Trait("db_access","seed-or-assert-only")]</c> at the
|
|
/// consumer-test level — this helper itself is a pure utility.
|
|
/// </remarks>
|
|
public static class DbAssertions
|
|
{
|
|
public static long ScalarCount(string sql, params (string Name, object Value)[] parameters)
|
|
{
|
|
using var conn = new NpgsqlConnection(TestEnvironment.DbSideChannel);
|
|
conn.Open();
|
|
using var cmd = conn.CreateCommand();
|
|
cmd.CommandText = sql;
|
|
foreach (var (name, value) in parameters)
|
|
cmd.Parameters.AddWithValue(name, value);
|
|
var result = cmd.ExecuteScalar();
|
|
if (result is null || result is DBNull)
|
|
throw new InvalidOperationException($"Scalar query '{sql}' returned NULL");
|
|
return Convert.ToInt64(result, System.Globalization.CultureInfo.InvariantCulture);
|
|
}
|
|
|
|
public static void AssertExactlyOneDefaultVehicle()
|
|
{
|
|
var count = ScalarCount("SELECT COUNT(*) FROM vehicles WHERE is_default = TRUE");
|
|
Assert.True(count <= 1, $"default-vehicle invariant violated: {count} vehicles flagged is_default=TRUE");
|
|
}
|
|
|
|
public static long TableRowCount(string table)
|
|
{
|
|
if (!IsValidIdentifier(table))
|
|
throw new ArgumentException($"Invalid table identifier '{table}'", nameof(table));
|
|
return ScalarCount($"SELECT COUNT(*) FROM {table}");
|
|
}
|
|
|
|
private static bool IsValidIdentifier(string s)
|
|
{
|
|
if (string.IsNullOrEmpty(s) || s.Length > 63) return false;
|
|
foreach (var c in s)
|
|
{
|
|
if (!(char.IsLetterOrDigit(c) || c == '_'))
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
}
|