docs: project docs, scripts, deployment configs, and evidence
This commit is contained in:
399
test_full.sh
Normal file
399
test_full.sh
Normal file
@@ -0,0 +1,399 @@
|
||||
#!/bin/bash
|
||||
|
||||
# 用户管理系统自动化测试脚本
|
||||
# 用途：全面测试所有功能和接口
|
||||
|
||||
BASE_URL="http://localhost:8080"
|
||||
ADMIN_TOKEN=""
|
||||
USER_TOKEN=""
|
||||
USER_ID=""
|
||||
TEST_ADMIN_ACCOUNT="${TEST_ADMIN_ACCOUNT:-admin}"
|
||||
TEST_ADMIN_PASSWORD="${TEST_ADMIN_PASSWORD:-}"
|
||||
|
||||
if [ -z "${TEST_ADMIN_PASSWORD}" ]; then
|
||||
echo "请先设置 TEST_ADMIN_PASSWORD"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 颜色输出
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
NC='\033[0m' # No Color
|
||||
|
||||
# 打印函数
|
||||
print_success() {
|
||||
echo -e "${GREEN}✓ $1${NC}"
|
||||
}
|
||||
|
||||
print_error() {
|
||||
echo -e "${RED}✗ $1${NC}"
|
||||
}
|
||||
|
||||
print_info() {
|
||||
echo -e "${YELLOW}➤ $1${NC}"
|
||||
}
|
||||
|
||||
# 测试1：健康检查
|
||||
test_health_check() {
|
||||
print_info "测试1：健康检查"
|
||||
response=$(curl -s -w "\n%{http_code}" "${BASE_URL}/health")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "健康检查通过 (200)"
|
||||
echo "响应: $body"
|
||||
else
|
||||
print_error "健康检查失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试2：用户注册
|
||||
test_register() {
|
||||
print_info "测试2：用户注册"
|
||||
|
||||
# 测试正常注册
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/register" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"username":"testuser1","password":"Test123456","email":"test1@example.com"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "用户注册成功"
|
||||
USER_ID=$(echo "$body" | grep -o '"id":[0-9]*' | head -1 | cut -d':' -f2)
|
||||
echo "用户ID: $USER_ID"
|
||||
else
|
||||
print_error "用户注册失败 (HTTP $http_code)"
|
||||
echo "响应: $body"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# 测试重复用户名
|
||||
print_info "测试2.1：重复用户名注册"
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/register" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"username":"testuser1","password":"Test123456","email":"test2@example.com"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "400" ] || [ "$http_code" = "409" ]; then
|
||||
print_success "重复用户名注册被正确拒绝 ($http_code)"
|
||||
else
|
||||
print_error "重复用户名验证失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# 测试弱密码
|
||||
print_info "测试2.2：弱密码注册"
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/register" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"username":"testuser2","password":"123","email":"test2@example.com"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "400" ]; then
|
||||
print_success "弱密码注册被正确拒绝 (400)"
|
||||
else
|
||||
print_error "弱密码验证失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# 测试无效邮箱
|
||||
print_info "测试2.3：无效邮箱注册"
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/register" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"username":"testuser3","password":"Test123456","email":"invalid"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "400" ]; then
|
||||
print_success "无效邮箱注册被正确拒绝 (400)"
|
||||
else
|
||||
print_error "邮箱验证失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试3：用户登录
|
||||
test_login() {
|
||||
print_info "测试3：用户登录"
|
||||
|
||||
# 测试正常登录（管理员）
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/login" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"account\":\"${TEST_ADMIN_ACCOUNT}\",\"password\":\"${TEST_ADMIN_PASSWORD}\"}")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "管理员登录成功"
|
||||
ADMIN_TOKEN=$(echo "$body" | grep -o '"access_token":"[^"]*' | cut -d'"' -f4)
|
||||
echo "获取到访问令牌"
|
||||
else
|
||||
print_error "管理员登录失败 (HTTP $http_code)"
|
||||
echo "响应: $body"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# 测试错误密码
|
||||
print_info "测试3.1：错误密码登录"
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/login" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"account":"admin","password":"wrong"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "401" ]; then
|
||||
print_success "错误密码登录被正确拒绝 (401)"
|
||||
else
|
||||
print_error "错误密码验证失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# 测试用户名登录
|
||||
if [ -n "$USER_ID" ]; then
|
||||
print_info "测试3.2：用户名登录（新注册用户）"
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/login" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"account":"testuser1","password":"Test123456"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "新用户登录成功"
|
||||
USER_TOKEN=$(echo "$body" | grep -o '"access_token":"[^"]*' | cut -d'"' -f4)
|
||||
else
|
||||
print_error "新用户登录失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
fi
|
||||
}
|
||||
|
||||
# 测试4：获取用户信息
|
||||
test_get_userinfo() {
|
||||
print_info "测试4：获取用户信息（需要认证）"
|
||||
|
||||
if [ -z "$ADMIN_TOKEN" ]; then
|
||||
print_error "没有访问令牌，跳过测试"
|
||||
return
|
||||
fi
|
||||
|
||||
response=$(curl -s -w "\n%{http_code}" -X GET "${BASE_URL}/api/v1/auth/userinfo" \
|
||||
-H "Authorization: Bearer ${ADMIN_TOKEN}")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "获取用户信息成功"
|
||||
echo "响应: $body"
|
||||
else
|
||||
print_error "获取用户信息失败 (HTTP $http_code)"
|
||||
echo "响应: $body"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# 测试无令牌访问
|
||||
print_info "测试4.1：无令牌访问"
|
||||
response=$(curl -s -w "\n%{http_code}" -X GET "${BASE_URL}/api/v1/auth/userinfo")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "401" ]; then
|
||||
print_success "无令牌访问被正确拒绝 (401)"
|
||||
else
|
||||
print_error "认证验证失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
|
||||
# 测试无效令牌
|
||||
print_info "测试4.2：无效令牌访问"
|
||||
response=$(curl -s -w "\n%{http_code}" -X GET "${BASE_URL}/api/v1/auth/userinfo" \
|
||||
-H "Authorization: Bearer invalid_token")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "401" ]; then
|
||||
print_success "无效令牌访问被正确拒绝 (401)"
|
||||
else
|
||||
print_error "无效令牌验证失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试5：获取用户列表
|
||||
test_get_users() {
|
||||
print_info "测试5：获取用户列表（需要认证）"
|
||||
|
||||
if [ -z "$ADMIN_TOKEN" ]; then
|
||||
print_error "没有访问令牌，跳过测试"
|
||||
return
|
||||
fi
|
||||
|
||||
response=$(curl -s -w "\n%{http_code}" -X GET "${BASE_URL}/api/v1/users" \
|
||||
-H "Authorization: Bearer ${ADMIN_TOKEN}")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "获取用户列表成功"
|
||||
echo "响应: $body"
|
||||
else
|
||||
print_error "获取用户列表失败 (HTTP $http_code)"
|
||||
echo "响应: $body"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试6：更新用户信息
|
||||
test_update_user() {
|
||||
print_info "测试6：更新用户信息（需要认证）"
|
||||
|
||||
if [ -z "$ADMIN_TOKEN" ] || [ -z "$USER_ID" ]; then
|
||||
print_error "缺少必要参数，跳过测试"
|
||||
return
|
||||
fi
|
||||
|
||||
response=$(curl -s -w "\n%{http_code}" -X PUT "${BASE_URL}/api/v1/users/${USER_ID}" \
|
||||
-H "Authorization: Bearer ${ADMIN_TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"nickname":"测试用户昵称","bio":"这是个人简介"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "更新用户信息成功"
|
||||
echo "响应: $body"
|
||||
else
|
||||
print_error "更新用户信息失败 (HTTP $http_code)"
|
||||
echo "响应: $body"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试7：令牌刷新
|
||||
test_refresh_token() {
|
||||
print_info "测试7：令牌刷新"
|
||||
|
||||
if [ -z "$ADMIN_TOKEN" ]; then
|
||||
print_error "没有访问令牌，跳过测试"
|
||||
return
|
||||
fi
|
||||
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/refresh" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "{\"refresh_token\":\"${ADMIN_TOKEN}\"}")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ] || [ "$http_code" = "401" ]; then
|
||||
print_success "令牌刷新接口响应正常 (HTTP $http_code)"
|
||||
echo "响应: $body"
|
||||
else
|
||||
print_error "令牌刷新失败 (HTTP $http_code)"
|
||||
echo "响应: $body"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试8：限流测试
|
||||
test_rate_limit() {
|
||||
print_info "测试8：限流功能测试"
|
||||
|
||||
print_info "快速发送6次请求测试限流..."
|
||||
success_count=0
|
||||
rate_limited=0
|
||||
|
||||
for i in {1..6}; do
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/login" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"account":"wrong","password":"wrong"}')
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "429" ]; then
|
||||
rate_limited=$((rate_limited + 1))
|
||||
echo " 请求 $i: 被限流 (429)"
|
||||
else
|
||||
success_count=$((success_count + 1))
|
||||
echo " 请求 $i: 正常 (HTTP $http_code)"
|
||||
fi
|
||||
done
|
||||
|
||||
if [ "$rate_limited" -gt 0 ]; then
|
||||
print_success "限流功能正常生效，触发 $rate_limited 次限流"
|
||||
else
|
||||
print_error "限流功能未触发，建议检查配置"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试9：Prometheus 指标
|
||||
test_metrics() {
|
||||
print_info "测试9：Prometheus 指标采集"
|
||||
|
||||
response=$(curl -s -w "\n%{http_code}" "${BASE_URL}/metrics")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "Prometheus 指标端点正常"
|
||||
|
||||
# 检查关键指标
|
||||
if echo "$body" | grep -q "http_requests_total"; then
|
||||
print_success "✓ http_requests_total 指标存在"
|
||||
fi
|
||||
if echo "$body" | grep -q "http_request_duration_seconds"; then
|
||||
print_success "✓ http_request_duration_seconds 指标存在"
|
||||
fi
|
||||
if echo "$body" | grep -q "user_logins_total"; then
|
||||
print_success "✓ user_logins_total 指标存在"
|
||||
fi
|
||||
else
|
||||
print_error "Prometheus 指标端点失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 测试10：登出
|
||||
test_logout() {
|
||||
print_info "测试10：用户登出"
|
||||
|
||||
if [ -z "$ADMIN_TOKEN" ]; then
|
||||
print_error "没有访问令牌，跳过测试"
|
||||
return
|
||||
fi
|
||||
|
||||
response=$(curl -s -w "\n%{http_code}" -X POST "${BASE_URL}/api/v1/auth/logout" \
|
||||
-H "Authorization: Bearer ${ADMIN_TOKEN}")
|
||||
http_code=$(echo "$response" | tail -n1)
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
print_success "登出成功"
|
||||
else
|
||||
print_error "登出失败 (HTTP $http_code)"
|
||||
fi
|
||||
echo ""
|
||||
}
|
||||
|
||||
# 主测试流程
|
||||
main() {
|
||||
echo "============================================"
|
||||
echo " 用户管理系统自动化测试"
|
||||
echo " 测试环境: ${BASE_URL}"
|
||||
echo "============================================"
|
||||
echo ""
|
||||
|
||||
test_health_check
|
||||
test_register
|
||||
test_login
|
||||
test_get_userinfo
|
||||
test_get_users
|
||||
test_update_user
|
||||
test_refresh_token
|
||||
test_rate_limit
|
||||
test_metrics
|
||||
test_logout
|
||||
|
||||
echo "============================================"
|
||||
echo " 测试完成"
|
||||
echo "============================================"
|
||||
}
|
||||
|
||||
# 执行测试
|
||||
main
|
||||
Reference in New Issue
Block a user