- | {{ $connection->name }} |
+ {{ $connection->name }}{{ $connection->driver === 'pgsql' ? 'PostgreSQL · SSL' : 'SQL Server' }} |
{{ $connection->host }}:{{ $connection->port }} |
{{ $connection->database_name }} |
{{ $sourceLabels[$connection->source_key] ?? '未绑定' }} |
diff --git a/tests/Feature/SystemSettings/UpstreamDatabasesTest.php b/tests/Feature/SystemSettings/UpstreamDatabasesTest.php
index 61e29e86..1812ff0f 100644
--- a/tests/Feature/SystemSettings/UpstreamDatabasesTest.php
+++ b/tests/Feature/SystemSettings/UpstreamDatabasesTest.php
@@ -14,6 +14,7 @@ use Illuminate\Support\Facades\DB;
use Mockery;
use Modules\EcommerceFinance\Services\UpstreamSourceRegistry;
use Modules\EcommerceFinance\Services\UpstreamStoredConfiguration;
+use Modules\EcommerceFinance\Services\UpstreamDatabaseProbe;
use Tests\Feature\FeatureTestCase;
class UpstreamDatabasesTest extends FeatureTestCase
@@ -499,6 +500,65 @@ class UpstreamDatabasesTest extends FeatureTestCase
->assertSessionHasErrors('password');
}
+ public function test_postgres_can_be_saved_without_sql_server_settings(): void
+ {
+ $payload = $this->payload(['driver' => 'pgsql', 'port' => 25432, 'password' => 'pg-secret']);
+ unset($payload['odbc_driver'], $payload['tds_version']);
+ $this->loginAs()->post(route('system-settings.databases.store'), $payload)
+ ->assertSessionHasNoErrors()->assertRedirect(route('system-settings.databases.index'));
+ $connection = DatabaseConnection::where('driver', 'pgsql')->firstOrFail();
+ $this->assertNull($connection->odbc_driver);
+ $this->assertNull($connection->source_key);
+ $this->assertSame('pg-secret', $connection->password);
+ $this->get(route('system-settings.databases.edit', $connection->id))
+ ->assertOk()->assertSee('sslmode=require')->assertSee('PostgreSQL')->assertDontSee('pg-secret');
+ }
+
+ public function test_changing_wrong_driver_preserves_password(): void
+ {
+ $connection = $this->connection('keep-secret');
+ $this->loginAs()->patch(route('system-settings.databases.update', $connection->id), $this->payload([
+ 'driver' => 'pgsql', 'port' => 25432, 'password' => '',
+ ]))->assertSessionHasNoErrors();
+ $connection->refresh();
+ $this->assertSame('pgsql', $connection->driver);
+ $this->assertSame(25432, $connection->port);
+ $this->assertSame('keep-secret', $connection->password);
+ }
+
+ public function test_postgres_cannot_replace_existing_sql_server_business_source(): void
+ {
+ $this->withExceptionHandling();
+ $this->loginAs()->post(route('system-settings.databases.store'), $this->payload([
+ 'driver' => 'pgsql', 'source_key' => 'operations_replica',
+ ]))->assertSessionHasErrors('source_key');
+ $this->assertSame(0, DatabaseConnection::where('company_id', 0)->count());
+ }
+
+ public function test_host_must_not_include_port(): void
+ {
+ $this->withExceptionHandling();
+ $this->loginAs()->post(route('system-settings.databases.store'), $this->payload([
+ 'host' => '127.0.0.1:25432',
+ ]))->assertSessionHasErrors('host');
+ }
+
+ public function test_test_button_uses_saved_postgres_driver_and_password(): void
+ {
+ $connection = $this->connection('saved-pg-secret');
+ $connection->update(['driver' => 'pgsql', 'port' => 25432]);
+ $probe = Mockery::mock(UpstreamDatabaseProbe::class);
+ $probe->shouldReceive('probe')->once()->withArgs(fn ($driver, $config, $label) =>
+ $driver === 'pgsql' && $config['password'] === 'saved-pg-secret' && $config['port'] === 25432
+ );
+ $this->app->instance(UpstreamDatabaseProbe::class, $probe);
+ $this->loginAs()->post(route('system-settings.databases.test', $connection->id))
+ ->assertSessionHasNoErrors()->assertRedirect(route('system-settings.databases.index'));
+ $this->assertFlashLevel('success');
+ $this->assertStringContainsString('PostgreSQL SSL 连接成功', session('flash_notification')->first()->message);
+ $this->get(route('system-settings.databases.index'))->assertSeeText('PostgreSQL')->assertDontSee('saved-pg-secret');
+ }
+
private function payload(array $overrides = []): array
{
return array_merge([
diff --git a/tests/Unit/EcommerceFinance/UpstreamDatabaseProbeTest.php b/tests/Unit/EcommerceFinance/UpstreamDatabaseProbeTest.php
new file mode 100644
index 00000000..0f66222e
--- /dev/null
+++ b/tests/Unit/EcommerceFinance/UpstreamDatabaseProbeTest.php
@@ -0,0 +1,65 @@
+ 'db.example.test', 'port' => 25432, 'database' => "test' database",
+ 'username' => 'reader', 'password' => 'fixture-secret', 'connect_timeout' => 5, 'query_timeout' => 120];
+ }
+
+ public function test_postgres_uses_tls_read_only_timeout_and_one_select(): void
+ {
+ $statement = Mockery::mock(PDOStatement::class);
+ $statement->shouldReceive('fetchColumn')->once()->andReturn(1);
+ $statement->shouldReceive('closeCursor')->once();
+ $pdo = Mockery::mock(PDO::class);
+ $pdo->shouldReceive('query')->once()->with('SELECT 1')->andReturn($statement);
+ $probe = Mockery::mock(UpstreamDatabaseProbe::class)->makePartial()->shouldAllowMockingProtectedMethods();
+ $probe->shouldReceive('connect')->once()->withArgs(function ($dsn, $user, $password) {
+ $this->assertStringContainsString('sslmode=require', $dsn);
+ $this->assertStringContainsString('default_transaction_read_only=on', $dsn);
+ $this->assertStringContainsString('statement_timeout=15000', $dsn);
+ $this->assertStringContainsString("dbname='test\\' database'", $dsn);
+ $this->assertStringContainsString('connect_timeout=5', $dsn);
+ $this->assertStringNotContainsString('fixture-secret', $dsn);
+
+ return $user === 'reader' && $password === 'fixture-secret';
+ })->andReturn($pdo);
+ $probe->probe('pgsql', $this->connection(), '测试库');
+ }
+
+ public function test_driver_error_never_exposes_credentials(): void
+ {
+ $probe = Mockery::mock(UpstreamDatabaseProbe::class)->makePartial()->shouldAllowMockingProtectedMethods();
+ $probe->shouldReceive('connect')->once()->andThrow(new PDOException('fixture-secret private driver detail'));
+ try {
+ $probe->probe('pgsql', $this->connection(), '测试库');
+ $this->fail('Expected sanitized connection error');
+ } catch (ServiceUnavailableHttpException $exception) {
+ $this->assertStringContainsString('PostgreSQL 连接失败', $exception->getMessage());
+ $this->assertStringNotContainsString('fixture-secret', $exception->getMessage());
+ $this->assertNull($exception->getPrevious());
+ }
+ }
+
+ public function test_unsupported_driver_is_not_probed(): void
+ {
+ $this->expectException(ServiceUnavailableHttpException::class);
+ $this->expectExceptionMessage('不支持此数据库类型');
+ (new UpstreamDatabaseProbe())->probe('unknown', [], '测试库');
+ }
+}