mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-08-24 20:07:13 +00:00
Test-quality audit: fix 2 prod bugs, strengthen weak tests, add mutation/fuzz/CI tooling (#5345)
* test(audit): add gremlins/rapid/coverage tooling + AUDIT.md scaffold * test(audit): hygiene sweep (race-clean except logger global; Finding #2) + smell inventory * test(audit): cover untested error/edge branches (TLS proxy+pin, migration tag cleanup=Finding #1) * test(audit): strengthen internal/sub link tests (dedup key, TLS/Reality mapping, clash well-formedness) * test(audit): property (rapid) + fuzz tests for joinHostPort/userinfo/pin/ParseLink * test(audit): tighten frontend subSortIndex rejection assertions + wire coverage * ci(audit): add shuffle gate + non-blocking race job (Finding #2) + fuzz-smoke; document mutation policy * chore(audit): gitignore frontend coverage output * test(audit): exhaustive whole-repo pass — strengthen 5 weak/fake tests (netproxy, CSP, modal per-protocol loops, schema coercions) * docs(contributing): add Testing section (conventions, race/shuffle, fuzz, mutation policy); drop AUDIT.md ledger * fix(logger,migration): guard logBuffer with mutex; execute legacy tag cleanup (tx.Exec); make CI race gate blocking * ci(mutation): add nightly scoped gremlins workflow (informational artifacts) * test(audit): strengthen runtime tests — baseURL scheme/port bounds, isNonEmptySlice, trafficReset * test(audit): strengthen clash tests — reality field mapping + tcp-header validation * test(audit): runtime — egress-proxy + content-type tests; drop redundant bp=='' branch * test(audit): strengthen link parser/helper tests (defaultPort, splitComma, base64, canonicalQuery, tls/reality/transport mapping) * test(audit): strengthen sub/xray/common/netsafe/mtproto/config/middleware tests (kill surviving mutants) * test(audit): raise timeout on protocol-iteration modal tests (heavy re-renders, slow on CI) * fix(logger): GetLogs returns at most c entries (off-by-one fix; addresses PR review) * perf(logger): snapshot logBuffer under lock so GetLogs doesn't block logging; clarify fuzz-seed docs (addresses PR review)
This commit is contained in:
@@ -1,161 +0,0 @@
|
||||
// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > http 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > hysteria 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > mixed 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > shadowsocks 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > trojan 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > tun 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > tunnel 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > vless 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > vmess 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`InboundFormModal > field structure is stable for every protocol > wireguard 1`] = `
|
||||
[
|
||||
"Enabled",
|
||||
"Remark",
|
||||
"Protocol",
|
||||
"Address",
|
||||
"Share address strategy",
|
||||
"Subscription sort order",
|
||||
"Port",
|
||||
"Total Flow",
|
||||
"Traffic Reset",
|
||||
"Duration",
|
||||
"Enabled",
|
||||
]
|
||||
`;
|
||||
@@ -1,141 +0,0 @@
|
||||
// Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > blackhole 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > dns 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > freedom 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > hysteria 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > shadowsocks 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > socks 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > trojan 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > vless 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > vmess 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
|
||||
exports[`OutboundFormModal > field structure is stable for every protocol > wireguard 1`] = `
|
||||
[
|
||||
"Protocol",
|
||||
"Tag",
|
||||
"Send Through",
|
||||
"Address",
|
||||
"Port",
|
||||
"ID",
|
||||
"Encryption",
|
||||
"Reverse tag",
|
||||
"Mux",
|
||||
]
|
||||
`;
|
||||
@@ -289,8 +289,18 @@ describe('subSortIndex', () => {
|
||||
});
|
||||
|
||||
it('InboundDbFieldsSchema enforces an integer minimum of 1 and defaults to 1', () => {
|
||||
expect(InboundDbFieldsSchema.partial().safeParse({ subSortIndex: 1.5 }).success).toBe(false);
|
||||
expect(InboundDbFieldsSchema.partial().safeParse({ subSortIndex: 0 }).success).toBe(false);
|
||||
// Reject for the RIGHT reason: the issue must be about subSortIndex, not some
|
||||
// unrelated field — otherwise a schema that rejects everything would pass.
|
||||
const nonInt = InboundDbFieldsSchema.partial().safeParse({ subSortIndex: 1.5 });
|
||||
expect(nonInt.success).toBe(false);
|
||||
if (!nonInt.success) expect(nonInt.error.issues[0]?.path).toContain('subSortIndex');
|
||||
|
||||
const belowMin = InboundDbFieldsSchema.partial().safeParse({ subSortIndex: 0 });
|
||||
expect(belowMin.success).toBe(false);
|
||||
if (!belowMin.success) expect(belowMin.error.issues[0]?.path).toContain('subSortIndex');
|
||||
|
||||
// A valid integer >= 1 must pass (guards against a mutant rejecting all values).
|
||||
expect(InboundDbFieldsSchema.partial().safeParse({ subSortIndex: 5 }).success).toBe(true);
|
||||
expect(InboundDbFieldsSchema.parse({}).subSortIndex).toBe(1);
|
||||
});
|
||||
});
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
import { describe, it, expect } from 'vitest';
|
||||
import { screen } from '@testing-library/react';
|
||||
import { screen, act } from '@testing-library/react';
|
||||
|
||||
import InboundFormModal from '@/pages/inbounds/form/InboundFormModal';
|
||||
import { DBInbound } from '@/models/dbinbound';
|
||||
@@ -31,15 +31,30 @@ describe('InboundFormModal', () => {
|
||||
expect(fieldLabels().length).toBeGreaterThan(0);
|
||||
});
|
||||
|
||||
it('field structure is stable for every protocol', () => {
|
||||
it('field structure differs per protocol (not a vacuous snapshot loop)', async () => {
|
||||
renderModal();
|
||||
const protocols = listSelectOptions('protocol');
|
||||
expect(protocols.length).toBeGreaterThan(3);
|
||||
|
||||
const labelsByProto: Record<string, string[]> = {};
|
||||
for (const proto of protocols) {
|
||||
chooseSelectOption('protocol', proto);
|
||||
expect(fieldLabels()).toMatchSnapshot(proto);
|
||||
// Flush antd Form.useWatch('protocol') before reading — without it every iteration
|
||||
// sees the same pre-update DOM and the loop asserts nothing (the original bug here).
|
||||
await act(async () => { await new Promise((r) => setTimeout(r, 0)); });
|
||||
labelsByProto[proto] = fieldLabels();
|
||||
}
|
||||
});
|
||||
|
||||
// The loop must actually exercise protocol-specific rendering: distinct protocols
|
||||
// must yield distinct field sets (a vacuous loop makes them all identical).
|
||||
const distinctShapes = new Set(Object.values(labelsByProto).map((l) => l.join('|')));
|
||||
expect(distinctShapes.size).toBeGreaterThan(1);
|
||||
|
||||
// Spot-check a protocol-distinguishing field that must appear after the switch.
|
||||
if (labelsByProto.shadowsocks) {
|
||||
expect(labelsByProto.shadowsocks).toContain('Encryption method');
|
||||
}
|
||||
}, 30000); // iterates every protocol, re-rendering a heavy modal each time — slow on CI runners
|
||||
|
||||
it('preserves custom share address strategy when editing a local inbound', async () => {
|
||||
renderWithProviders(
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
import { describe, it, expect } from 'vitest';
|
||||
import { act } from '@testing-library/react';
|
||||
|
||||
import OutboundFormModal from '@/pages/xray/outbounds/OutboundFormModal';
|
||||
import {
|
||||
@@ -27,13 +28,30 @@ describe('OutboundFormModal', () => {
|
||||
expect(fieldLabels().length).toBeGreaterThan(0);
|
||||
});
|
||||
|
||||
it('field structure is stable for every protocol', () => {
|
||||
it('field structure differs per protocol (not a vacuous snapshot loop)', async () => {
|
||||
renderModal(null);
|
||||
const protocols = listSelectOptions('protocol');
|
||||
expect(protocols.length).toBeGreaterThan(3);
|
||||
|
||||
const labelsByProto: Record<string, string[]> = {};
|
||||
for (const proto of protocols) {
|
||||
chooseSelectOption('protocol', proto);
|
||||
expect(fieldLabels()).toMatchSnapshot(proto);
|
||||
// Flush antd Form.useWatch('protocol') so protocol-specific fields render before
|
||||
// reading; otherwise every iteration sees the same default (vless) DOM.
|
||||
await act(async () => { await new Promise((r) => setTimeout(r, 0)); });
|
||||
labelsByProto[proto] = fieldLabels();
|
||||
}
|
||||
});
|
||||
|
||||
// Distinct protocols must yield distinct field sets (a vacuous loop is all-identical).
|
||||
const distinctShapes = new Set(Object.values(labelsByProto).map((l) => l.join('|')));
|
||||
expect(distinctShapes.size).toBeGreaterThan(1);
|
||||
|
||||
// vless carries an Encryption field; wireguard does not — proves real protocol switching.
|
||||
if (labelsByProto.vless) {
|
||||
expect(labelsByProto.vless).toContain('Encryption');
|
||||
}
|
||||
if (labelsByProto.wireguard) {
|
||||
expect(labelsByProto.wireguard).not.toContain('Encryption');
|
||||
}
|
||||
}, 30000); // iterates every protocol, re-rendering a heavy modal each time — slow on CI runners
|
||||
});
|
||||
|
||||
@@ -27,3 +27,35 @@ describe('InboundSettingsSchema fixtures', () => {
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
// The fixture tests above pin coerced values only via regenerable snapshots. These
|
||||
// assert the load-bearing transforms directly, so a broken coercion fails independently
|
||||
// of the snapshot baseline.
|
||||
describe('InboundSettingsSchema coercions', () => {
|
||||
it('vmess: defaults alterId to 0 and coerces a string tgId to a number', () => {
|
||||
const parsed = InboundSettingsSchema.parse({
|
||||
protocol: 'vmess',
|
||||
settings: { clients: [{ id: 'u1', email: 'a@b.c', tgId: '12345' }] },
|
||||
});
|
||||
if (parsed.protocol !== 'vmess') throw new Error('discriminator narrowed to the wrong protocol');
|
||||
const client = parsed.settings.clients[0];
|
||||
expect(client.alterId).toBe(0); // .default(0) injected for omitted field
|
||||
expect(client.tgId).toBe(12345); // string -> number transform
|
||||
});
|
||||
|
||||
it('vmess: a non-numeric tgId coerces to 0', () => {
|
||||
const parsed = InboundSettingsSchema.parse({
|
||||
protocol: 'vmess',
|
||||
settings: { clients: [{ id: 'u1', email: 'a@b.c', tgId: 'not-a-number' }] },
|
||||
});
|
||||
if (parsed.protocol !== 'vmess') throw new Error('wrong protocol');
|
||||
expect(parsed.settings.clients[0].tgId).toBe(0); // Number(v) || 0
|
||||
});
|
||||
|
||||
it('vless: defaults decryption and encryption to "none"', () => {
|
||||
const parsed = InboundSettingsSchema.parse({ protocol: 'vless', settings: { clients: [] } });
|
||||
if (parsed.protocol !== 'vless') throw new Error('wrong protocol');
|
||||
expect(parsed.settings.decryption).toBe('none');
|
||||
expect(parsed.settings.encryption).toBe('none');
|
||||
});
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user