sandrodachandClaude Opus 5.5
c97765e08e
Admins switch automatic backups on, pick the time and the retention (default 03:00, 3 days). Each run writes a gzip snapshot of the whole database (VACUUM INTO, consistent while others write) and one MindSift backup ZIP per active user below $DATA_DIR/backups, then deletes files past the retention. A restart after the time catches up on that day. Admins list, download and trigger runs; users list, download and restore their own backups. Import and restore can be limited to sections (notes, tasks, lists, inbox, themes): restore only empties the chosen sections. Export and import now carry custom themes. File names are checked against a fixed pattern, so no other file can be fetched through the API. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
92 lines
3.4 KiB
Go
92 lines
3.4 KiB
Go
package api
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/sandrodach/mindsift/internal/auth"
|
|
"github.com/sandrodach/mindsift/internal/storage"
|
|
)
|
|
|
|
func TestBackupsRunListDownloadAndRestoreSections(t *testing.T) {
|
|
srv, store, token := setupTestServer(t)
|
|
router := srv.Router()
|
|
claims, _ := auth.ValidateToken(testJWTSecret, token)
|
|
uid := claims.UserID
|
|
_, _ = store.CreateDocument(uid, "", "Notiz vom Montag", "📝", "", nil, nil, false)
|
|
list, _ := store.CreateList(uid, "Einkauf", "🛒", "shopping")
|
|
_, _ = store.CreateListItem(list.ID, "Milch", "", "", 0, uid)
|
|
_, _ = store.SaveUserTheme(uid, "", "Mein Theme", ":root[data-theme=\"x\"] { --accent-primary: #f00; }")
|
|
|
|
call := func(method, path string) *httptest.ResponseRecorder {
|
|
req := httptest.NewRequest(method, path, nil)
|
|
req.Header.Set("Authorization", "Bearer "+token)
|
|
rec := httptest.NewRecorder()
|
|
router.ServeHTTP(rec, req)
|
|
return rec
|
|
}
|
|
|
|
// Admin starts a run: one database snapshot plus a backup for the user
|
|
rec := call("POST", "/api/v1/admin/backups")
|
|
if rec.Code != http.StatusOK {
|
|
t.Fatalf("run backups: %d %s", rec.Code, rec.Body.String())
|
|
}
|
|
var sysFiles []storage.BackupFile
|
|
_ = json.Unmarshal(rec.Body.Bytes(), &sysFiles)
|
|
if len(sysFiles) != 1 || !strings.HasSuffix(sysFiles[0].Name, ".db.gz") || sysFiles[0].Size == 0 {
|
|
t.Fatalf("expected one snapshot, got %+v", sysFiles)
|
|
}
|
|
if rec := call("GET", "/api/v1/admin/backups/"+sysFiles[0].Name); rec.Code != http.StatusOK || rec.Body.Len() == 0 {
|
|
t.Fatalf("download snapshot: %d", rec.Code)
|
|
}
|
|
if rec := call("GET", "/api/v1/admin/backups/..%2F..%2Fmindsift.db"); rec.Code != http.StatusNotFound {
|
|
t.Fatalf("path tricks must be refused, got %d", rec.Code)
|
|
}
|
|
|
|
var mine []storage.BackupFile
|
|
_ = json.Unmarshal(call("GET", "/api/v1/backups").Body.Bytes(), &mine)
|
|
if len(mine) != 1 {
|
|
t.Fatalf("expected one user backup, got %+v", mine)
|
|
}
|
|
|
|
// Lose data, then restore only the lists: notes stay as they are now
|
|
listsBefore, _ := store.GetAllListsForUser(uid)
|
|
docsBefore, _ := store.GetDocuments(uid)
|
|
_ = store.PurgeUserSections(uid, map[string]bool{storage.SectionLists: true, storage.SectionThemes: true})
|
|
_, _ = store.CreateDocument(uid, "", "Notiz vom Dienstag", "📝", "", nil, nil, false)
|
|
rec = call("POST", "/api/v1/backups/"+mine[0].Name+"/restore?mode=restore§ions=lists,themes")
|
|
if rec.Code != http.StatusOK {
|
|
t.Fatalf("restore: %d %s", rec.Code, rec.Body.String())
|
|
}
|
|
lists, _ := store.GetAllListsForUser(uid)
|
|
themes, _ := store.GetUserThemes(uid)
|
|
docs, _ := store.GetDocuments(uid)
|
|
if len(lists) != len(listsBefore) || len(themes) != 1 {
|
|
t.Fatalf("lists and themes should be back: %d of %d lists, %d themes", len(lists), len(listsBefore), len(themes))
|
|
}
|
|
if len(docs) != len(docsBefore)+1 {
|
|
t.Fatalf("notes were not selected and must stay untouched (plus Dienstag), got %d of %d", len(docs), len(docsBefore)+1)
|
|
}
|
|
|
|
// Retention: old files go
|
|
dir := filepath.Join(srv.backupRoot(), "system")
|
|
old := filepath.Join(dir, "mindsift-db-2000-01-01-0300.db.gz")
|
|
_ = os.WriteFile(old, []byte("x"), 0o600)
|
|
_ = os.Chtimes(old, mustTime("2000-01-01"), mustTime("2000-01-01"))
|
|
_, _ = srv.runBackups()
|
|
if _, err := os.Stat(old); !os.IsNotExist(err) {
|
|
t.Fatalf("backups older than the retention must be deleted")
|
|
}
|
|
}
|
|
|
|
func mustTime(day string) (t time.Time) {
|
|
t, _ = time.Parse("2006-01-02", day)
|
|
return t
|
|
}
|