package oltp
import (
"errors"
"testing"
)
func countRows(t *testing.T, db *DB, q string, args ...any) int {
t.Helper()
var n int
if err := db.db.QueryRow(q, args...).Scan(&n); err != nil {
t.Fatal(err)
}
return n
}
func TestDeleteRefusedWhileOwningRepos(t *testing.T) {
db := testDB(t)
if err := db.AddAccount("bob", "pw-bob-12345", false); err != nil {
t.Fatal(err)
}
if err := db.AddRepo("bobrepo", t.TempDir(), "", "public"); err != nil {
t.Fatal(err)
}
if err := db.SetOwner("bobrepo", "bob"); err != nil {
t.Fatal(err)
}
err := db.DeleteAccount("bob")
var ref Refusal
if !errors.As(err, &ref) {
t.Fatalf("delete with owned repos: want Refusal, got %v", err)
}
if _, ok := db.AccountByName("bob"); !ok {
t.Fatal("refused delete still removed the account")
}
if db.Tombstoned("bob") {
t.Fatal("refused delete tombstoned the name")
}
// Once transferred, the delete goes through.
if err := db.SetOwner("bobrepo", ""); err != nil {
t.Fatal(err)
}
if err := db.DeleteAccount("bob"); err != nil {
t.Fatal(err)
}
}
func TestDeletedAccountStaysDeleted(t *testing.T) {
db := testDB(t)
if err := db.AddAccount("admin", "pw-admin-12345", true); err != nil {
t.Fatal(err)
}
if err := db.AddAccount("bob", "pw-bob-12345", false); err != nil {
t.Fatal(err)
}
if err := db.AddRepo("shared", t.TempDir(), "", "public"); err != nil {
t.Fatal(err)
}
if err := db.Grant("bob", "shared", RepoAdmin); err != nil {
t.Fatal(err)
}
if err := db.Grant("admin", "shared", RepoAdmin); err != nil {
t.Fatal(err)
}
value, tok, err := db.MintToken("bob", TokenSpec{Name: "t", Scopes: []string{ScopeSync}})
if err != nil {
t.Fatal(err)
}
sess, _, ok := db.NewSession("bob", "pw-bob-12345")
if !ok {
t.Fatal("no session")
}
if _, err := db.SetPendingEmail("bob", "[email protected]"); err != nil {
t.Fatal(err)
}
if _, err := db.ResetPassword("bob"); err != nil {
t.Fatal(err)
}
if _, err := db.w.Exec(`INSERT INTO team (name, created) VALUES ('crew', 'x')`); err != nil {
t.Fatal(err)
}
if _, err := db.w.Exec(`INSERT INTO team_member (team, account) VALUES ('crew', 'bob')`); err != nil {
t.Fatal(err)
}
if err := db.DeleteAccount("bob"); err != nil {
t.Fatal(err)
}
if _, ok := db.SessionAccount(sess); ok {
t.Error("session survived the delete")
}
if _, ok := db.ResolveToken("bob", value, ScopeSync); ok {
t.Error("token survived the delete")
}
for table, col := range map[string]string{
"token": "account", "session": "account", "repo_caps": "account",
"team_member": "account", "email_token": "account", "invite": "account",
} {
if n := countRows(t, db, `SELECT count(*) FROM `+table+` WHERE `+col+` = 'bob'`); n != 0 {
t.Errorf("%s still has %d rows for bob", table, n)
}
}
_ = tok
if !db.Tombstoned("bob") {
t.Fatal("name not tombstoned")
}
var ref Refusal
if err := db.AddAccount("bob", "pw-bob-67890", false); !errors.As(err, &ref) {
t.Errorf("re-create: want Refusal, got %v", err)
}
if _, err := db.InviteAccount("bob", "[email protected]", false); !errors.As(err, &ref) {
t.Errorf("re-invite: want Refusal, got %v", err)
}
if _, ok := db.AccountByName("bob"); ok {
t.Error("bob exists again")
}
if _, ok := db.ResolveToken("bob", value, ScopeSync); ok {
t.Error("old token resolves")
}
if n := countRows(t, db, `SELECT count(*) FROM repo_caps WHERE account = 'bob'`); n != 0 {
t.Error("grants reattached")
}
// A fossil user linked to bob cannot be re-linked either.
if _, _, err := db.ReplaceFossilUsers("shared", []FossilUser{{Login: "bob", Caps: "o"}}); err != nil {
t.Fatal(err)
}
if _, err := db.LinkFossilUser("admin", "shared", "bob", "bob"); err == nil {
t.Error("fossil link to a deleted name succeeded")
}
}