sxbh_admin/cma-management
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): retire default-credential surface (yanxue-20260914-cma-defaultcred-code-fix)

Browse Source 
- Login.vue: no prefilled default creds; no anonymous entity enumeration on mount

- deploy.sh: readiness polling (0.5s/30s cap) replaces fixed sleep 3; login smoke reads same-source 600 secret file, missing file = explicit abort

- 19 verify/check/gen_report scripts: shared _admin_creds() loader (CMA_ADMIN_ENV -> ops .secrets -> profile copy); no hardcoded creds

- tests: single TEST_USER_PASSWORD fixture constant; docs: pointer to 600 secret file; removed 4 legacy .bak + pycache residue
This commit is contained in:
Hermes CI Fix
2026-09-14 17:39:53 +08:00
parent 8adc783501
commit 40d522cd34
39 changed files with 602 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/tests/test_data_entity_isolation_20260908.py
+5 -5
View File
@@ -13,7 +13,7 @@ from fastapi.testclient import TestClient
from sqlalchemy.orm import Session
from app.models import KPIDefinition, KPIValue, DataSourceConfig, Entity
from tests.conftest import create_test_user, get_token_for_user, auth_header
from tests.conftest import create_test_user, get_token_for_user, auth_header, TEST_USER_PASSWORD
DATA = "/api/cma/data"
@@ -65,7 +65,7 @@ class TestExcelImportEntityIsolation:
k1 = self._mk_kpi(db, "F_REVENUE", 1)
_ensure_entity(db, 2)
create_test_user(db)
token2 = _login(client, "testadmin", "admin123", entity_id=2)
token2 = _login(client, "testadmin", TEST_USER_PASSWORD, entity_id=2)
before = db.query(KPIValue).filter(KPIValue.kpi_id == k1.id).count()
df = pd.DataFrame({
@@ -91,7 +91,7 @@ class TestExcelImportEntityIsolation:
_ensure_entity(db, 2)
k1 = self._mk_kpi(db, "F_REVENUE", 1)
create_test_user(db)
token2 = _login(client, "testadmin", "admin123", entity_id=2)
token2 = _login(client, "testadmin", TEST_USER_PASSWORD, entity_id=2)
df = pd.DataFrame({
"kpi_code": ["F_REVENUE"],
@@ -156,7 +156,7 @@ class TestSourceCRUDEntityIsolation:
_ensure_entity(db, 2)
create_test_user(db)
token1 = get_token_for_user(client)
token2 = _login(client, "testadmin", "admin123", entity_id=2)
token2 = _login(client, "testadmin", TEST_USER_PASSWORD, entity_id=2)
r1 = client.post(f"{DATA}/sources", headers=auth_header(token1),
json={"name": "entity1数据源", "source_type": "manual"})
@@ -178,7 +178,7 @@ class TestSourceCRUDEntityIsolation:
_ensure_entity(db, 2)
create_test_user(db)
token1 = get_token_for_user(client)
token2 = _login(client, "testadmin", "admin123", entity_id=2)
token2 = _login(client, "testadmin", TEST_USER_PASSWORD, entity_id=2)
r1 = client.post(f"{DATA}/sources", headers=auth_header(token1),
json={"name": "entity1的源", "source_type": "manual"})