fix: avoid admin dependency on login entrypoints

2026-09-09 15:19:13 +08:00
parent 9159ec7fc7
commit 45c6c7eacb
3 changed files with 52 additions and 18 deletions
@@ -69,3 +69,15 @@ func TestCheckTenantLoginIPWhitelistEmptyMeansUnrestricted(t *testing.T) {
 		t.Fatalf("未配置渠道白名单时不应限制登录: %v", err)
 	}
 }
+
+func TestCheckTenantLoginIPWhitelistProviderFailureAllowsLogin(t *testing.T) {
+	resetTenantLoginIPWhitelistTestState(t)
+	tenantID := types.TenantID(1)
+	loginIPWhitelistProvider = staticTenantLoginIPWhitelistProvider{err: errors.New("admin timeout")}
+	if err := checkTenantLoginIPWhitelist(tenantID, "ios", "203.0.113.10:443"); err != nil {
+		t.Fatalf("白名单配置服务失败时不应阻断登录: %v", err)
+	}
+	if err := checkTenantLoginIPWhitelist(tenantID, "web", "198.51.100.8:443"); err != nil {
+		t.Fatalf("白名单失败空配置应被短暂缓存并继续放行: %v", err)
+	}
+}