27 lines
517 B
Go
27 lines
517 B
Go
//go:build mysql
|
|
|
|
package mysql
|
|
|
|
import (
|
|
"os"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestLoginAuditQueriesAreTenantScoped(t *testing.T) {
|
|
source, err := os.ReadFile("tenant_security_audit.go")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
body := string(source)
|
|
for _, required := range []string{
|
|
"(tenant_id,user_id,username",
|
|
"(tenant_id,user_id,account_type",
|
|
"WHERE tenant_id=? AND session_id=?",
|
|
} {
|
|
if !strings.Contains(body, required) {
|
|
t.Fatalf("login audit query is missing tenant scope %q", required)
|
|
}
|
|
}
|
|
}
|