Adds the plumbing for the fleet-aggregation feature without moving any
data yet. Same portal binary now supports two modes selected via
Application:RunMode (Client | Admin).
Backend
- New AdminDbContext (identity + branding shared via SharedSchemaConfiguration
helper + fleet schema). AppDbContext keeps existing identity + branding +
monitoring + rates; renamed implicitly the "Client" context. Only one is
registered with DI per RunMode.
- IWhiteLabelStore interface implemented by both contexts so BrandingService
works in either mode.
- Fleet entities: Customer, FleetSite, FleetDevice, FleetPowerMeasurement,
IngestEvent (all in the new fleet schema). Migration in Migrations/Admin/.
- CustomerService: 32-byte random token, SHA-256 hash stored, plaintext
shown once on create + rotate. Token lookup is a single O(log N) indexed
query.
- RunModeGuards: refuses Admin without conn string; refuses Client+push
without URL/token; refuses cross-DB pointing (Client at admin_fleet DB
with fleet.Customers, or Admin at customer DB with monitoring.PowerMeasurements).
- Endpoint maps now branch on RunMode:
Client → sites/measurements/rates/admin-sites/admin-rates
Admin → admin/customers
Shared → auth, users, branding, grafana, admin-config, app/info, health
- /api/app/info (anonymous) returns {runMode, applicationName, version} so
the SPA can drive nav without re-fetching auth state.
Frontend
- AppInfoProvider + useAppInfo hook fetch /api/app/info once on load.
- AdminCustomersPage with create / edit / rotate-token / delete.
- TokenShownOnceModal: shows token once, copy-to-clipboard, "I've stored
it" confirmation gate before closing.
- AppLayout nav swaps Sites <-> Customers based on RunMode and shows a
FLEET ADMIN tag in the header when in Admin mode.
Tests
- 11 new tests: CustomerTokenTests (5) + RunModeGuardsTests (6).
- 51/51 passing locally.
Verified
- dotnet build + dotnet test clean (zero errors, one EF1002 warning
suppressed in Phase 11 already).
- Client mode docker rebuild: no regressions, /api/app/info returns
Client, login works, /api/sites/ works.
- Admin mode spun up on port 8090 against a fresh admin_fleet DB:
/api/app/info returns Admin, customer ABC0001 registered, 64-char
token returned, list shows the row.
- Cross-DB guard: Client run against admin_fleet refuses with explicit
"is pointed at a database that contains fleet.Customers" error.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
73 lines
2.6 KiB
C#
73 lines
2.6 KiB
C#
using Tau.Acuvim.Portal.Configuration;
|
|
using Tau.Acuvim.Portal.Services;
|
|
|
|
namespace Tau.Acuvim.Portal.Tests;
|
|
|
|
public class RunModeGuardsTests
|
|
{
|
|
[Fact]
|
|
public void Admin_WithoutConnectionString_Throws()
|
|
{
|
|
var app = new ApplicationOptions { RunMode = RunMode.Admin };
|
|
var db = new DatabaseOptions { ConnectionString = "" };
|
|
var fleet = new FleetIngestOptions();
|
|
|
|
var ex = Assert.Throws<InvalidOperationException>(() =>
|
|
RunModeGuards.ValidateConfig(app, db, fleet));
|
|
Assert.Contains("RunMode=Admin requires Database:ConnectionString", ex.Message);
|
|
}
|
|
|
|
[Fact]
|
|
public void Admin_WithConnectionString_OK()
|
|
{
|
|
var app = new ApplicationOptions { RunMode = RunMode.Admin };
|
|
var db = new DatabaseOptions { ConnectionString = "Host=x;Database=y;Username=u;Password=p" };
|
|
var fleet = new FleetIngestOptions();
|
|
|
|
RunModeGuards.ValidateConfig(app, db, fleet);
|
|
}
|
|
|
|
[Fact]
|
|
public void Client_WithFleetEnabledMissingUrl_Throws()
|
|
{
|
|
var app = new ApplicationOptions { RunMode = RunMode.Client };
|
|
var db = new DatabaseOptions { ConnectionString = "x", AutoProvisionLocalTimescaleDb = false };
|
|
var fleet = new FleetIngestOptions { Enabled = true, Url = "", Token = "abc" };
|
|
|
|
var ex = Assert.Throws<InvalidOperationException>(() =>
|
|
RunModeGuards.ValidateConfig(app, db, fleet));
|
|
Assert.Contains("FleetIngest:Enabled=true requires", ex.Message);
|
|
}
|
|
|
|
[Fact]
|
|
public void Client_WithFleetEnabledMissingToken_Throws()
|
|
{
|
|
var app = new ApplicationOptions { RunMode = RunMode.Client };
|
|
var db = new DatabaseOptions { ConnectionString = "x", AutoProvisionLocalTimescaleDb = false };
|
|
var fleet = new FleetIngestOptions { Enabled = true, Url = "https://x", Token = "" };
|
|
|
|
Assert.Throws<InvalidOperationException>(() =>
|
|
RunModeGuards.ValidateConfig(app, db, fleet));
|
|
}
|
|
|
|
[Fact]
|
|
public void Client_WithFleetDisabled_OK()
|
|
{
|
|
var app = new ApplicationOptions { RunMode = RunMode.Client };
|
|
var db = new DatabaseOptions { ConnectionString = "x", AutoProvisionLocalTimescaleDb = false };
|
|
var fleet = new FleetIngestOptions { Enabled = false, Url = "", Token = "" };
|
|
|
|
RunModeGuards.ValidateConfig(app, db, fleet);
|
|
}
|
|
|
|
[Fact]
|
|
public void Client_DefaultMode_NoFleetConfig_OK()
|
|
{
|
|
var app = new ApplicationOptions();
|
|
var db = new DatabaseOptions { ConnectionString = "x", AutoProvisionLocalTimescaleDb = false };
|
|
var fleet = new FleetIngestOptions();
|
|
|
|
RunModeGuards.ValidateConfig(app, db, fleet);
|
|
}
|
|
}
|