feat: initialize XAS test console with native execution

2026-10-14 09:38:58 +08:00
commit 438844b01a
83 changed files with 9334 additions and 0 deletions
@@ -0,0 +1,36 @@
+import importlib.util
+from pathlib import Path
+import unittest
+
+MODULE = Path(__file__).resolve().parents[1] / 'deploy/lan_config.py'
+
+
+class LanConfigurationTests(unittest.TestCase):
+    def validator(self):
+        self.assertTrue(MODULE.is_file(), 'LAN boundary configuration is not implemented')
+        spec = importlib.util.spec_from_file_location('lan_config', MODULE)
+        module = importlib.util.module_from_spec(spec)
+        spec.loader.exec_module(module)
+        return module.validate_settings
+
+    def test_explicit_private_interface_and_matching_subnet_are_accepted(self):
+        result = self.validator()({'address':'10.88.118.188','allowed_cidrs':['10.88.0.0/17','10.20.0.0/21'],'port':14440})
+        self.assertEqual(result['address'], '10.88.118.188')
+        self.assertEqual(result['allowed_cidrs'], ['10.88.0.0/17','10.20.0.0/21'])
+
+    def test_wildcard_public_loopback_and_nonmatching_network_are_rejected(self):
+        validate = self.validator()
+        for address, cidr in [('0.0.0.0','0.0.0.0/0'), ('8.8.8.8','8.8.8.0/24'),
+                              ('127.0.0.1','127.0.0.0/8'), ('10.88.118.188','10.89.0.0/17'),
+                              ('10.88.118.188','0.0.0.0/0'), ('10.88.118.188; admin','10.88.0.0/17')]:
+            with self.subTest(address=address,cidr=cidr), self.assertRaises(ValueError):
+                validate({'address':address,'allowed_cidrs':[cidr],'port':14440})
+
+    def test_invalid_port_and_extra_fields_are_rejected(self):
+        validate = self.validator()
+        base = {'address':'10.88.118.188','allowed_cidrs':['10.88.0.0/17','10.20.0.0/21'],'port':14440}
+        for port in (0, 80, 65536, True, '14440'):
+            with self.subTest(port=port), self.assertRaises(ValueError):
+                validate(dict(base, port=port))
+        with self.assertRaises(ValueError):
+            validate(dict(base, public=True))