forked from xiangwang25/whale-town-front-v2
41 lines
1.5 KiB
GDScript
41 lines
1.5 KiB
GDScript
extends SceneTree
|
|
|
|
const SecureSessionStore = preload("res://_Core/security/SecureSessionStore.gd")
|
|
const TEST_PATH: String = "user://whaletown-secure-session-test.json"
|
|
const TEST_TOKEN: String = "refresh-token-test-value"
|
|
|
|
func _init() -> void:
|
|
var store: RefCounted = SecureSessionStore.new()
|
|
store.call("clear", TEST_PATH)
|
|
var saved := bool(store.call("save_refresh_token", TEST_PATH, TEST_TOKEN))
|
|
if not saved:
|
|
print("安全持久化在当前平台不可用，已按仅内存策略跳过")
|
|
quit()
|
|
return
|
|
var loaded := str(store.call("load_refresh_token", TEST_PATH))
|
|
if loaded != TEST_TOKEN:
|
|
push_error("安全会话存储往返测试失败")
|
|
quit(1)
|
|
return
|
|
var payload_variant: Variant = JSON.parse_string(FileAccess.get_file_as_string(TEST_PATH))
|
|
if not (payload_variant is Dictionary):
|
|
push_error("安全会话存储测试载荷解析失败")
|
|
quit(1)
|
|
return
|
|
var payload: Dictionary = payload_variant
|
|
payload["mac"] = Marshalls.raw_to_base64(PackedByteArray([1, 2, 3, 4]))
|
|
var tampered_file := FileAccess.open(TEST_PATH, FileAccess.WRITE)
|
|
if tampered_file == null:
|
|
push_error("安全会话存储篡改测试无法写入")
|
|
quit(1)
|
|
return
|
|
tampered_file.store_string(JSON.stringify(payload))
|
|
tampered_file.close()
|
|
var tampered_token := str(store.call("load_refresh_token", TEST_PATH))
|
|
if not tampered_token.is_empty() or FileAccess.file_exists(TEST_PATH):
|
|
push_error("安全会话存储未拒绝被篡改载荷")
|
|
quit(1)
|
|
return
|
|
print("安全会话存储往返与篡改检测测试通过")
|
|
quit()
|