Function TestSyncUsersSkipsEmptyEmailUser

backend/wireguard/user_sync_test.go:160–216

(t *testing.T)

}

func TestSyncUsersSkipsEmptyEmailUser(t *testing.T) {
	cfg, err := NewConfig(`{
		"interface_name":"wg-test",
		"listen_port":51820,
		"address":["10.62.0.1/24"]
	}`)
	if err != nil {
		t.Fatalf("failed to create config: %v", err)
	}

	_, validKey, err := GenerateKeyPair()
	if err != nil {
		t.Fatalf("failed to generate key pair: %v", err)
	}

	configureCalls := 0
	wg := &WireGuard{
		config:       cfg,
		peerStore:    NewPeerStore(),
		statsTracker: stats.New(),
		manager: &Manager{
			iFaceName: "wg-test",
			client: &fakeWGClient{
				configureDeviceFn: func(interfaceName string, cfg wgtypes.Config) error {
					configureCalls++
					return nil
				},
			},
		},
		state: lifecycleRunning,
	}

	users := []*common.User{
		{
			Email:    "",
			Inbounds: []string{"wg-test"},
			Proxies: &common.Proxy{
				Wireguard: &common.Wireguard{
					PublicKey: validKey, PeerIps: []string{"10.62.0.4/32"},
				},
			},
		},
	}

	// normalizeUsers drops users with empty email before they reach any sync logic.
	if err = wg.SyncUsers(context.Background(), users); err != nil {
		t.Fatalf("expected SyncUsers to succeed when normalizeUsers drops empty-email user, got: %v", err)
	}
	// No effective desired peers → no kernel call.
	if configureCalls != 0 {
		t.Fatalf("expected no ConfigureDevice call when the only user was quarantined, got %d", configureCalls)
	}
	// Nothing should have been added to the store.
	if peer := wg.peerStore.GetByKey(validKey); peer != nil {
		t.Fatal("expected quarantined user not to appear in the peer store")
	}
}