Function TestUpdateUsersChangesAllowedIP

backend/wireguard/user_sync_test.go:724–778

(t *testing.T)

}

func TestUpdateUsersChangesAllowedIP(t *testing.T) {
	cfg, err := NewConfig(`{
		"interface_name":"wg-test",
		"listen_port":51820,
		"address":["10.70.0.1/24"]
	}`)
	if err != nil {
		t.Fatalf("failed to create config: %v", err)
	}

	_, key, _ := GenerateKeyPair()

	ps := NewPeerStore()
	ps.ReplaceAll([]*PeerInfo{mustPeerInfo("keep@example.com", key, []string{"10.70.0.2/32"})})

	applyCalls := 0
	wg := &WireGuard{
		config:       cfg,
		peerStore:    ps,
		statsTracker: stats.New(),
		manager: &Manager{
			iFaceName: "wg-test",
			client: &fakeWGClient{
				configureDeviceFn: func(interfaceName string, cfg wgtypes.Config) error {
					applyCalls++
					if cfg.Peers[0].AllowedIPs[0].String() != "10.70.0.3/32" {
						t.Fatal("expected new IP in config")
					}
					return nil
				},
			},
		},
		state: lifecycleRunning,
	}

	users := []*common.User{
		{
			Email:    "keep@example.com",
			Inbounds: []string{"wg-test"},
			Proxies: &common.Proxy{
				Wireguard: &common.Wireguard{
					PublicKey: key, PeerIps: []string{"10.70.0.3/32"},
				},
			},
		},
	}

	if err := wg.UpdateUsers(context.Background(), users); err != nil {
		t.Fatalf("UpdateUsers failed: %v", err)
	}

	if applyCalls != 1 {
		t.Fatalf("expected one ConfigureDevice calls for IP change partial sync, got %d", applyCalls)
	}
}

func TestUpdateUsersAndRestartReappliesKeepaliveToAllPeers(t *testing.T) {
	privateKey, _, err := GenerateKeyPair()