Function TestSQLAnalyzer_InsertStatements

cmd/gosqlx/cmd/sql_analyzer_test.go:470–522

TestSQLAnalyzer_InsertStatements tests analysis of INSERT statements

(t *testing.T)

// TestSQLAnalyzer_InsertStatements tests analysis of INSERT statements
func TestSQLAnalyzer_InsertStatements(t *testing.T) {
	tests := []struct {
		name       string
		sql        string
		shouldSkip bool
	}{
		{
			name: "simple INSERT",
			sql:  "INSERT INTO users (name, email) VALUES ('John', 'john@example.com')",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			if tt.shouldSkip {
				t.Skip("Parser doesn't fully support this INSERT syntax yet")
			}

			tkz := tokenizer.GetTokenizer()
			defer tokenizer.PutTokenizer(tkz)

			tokens, err := tkz.Tokenize([]byte(tt.sql))
			if err != nil {
				t.Fatalf("Tokenization failed: %v", err)
			}

			p := parser.NewParser()
			astObj := ast.NewAST()
			defer ast.ReleaseAST(astObj)

			result, err := p.ParseFromModelTokens(tokens)
			if err != nil {
				t.Skipf("Parsing failed (expected for incomplete parser support): %v", err)
				return
			}
			astObj.Statements = result.Statements

			analyzer := NewSQLAnalyzer()
			report, err := analyzer.Analyze(astObj)
			if err != nil {
				t.Fatalf("Analysis failed: %v", err)
			}

			// Basic validations
			if report == nil {
				t.Fatal("Expected report but got nil")
			}
			if report.SecurityScore < 0 || report.SecurityScore > 100 {
				t.Errorf("Invalid security score: %d", report.SecurityScore)
			}
		})
	}
}

// TestSQLAnalyzer_UpdateStatements tests analysis of UPDATE statements
func TestSQLAnalyzer_UpdateStatements(t *testing.T) {