Function TestInMemoryAuditLog_GetEventsByTimeRange

pkg/security/audit_test.go:181–217

(t *testing.T)

}

func TestInMemoryAuditLog_GetEventsByTimeRange(t *testing.T) {
	auditLog := NewInMemoryAuditLog(nil)
	defer func() { _ = auditLog.Close() }()

	now := time.Now()
	yesterday := now.Add(-24 * time.Hour)
	tomorrow := now.Add(24 * time.Hour)

	// 添加不同时间的事件
	_ = auditLog.LogEvent(AuditEvent{
		Type:      AuditTypeUserLogin,
		UserID:    "user1",
		Message:   "Old login",
		Timestamp: yesterday.Add(-1 * time.Hour),
	})
	_ = auditLog.LogEvent(AuditEvent{
		Type:      AuditTypeUserLogin,
		UserID:    "user2",
		Message:   "Recent login",
		Timestamp: now,
	})

	// 获取昨天到明天之间的事件
	events, err := auditLog.GetEventsByTimeRange(yesterday, tomorrow, 10)
	if err != nil {
		t.Fatalf("GetEventsByTimeRange failed: %v", err)
	}

	// 应该只有一个在时间范围内的事件
	if len(events) != 1 {
		t.Errorf("expected 1 event in time range, got %d", len(events))
	}

	if len(events) > 0 && events[0].UserID != "user2" {
		t.Errorf("expected user2, got %s", events[0].UserID)
	}
}

func TestInMemoryAuditLog_PurgeEvents(t *testing.T) {
	auditLog := NewInMemoryAuditLog(nil)