fix: restore reviewable migration evidence

tests/proxy/error_test.go

@@ -0,0 +1,139 @@
+package proxy_test
+
+import (
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"testing"
+	"time"
+
+	"git.misaka.ren/M1saka/token_thief/config"
+	"git.misaka.ren/M1saka/token_thief/logger"
+	"git.misaka.ren/M1saka/token_thief/proxy"
+)
+
+type sliceSubmitter struct{ entries []*logger.LogEntry }
+
+func (s *sliceSubmitter) Submit(e *logger.LogEntry) { s.entries = append(s.entries, e) }
+
+// TestUpstreamErrorRecorded 验证上游不可达时 502 响应被记录、错误信息进入 LogEntry.Error。
+func TestUpstreamErrorRecorded(t *testing.T) {
+	// 指向一个一定不可用的端口
+	badURL, _ := url.Parse("http://127.0.0.1:1") // port 1 几乎肯定 connection refused
+
+	sub := &sliceSubmitter{}
+	filter, err := config.NewFilter(config.FilterDisabled, nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	h := proxy.New(badURL, filter, sub, 1024)
+
+	srv := httptest.NewServer(h)
+	defer srv.Close()
+
+	resp, err := http.Get(srv.URL + "/v1/chat/completions")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer resp.Body.Close()
+	body, _ := io.ReadAll(resp.Body)
+	if resp.StatusCode != http.StatusBadGateway {
+		t.Errorf("status=%d want 502, body=%q", resp.StatusCode, body)
+	}
+	if resp.Header.Get("X-Request-Id") == "" {
+		t.Errorf("missing X-Request-Id header")
+	}
+
+	deadline := time.Now().Add(2 * time.Second)
+	for len(sub.entries) == 0 && time.Now().Before(deadline) {
+		time.Sleep(10 * time.Millisecond)
+	}
+	if len(sub.entries) == 0 {
+		t.Fatal("no log entry captured")
+	}
+	e := sub.entries[0]
+	if e.StatusCode != http.StatusBadGateway {
+		t.Errorf("LogEntry.StatusCode=%d want 502", e.StatusCode)
+	}
+	if e.Error == "" {
+		t.Errorf("LogEntry.Error should be set, got empty")
+	}
+	if string(e.ResponseBody) != "bad gateway\n" {
+		t.Errorf("response_body should be fixed bad gateway, got %q", e.ResponseBody)
+	}
+	if e.RequestID == "" {
+		t.Errorf("LogEntry.RequestID empty")
+	}
+}
+
+// TestModifyResponseSetsRequestID 验证正常上游响应也会带上 X-Request-Id。
+func TestModifyResponseSetsRequestID(t *testing.T) {
+	upstream := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(200)
+		_, _ = w.Write([]byte(`{"ok":true}`))
+	}))
+	defer upstream.Close()
+	u, _ := url.Parse(upstream.URL)
+
+	sub := &sliceSubmitter{}
+	filter, err := config.NewFilter(config.FilterDisabled, nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	h := proxy.New(u, filter, sub, 1024)
+
+	srv := httptest.NewServer(h)
+	defer srv.Close()
+
+	resp, err := http.Get(srv.URL + "/v1/anything")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer resp.Body.Close()
+	rid := resp.Header.Get("X-Request-Id")
+	if len(rid) != 32 {
+		t.Errorf("X-Request-Id length=%d want 32, value=%q", len(rid), rid)
+	}
+
+	deadline := time.Now().Add(2 * time.Second)
+	for len(sub.entries) == 0 && time.Now().Before(deadline) {
+		time.Sleep(10 * time.Millisecond)
+	}
+	if len(sub.entries) == 0 {
+		t.Fatal("no log entry")
+	}
+	if sub.entries[0].RequestID != rid {
+		t.Errorf("LogEntry.RequestID=%q response header=%q (should match)", sub.entries[0].RequestID, rid)
+	}
+}
+
+func TestUpstreamTLSInsecureSkipVerifyAllowsSelfSigned(t *testing.T) {
+	upstream := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write([]byte(`{"ok":true}`))
+	}))
+	defer upstream.Close()
+	u, _ := url.Parse(upstream.URL)
+
+	sub := &sliceSubmitter{}
+	filter, err := config.NewFilter(config.FilterDisabled, nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	h := proxy.NewWithOptions(u, filter, sub, 1024, proxy.Options{UpstreamTLSInsecureSkipVerify: true})
+
+	srv := httptest.NewServer(h)
+	defer srv.Close()
+
+	resp, err := http.Get(srv.URL + "/v1/anything")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != http.StatusOK {
+		body, _ := io.ReadAll(resp.Body)
+		t.Fatalf("status=%d want 200, body=%q", resp.StatusCode, body)
+	}
+}