akanealw/Charon
1
0
Fork 0
Code Issues Pull Requests Actions 6 Packages Projects Releases Wiki Activity
Files
73bf0ea78b4e3303cce68997cb7f434254e2d2cc
Charon/backend/test_output_qa.txt
T
GitHub Actions 9eb0f31e75 chore: Refactor patch coverage remediation plan and create dedicated spec file 
- Moved the existing patch coverage remediation plan from `current_spec.md` to a new file `patch_coverage_spec.md` for better organization and focus on security remediation.
- Updated the goal to emphasize restoring Codecov patch coverage to green by ensuring 100% of modified lines are executed by tests.
- Defined two workstreams: one for fixing patch coverage in specific backend files and another for updating prevention measures in instructions and agent files.
- Added a detailed missing files table to track Codecov patch report line ranges and corresponding test strategies.
- Included guidance on handling partial patch lines and common patterns for missed coverage.
- Specified a remediation plan with a test-first approach and per-file testing strategies for targeted coverage improvements.
- Updated relevant instructions and agent files to enforce patch coverage requirements and improve validation processes.
2026-01-10 03:06:07 +00:00

14135 lines
969 KiB
Plaintext
Raw Blame History

=== RUN TestResetPasswordCommand_Succeeds
time="2026-01-10T02:16:43Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:16:43Z" level=info msg="SQLite database integrity check passed"
--- PASS: TestResetPasswordCommand_Succeeds (1.99s)
=== RUN TestMigrateCommand_Succeeds
time="2026-01-10T02:16:44Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:16:44Z" level=info msg="SQLite database integrity check passed"
time="2026-01-10T02:16:46Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:16:46Z" level=info msg="SQLite database integrity check passed"
--- PASS: TestMigrateCommand_Succeeds (1.27s)
=== RUN TestStartupVerification_MissingTables
time="2026-01-10T02:16:46Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:16:46Z" level=info msg="SQLite database integrity check passed"
time="2026-01-10T02:16:46Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:16:46Z" level=info msg="SQLite database integrity check passed"
main_test.go:171: Missing table for model *models.SecurityConfig
main_test.go:171: Missing table for model *models.SecurityDecision
main_test.go:171: Missing table for model *models.SecurityAudit
main_test.go:171: Missing table for model *models.SecurityRuleSet
main_test.go:171: Missing table for model *models.CrowdsecPresetEvent
main_test.go:171: Missing table for model *models.CrowdsecConsoleEnrollment
--- PASS: TestStartupVerification_MissingTables (0.06s)
PASS
coverage: 0.0% of statements
ok github.com/Wikid82/charon/backend/cmd/api (cached) coverage: 0.0% of statements
=== RUN TestSeedMain_Smoke
{"level":"info","msg":"✓ Database migrated successfully","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created remote server: Local Docker Registry (localhost:5000)","server":"Local Docker Registry","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created remote server: Development API Server (192.168.1.100:8080)","server":"Development API Server","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created remote server: Staging Web App (staging.internal:3000)","server":"Staging Web App","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created remote server: Database Admin (localhost:8081)","server":"Database Admin","time":"2026-01-10T02:16:43Z"}
{"host":"app.local.dev","level":"info","msg":"✓ Created proxy host: app.local.dev -\u003e http://localhost:3000","time":"2026-01-10T02:16:43Z"}
{"host":"api.local.dev","level":"info","msg":"✓ Created proxy host: api.local.dev -\u003e http://192.168.1.100:8080","time":"2026-01-10T02:16:43Z"}
{"host":"docker.local.dev","level":"info","msg":"✓ Created proxy host: docker.local.dev -\u003e http://localhost:5000","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created setting: app_name = Charon","setting":"app_name","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created setting: default_scheme = http","setting":"default_scheme","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created setting: enable_ssl_by_default = false","setting":"enable_ssl_by_default","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":"✓ Created default user: admin@localhost","time":"2026-01-10T02:16:43Z","user":"admin@localhost"}
{"level":"info","msg":"\n✓ Database seeding completed successfully!","time":"2026-01-10T02:16:43Z"}
{"level":"info","msg":" You can now start the application and see sample data.","time":"2026-01-10T02:16:43Z"}
--- PASS: TestSeedMain_Smoke (0.28s)
PASS
coverage: 63.2% of statements
ok github.com/Wikid82/charon/backend/cmd/seed (cached) coverage: 63.2% of statements
? github.com/Wikid82/charon/backend/integration [no test files]
=== RUN TestAccessListHandler_SetGeoIPService
--- PASS: TestAccessListHandler_SetGeoIPService (0.01s)
=== RUN TestAccessListHandler_SetGeoIPService_Nil
--- PASS: TestAccessListHandler_SetGeoIPService_Nil (0.01s)
=== RUN TestAccessListHandler_Get_InvalidID
--- PASS: TestAccessListHandler_Get_InvalidID (0.03s)
=== RUN TestAccessListHandler_Update_InvalidID
--- PASS: TestAccessListHandler_Update_InvalidID (0.02s)
=== RUN TestAccessListHandler_Update_InvalidJSON
--- PASS: TestAccessListHandler_Update_InvalidJSON (0.02s)
=== RUN TestAccessListHandler_Delete_InvalidID
--- PASS: TestAccessListHandler_Delete_InvalidID (0.02s)
=== RUN TestAccessListHandler_TestIP_InvalidID
--- PASS: TestAccessListHandler_TestIP_InvalidID (0.02s)
=== RUN TestAccessListHandler_TestIP_MissingIPAddress
--- PASS: TestAccessListHandler_TestIP_MissingIPAddress (0.02s)
=== RUN TestAccessListHandler_List_DBError
2026/01/10 02:17:36 /projects/Charon/backend/internal/services/access_list_service.go:129 no such table: access_lists
[1.585ms] [rows:0] SELECT * FROM `access_lists` ORDER BY updated_at desc
--- PASS: TestAccessListHandler_List_DBError (0.00s)
=== RUN TestAccessListHandler_Get_DBError
2026/01/10 02:17:36 /projects/Charon/backend/internal/services/access_list_service.go:105 no such table: access_lists
[2.493ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 1 ORDER BY `access_lists`.`id` LIMIT 1
--- PASS: TestAccessListHandler_Get_DBError (0.00s)
=== RUN TestAccessListHandler_Delete_InternalError
2026/01/10 02:17:36 /projects/Charon/backend/internal/services/access_list_service.go:162 no such table: proxy_hosts
[10.015ms] [rows:0] SELECT count(*) FROM `proxy_hosts` WHERE access_list_id = 1
--- PASS: TestAccessListHandler_Delete_InternalError (0.01s)
=== RUN TestAccessListHandler_Update_InvalidType
--- PASS: TestAccessListHandler_Update_InvalidType (0.03s)
=== RUN TestAccessListHandler_Create_InvalidJSON
--- PASS: TestAccessListHandler_Create_InvalidJSON (0.04s)
=== RUN TestAccessListHandler_TestIP_Blacklist
--- PASS: TestAccessListHandler_TestIP_Blacklist (0.03s)
=== RUN TestAccessListHandler_TestIP_GeoWhitelist
--- PASS: TestAccessListHandler_TestIP_GeoWhitelist (0.03s)
=== RUN TestAccessListHandler_TestIP_LocalNetworkOnly
--- PASS: TestAccessListHandler_TestIP_LocalNetworkOnly (0.02s)
=== RUN TestAccessListHandler_TestIP_InternalError
2026/01/10 02:17:36 /projects/Charon/backend/internal/services/access_list_service.go:105 no such table: access_lists
[0.993ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 1 ORDER BY `access_lists`.`id` LIMIT 1
--- PASS: TestAccessListHandler_TestIP_InternalError (0.00s)
=== RUN TestAccessListHandler_Create
=== RUN TestAccessListHandler_Create/create_whitelist_successfully
=== RUN TestAccessListHandler_Create/create_geo_whitelist_successfully
=== RUN TestAccessListHandler_Create/create_local_network_only
=== RUN TestAccessListHandler_Create/fail_with_invalid_type
=== RUN TestAccessListHandler_Create/fail_with_missing_name
--- PASS: TestAccessListHandler_Create (0.02s)
--- PASS: TestAccessListHandler_Create/create_whitelist_successfully (0.00s)
--- PASS: TestAccessListHandler_Create/create_geo_whitelist_successfully (0.00s)
--- PASS: TestAccessListHandler_Create/create_local_network_only (0.00s)
--- PASS: TestAccessListHandler_Create/fail_with_invalid_type (0.00s)
--- PASS: TestAccessListHandler_Create/fail_with_missing_name (0.00s)
=== RUN TestAccessListHandler_List
--- PASS: TestAccessListHandler_List (0.02s)
=== RUN TestAccessListHandler_Get
=== RUN TestAccessListHandler_Get/get_existing_ACL
=== RUN TestAccessListHandler_Get/get_non-existent_ACL
2026/01/10 02:17:36 /projects/Charon/backend/internal/services/access_list_service.go:105 record not found
[0.120ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 9999 ORDER BY `access_lists`.`id` LIMIT 1
--- PASS: TestAccessListHandler_Get (0.02s)
--- PASS: TestAccessListHandler_Get/get_existing_ACL (0.00s)
--- PASS: TestAccessListHandler_Get/get_non-existent_ACL (0.00s)
=== RUN TestAccessListHandler_Update
=== RUN TestAccessListHandler_Update/update_successfully
=== RUN TestAccessListHandler_Update/update_non-existent_ACL
2026/01/10 02:17:36 /projects/Charon/backend/internal/services/access_list_service.go:105 record not found
[0.098ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 9999 ORDER BY `access_lists`.`id` LIMIT 1
--- PASS: TestAccessListHandler_Update (0.03s)
--- PASS: TestAccessListHandler_Update/update_successfully (0.00s)
--- PASS: TestAccessListHandler_Update/update_non-existent_ACL (0.00s)
=== RUN TestAccessListHandler_Delete
=== RUN TestAccessListHandler_Delete/delete_successfully
=== RUN TestAccessListHandler_Delete/fail_to_delete_ACL_in_use
=== RUN TestAccessListHandler_Delete/delete_non-existent_ACL
--- PASS: TestAccessListHandler_Delete (0.05s)
--- PASS: TestAccessListHandler_Delete/delete_successfully (0.00s)
--- PASS: TestAccessListHandler_Delete/fail_to_delete_ACL_in_use (0.00s)
--- PASS: TestAccessListHandler_Delete/delete_non-existent_ACL (0.00s)
=== RUN TestAccessListHandler_TestIP
=== RUN TestAccessListHandler_TestIP/test_IP_in_whitelist
=== RUN TestAccessListHandler_TestIP/test_IP_not_in_whitelist
=== RUN TestAccessListHandler_TestIP/test_invalid_IP
=== RUN TestAccessListHandler_TestIP/test_non-existent_ACL
2026/01/10 02:17:36 /projects/Charon/backend/internal/services/access_list_service.go:105 record not found
[0.074ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 9999 ORDER BY `access_lists`.`id` LIMIT 1
--- PASS: TestAccessListHandler_TestIP (0.04s)
--- PASS: TestAccessListHandler_TestIP/test_IP_in_whitelist (0.00s)
--- PASS: TestAccessListHandler_TestIP/test_IP_not_in_whitelist (0.00s)
--- PASS: TestAccessListHandler_TestIP/test_invalid_IP (0.00s)
--- PASS: TestAccessListHandler_TestIP/test_non-existent_ACL (0.00s)
=== RUN TestAccessListHandler_GetTemplates
--- PASS: TestAccessListHandler_GetTemplates (0.02s)
=== RUN TestImportHandler_Commit_InvalidJSON
--- PASS: TestImportHandler_Commit_InvalidJSON (0.03s)
=== RUN TestImportHandler_Commit_InvalidSessionUUID
--- PASS: TestImportHandler_Commit_InvalidSessionUUID (0.03s)
=== RUN TestImportHandler_Commit_SessionNotFound
--- PASS: TestImportHandler_Commit_SessionNotFound (0.05s)
=== RUN TestRemoteServerHandler_TestConnection_Unreachable
--- PASS: TestRemoteServerHandler_TestConnection_Unreachable (5.01s)
=== RUN TestSecurityHandler_GetConfig_InternalError
--- PASS: TestSecurityHandler_GetConfig_InternalError (0.01s)
=== RUN TestSecurityHandler_UpdateConfig_ApplyCaddyError
--- PASS: TestSecurityHandler_UpdateConfig_ApplyCaddyError (0.01s)
=== RUN TestSecurityHandler_GenerateBreakGlass_Error
--- PASS: TestSecurityHandler_GenerateBreakGlass_Error (0.75s)
=== RUN TestSecurityHandler_ListDecisions_Error
--- PASS: TestSecurityHandler_ListDecisions_Error (0.01s)
=== RUN TestSecurityHandler_ListRuleSets_Error
--- PASS: TestSecurityHandler_ListRuleSets_Error (0.01s)
=== RUN TestSecurityHandler_UpsertRuleSet_Error
--- PASS: TestSecurityHandler_UpsertRuleSet_Error (0.01s)
=== RUN TestSecurityHandler_CreateDecision_LogError
--- PASS: TestSecurityHandler_CreateDecision_LogError (0.01s)
=== RUN TestSecurityHandler_DeleteRuleSet_Error
--- PASS: TestSecurityHandler_DeleteRuleSet_Error (0.01s)
=== RUN TestCrowdsec_ImportConfig_EmptyUpload
--- PASS: TestCrowdsec_ImportConfig_EmptyUpload (0.00s)
=== RUN TestBackupHandler_List_DBError
time="2026-01-10T02:17:42Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupHandler_List_DBError (0.00s)
=== RUN TestImportHandler_UploadMulti_InvalidJSON
--- PASS: TestImportHandler_UploadMulti_InvalidJSON (0.02s)
=== RUN TestImportHandler_UploadMulti_MissingCaddyfile
--- PASS: TestImportHandler_UploadMulti_MissingCaddyfile (0.01s)
=== RUN TestImportHandler_UploadMulti_EmptyContent
--- PASS: TestImportHandler_UploadMulti_EmptyContent (0.02s)
=== RUN TestImportHandler_UploadMulti_PathTraversal
--- PASS: TestImportHandler_UploadMulti_PathTraversal (0.02s)
=== RUN TestLogsHandler_Download_PathTraversal
--- PASS: TestLogsHandler_Download_PathTraversal (0.00s)
=== RUN TestLogsHandler_Download_NotFound
--- PASS: TestLogsHandler_Download_NotFound (0.00s)
=== RUN TestLogsHandler_Download_Success
--- PASS: TestLogsHandler_Download_Success (0.01s)
=== RUN TestImportHandler_Upload_InvalidJSON
time="2026-01-10T02:17:42Z" level=error msg="Import Upload: failed to bind JSON" error="invalid character 'o' in literal null (expecting 'u')"
--- PASS: TestImportHandler_Upload_InvalidJSON (0.02s)
=== RUN TestImportHandler_Upload_EmptyContent
time="2026-01-10T02:17:42Z" level=error msg="Import Upload: failed to bind JSON" error="Key: 'Content' Error:Field validation for 'Content' failed on the 'required' tag"
--- PASS: TestImportHandler_Upload_EmptyContent (0.02s)
=== RUN TestBackupHandler_List_ServiceError
--- PASS: TestBackupHandler_List_ServiceError (0.00s)
=== RUN TestBackupHandler_Delete_PathTraversal
time="2026-01-10T02:17:42Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupHandler_Delete_PathTraversal (0.00s)
=== RUN TestBackupHandler_Delete_InternalError2
time="2026-01-10T02:17:42Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupHandler_Delete_InternalError2 (0.00s)
=== RUN TestRemoteServerHandler_TestConnection_NotFound2
--- PASS: TestRemoteServerHandler_TestConnection_NotFound2 (0.00s)
=== RUN TestRemoteServerHandler_TestConnectionCustom_Unreachable2
--- PASS: TestRemoteServerHandler_TestConnectionCustom_Unreachable2 (5.01s)
=== RUN TestAuthHandler_Register_InvalidJSON
--- PASS: TestAuthHandler_Register_InvalidJSON (0.02s)
=== RUN TestHealthHandler_Basic
--- PASS: TestHealthHandler_Basic (0.00s)
=== RUN TestBackupHandler_Create_Error
time="2026-01-10T02:17:47Z" level=error msg="Failed to create backup" action=create_backup error="database file not found: /tmp/TestBackupHandler_Create_Error62628796/001/data/charon.db"
time="2026-01-10T02:17:47Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupHandler_Create_Error (0.00s)
=== RUN TestSettingsHandler_GetSettings_Error
--- PASS: TestSettingsHandler_GetSettings_Error (0.00s)
=== RUN TestSettingsHandler_UpdateSetting_InvalidJSON
--- PASS: TestSettingsHandler_UpdateSetting_InvalidJSON (0.00s)
=== RUN TestRemoteServerHandler_TestConnection_Reachable
--- PASS: TestRemoteServerHandler_TestConnection_Reachable (0.01s)
=== RUN TestRemoteServerHandler_TestConnection_EmptyHost
--- PASS: TestRemoteServerHandler_TestConnection_EmptyHost (0.00s)
=== RUN TestImportHandler_UploadMulti_ValidCaddyfile
time="2026-01-10T02:17:47Z" level=error msg="Import UploadMulti: import failed" error="caddy adapt failed: exec: \"caddy\": executable file not found in $PATH (output: )" mainCaddyfile=Caddyfile preview="example.com { reverse_proxy localhost:8080 }"
--- PASS: TestImportHandler_UploadMulti_ValidCaddyfile (0.02s)
=== RUN TestImportHandler_UploadMulti_SubdirFile
time="2026-01-10T02:17:47Z" level=error msg="Import UploadMulti: import failed" error="caddy adapt failed: exec: \"caddy\": executable file not found in $PATH (output: )" mainCaddyfile=Caddyfile preview="import sites/*"
--- PASS: TestImportHandler_UploadMulti_SubdirFile (0.02s)
=== RUN Test_getLocalIP_Additional
additional_handlers_test.go:29: getLocalIP returned: 217.15.170.144
--- PASS: Test_getLocalIP_Additional (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_FromShortEnv
2026/01/10 02:17:47 /projects/Charon/backend/internal/api/handlers/feature_flags_handler.go:48 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:47 /projects/Charon/backend/internal/api/handlers/feature_flags_handler.go:48 record not found
[0.056ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.uptime.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:47 /projects/Charon/backend/internal/api/handlers/feature_flags_handler.go:48 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.crowdsec.console_enrollment" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestFeatureFlagsHandler_GetFlags_FromShortEnv (0.00s)
=== RUN TestFeatureFlagsHandler_UpdateFlags_UnknownFlag
--- PASS: TestFeatureFlagsHandler_UpdateFlags_UnknownFlag (0.00s)
=== RUN TestDomainHandler_List_Additional
--- PASS: TestDomainHandler_List_Additional (0.00s)
=== RUN TestDomainHandler_List_Empty_Additional
--- PASS: TestDomainHandler_List_Empty_Additional (0.00s)
=== RUN TestDomainHandler_Create_Additional
--- PASS: TestDomainHandler_Create_Additional (0.00s)
=== RUN TestDomainHandler_Create_MissingName_Additional
--- PASS: TestDomainHandler_Create_MissingName_Additional (0.00s)
=== RUN TestDomainHandler_Delete_Additional
--- PASS: TestDomainHandler_Delete_Additional (0.00s)
=== RUN TestDomainHandler_Delete_NotFound_Additional
2026/01/10 02:17:47 /projects/Charon/backend/internal/api/handlers/domain_handler.go:73 record not found
[0.094ms] [rows:0] SELECT * FROM `domains` WHERE uuid = "nonexistent" AND `domains`.`deleted_at` IS NULL ORDER BY `domains`.`id` LIMIT 1
--- PASS: TestDomainHandler_Delete_NotFound_Additional (0.00s)
=== RUN TestNotificationHandler_List_Additional
--- PASS: TestNotificationHandler_List_Additional (0.00s)
=== RUN TestNotificationHandler_MarkAsRead_Additional
--- PASS: TestNotificationHandler_MarkAsRead_Additional (0.00s)
=== RUN TestNotificationHandler_MarkAllAsRead_Additional
--- PASS: TestNotificationHandler_MarkAllAsRead_Additional (0.00s)
=== RUN TestCrowdsecExec_NewDefaultCrowdsecExecutor
--- PASS: TestCrowdsecExec_NewDefaultCrowdsecExecutor (0.00s)
=== RUN TestDefaultCrowdsecExecutor_isCrowdSecProcess
--- PASS: TestDefaultCrowdsecExecutor_isCrowdSecProcess (0.00s)
=== RUN TestDefaultCrowdsecExecutor_pidFile
--- PASS: TestDefaultCrowdsecExecutor_pidFile (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Status
--- PASS: TestDefaultCrowdsecExecutor_Status (0.00s)
=== RUN Test_isSafePathUnderBase_Additional
=== RUN Test_isSafePathUnderBase_Additional/valid_relative_path_under_base
=== RUN Test_isSafePathUnderBase_Additional/valid_relative_path_with_subdir
=== RUN Test_isSafePathUnderBase_Additional/path_traversal_attempt
=== RUN Test_isSafePathUnderBase_Additional/empty_path
--- PASS: Test_isSafePathUnderBase_Additional (0.00s)
--- PASS: Test_isSafePathUnderBase_Additional/valid_relative_path_under_base (0.00s)
--- PASS: Test_isSafePathUnderBase_Additional/valid_relative_path_with_subdir (0.00s)
--- PASS: Test_isSafePathUnderBase_Additional/path_traversal_attempt (0.00s)
--- PASS: Test_isSafePathUnderBase_Additional/empty_path (0.00s)
=== RUN TestAuditLogHandler_List
=== RUN TestAuditLogHandler_List/List_all_audit_logs
=== RUN TestAuditLogHandler_List/Filter_by_actor
=== RUN TestAuditLogHandler_List/Filter_by_action
=== RUN TestAuditLogHandler_List/Filter_by_event_category
=== RUN TestAuditLogHandler_List/Pagination_-_page_1,_limit_1
--- PASS: TestAuditLogHandler_List (0.01s)
--- PASS: TestAuditLogHandler_List/List_all_audit_logs (0.00s)
--- PASS: TestAuditLogHandler_List/Filter_by_actor (0.00s)
--- PASS: TestAuditLogHandler_List/Filter_by_action (0.00s)
--- PASS: TestAuditLogHandler_List/Filter_by_event_category (0.00s)
--- PASS: TestAuditLogHandler_List/Pagination_-_page_1,_limit_1 (0.00s)
=== RUN TestAuditLogHandler_Get
=== RUN TestAuditLogHandler_Get/Get_existing_audit_log
=== RUN TestAuditLogHandler_Get/Get_non-existent_audit_log
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/security_service.go:321 record not found
[0.092ms] [rows:0] SELECT * FROM `security_audits` WHERE uuid = "non-existent-uuid" ORDER BY `security_audits`.`id` LIMIT 1
=== RUN TestAuditLogHandler_Get/Get_with_empty_UUID
--- PASS: TestAuditLogHandler_Get (0.00s)
--- PASS: TestAuditLogHandler_Get/Get_existing_audit_log (0.00s)
--- PASS: TestAuditLogHandler_Get/Get_non-existent_audit_log (0.00s)
--- PASS: TestAuditLogHandler_Get/Get_with_empty_UUID (0.00s)
=== RUN TestAuditLogHandler_ListByProvider
=== RUN TestAuditLogHandler_ListByProvider/List_audit_logs_for_provider
=== RUN TestAuditLogHandler_ListByProvider/List_audit_logs_for_non-existent_provider
=== RUN TestAuditLogHandler_ListByProvider/Invalid_provider_ID
--- PASS: TestAuditLogHandler_ListByProvider (0.00s)
--- PASS: TestAuditLogHandler_ListByProvider/List_audit_logs_for_provider (0.00s)
--- PASS: TestAuditLogHandler_ListByProvider/List_audit_logs_for_non-existent_provider (0.00s)
--- PASS: TestAuditLogHandler_ListByProvider/Invalid_provider_ID (0.00s)
=== RUN TestAuditLogHandler_ListWithDateFilters
=== RUN TestAuditLogHandler_ListWithDateFilters/Filter_by_start_date
=== RUN TestAuditLogHandler_ListWithDateFilters/Filter_by_end_date
=== RUN TestAuditLogHandler_ListWithDateFilters/Filter_by_date_range
--- PASS: TestAuditLogHandler_ListWithDateFilters (0.01s)
--- PASS: TestAuditLogHandler_ListWithDateFilters/Filter_by_start_date (0.00s)
--- PASS: TestAuditLogHandler_ListWithDateFilters/Filter_by_end_date (0.00s)
--- PASS: TestAuditLogHandler_ListWithDateFilters/Filter_by_date_range (0.00s)
=== RUN TestAuditLogHandler_ServiceErrors
=== RUN TestAuditLogHandler_ServiceErrors/List_fails_when_database_unavailable
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/security_service.go:305 sql: database is closed
[0.026ms] [rows:0] SELECT count(*) FROM `security_audits`
=== RUN TestAuditLogHandler_ServiceErrors/ListByProvider_fails_when_database_unavailable
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/security_service.go:339 sql: database is closed
[0.039ms] [rows:0] SELECT count(*) FROM `security_audits` WHERE event_category = "dns_provider" AND resource_id = 123
=== RUN TestAuditLogHandler_ServiceErrors/Get_fails_when_database_unavailable
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/security_service.go:321 sql: database is closed
[0.041ms] [rows:0] SELECT * FROM `security_audits` WHERE uuid = "some-uuid" ORDER BY `security_audits`.`id` LIMIT 1
--- PASS: TestAuditLogHandler_ServiceErrors (0.00s)
--- PASS: TestAuditLogHandler_ServiceErrors/List_fails_when_database_unavailable (0.00s)
--- PASS: TestAuditLogHandler_ServiceErrors/ListByProvider_fails_when_database_unavailable (0.00s)
--- PASS: TestAuditLogHandler_ServiceErrors/Get_fails_when_database_unavailable (0.00s)
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Negative_page_defaults_to_1
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Zero_page_defaults_to_1
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Negative_limit_defaults_to_50
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Zero_limit_defaults_to_50
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Limit_over_100_defaults_to_50
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Non-numeric_page_ignored
=== RUN TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Non-numeric_limit_ignored
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases (0.01s)
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Negative_page_defaults_to_1 (0.00s)
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Zero_page_defaults_to_1 (0.00s)
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Negative_limit_defaults_to_50 (0.00s)
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Zero_limit_defaults_to_50 (0.00s)
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Limit_over_100_defaults_to_50 (0.00s)
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Non-numeric_page_ignored (0.00s)
--- PASS: TestAuditLogHandler_List_PaginationBoundaryEdgeCases/Non-numeric_limit_ignored (0.00s)
=== RUN TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases
=== RUN TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases/Negative_page_defaults_to_1
=== RUN TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases/Zero_limit_defaults_to_50
=== RUN TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases/Limit_over_100_defaults_to_50
--- PASS: TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases (0.01s)
--- PASS: TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases/Negative_page_defaults_to_1 (0.00s)
--- PASS: TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases/Zero_limit_defaults_to_50 (0.00s)
--- PASS: TestAuditLogHandler_ListByProvider_PaginationBoundaryEdgeCases/Limit_over_100_defaults_to_50 (0.00s)
=== RUN TestAuditLogHandler_List_InvalidDateFormats
=== RUN TestAuditLogHandler_List_InvalidDateFormats/Invalid_start_date_format
=== RUN TestAuditLogHandler_List_InvalidDateFormats/Invalid_end_date_format
=== RUN TestAuditLogHandler_List_InvalidDateFormats/Both_dates_invalid
--- PASS: TestAuditLogHandler_List_InvalidDateFormats (0.01s)
--- PASS: TestAuditLogHandler_List_InvalidDateFormats/Invalid_start_date_format (0.00s)
--- PASS: TestAuditLogHandler_List_InvalidDateFormats/Invalid_end_date_format (0.00s)
--- PASS: TestAuditLogHandler_List_InvalidDateFormats/Both_dates_invalid (0.00s)
=== RUN TestAuditLogHandler_Get_InternalError
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/security_service.go:321 sql: database is closed
[0.033ms] [rows:0] SELECT * FROM `security_audits` WHERE uuid = "test-uuid" ORDER BY `security_audits`.`id` LIMIT 1
--- PASS: TestAuditLogHandler_Get_InternalError (0.00s)
=== RUN TestAuthHandler_Login
=== PAUSE TestAuthHandler_Login
=== RUN TestSetSecureCookie_HTTPS_Strict
--- PASS: TestSetSecureCookie_HTTPS_Strict (0.00s)
=== RUN TestSetSecureCookie_HTTP_Lax
=== PAUSE TestSetSecureCookie_HTTP_Lax
=== RUN TestAuthHandler_Login_Errors
=== PAUSE TestAuthHandler_Login_Errors
=== RUN TestAuthHandler_Register
=== PAUSE TestAuthHandler_Register
=== RUN TestAuthHandler_Register_Duplicate
=== PAUSE TestAuthHandler_Register_Duplicate
=== RUN TestAuthHandler_Logout
=== PAUSE TestAuthHandler_Logout
=== RUN TestAuthHandler_Me
=== PAUSE TestAuthHandler_Me
=== RUN TestAuthHandler_Me_NotFound
=== PAUSE TestAuthHandler_Me_NotFound
=== RUN TestAuthHandler_ChangePassword
=== PAUSE TestAuthHandler_ChangePassword
=== RUN TestAuthHandler_ChangePassword_WrongOld
=== PAUSE TestAuthHandler_ChangePassword_WrongOld
=== RUN TestAuthHandler_ChangePassword_Errors
=== PAUSE TestAuthHandler_ChangePassword_Errors
=== RUN TestNewAuthHandlerWithDB
=== PAUSE TestNewAuthHandlerWithDB
=== RUN TestAuthHandler_Verify_NoCookie
=== PAUSE TestAuthHandler_Verify_NoCookie
=== RUN TestAuthHandler_Verify_InvalidToken
=== PAUSE TestAuthHandler_Verify_InvalidToken
=== RUN TestAuthHandler_Verify_ValidToken
=== PAUSE TestAuthHandler_Verify_ValidToken
=== RUN TestAuthHandler_Verify_BearerToken
=== PAUSE TestAuthHandler_Verify_BearerToken
=== RUN TestAuthHandler_Verify_DisabledUser
=== PAUSE TestAuthHandler_Verify_DisabledUser
=== RUN TestAuthHandler_Verify_ForwardAuthDenied
=== PAUSE TestAuthHandler_Verify_ForwardAuthDenied
=== RUN TestAuthHandler_VerifyStatus_NotAuthenticated
=== PAUSE TestAuthHandler_VerifyStatus_NotAuthenticated
=== RUN TestAuthHandler_VerifyStatus_InvalidToken
=== PAUSE TestAuthHandler_VerifyStatus_InvalidToken
=== RUN TestAuthHandler_VerifyStatus_Authenticated
=== PAUSE TestAuthHandler_VerifyStatus_Authenticated
=== RUN TestAuthHandler_VerifyStatus_DisabledUser
=== PAUSE TestAuthHandler_VerifyStatus_DisabledUser
=== RUN TestAuthHandler_GetAccessibleHosts_Unauthorized
=== PAUSE TestAuthHandler_GetAccessibleHosts_Unauthorized
=== RUN TestAuthHandler_GetAccessibleHosts_AllowAll
=== PAUSE TestAuthHandler_GetAccessibleHosts_AllowAll
=== RUN TestAuthHandler_GetAccessibleHosts_DenyAll
=== PAUSE TestAuthHandler_GetAccessibleHosts_DenyAll
=== RUN TestAuthHandler_GetAccessibleHosts_PermittedHosts
=== PAUSE TestAuthHandler_GetAccessibleHosts_PermittedHosts
=== RUN TestAuthHandler_GetAccessibleHosts_UserNotFound
=== PAUSE TestAuthHandler_GetAccessibleHosts_UserNotFound
=== RUN TestAuthHandler_CheckHostAccess_Unauthorized
=== PAUSE TestAuthHandler_CheckHostAccess_Unauthorized
=== RUN TestAuthHandler_CheckHostAccess_InvalidHostID
=== PAUSE TestAuthHandler_CheckHostAccess_InvalidHostID
=== RUN TestAuthHandler_CheckHostAccess_Allowed
=== PAUSE TestAuthHandler_CheckHostAccess_Allowed
=== RUN TestAuthHandler_CheckHostAccess_Denied
=== PAUSE TestAuthHandler_CheckHostAccess_Denied
=== RUN TestBackupHandlerSanitizesFilename
--- PASS: TestBackupHandlerSanitizesFilename (0.00s)
=== RUN TestBackupLifecycle
--- PASS: TestBackupLifecycle (0.01s)
=== RUN TestBackupHandler_Errors
--- PASS: TestBackupHandler_Errors (0.00s)
=== RUN TestBackupHandler_List_Success
--- PASS: TestBackupHandler_List_Success (0.00s)
=== RUN TestBackupHandler_Create_Success
--- PASS: TestBackupHandler_Create_Success (0.00s)
=== RUN TestBackupHandler_Download_Success
--- PASS: TestBackupHandler_Download_Success (0.00s)
=== RUN TestBackupHandler_PathTraversal
--- PASS: TestBackupHandler_PathTraversal (0.00s)
=== RUN TestBackupHandler_Download_InvalidPath
--- PASS: TestBackupHandler_Download_InvalidPath (0.00s)
=== RUN TestBackupHandler_Create_ServiceError
--- PASS: TestBackupHandler_Create_ServiceError (0.00s)
=== RUN TestBackupHandler_Delete_InternalError
--- PASS: TestBackupHandler_Delete_InternalError (0.00s)
=== RUN TestBackupHandler_Restore_InternalError
--- PASS: TestBackupHandler_Restore_InternalError (0.00s)
=== RUN TestCerberusLogsHandler_NewHandler
=== PAUSE TestCerberusLogsHandler_NewHandler
=== RUN TestCerberusLogsHandler_SuccessfulConnection
=== PAUSE TestCerberusLogsHandler_SuccessfulConnection
=== RUN TestCerberusLogsHandler_ReceiveLogEntries
=== PAUSE TestCerberusLogsHandler_ReceiveLogEntries
=== RUN TestCerberusLogsHandler_SourceFilter
=== PAUSE TestCerberusLogsHandler_SourceFilter
=== RUN TestCerberusLogsHandler_BlockedOnlyFilter
=== PAUSE TestCerberusLogsHandler_BlockedOnlyFilter
=== RUN TestCerberusLogsHandler_IPFilter
=== PAUSE TestCerberusLogsHandler_IPFilter
=== RUN TestCerberusLogsHandler_ClientDisconnect
=== PAUSE TestCerberusLogsHandler_ClientDisconnect
=== RUN TestCerberusLogsHandler_MultipleClients
=== PAUSE TestCerberusLogsHandler_MultipleClients
=== RUN TestCerberusLogsHandler_UpgradeFailure
=== PAUSE TestCerberusLogsHandler_UpgradeFailure
=== RUN TestCertificateHandler_List_DBError
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/certificate_service.go:198 no such table: ssl_certificates
[3.273ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE provider LIKE "letsencrypt%"
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/certificate_service.go:226 no such table: ssl_certificates
[0.033ms] [rows:0] SELECT * FROM `ssl_certificates`
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/certificate_service.go:226 no such table: ssl_certificates
[0.032ms] [rows:0] SELECT * FROM `ssl_certificates`
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/certificate_service.go:198 no such table: ssl_certificates
[0.044ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE provider LIKE "letsencrypt%"
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/certificate_service.go:226 no such table: ssl_certificates
[0.031ms] [rows:0] SELECT * FROM `ssl_certificates`
--- PASS: TestCertificateHandler_List_DBError (0.00s)
=== RUN TestCertificateHandler_Delete_InvalidID
--- PASS: TestCertificateHandler_Delete_InvalidID (0.02s)
=== RUN TestCertificateHandler_Delete_NotFound
2026/01/10 02:17:47 /projects/Charon/backend/internal/services/certificate_service.go:410 record not found
[0.076ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE `ssl_certificates`.`id` = 9999 ORDER BY `ssl_certificates`.`id` LIMIT 1
--- PASS: TestCertificateHandler_Delete_NotFound (0.01s)
=== RUN TestCertificateHandler_Delete_NoBackupService
--- PASS: TestCertificateHandler_Delete_NoBackupService (0.21s)
=== RUN TestCertificateHandler_Delete_CheckUsageDBError
2026/01/10 02:17:48 /projects/Charon/backend/internal/services/certificate_service.go:392 no such table: proxy_hosts
[6.492ms] [rows:0] SELECT count(*) FROM `proxy_hosts` WHERE certificate_id = 1
2026/01/10 02:17:48 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.901ms] [rows:0] SELECT * FROM `proxy_hosts`
--- PASS: TestCertificateHandler_Delete_CheckUsageDBError (0.01s)
=== RUN TestCertificateHandler_List_WithCertificates
--- PASS: TestCertificateHandler_List_WithCertificates (0.01s)
=== RUN TestCertificateHandler_Delete_ZeroID
--- PASS: TestCertificateHandler_Delete_ZeroID (0.02s)
=== RUN TestCertificateHandler_Delete_RequiresAuth
--- PASS: TestCertificateHandler_Delete_RequiresAuth (0.01s)
=== RUN TestCertificateHandler_List_RequiresAuth
--- PASS: TestCertificateHandler_List_RequiresAuth (0.01s)
=== RUN TestCertificateHandler_Upload_RequiresAuth
--- PASS: TestCertificateHandler_Upload_RequiresAuth (0.02s)
=== RUN TestCertificateHandler_Delete_DiskSpaceCheck
--- PASS: TestCertificateHandler_Delete_DiskSpaceCheck (0.01s)
=== RUN TestCertificateHandler_Delete_NotificationRateLimiting
--- PASS: TestCertificateHandler_Delete_NotificationRateLimiting (0.02s)
=== RUN TestDeleteCertificate_InUse
--- PASS: TestDeleteCertificate_InUse (0.02s)
=== RUN TestDeleteCertificate_CreatesBackup
2026/01/10 02:17:48 /projects/Charon/backend/internal/api/handlers/certificate_handler_test.go:134 record not found
[0.090ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE `ssl_certificates`.`id` = 1 ORDER BY `ssl_certificates`.`id` LIMIT 1
--- PASS: TestDeleteCertificate_CreatesBackup (0.01s)
=== RUN TestDeleteCertificate_BackupFailure
--- PASS: TestDeleteCertificate_BackupFailure (0.02s)
=== RUN TestDeleteCertificate_InUse_NoBackup
--- PASS: TestDeleteCertificate_InUse_NoBackup (0.01s)
=== RUN TestCertificateHandler_List
--- PASS: TestCertificateHandler_List (0.01s)
=== RUN TestCertificateHandler_Upload_MissingName
--- PASS: TestCertificateHandler_Upload_MissingName (0.01s)
=== RUN TestCertificateHandler_Upload_MissingCertFile
--- PASS: TestCertificateHandler_Upload_MissingCertFile (0.02s)
=== RUN TestCertificateHandler_Upload_MissingKeyFile
--- PASS: TestCertificateHandler_Upload_MissingKeyFile (0.02s)
=== RUN TestCertificateHandler_Upload_Success
--- PASS: TestCertificateHandler_Upload_Success (0.05s)
=== RUN TestDeleteCertificate_InvalidID
--- PASS: TestDeleteCertificate_InvalidID (0.01s)
=== RUN TestDeleteCertificate_ZeroID
--- PASS: TestDeleteCertificate_ZeroID (0.02s)
=== RUN TestDeleteCertificate_LowDiskSpace
--- PASS: TestDeleteCertificate_LowDiskSpace (0.02s)
=== RUN TestDeleteCertificate_DiskSpaceCheckError
2026/01/10 02:17:48 /projects/Charon/backend/internal/services/certificate_service.go:198 database table is locked: ssl_certificates
[0.359ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE provider LIKE "letsencrypt%"
--- PASS: TestDeleteCertificate_DiskSpaceCheckError (0.02s)
=== RUN TestDeleteCertificate_UsageCheckError
2026/01/10 02:17:48 /projects/Charon/backend/internal/services/certificate_service.go:392 no such table: proxy_hosts
[8.346ms] [rows:0] SELECT count(*) FROM `proxy_hosts` WHERE certificate_id = 1
2026/01/10 02:17:48 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[7.932ms] [rows:0] SELECT * FROM `proxy_hosts`
--- PASS: TestDeleteCertificate_UsageCheckError (0.01s)
=== RUN TestDeleteCertificate_NotificationRateLimit
--- PASS: TestDeleteCertificate_NotificationRateLimit (0.12s)
=== RUN TestSafeIntToUint
=== RUN TestSafeIntToUint/ValidPositive
=== RUN TestSafeIntToUint/Zero
=== RUN TestSafeIntToUint/Negative
--- PASS: TestSafeIntToUint (0.00s)
--- PASS: TestSafeIntToUint/ValidPositive (0.00s)
--- PASS: TestSafeIntToUint/Zero (0.00s)
--- PASS: TestSafeIntToUint/Negative (0.00s)
=== RUN TestSafeFloat64ToUint
=== RUN TestSafeFloat64ToUint/ValidPositive
=== RUN TestSafeFloat64ToUint/Zero
=== RUN TestSafeFloat64ToUint/Negative
=== RUN TestSafeFloat64ToUint/NotInteger
--- PASS: TestSafeFloat64ToUint (0.00s)
--- PASS: TestSafeFloat64ToUint/ValidPositive (0.00s)
--- PASS: TestSafeFloat64ToUint/Zero (0.00s)
--- PASS: TestSafeFloat64ToUint/Negative (0.00s)
--- PASS: TestSafeFloat64ToUint/NotInteger (0.00s)
=== RUN Test_ttlRemainingSeconds
=== RUN Test_ttlRemainingSeconds/zero_retrievedAt_returns_nil
=== RUN Test_ttlRemainingSeconds/zero_ttl_returns_nil
=== RUN Test_ttlRemainingSeconds/negative_ttl_returns_nil
=== RUN Test_ttlRemainingSeconds/expired_ttl_returns_zero
=== RUN Test_ttlRemainingSeconds/valid_remaining_time_returns_positive
--- PASS: Test_ttlRemainingSeconds (0.00s)
--- PASS: Test_ttlRemainingSeconds/zero_retrievedAt_returns_nil (0.00s)
--- PASS: Test_ttlRemainingSeconds/zero_ttl_returns_nil (0.00s)
--- PASS: Test_ttlRemainingSeconds/negative_ttl_returns_nil (0.00s)
--- PASS: Test_ttlRemainingSeconds/expired_ttl_returns_zero (0.00s)
--- PASS: Test_ttlRemainingSeconds/valid_remaining_time_returns_positive (0.00s)
=== RUN Test_mapCrowdsecStatus
=== RUN Test_mapCrowdsecStatus/deadline_exceeded_returns_gateway_timeout
=== RUN Test_mapCrowdsecStatus/context_canceled_returns_gateway_timeout
=== RUN Test_mapCrowdsecStatus/other_error_returns_default_code
=== RUN Test_mapCrowdsecStatus/other_error_returns_bad_request_default
--- PASS: Test_mapCrowdsecStatus (0.00s)
--- PASS: Test_mapCrowdsecStatus/deadline_exceeded_returns_gateway_timeout (0.00s)
--- PASS: Test_mapCrowdsecStatus/context_canceled_returns_gateway_timeout (0.00s)
--- PASS: Test_mapCrowdsecStatus/other_error_returns_default_code (0.00s)
--- PASS: Test_mapCrowdsecStatus/other_error_returns_bad_request_default (0.00s)
=== RUN Test_actorFromContext
=== RUN Test_actorFromContext/with_userID_in_context
=== RUN Test_actorFromContext/without_userID_in_context
=== RUN Test_actorFromContext/with_string_userID
--- PASS: Test_actorFromContext (0.00s)
--- PASS: Test_actorFromContext/with_userID_in_context (0.00s)
--- PASS: Test_actorFromContext/without_userID_in_context (0.00s)
--- PASS: Test_actorFromContext/with_string_userID (0.00s)
=== RUN Test_hubEndpoints
=== RUN Test_hubEndpoints/nil_Hub_returns_nil
--- PASS: Test_hubEndpoints (0.00s)
--- PASS: Test_hubEndpoints/nil_Hub_returns_nil (0.00s)
=== RUN TestRealCommandExecutor_Execute
=== RUN TestRealCommandExecutor_Execute/successful_command
=== RUN TestRealCommandExecutor_Execute/failed_command
=== RUN TestRealCommandExecutor_Execute/context_cancellation
--- PASS: TestRealCommandExecutor_Execute (0.00s)
--- PASS: TestRealCommandExecutor_Execute/successful_command (0.00s)
--- PASS: TestRealCommandExecutor_Execute/failed_command (0.00s)
--- PASS: TestRealCommandExecutor_Execute/context_cancellation (0.00s)
=== RUN Test_isCerberusEnabled
=== RUN Test_isCerberusEnabled/returns_true_when_no_setting_exists_(default)
=== RUN Test_isCerberusEnabled/enabled_when_setting_is_true
=== RUN Test_isCerberusEnabled/disabled_when_setting_is_false
--- PASS: Test_isCerberusEnabled (0.00s)
--- PASS: Test_isCerberusEnabled/returns_true_when_no_setting_exists_(default) (0.00s)
--- PASS: Test_isCerberusEnabled/enabled_when_setting_is_true (0.00s)
--- PASS: Test_isCerberusEnabled/disabled_when_setting_is_false (0.00s)
=== RUN Test_isConsoleEnrollmentEnabled
=== RUN Test_isConsoleEnrollmentEnabled/disabled_when_no_setting_exists
=== RUN Test_isConsoleEnrollmentEnabled/enabled_when_setting_is_true
=== RUN Test_isConsoleEnrollmentEnabled/disabled_when_setting_is_false
--- PASS: Test_isConsoleEnrollmentEnabled (0.00s)
--- PASS: Test_isConsoleEnrollmentEnabled/disabled_when_no_setting_exists (0.00s)
--- PASS: Test_isConsoleEnrollmentEnabled/enabled_when_setting_is_true (0.00s)
--- PASS: Test_isConsoleEnrollmentEnabled/disabled_when_setting_is_false (0.00s)
=== RUN TestCrowdsecHandler_ExportConfig
--- PASS: TestCrowdsecHandler_ExportConfig (0.01s)
=== RUN TestCrowdsecHandler_CheckLAPIHealth
--- PASS: TestCrowdsecHandler_CheckLAPIHealth (0.00s)
=== RUN TestCrowdsecHandler_ConsoleStatus
--- PASS: TestCrowdsecHandler_ConsoleStatus (0.01s)
=== RUN TestCrowdsecHandler_ConsoleEnroll_Disabled
--- PASS: TestCrowdsecHandler_ConsoleEnroll_Disabled (0.00s)
=== RUN TestCrowdsecHandler_DeleteConsoleEnrollment
--- PASS: TestCrowdsecHandler_DeleteConsoleEnrollment (0.00s)
=== RUN TestCrowdsecHandler_BanIP
--- PASS: TestCrowdsecHandler_BanIP (0.01s)
=== RUN TestCrowdsecHandler_UnbanIP
--- PASS: TestCrowdsecHandler_UnbanIP (0.00s)
=== RUN TestCrowdsecHandler_UpdateAcquisitionConfig
--- PASS: TestCrowdsecHandler_UpdateAcquisitionConfig (0.01s)
=== RUN Test_safeIntToUint
=== RUN Test_safeIntToUint/positive_int
=== RUN Test_safeIntToUint/zero
=== RUN Test_safeIntToUint/negative_int
=== RUN Test_safeIntToUint/large_positive
--- PASS: Test_safeIntToUint (0.00s)
--- PASS: Test_safeIntToUint/positive_int (0.00s)
--- PASS: Test_safeIntToUint/zero (0.00s)
--- PASS: Test_safeIntToUint/negative_int (0.00s)
--- PASS: Test_safeIntToUint/large_positive (0.00s)
=== RUN Test_safeFloat64ToUint
=== RUN Test_safeFloat64ToUint/positive_integer_float
=== RUN Test_safeFloat64ToUint/zero
=== RUN Test_safeFloat64ToUint/negative_float
=== RUN Test_safeFloat64ToUint/fractional_float
--- PASS: Test_safeFloat64ToUint (0.00s)
--- PASS: Test_safeFloat64ToUint/positive_integer_float (0.00s)
--- PASS: Test_safeFloat64ToUint/zero (0.00s)
--- PASS: Test_safeFloat64ToUint/negative_float (0.00s)
--- PASS: Test_safeFloat64ToUint/fractional_float (0.00s)
=== RUN TestBackupHandlerQuick
--- PASS: TestBackupHandlerQuick (0.00s)
=== RUN TestListPresetsShowsCachedStatus
--- PASS: TestListPresetsShowsCachedStatus (1.13s)
=== RUN TestCacheKeyPersistence
--- PASS: TestCacheKeyPersistence (0.00s)
=== RUN TestUpdateAcquisitionConfigMissingContent
--- PASS: TestUpdateAcquisitionConfigMissingContent (0.00s)
=== RUN TestUpdateAcquisitionConfigInvalidJSON
--- PASS: TestUpdateAcquisitionConfigInvalidJSON (0.00s)
=== RUN TestGetLAPIDecisionsWithIPFilter
--- PASS: TestGetLAPIDecisionsWithIPFilter (0.00s)
=== RUN TestGetLAPIDecisionsWithScopeFilter
--- PASS: TestGetLAPIDecisionsWithScopeFilter (0.00s)
=== RUN TestGetLAPIDecisionsWithTypeFilter
--- PASS: TestGetLAPIDecisionsWithTypeFilter (0.00s)
=== RUN TestGetLAPIDecisionsWithMultipleFilters
--- PASS: TestGetLAPIDecisionsWithMultipleFilters (0.00s)
=== RUN TestUpdateAcquisitionConfigSuccess
--- PASS: TestUpdateAcquisitionConfigSuccess (0.00s)
=== RUN TestRegisterBouncerScriptPathError
--- PASS: TestRegisterBouncerScriptPathError (0.00s)
=== RUN TestGetLAPIDecisionsEmptyResponse
--- PASS: TestGetLAPIDecisionsEmptyResponse (0.00s)
=== RUN TestGetLAPIDecisionsIPQueryParam
--- PASS: TestGetLAPIDecisionsIPQueryParam (0.00s)
=== RUN TestGetLAPIDecisionsScopeParam
--- PASS: TestGetLAPIDecisionsScopeParam (0.00s)
=== RUN TestGetLAPIDecisionsTypeParam
--- PASS: TestGetLAPIDecisionsTypeParam (0.00s)
=== RUN TestGetLAPIDecisionsCombinedParams
--- PASS: TestGetLAPIDecisionsCombinedParams (0.01s)
=== RUN TestCheckLAPIHealthRequest
--- PASS: TestCheckLAPIHealthRequest (0.00s)
=== RUN TestGetLAPIKeyLookup
--- PASS: TestGetLAPIKeyLookup (0.00s)
=== RUN TestGetLAPIKeyEmpty
--- PASS: TestGetLAPIKeyEmpty (0.00s)
=== RUN TestGetLAPIKeyAlternative
--- PASS: TestGetLAPIKeyAlternative (0.00s)
=== RUN TestStatusRequest
--- PASS: TestStatusRequest (0.00s)
=== RUN TestRegisterBouncerFlow
--- PASS: TestRegisterBouncerFlow (0.00s)
=== RUN TestRegisterBouncerExecutionFailure
--- PASS: TestRegisterBouncerExecutionFailure (0.00s)
=== RUN TestGetAcquisitionConfigNotPresent
--- PASS: TestGetAcquisitionConfigNotPresent (0.00s)
=== RUN TestListDecisions_Success
--- PASS: TestListDecisions_Success (0.00s)
=== RUN TestListDecisions_EmptyList
--- PASS: TestListDecisions_EmptyList (0.00s)
=== RUN TestListDecisions_CscliError
--- PASS: TestListDecisions_CscliError (0.00s)
=== RUN TestListDecisions_InvalidJSON
--- PASS: TestListDecisions_InvalidJSON (0.00s)
=== RUN TestBanIP_Success
--- PASS: TestBanIP_Success (0.00s)
=== RUN TestBanIP_DefaultDuration
--- PASS: TestBanIP_DefaultDuration (0.00s)
=== RUN TestBanIP_MissingIP
--- PASS: TestBanIP_MissingIP (0.00s)
=== RUN TestBanIP_EmptyIP
--- PASS: TestBanIP_EmptyIP (0.00s)
=== RUN TestBanIP_CscliError
--- PASS: TestBanIP_CscliError (0.00s)
=== RUN TestUnbanIP_Success
--- PASS: TestUnbanIP_Success (0.01s)
=== RUN TestUnbanIP_CscliError
--- PASS: TestUnbanIP_CscliError (0.00s)
=== RUN TestListDecisions_MultipleDecisions
--- PASS: TestListDecisions_MultipleDecisions (0.00s)
=== RUN TestBanIP_InvalidJSON
--- PASS: TestBanIP_InvalidJSON (0.00s)
=== RUN TestDefaultCrowdsecExecutorPidFile
--- PASS: TestDefaultCrowdsecExecutorPidFile (0.00s)
=== RUN TestDefaultCrowdsecExecutorStartStatusStop
--- PASS: TestDefaultCrowdsecExecutorStartStatusStop (0.20s)
=== RUN TestDefaultCrowdsecExecutor_Status_NoPidFile
--- PASS: TestDefaultCrowdsecExecutor_Status_NoPidFile (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Status_InvalidPid
--- PASS: TestDefaultCrowdsecExecutor_Status_InvalidPid (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Status_NonExistentProcess
--- PASS: TestDefaultCrowdsecExecutor_Status_NonExistentProcess (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Stop_NoPidFile
--- PASS: TestDefaultCrowdsecExecutor_Stop_NoPidFile (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Stop_InvalidPid
--- PASS: TestDefaultCrowdsecExecutor_Stop_InvalidPid (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Stop_NonExistentProcess
--- PASS: TestDefaultCrowdsecExecutor_Stop_NonExistentProcess (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Stop_Idempotent
--- PASS: TestDefaultCrowdsecExecutor_Stop_Idempotent (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Start_InvalidBinary
--- PASS: TestDefaultCrowdsecExecutor_Start_InvalidBinary (0.00s)
=== RUN TestDefaultCrowdsecExecutor_isCrowdSecProcess_ValidProcess
--- PASS: TestDefaultCrowdsecExecutor_isCrowdSecProcess_ValidProcess (0.00s)
=== RUN TestDefaultCrowdsecExecutor_isCrowdSecProcess_DifferentProcess
--- PASS: TestDefaultCrowdsecExecutor_isCrowdSecProcess_DifferentProcess (0.00s)
=== RUN TestDefaultCrowdsecExecutor_isCrowdSecProcess_NonExistentProcess
--- PASS: TestDefaultCrowdsecExecutor_isCrowdSecProcess_NonExistentProcess (0.00s)
=== RUN TestDefaultCrowdsecExecutor_isCrowdSecProcess_EmptyCmdline
--- PASS: TestDefaultCrowdsecExecutor_isCrowdSecProcess_EmptyCmdline (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Status_PIDReuse_DifferentProcess
--- PASS: TestDefaultCrowdsecExecutor_Status_PIDReuse_DifferentProcess (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Status_PIDReuse_IsCrowdSec
--- PASS: TestDefaultCrowdsecExecutor_Status_PIDReuse_IsCrowdSec (0.00s)
=== RUN TestDefaultCrowdsecExecutor_Stop_SignalError
--- PASS: TestDefaultCrowdsecExecutor_Stop_SignalError (0.00s)
=== RUN TestTTLRemainingSeconds
=== RUN TestTTLRemainingSeconds/zero_retrieved_time
=== RUN TestTTLRemainingSeconds/zero_ttl
=== RUN TestTTLRemainingSeconds/expired_ttl
=== RUN TestTTLRemainingSeconds/valid_ttl
--- PASS: TestTTLRemainingSeconds (0.00s)
--- PASS: TestTTLRemainingSeconds/zero_retrieved_time (0.00s)
--- PASS: TestTTLRemainingSeconds/zero_ttl (0.00s)
--- PASS: TestTTLRemainingSeconds/expired_ttl (0.00s)
--- PASS: TestTTLRemainingSeconds/valid_ttl (0.00s)
=== RUN TestMapCrowdsecStatus
=== RUN TestMapCrowdsecStatus/no_error
=== RUN TestMapCrowdsecStatus/generic_error
--- PASS: TestMapCrowdsecStatus (0.00s)
--- PASS: TestMapCrowdsecStatus/no_error (0.00s)
--- PASS: TestMapCrowdsecStatus/generic_error (0.00s)
=== RUN TestIsConsoleEnrollmentEnabled
=== RUN TestIsConsoleEnrollmentEnabled/enabled_via_env
=== RUN TestIsConsoleEnrollmentEnabled/disabled_via_env
=== RUN TestIsConsoleEnrollmentEnabled/default_when_not_set
--- PASS: TestIsConsoleEnrollmentEnabled (0.00s)
--- PASS: TestIsConsoleEnrollmentEnabled/enabled_via_env (0.00s)
--- PASS: TestIsConsoleEnrollmentEnabled/disabled_via_env (0.00s)
--- PASS: TestIsConsoleEnrollmentEnabled/default_when_not_set (0.00s)
=== RUN TestActorFromContext
=== RUN TestActorFromContext/with_userID
=== RUN TestActorFromContext/without_userID
--- PASS: TestActorFromContext (0.00s)
--- PASS: TestActorFromContext/with_userID (0.00s)
--- PASS: TestActorFromContext/without_userID (0.00s)
=== RUN TestHubEndpoints
--- PASS: TestHubEndpoints (0.00s)
=== RUN TestGetCachedPreset
--- PASS: TestGetCachedPreset (0.00s)
=== RUN TestGetCachedPreset_NotFound
--- PASS: TestGetCachedPreset_NotFound (0.00s)
=== RUN TestGetLAPIDecisions
--- PASS: TestGetLAPIDecisions (0.01s)
=== RUN TestCheckLAPIHealth
--- PASS: TestCheckLAPIHealth (0.00s)
=== RUN TestListDecisions
--- PASS: TestListDecisions (0.00s)
=== RUN TestBanIP
--- PASS: TestBanIP (0.00s)
=== RUN TestUnbanIP
--- PASS: TestUnbanIP (0.00s)
=== RUN TestGetAcquisitionConfig
--- PASS: TestGetAcquisitionConfig (0.00s)
=== RUN TestUpdateAcquisitionConfig
--- PASS: TestUpdateAcquisitionConfig (0.00s)
=== RUN TestGetLAPIKey
--- PASS: TestGetLAPIKey (0.00s)
=== RUN TestCrowdsec_Start_Error
--- PASS: TestCrowdsec_Start_Error (0.00s)
=== RUN TestCrowdsec_Stop_Error
--- PASS: TestCrowdsec_Stop_Error (0.00s)
=== RUN TestCrowdsec_Status_Error
--- PASS: TestCrowdsec_Status_Error (0.00s)
=== RUN TestCrowdsec_ReadFile_MissingPath
--- PASS: TestCrowdsec_ReadFile_MissingPath (0.00s)
=== RUN TestCrowdsec_ReadFile_PathTraversal
--- PASS: TestCrowdsec_ReadFile_PathTraversal (0.00s)
=== RUN TestCrowdsec_ReadFile_NotFound
--- PASS: TestCrowdsec_ReadFile_NotFound (0.01s)
=== RUN TestCrowdsec_WriteFile_InvalidPayload
--- PASS: TestCrowdsec_WriteFile_InvalidPayload (0.00s)
=== RUN TestCrowdsec_WriteFile_MissingPath
--- PASS: TestCrowdsec_WriteFile_MissingPath (0.01s)
=== RUN TestCrowdsec_WriteFile_PathTraversal
--- PASS: TestCrowdsec_WriteFile_PathTraversal (0.00s)
=== RUN TestCrowdsec_ExportConfig_NotFound
--- PASS: TestCrowdsec_ExportConfig_NotFound (0.00s)
=== RUN TestCrowdsec_ListFiles_EmptyDir
--- PASS: TestCrowdsec_ListFiles_EmptyDir (0.00s)
=== RUN TestCrowdsec_ListFiles_NonExistent
--- PASS: TestCrowdsec_ListFiles_NonExistent (0.00s)
=== RUN TestCrowdsec_ImportConfig_NoFile
--- PASS: TestCrowdsec_ImportConfig_NoFile (0.00s)
=== RUN TestCrowdsec_ReadFile_NestedPath
--- PASS: TestCrowdsec_ReadFile_NestedPath (0.01s)
=== RUN TestCrowdsec_WriteFile_Success
--- PASS: TestCrowdsec_WriteFile_Success (0.00s)
=== RUN TestCrowdsec_ListPresets_Disabled
--- PASS: TestCrowdsec_ListPresets_Disabled (0.00s)
=== RUN TestCrowdsec_ListPresets_Success
--- PASS: TestCrowdsec_ListPresets_Success (0.92s)
=== RUN TestCrowdsec_PullPreset_Validation
--- PASS: TestCrowdsec_PullPreset_Validation (0.01s)
=== RUN TestCrowdsec_ApplyPreset_Validation
--- PASS: TestCrowdsec_ApplyPreset_Validation (0.00s)
=== RUN TestCrowdsecEndpoints
=== PAUSE TestCrowdsecEndpoints
=== RUN TestImportConfig
=== PAUSE TestImportConfig
=== RUN TestImportCreatesBackup
=== PAUSE TestImportCreatesBackup
=== RUN TestExportConfig
=== PAUSE TestExportConfig
=== RUN TestListAndReadFile
=== PAUSE TestListAndReadFile
=== RUN TestExportConfigStreamsArchive
=== PAUSE TestExportConfigStreamsArchive
=== RUN TestWriteFileCreatesBackup
=== PAUSE TestWriteFileCreatesBackup
=== RUN TestListPresetsCerberusDisabled
--- PASS: TestListPresetsCerberusDisabled (0.00s)
=== RUN TestReadFileInvalidPath
=== PAUSE TestReadFileInvalidPath
=== RUN TestWriteFileInvalidPath
=== PAUSE TestWriteFileInvalidPath
=== RUN TestWriteFileMissingPath
=== PAUSE TestWriteFileMissingPath
=== RUN TestWriteFileInvalidPayload
=== PAUSE TestWriteFileInvalidPayload
=== RUN TestImportConfigRequiresFile
=== PAUSE TestImportConfigRequiresFile
=== RUN TestImportConfigRejectsEmptyUpload
=== PAUSE TestImportConfigRejectsEmptyUpload
=== RUN TestListFilesMissingDir
=== PAUSE TestListFilesMissingDir
=== RUN TestListFilesReturnsEntries
=== PAUSE TestListFilesReturnsEntries
=== RUN TestIsCerberusEnabledFromDB
=== PAUSE TestIsCerberusEnabledFromDB
=== RUN TestIsCerberusEnabledInvalidEnv
--- PASS: TestIsCerberusEnabledInvalidEnv (0.00s)
=== RUN TestIsCerberusEnabledLegacyEnv
--- PASS: TestIsCerberusEnabledLegacyEnv (0.00s)
=== RUN TestConsoleEnrollDisabled
--- PASS: TestConsoleEnrollDisabled (0.00s)
=== RUN TestConsoleEnrollServiceUnavailable
--- PASS: TestConsoleEnrollServiceUnavailable (0.00s)
=== RUN TestConsoleEnrollInvalidPayload
--- PASS: TestConsoleEnrollInvalidPayload (0.01s)
=== RUN TestConsoleEnrollSuccess
--- PASS: TestConsoleEnrollSuccess (0.01s)
=== RUN TestConsoleEnrollMissingAgentName
--- PASS: TestConsoleEnrollMissingAgentName (0.01s)
=== RUN TestConsoleStatusDisabled
--- PASS: TestConsoleStatusDisabled (0.00s)
=== RUN TestConsoleStatusServiceUnavailable
--- PASS: TestConsoleStatusServiceUnavailable (0.00s)
=== RUN TestConsoleStatusSuccess
--- PASS: TestConsoleStatusSuccess (0.01s)
=== RUN TestConsoleStatusAfterEnroll
--- PASS: TestConsoleStatusAfterEnroll (0.01s)
=== RUN TestIsConsoleEnrollmentEnabledFromDB
=== PAUSE TestIsConsoleEnrollmentEnabledFromDB
=== RUN TestIsConsoleEnrollmentDisabledFromDB
=== PAUSE TestIsConsoleEnrollmentDisabledFromDB
=== RUN TestIsConsoleEnrollmentEnabledFromEnv
--- PASS: TestIsConsoleEnrollmentEnabledFromEnv (0.00s)
=== RUN TestIsConsoleEnrollmentDisabledFromEnv
--- PASS: TestIsConsoleEnrollmentDisabledFromEnv (0.00s)
=== RUN TestIsConsoleEnrollmentInvalidEnv
--- PASS: TestIsConsoleEnrollmentInvalidEnv (0.00s)
=== RUN TestIsConsoleEnrollmentDefaultDisabled
--- PASS: TestIsConsoleEnrollmentDefaultDisabled (0.00s)
=== RUN TestIsConsoleEnrollmentDBTrueVariants
=== RUN TestIsConsoleEnrollmentDBTrueVariants/true
=== RUN TestIsConsoleEnrollmentDBTrueVariants/TRUE
=== RUN TestIsConsoleEnrollmentDBTrueVariants/True
=== RUN TestIsConsoleEnrollmentDBTrueVariants/1
=== RUN TestIsConsoleEnrollmentDBTrueVariants/yes
=== RUN TestIsConsoleEnrollmentDBTrueVariants/YES
=== RUN TestIsConsoleEnrollmentDBTrueVariants/false
=== RUN TestIsConsoleEnrollmentDBTrueVariants/FALSE
=== RUN TestIsConsoleEnrollmentDBTrueVariants/0
=== RUN TestIsConsoleEnrollmentDBTrueVariants/no
--- PASS: TestIsConsoleEnrollmentDBTrueVariants (0.04s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/true (0.00s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/TRUE (0.01s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/True (0.01s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/1 (0.00s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/yes (0.00s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/YES (0.00s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/false (0.00s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/FALSE (0.00s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/0 (0.00s)
--- PASS: TestIsConsoleEnrollmentDBTrueVariants/no (0.00s)
=== RUN TestRegisterBouncerScriptNotFound
=== PAUSE TestRegisterBouncerScriptNotFound
=== RUN TestRegisterBouncerSuccess
=== PAUSE TestRegisterBouncerSuccess
=== RUN TestRegisterBouncerExecutionError
=== PAUSE TestRegisterBouncerExecutionError
=== RUN TestGetAcquisitionConfigNotFound
=== PAUSE TestGetAcquisitionConfigNotFound
=== RUN TestGetAcquisitionConfigSuccess
=== PAUSE TestGetAcquisitionConfigSuccess
=== RUN TestDeleteConsoleEnrollmentDisabled
--- PASS: TestDeleteConsoleEnrollmentDisabled (0.00s)
=== RUN TestDeleteConsoleEnrollmentServiceUnavailable
--- PASS: TestDeleteConsoleEnrollmentServiceUnavailable (0.00s)
=== RUN TestDeleteConsoleEnrollmentSuccess
--- PASS: TestDeleteConsoleEnrollmentSuccess (0.00s)
=== RUN TestDeleteConsoleEnrollmentNoRecordSuccess
--- PASS: TestDeleteConsoleEnrollmentNoRecordSuccess (0.00s)
=== RUN TestDeleteConsoleEnrollmentThenReenroll
--- PASS: TestDeleteConsoleEnrollmentThenReenroll (0.01s)
=== RUN TestCrowdsecStart_LAPINotReadyTimeout
=== PAUSE TestCrowdsecStart_LAPINotReadyTimeout
=== RUN TestCrowdsecHandler_Status_Error
=== PAUSE TestCrowdsecHandler_Status_Error
=== RUN TestCrowdsecHandler_Start_ExecutorError
=== PAUSE TestCrowdsecHandler_Start_ExecutorError
=== RUN TestCrowdsecHandler_ExportConfig_DirNotFound
=== PAUSE TestCrowdsecHandler_ExportConfig_DirNotFound
=== RUN TestCrowdsecHandler_ReadFile_NotFound
=== PAUSE TestCrowdsecHandler_ReadFile_NotFound
=== RUN TestCrowdsecHandler_ReadFile_MissingPath
=== PAUSE TestCrowdsecHandler_ReadFile_MissingPath
=== RUN TestCrowdsecHandler_ListDecisions_Success
=== PAUSE TestCrowdsecHandler_ListDecisions_Success
=== RUN TestCrowdsecHandler_ListDecisions_Empty
=== PAUSE TestCrowdsecHandler_ListDecisions_Empty
=== RUN TestCrowdsecHandler_ListDecisions_CscliError
=== PAUSE TestCrowdsecHandler_ListDecisions_CscliError
=== RUN TestCrowdsecHandler_ListDecisions_InvalidJSON
=== PAUSE TestCrowdsecHandler_ListDecisions_InvalidJSON
=== RUN TestCrowdsecHandler_BanIP_Success
=== PAUSE TestCrowdsecHandler_BanIP_Success
=== RUN TestCrowdsecHandler_BanIP_MissingIP
=== PAUSE TestCrowdsecHandler_BanIP_MissingIP
=== RUN TestCrowdsecHandler_BanIP_EmptyIP
=== PAUSE TestCrowdsecHandler_BanIP_EmptyIP
=== RUN TestCrowdsecHandler_BanIP_DefaultDuration
=== PAUSE TestCrowdsecHandler_BanIP_DefaultDuration
=== RUN TestCrowdsecHandler_UnbanIP_Success
=== PAUSE TestCrowdsecHandler_UnbanIP_Success
=== RUN TestCrowdsecHandler_UnbanIP_Error
=== PAUSE TestCrowdsecHandler_UnbanIP_Error
=== RUN TestCrowdsecHandler_BanIP_ExecutionError
=== PAUSE TestCrowdsecHandler_BanIP_ExecutionError
=== RUN TestCrowdsecHandler_CheckLAPIHealth_InvalidURL
=== PAUSE TestCrowdsecHandler_CheckLAPIHealth_InvalidURL
=== RUN TestCrowdsecHandler_GetLAPIDecisions_Fallback
=== PAUSE TestCrowdsecHandler_GetLAPIDecisions_Fallback
=== RUN TestCrowdsecHandler_PullPreset_CerberusDisabled
--- PASS: TestCrowdsecHandler_PullPreset_CerberusDisabled (0.00s)
=== RUN TestCrowdsecHandler_PullPreset_InvalidPayload
--- PASS: TestCrowdsecHandler_PullPreset_InvalidPayload (0.00s)
=== RUN TestCrowdsecHandler_PullPreset_EmptySlug
--- PASS: TestCrowdsecHandler_PullPreset_EmptySlug (0.00s)
=== RUN TestCrowdsecHandler_PullPreset_HubUnavailable
--- PASS: TestCrowdsecHandler_PullPreset_HubUnavailable (0.00s)
=== RUN TestCrowdsecHandler_ApplyPreset_CerberusDisabled
--- PASS: TestCrowdsecHandler_ApplyPreset_CerberusDisabled (0.00s)
=== RUN TestCrowdsecHandler_ApplyPreset_InvalidPayload
--- PASS: TestCrowdsecHandler_ApplyPreset_InvalidPayload (0.01s)
=== RUN TestCrowdsecHandler_ApplyPreset_EmptySlug
--- PASS: TestCrowdsecHandler_ApplyPreset_EmptySlug (0.00s)
=== RUN TestCrowdsecHandler_ApplyPreset_HubUnavailable
--- PASS: TestCrowdsecHandler_ApplyPreset_HubUnavailable (0.00s)
=== RUN TestCrowdsecHandler_UpdateAcquisitionConfig_MissingContent
=== PAUSE TestCrowdsecHandler_UpdateAcquisitionConfig_MissingContent
=== RUN TestCrowdsecHandler_UpdateAcquisitionConfig_InvalidJSON
=== PAUSE TestCrowdsecHandler_UpdateAcquisitionConfig_InvalidJSON
=== RUN TestCrowdsecHandler_ListDecisions_WithConfigYaml
=== PAUSE TestCrowdsecHandler_ListDecisions_WithConfigYaml
=== RUN TestCrowdsecHandler_BanIP_WithConfigYaml
=== PAUSE TestCrowdsecHandler_BanIP_WithConfigYaml
=== RUN TestCrowdsecHandler_UnbanIP_WithConfigYaml
=== PAUSE TestCrowdsecHandler_UnbanIP_WithConfigYaml
=== RUN TestCrowdsecHandler_Status_LAPIReady
=== PAUSE TestCrowdsecHandler_Status_LAPIReady
=== RUN TestCrowdsecHandler_Status_LAPINotReady
=== PAUSE TestCrowdsecHandler_Status_LAPINotReady
=== RUN TestCrowdsecHandler_ListDecisions_WithCreatedAt
=== PAUSE TestCrowdsecHandler_ListDecisions_WithCreatedAt
=== RUN TestCrowdsecHandler_HubEndpoints
=== PAUSE TestCrowdsecHandler_HubEndpoints
=== RUN TestCrowdsecHandler_ConsoleEnroll_ProgressConflict
--- PASS: TestCrowdsecHandler_ConsoleEnroll_ProgressConflict (0.01s)
=== RUN TestCrowdsecHandler_GetCachedPreset_CerberusDisabled
--- PASS: TestCrowdsecHandler_GetCachedPreset_CerberusDisabled (0.00s)
=== RUN TestCrowdsecHandler_GetCachedPreset_HubUnavailable
--- PASS: TestCrowdsecHandler_GetCachedPreset_HubUnavailable (0.00s)
=== RUN TestCrowdsecHandler_GetCachedPreset_EmptySlug
--- PASS: TestCrowdsecHandler_GetCachedPreset_EmptySlug (0.00s)
=== RUN TestGetLAPIDecisions_FallbackToCscli
--- PASS: TestGetLAPIDecisions_FallbackToCscli (0.00s)
=== RUN TestGetLAPIDecisions_EmptyResponse
--- PASS: TestGetLAPIDecisions_EmptyResponse (0.00s)
=== RUN TestCheckLAPIHealth_Handler
--- PASS: TestCheckLAPIHealth_Handler (0.00s)
=== RUN TestGetLAPIKey_FromEnv
--- PASS: TestGetLAPIKey_FromEnv (0.00s)
=== RUN TestGetLAPIKey_Empty
--- PASS: TestGetLAPIKey_Empty (0.00s)
=== RUN TestListPresetsIncludesCacheAndIndex
--- PASS: TestListPresetsIncludesCacheAndIndex (0.01s)
=== RUN TestPullPresetHandlerSuccess
--- PASS: TestPullPresetHandlerSuccess (0.01s)
=== RUN TestApplyPresetHandlerAudits
--- PASS: TestApplyPresetHandlerAudits (0.02s)
=== RUN TestPullPresetHandlerHubError
--- PASS: TestPullPresetHandlerHubError (0.00s)
=== RUN TestPullPresetHandlerTimeout
--- PASS: TestPullPresetHandlerTimeout (0.00s)
=== RUN TestGetCachedPresetNotFound
--- PASS: TestGetCachedPresetNotFound (0.00s)
=== RUN TestGetCachedPresetServiceUnavailable
--- PASS: TestGetCachedPresetServiceUnavailable (0.00s)
=== RUN TestApplyPresetHandlerBackupFailure
--- PASS: TestApplyPresetHandlerBackupFailure (0.00s)
=== RUN TestListPresetsMergesCuratedAndHub
--- PASS: TestListPresetsMergesCuratedAndHub (0.01s)
=== RUN TestGetCachedPresetSuccess
--- PASS: TestGetCachedPresetSuccess (0.00s)
=== RUN TestGetCachedPresetSlugRequired
--- PASS: TestGetCachedPresetSlugRequired (0.00s)
=== RUN TestGetCachedPresetPreviewError
--- PASS: TestGetCachedPresetPreviewError (0.00s)
=== RUN TestPullCuratedPresetSkipsHub
--- PASS: TestPullCuratedPresetSkipsHub (0.00s)
=== RUN TestApplyCuratedPresetSkipsHub
--- PASS: TestApplyCuratedPresetSkipsHub (0.00s)
=== RUN TestPullThenApplyIntegration
crowdsec_pull_apply_integration_test.go:67: User pulls preset
crowdsec_pull_apply_integration_test.go:83: Pull succeeded, cache_key: test/preset-1768011471
crowdsec_pull_apply_integration_test.go:90: Cache verified, slug: test/preset
crowdsec_pull_apply_integration_test.go:93: User applies preset
crowdsec_pull_apply_integration_test.go:109: Apply succeeded, backup: /tmp/TestPullThenApplyIntegration893046683/002.backup.20260110-021751
--- PASS: TestPullThenApplyIntegration (0.01s)
=== RUN TestApplyWithoutPullReturnsProperError
crowdsec_pull_apply_integration_test.go:138: User tries to apply preset without pulling first
crowdsec_pull_apply_integration_test.go:154: Proper error message returned: Preset cache missing or expired. Pull the preset again, then retry apply.
--- PASS: TestApplyWithoutPullReturnsProperError (0.01s)
=== RUN TestApplyRollbackWhenCacheMissingAndRepullFails
--- PASS: TestApplyRollbackWhenCacheMissingAndRepullFails (0.01s)
=== RUN TestStartSyncsSettingsTable
--- PASS: TestStartSyncsSettingsTable (60.13s)
=== RUN TestStopSyncsSettingsTable
--- PASS: TestStopSyncsSettingsTable (60.13s)
=== RUN TestStartAndStopStateConsistency
--- PASS: TestStartAndStopStateConsistency (180.39s)
=== RUN TestExistingSettingIsUpdated
--- PASS: TestExistingSettingIsUpdated (60.13s)
=== RUN TestStartFailureRevertsSettings
--- PASS: TestStartFailureRevertsSettings (0.01s)
=== RUN TestStatusResponseFormat
--- PASS: TestStatusResponseFormat (0.01s)
=== RUN TestCrowdsecHandler_Stop_Success
--- PASS: TestCrowdsecHandler_Stop_Success (0.01s)
=== RUN TestCrowdsecHandler_Stop_Error
--- PASS: TestCrowdsecHandler_Stop_Error (0.00s)
=== RUN TestCrowdsecHandler_Stop_NoSecurityConfig
--- PASS: TestCrowdsecHandler_Stop_NoSecurityConfig (0.00s)
=== RUN TestGetLAPIDecisions_WithMockServer
--- PASS: TestGetLAPIDecisions_WithMockServer (0.01s)
=== RUN TestGetLAPIDecisions_Unauthorized
--- PASS: TestGetLAPIDecisions_Unauthorized (0.01s)
=== RUN TestGetLAPIDecisions_NullResponse
--- PASS: TestGetLAPIDecisions_NullResponse (0.00s)
=== RUN TestGetLAPIDecisions_NonJSONContentType
--- PASS: TestGetLAPIDecisions_NonJSONContentType (0.01s)
=== RUN TestCheckLAPIHealth_WithMockServer
--- PASS: TestCheckLAPIHealth_WithMockServer (0.00s)
=== RUN TestCheckLAPIHealth_FallbackToDecisions
--- PASS: TestCheckLAPIHealth_FallbackToDecisions (0.01s)
=== RUN TestGetLAPIKey_AllEnvVars
=== RUN TestGetLAPIKey_AllEnvVars/CROWDSEC_API_KEY
=== RUN TestGetLAPIKey_AllEnvVars/CROWDSEC_BOUNCER_API_KEY
=== RUN TestGetLAPIKey_AllEnvVars/CERBERUS_SECURITY_CROWDSEC_API_KEY
=== RUN TestGetLAPIKey_AllEnvVars/CHARON_SECURITY_CROWDSEC_API_KEY
=== RUN TestGetLAPIKey_AllEnvVars/CPM_SECURITY_CROWDSEC_API_KEY
--- PASS: TestGetLAPIKey_AllEnvVars (0.00s)
--- PASS: TestGetLAPIKey_AllEnvVars/CROWDSEC_API_KEY (0.00s)
--- PASS: TestGetLAPIKey_AllEnvVars/CROWDSEC_BOUNCER_API_KEY (0.00s)
--- PASS: TestGetLAPIKey_AllEnvVars/CERBERUS_SECURITY_CROWDSEC_API_KEY (0.00s)
--- PASS: TestGetLAPIKey_AllEnvVars/CHARON_SECURITY_CROWDSEC_API_KEY (0.00s)
--- PASS: TestGetLAPIKey_AllEnvVars/CPM_SECURITY_CROWDSEC_API_KEY (0.00s)
=== RUN TestDBHealthHandler_Check_Healthy
--- PASS: TestDBHealthHandler_Check_Healthy (0.00s)
=== RUN TestDBHealthHandler_Check_WithBackupService
--- PASS: TestDBHealthHandler_Check_WithBackupService (0.00s)
=== RUN TestDBHealthHandler_Check_WALMode
--- PASS: TestDBHealthHandler_Check_WALMode (0.01s)
=== RUN TestDBHealthHandler_ResponseJSONTags
--- PASS: TestDBHealthHandler_ResponseJSONTags (0.00s)
=== RUN TestNewDBHealthHandler
--- PASS: TestNewDBHealthHandler (0.00s)
=== RUN TestDBHealthHandler_Check_CorruptedDatabase
2026/01/10 02:23:52 /projects/Charon/backend/internal/database/database.go:57 database disk image is malformed
[0.125ms] [rows:1] PRAGMA quick_check
2026/01/10 02:23:52 /projects/Charon/backend/internal/database/errors.go:63 database disk image is malformed
[0.092ms] [rows:1] PRAGMA quick_check
--- PASS: TestDBHealthHandler_Check_CorruptedDatabase (0.01s)
=== RUN TestDBHealthHandler_Check_BackupServiceError
--- PASS: TestDBHealthHandler_Check_BackupServiceError (0.00s)
=== RUN TestDBHealthHandler_Check_BackupTimeZero
--- PASS: TestDBHealthHandler_Check_BackupTimeZero (0.00s)
=== RUN TestNewDNSDetectionHandler
--- PASS: TestNewDNSDetectionHandler (0.00s)
=== RUN TestDetect_Success
=== RUN TestDetect_Success/successful_detection_without_configured_provider
=== RUN TestDetect_Success/successful_detection_with_configured_provider
=== RUN TestDetect_Success/detection_not_found
--- PASS: TestDetect_Success (0.00s)
--- PASS: TestDetect_Success/successful_detection_without_configured_provider (0.00s)
--- PASS: TestDetect_Success/successful_detection_with_configured_provider (0.00s)
--- PASS: TestDetect_Success/detection_not_found (0.00s)
=== RUN TestDetect_ValidationErrors
=== RUN TestDetect_ValidationErrors/missing_domain
=== RUN TestDetect_ValidationErrors/invalid_JSON
--- PASS: TestDetect_ValidationErrors (0.00s)
--- PASS: TestDetect_ValidationErrors/missing_domain (0.00s)
--- PASS: TestDetect_ValidationErrors/invalid_JSON (0.00s)
=== RUN TestDetect_ServiceError
--- PASS: TestDetect_ServiceError (0.00s)
=== RUN TestGetPatterns
--- PASS: TestGetPatterns (0.00s)
=== RUN TestDetect_WildcardDomain
--- PASS: TestDetect_WildcardDomain (0.00s)
=== RUN TestDetect_LowConfidence
--- PASS: TestDetect_LowConfidence (0.00s)
=== RUN TestDetect_DNSLookupError
--- PASS: TestDetect_DNSLookupError (0.00s)
=== RUN TestDetectRequest_Binding
=== RUN TestDetectRequest_Binding/valid_request
=== RUN TestDetectRequest_Binding/missing_domain
=== RUN TestDetectRequest_Binding/empty_domain
=== RUN TestDetectRequest_Binding/invalid_JSON
--- PASS: TestDetectRequest_Binding (0.00s)
--- PASS: TestDetectRequest_Binding/valid_request (0.00s)
--- PASS: TestDetectRequest_Binding/missing_domain (0.00s)
--- PASS: TestDetectRequest_Binding/empty_domain (0.00s)
--- PASS: TestDetectRequest_Binding/invalid_JSON (0.00s)
=== RUN TestDNSProviderHandler_List
=== RUN TestDNSProviderHandler_List/success
=== RUN TestDNSProviderHandler_List/service_error
--- PASS: TestDNSProviderHandler_List (0.00s)
--- PASS: TestDNSProviderHandler_List/success (0.00s)
--- PASS: TestDNSProviderHandler_List/service_error (0.00s)
=== RUN TestDNSProviderHandler_Get
=== RUN TestDNSProviderHandler_Get/success
=== RUN TestDNSProviderHandler_Get/not_found
=== RUN TestDNSProviderHandler_Get/invalid_id
--- PASS: TestDNSProviderHandler_Get (0.00s)
--- PASS: TestDNSProviderHandler_Get/success (0.00s)
--- PASS: TestDNSProviderHandler_Get/not_found (0.00s)
--- PASS: TestDNSProviderHandler_Get/invalid_id (0.00s)
=== RUN TestDNSProviderHandler_Create
=== RUN TestDNSProviderHandler_Create/success
=== RUN TestDNSProviderHandler_Create/validation_error
=== RUN TestDNSProviderHandler_Create/invalid_provider_type
=== RUN TestDNSProviderHandler_Create/invalid_credentials
--- PASS: TestDNSProviderHandler_Create (0.00s)
--- PASS: TestDNSProviderHandler_Create/success (0.00s)
--- PASS: TestDNSProviderHandler_Create/validation_error (0.00s)
--- PASS: TestDNSProviderHandler_Create/invalid_provider_type (0.00s)
--- PASS: TestDNSProviderHandler_Create/invalid_credentials (0.00s)
=== RUN TestDNSProviderHandler_Update
=== RUN TestDNSProviderHandler_Update/success
=== RUN TestDNSProviderHandler_Update/not_found
--- PASS: TestDNSProviderHandler_Update (0.00s)
--- PASS: TestDNSProviderHandler_Update/success (0.00s)
--- PASS: TestDNSProviderHandler_Update/not_found (0.00s)
=== RUN TestDNSProviderHandler_Delete
=== RUN TestDNSProviderHandler_Delete/success
=== RUN TestDNSProviderHandler_Delete/not_found
--- PASS: TestDNSProviderHandler_Delete (0.00s)
--- PASS: TestDNSProviderHandler_Delete/success (0.00s)
--- PASS: TestDNSProviderHandler_Delete/not_found (0.00s)
=== RUN TestDNSProviderHandler_Test
=== RUN TestDNSProviderHandler_Test/success
=== RUN TestDNSProviderHandler_Test/not_found
--- PASS: TestDNSProviderHandler_Test (0.00s)
--- PASS: TestDNSProviderHandler_Test/success (0.00s)
--- PASS: TestDNSProviderHandler_Test/not_found (0.00s)
=== RUN TestDNSProviderHandler_TestCredentials
=== RUN TestDNSProviderHandler_TestCredentials/success
=== RUN TestDNSProviderHandler_TestCredentials/validation_error
--- PASS: TestDNSProviderHandler_TestCredentials (0.00s)
--- PASS: TestDNSProviderHandler_TestCredentials/success (0.00s)
--- PASS: TestDNSProviderHandler_TestCredentials/validation_error (0.00s)
=== RUN TestDNSProviderHandler_GetTypes
--- PASS: TestDNSProviderHandler_GetTypes (0.00s)
=== RUN TestDNSProviderHandler_CredentialsNeverExposed
=== RUN TestDNSProviderHandler_CredentialsNeverExposed/Get_endpoint
=== RUN TestDNSProviderHandler_CredentialsNeverExposed/List_endpoint
--- PASS: TestDNSProviderHandler_CredentialsNeverExposed (0.00s)
--- PASS: TestDNSProviderHandler_CredentialsNeverExposed/Get_endpoint (0.00s)
--- PASS: TestDNSProviderHandler_CredentialsNeverExposed/List_endpoint (0.00s)
=== RUN TestDNSProviderHandler_UpdateInvalidID
--- PASS: TestDNSProviderHandler_UpdateInvalidID (0.00s)
=== RUN TestDNSProviderHandler_DeleteInvalidID
--- PASS: TestDNSProviderHandler_DeleteInvalidID (0.00s)
=== RUN TestDNSProviderHandler_TestInvalidID
--- PASS: TestDNSProviderHandler_TestInvalidID (0.00s)
=== RUN TestDNSProviderHandler_CreateEncryptionFailure
--- PASS: TestDNSProviderHandler_CreateEncryptionFailure (0.00s)
=== RUN TestDNSProviderHandler_UpdateEncryptionFailure
--- PASS: TestDNSProviderHandler_UpdateEncryptionFailure (0.00s)
=== RUN TestDNSProviderHandler_GetServiceError
--- PASS: TestDNSProviderHandler_GetServiceError (0.00s)
=== RUN TestDNSProviderHandler_DeleteServiceError
--- PASS: TestDNSProviderHandler_DeleteServiceError (0.00s)
=== RUN TestDNSProviderHandler_TestServiceError
--- PASS: TestDNSProviderHandler_TestServiceError (0.00s)
=== RUN TestDNSProviderHandler_TestCredentialsServiceError
--- PASS: TestDNSProviderHandler_TestCredentialsServiceError (0.00s)
=== RUN TestDNSProviderHandler_UpdateInvalidCredentials
--- PASS: TestDNSProviderHandler_UpdateInvalidCredentials (0.00s)
=== RUN TestDNSProviderHandler_UpdateBindJSONError
--- PASS: TestDNSProviderHandler_UpdateBindJSONError (0.00s)
=== RUN TestDNSProviderHandler_UpdateGenericError
--- PASS: TestDNSProviderHandler_UpdateGenericError (0.00s)
=== RUN TestDNSProviderHandler_CreateGenericError
--- PASS: TestDNSProviderHandler_CreateGenericError (0.00s)
=== RUN TestDockerHandler_ListContainers_InvalidHostRejected
--- PASS: TestDockerHandler_ListContainers_InvalidHostRejected (0.00s)
=== RUN TestDockerHandler_ListContainers_DockerUnavailableMappedTo503
--- PASS: TestDockerHandler_ListContainers_DockerUnavailableMappedTo503 (0.00s)
=== RUN TestDockerHandler_ListContainers_ServerIDResolvesToTCPHost
--- PASS: TestDockerHandler_ListContainers_ServerIDResolvesToTCPHost (0.00s)
=== RUN TestDockerHandler_ListContainers_ServerIDNotFoundReturns404
--- PASS: TestDockerHandler_ListContainers_ServerIDNotFoundReturns404 (0.00s)
=== RUN TestDockerHandler_ListContainers_Local
--- PASS: TestDockerHandler_ListContainers_Local (0.00s)
=== RUN TestDockerHandler_ListContainers_RemoteServerSuccess
--- PASS: TestDockerHandler_ListContainers_RemoteServerSuccess (0.00s)
=== RUN TestDockerHandler_ListContainers_RemoteServerNotFound
--- PASS: TestDockerHandler_ListContainers_RemoteServerNotFound (0.00s)
=== RUN TestDockerHandler_ListContainers_InvalidHost
=== RUN TestDockerHandler_ListContainers_InvalidHost/arbitrary_IP
=== RUN TestDockerHandler_ListContainers_InvalidHost/tcp_URL
=== RUN TestDockerHandler_ListContainers_InvalidHost/unix_socket
=== RUN TestDockerHandler_ListContainers_InvalidHost/http_URL
--- PASS: TestDockerHandler_ListContainers_InvalidHost (0.00s)
--- PASS: TestDockerHandler_ListContainers_InvalidHost/arbitrary_IP (0.00s)
--- PASS: TestDockerHandler_ListContainers_InvalidHost/tcp_URL (0.00s)
--- PASS: TestDockerHandler_ListContainers_InvalidHost/unix_socket (0.00s)
--- PASS: TestDockerHandler_ListContainers_InvalidHost/http_URL (0.00s)
=== RUN TestDockerHandler_ListContainers_DockerUnavailable
=== RUN TestDockerHandler_ListContainers_DockerUnavailable/daemon_not_running
=== RUN TestDockerHandler_ListContainers_DockerUnavailable/socket_permission_denied
=== RUN TestDockerHandler_ListContainers_DockerUnavailable/socket_not_found
--- PASS: TestDockerHandler_ListContainers_DockerUnavailable (0.00s)
--- PASS: TestDockerHandler_ListContainers_DockerUnavailable/daemon_not_running (0.00s)
--- PASS: TestDockerHandler_ListContainers_DockerUnavailable/socket_permission_denied (0.00s)
--- PASS: TestDockerHandler_ListContainers_DockerUnavailable/socket_not_found (0.00s)
=== RUN TestDockerHandler_ListContainers_GenericError
=== RUN TestDockerHandler_ListContainers_GenericError/API_error
=== RUN TestDockerHandler_ListContainers_GenericError/context_cancelled
=== RUN TestDockerHandler_ListContainers_GenericError/unknown_error
--- PASS: TestDockerHandler_ListContainers_GenericError (0.00s)
--- PASS: TestDockerHandler_ListContainers_GenericError/API_error (0.00s)
--- PASS: TestDockerHandler_ListContainers_GenericError/context_cancelled (0.00s)
--- PASS: TestDockerHandler_ListContainers_GenericError/unknown_error (0.00s)
=== RUN TestDomainLifecycle
--- PASS: TestDomainLifecycle (0.01s)
=== RUN TestDomainErrors
--- PASS: TestDomainErrors (0.01s)
=== RUN TestDomainDelete_NotFound
2026/01/10 02:23:52 /projects/Charon/backend/internal/api/handlers/domain_handler.go:73 record not found
[0.094ms] [rows:0] SELECT * FROM `domains` WHERE uuid = "nonexistent-uuid" AND `domains`.`deleted_at` IS NULL ORDER BY `domains`.`id` LIMIT 1
--- PASS: TestDomainDelete_NotFound (0.01s)
=== RUN TestDomainCreate_Duplicate
2026/01/10 02:23:52 /projects/Charon/backend/internal/api/handlers/domain_handler.go:49 UNIQUE constraint failed: domains.name
[0.211ms] [rows:0] INSERT INTO `domains` (`uuid`,`name`,`created_at`,`updated_at`,`deleted_at`) VALUES ("072e12ad-e893-484b-809c-c89d1c1a1dd5","duplicate.com","2026-01-10 02:23:52.233","2026-01-10 02:23:52.233",NULL) RETURNING `id`
--- PASS: TestDomainCreate_Duplicate (0.01s)
=== RUN TestDomainList_Empty
--- PASS: TestDomainList_Empty (0.01s)
=== RUN TestDomainCreate_LongName
--- PASS: TestDomainCreate_LongName (0.01s)
=== RUN TestEncryptionHandler_GetStatus
=== RUN TestEncryptionHandler_GetStatus/admin_can_get_status
=== RUN TestEncryptionHandler_GetStatus/non-admin_cannot_get_status
=== RUN TestEncryptionHandler_GetStatus/status_shows_next_key_when_configured
=== RUN TestEncryptionHandler_GetStatus/status_error_when_database_unavailable
2026/01/10 02:23:52 /projects/Charon/backend/internal/crypto/rotation_service.go:272 sql: database is closed
[0.041ms] [rows:0] SELECT `key_version` FROM `dns_providers`
--- PASS: TestEncryptionHandler_GetStatus (0.04s)
--- PASS: TestEncryptionHandler_GetStatus/admin_can_get_status (0.00s)
--- PASS: TestEncryptionHandler_GetStatus/non-admin_cannot_get_status (0.00s)
--- PASS: TestEncryptionHandler_GetStatus/status_shows_next_key_when_configured (0.00s)
--- PASS: TestEncryptionHandler_GetStatus/status_error_when_database_unavailable (0.00s)
=== RUN TestEncryptionHandler_Rotate
=== RUN TestEncryptionHandler_Rotate/admin_can_trigger_rotation
=== RUN TestEncryptionHandler_Rotate/non-admin_cannot_trigger_rotation
=== RUN TestEncryptionHandler_Rotate/rotation_fails_without_next_key
--- PASS: TestEncryptionHandler_Rotate (0.06s)
--- PASS: TestEncryptionHandler_Rotate/admin_can_trigger_rotation (0.02s)
--- PASS: TestEncryptionHandler_Rotate/non-admin_cannot_trigger_rotation (0.00s)
--- PASS: TestEncryptionHandler_Rotate/rotation_fails_without_next_key (0.00s)
=== RUN TestEncryptionHandler_GetHistory
=== RUN TestEncryptionHandler_GetHistory/admin_can_get_history
=== RUN TestEncryptionHandler_GetHistory/non-admin_cannot_get_history
=== RUN TestEncryptionHandler_GetHistory/supports_pagination
=== RUN TestEncryptionHandler_GetHistory/history_error_when_service_fails
2026/01/10 02:23:52 /projects/Charon/backend/internal/services/security_service.go:305 sql: database is closed
[0.049ms] [rows:0] SELECT count(*) FROM `security_audits` WHERE event_category = "encryption"
--- PASS: TestEncryptionHandler_GetHistory (0.07s)
--- PASS: TestEncryptionHandler_GetHistory/admin_can_get_history (0.00s)
--- PASS: TestEncryptionHandler_GetHistory/non-admin_cannot_get_history (0.00s)
--- PASS: TestEncryptionHandler_GetHistory/supports_pagination (0.00s)
--- PASS: TestEncryptionHandler_GetHistory/history_error_when_service_fails (0.03s)
=== RUN TestEncryptionHandler_Validate
=== RUN TestEncryptionHandler_Validate/admin_can_validate_keys
=== RUN TestEncryptionHandler_Validate/non-admin_cannot_validate_keys
=== RUN TestEncryptionHandler_Validate/validation_fails_with_invalid_key_configuration
--- PASS: TestEncryptionHandler_Validate (0.05s)
--- PASS: TestEncryptionHandler_Validate/admin_can_validate_keys (0.01s)
--- PASS: TestEncryptionHandler_Validate/non-admin_cannot_validate_keys (0.00s)
--- PASS: TestEncryptionHandler_Validate/validation_fails_with_invalid_key_configuration (0.00s)
=== RUN TestEncryptionHandler_IntegrationFlow
=== RUN TestEncryptionHandler_IntegrationFlow/complete_rotation_workflow
--- PASS: TestEncryptionHandler_IntegrationFlow (0.10s)
--- PASS: TestEncryptionHandler_IntegrationFlow/complete_rotation_workflow (0.06s)
=== RUN TestEncryptionHandler_HelperFunctions
=== RUN TestEncryptionHandler_HelperFunctions/isAdmin_with_invalid_role_type
=== RUN TestEncryptionHandler_HelperFunctions/getActorFromGinContext_with_string_user_id
=== RUN TestEncryptionHandler_HelperFunctions/getActorFromGinContext_with_uint_user_id
=== RUN TestEncryptionHandler_HelperFunctions/getActorFromGinContext_without_user_id_returns_system
--- PASS: TestEncryptionHandler_HelperFunctions (0.00s)
--- PASS: TestEncryptionHandler_HelperFunctions/isAdmin_with_invalid_role_type (0.00s)
--- PASS: TestEncryptionHandler_HelperFunctions/getActorFromGinContext_with_string_user_id (0.00s)
--- PASS: TestEncryptionHandler_HelperFunctions/getActorFromGinContext_with_uint_user_id (0.00s)
--- PASS: TestEncryptionHandler_HelperFunctions/getActorFromGinContext_without_user_id_returns_system (0.00s)
=== RUN TestEncryptionHandler_RefreshKey_RotatesCredentials
--- PASS: TestEncryptionHandler_RefreshKey_RotatesCredentials (0.06s)
=== RUN TestEncryptionHandler_RefreshKey_FailsWithoutProvider
--- PASS: TestEncryptionHandler_RefreshKey_FailsWithoutProvider (0.03s)
=== RUN TestEncryptionHandler_RefreshKey_InvalidOldKey
Failed to rotate provider 1 (Test Provider): failed to decrypt credentials: failed to decrypt with version 1 or any fallback version
--- PASS: TestEncryptionHandler_RefreshKey_InvalidOldKey (0.06s)
=== RUN TestEncryptionHandler_GetActorFromGinContext_InvalidType
--- PASS: TestEncryptionHandler_GetActorFromGinContext_InvalidType (0.00s)
=== RUN TestEncryptionHandler_RotateWithPartialFailures
Failed to rotate provider 2 (Invalid Provider): failed to decrypt credentials: failed to decrypt with version 1 or any fallback version
--- PASS: TestEncryptionHandler_RotateWithPartialFailures (0.05s)
=== RUN TestEncryptionHandler_isAdmin_NoRoleSet
--- PASS: TestEncryptionHandler_isAdmin_NoRoleSet (0.00s)
=== RUN TestEncryptionHandler_isAdmin_NonAdminRole
--- PASS: TestEncryptionHandler_isAdmin_NonAdminRole (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_DBPrecedence
--- PASS: TestFeatureFlagsHandler_GetFlags_DBPrecedence (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_EnvFallback
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvFallback (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_EnvShortForm
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvShortForm (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_EnvNumeric
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvNumeric (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_DefaultTrue
--- PASS: TestFeatureFlagsHandler_GetFlags_DefaultTrue (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_AllDefaultFlagsPresent
--- PASS: TestFeatureFlagsHandler_GetFlags_AllDefaultFlagsPresent (0.00s)
=== RUN TestFeatureFlagsHandler_UpdateFlags_Success
--- PASS: TestFeatureFlagsHandler_UpdateFlags_Success (0.00s)
=== RUN TestFeatureFlagsHandler_UpdateFlags_Upsert
--- PASS: TestFeatureFlagsHandler_UpdateFlags_Upsert (0.00s)
=== RUN TestFeatureFlagsHandler_UpdateFlags_InvalidJSON
--- PASS: TestFeatureFlagsHandler_UpdateFlags_InvalidJSON (0.00s)
=== RUN TestFeatureFlagsHandler_UpdateFlags_OnlyAllowedKeys
--- PASS: TestFeatureFlagsHandler_UpdateFlags_OnlyAllowedKeys (0.00s)
=== RUN TestFeatureFlagsHandler_UpdateFlags_EmptyPayload
--- PASS: TestFeatureFlagsHandler_UpdateFlags_EmptyPayload (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/lowercase_true
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/uppercase_TRUE
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/mixed_case_True
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/numeric_1
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/yes
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/YES_uppercase
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/lowercase_false
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/numeric_0
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/no
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/empty_string
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/random_string
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/whitespace_padded_true
=== RUN TestFeatureFlagsHandler_GetFlags_DBValueVariants/whitespace_padded_false
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants (0.04s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/lowercase_true (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/uppercase_TRUE (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/mixed_case_True (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/numeric_1 (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/yes (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/YES_uppercase (0.01s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/lowercase_false (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/numeric_0 (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/no (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/empty_string (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/random_string (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/whitespace_padded_true (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_DBValueVariants/whitespace_padded_false (0.00s)
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants/true_string
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants/TRUE_uppercase
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants/1_numeric
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants/false_string
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants/FALSE_uppercase
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants/0_numeric
=== RUN TestFeatureFlagsHandler_GetFlags_EnvValueVariants/invalid_value_defaults_to_numeric_check
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants (0.03s)
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants/true_string (0.01s)
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants/TRUE_uppercase (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants/1_numeric (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants/false_string (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants/FALSE_uppercase (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants/0_numeric (0.00s)
--- PASS: TestFeatureFlagsHandler_GetFlags_EnvValueVariants/invalid_value_defaults_to_numeric_check (0.00s)
=== RUN TestFeatureFlagsHandler_UpdateFlags_BoolValues
=== RUN TestFeatureFlagsHandler_UpdateFlags_BoolValues/true
=== RUN TestFeatureFlagsHandler_UpdateFlags_BoolValues/false
--- PASS: TestFeatureFlagsHandler_UpdateFlags_BoolValues (0.00s)
--- PASS: TestFeatureFlagsHandler_UpdateFlags_BoolValues/true (0.00s)
--- PASS: TestFeatureFlagsHandler_UpdateFlags_BoolValues/false (0.00s)
=== RUN TestFeatureFlagsHandler_NewFeatureFlagsHandler
--- PASS: TestFeatureFlagsHandler_NewFeatureFlagsHandler (0.00s)
=== RUN TestFeatureFlags_GetAndUpdate
--- PASS: TestFeatureFlags_GetAndUpdate (0.00s)
=== RUN TestFeatureFlags_EnvFallback
--- PASS: TestFeatureFlags_EnvFallback (0.00s)
=== RUN TestHealthHandler
--- PASS: TestHealthHandler (0.00s)
=== RUN TestGetLocalIP
health_handler_test.go:36: getLocalIP returned: "217.15.170.144"
--- PASS: TestGetLocalIP (0.00s)
=== RUN TestIsSafePathUnderBase
--- PASS: TestIsSafePathUnderBase (0.00s)
=== RUN TestImportUploadSanitizesFilename
--- PASS: TestImportUploadSanitizesFilename (0.00s)
=== RUN TestLogsHandler_Read_FilterBySearch
--- PASS: TestLogsHandler_Read_FilterBySearch (0.00s)
=== RUN TestLogsHandler_Read_FilterByHost
--- PASS: TestLogsHandler_Read_FilterByHost (0.00s)
=== RUN TestLogsHandler_Read_FilterByLevel
--- PASS: TestLogsHandler_Read_FilterByLevel (0.00s)
=== RUN TestLogsHandler_Read_FilterByStatus
--- PASS: TestLogsHandler_Read_FilterByStatus (0.00s)
=== RUN TestLogsHandler_Read_SortAsc
--- PASS: TestLogsHandler_Read_SortAsc (0.00s)
=== RUN TestLogsHandler_List_DirectoryIsFile
--- PASS: TestLogsHandler_List_DirectoryIsFile (0.00s)
=== RUN TestLogsHandler_Download_TempFileError
--- PASS: TestLogsHandler_Download_TempFileError (0.00s)
=== RUN TestLogsLifecycle
--- PASS: TestLogsLifecycle (0.00s)
=== RUN TestLogsHandler_PathTraversal
--- PASS: TestLogsHandler_PathTraversal (0.00s)
=== RUN TestLogsWebSocketHandler_SuccessfulConnection
--- PASS: TestLogsWebSocketHandler_SuccessfulConnection (0.00s)
=== RUN TestLogsWebSocketHandler_ReceiveLogEntries
--- PASS: TestLogsWebSocketHandler_ReceiveLogEntries (0.00s)
=== RUN TestLogsWebSocketHandler_LevelFilter
--- PASS: TestLogsWebSocketHandler_LevelFilter (0.15s)
=== RUN TestLogsWebSocketHandler_SourceFilter
--- PASS: TestLogsWebSocketHandler_SourceFilter (0.00s)
=== RUN TestLogsWebSocketHandler_CombinedFilters
--- PASS: TestLogsWebSocketHandler_CombinedFilters (0.00s)
=== RUN TestLogsWebSocketHandler_CaseInsensitiveFilters
--- PASS: TestLogsWebSocketHandler_CaseInsensitiveFilters (0.00s)
=== RUN TestLogsWebSocketHandler_UpgradeFailure
--- PASS: TestLogsWebSocketHandler_UpgradeFailure (0.00s)
=== RUN TestLogsWebSocketHandler_ClientDisconnect
--- PASS: TestLogsWebSocketHandler_ClientDisconnect (0.02s)
=== RUN TestLogsWebSocketHandler_ChannelClosed
--- PASS: TestLogsWebSocketHandler_ChannelClosed (0.00s)
=== RUN TestLogsWebSocketHandler_MultipleConnections
--- PASS: TestLogsWebSocketHandler_MultipleConnections (0.01s)
=== RUN TestLogsWebSocketHandler_HighVolumeLogging
--- PASS: TestLogsWebSocketHandler_HighVolumeLogging (0.04s)
=== RUN TestLogsWebSocketHandler_EmptyLogFields
--- PASS: TestLogsWebSocketHandler_EmptyLogFields (0.02s)
=== RUN TestLogsWebSocketHandler_SubscriberIDUniqueness
--- PASS: TestLogsWebSocketHandler_SubscriberIDUniqueness (0.02s)
=== RUN TestLogsWebSocketHandler_WithRealLogger
--- PASS: TestLogsWebSocketHandler_WithRealLogger (0.00s)
=== RUN TestLogsWebSocketHandler_ConnectionLifecycle
--- PASS: TestLogsWebSocketHandler_ConnectionLifecycle (0.02s)
=== RUN TestDomainHandler_List_Error
--- PASS: TestDomainHandler_List_Error (0.00s)
=== RUN TestDomainHandler_Create_InvalidJSON
--- PASS: TestDomainHandler_Create_InvalidJSON (0.00s)
=== RUN TestDomainHandler_Create_DBError
--- PASS: TestDomainHandler_Create_DBError (0.00s)
=== RUN TestDomainHandler_Delete_Error
--- PASS: TestDomainHandler_Delete_Error (0.00s)
=== RUN TestRemoteServerHandler_List_Error
--- PASS: TestRemoteServerHandler_List_Error (0.00s)
=== RUN TestRemoteServerHandler_List_EnabledOnly
--- PASS: TestRemoteServerHandler_List_EnabledOnly (0.00s)
=== RUN TestRemoteServerHandler_Update_NotFound
--- PASS: TestRemoteServerHandler_Update_NotFound (0.00s)
=== RUN TestRemoteServerHandler_Update_InvalidJSON
--- PASS: TestRemoteServerHandler_Update_InvalidJSON (0.00s)
=== RUN TestRemoteServerHandler_TestConnection_NotFound
--- PASS: TestRemoteServerHandler_TestConnection_NotFound (0.00s)
=== RUN TestRemoteServerHandler_TestConnectionCustom_InvalidJSON
--- PASS: TestRemoteServerHandler_TestConnectionCustom_InvalidJSON (0.00s)
=== RUN TestRemoteServerHandler_TestConnectionCustom_Unreachable
--- PASS: TestRemoteServerHandler_TestConnectionCustom_Unreachable (5.00s)
=== RUN TestUptimeHandler_List_Error
--- PASS: TestUptimeHandler_List_Error (0.02s)
=== RUN TestUptimeHandler_GetHistory_Error
--- PASS: TestUptimeHandler_GetHistory_Error (0.02s)
=== RUN TestUptimeHandler_Update_InvalidJSON
--- PASS: TestUptimeHandler_Update_InvalidJSON (0.02s)
=== RUN TestUptimeHandler_Sync_Error
--- PASS: TestUptimeHandler_Sync_Error (0.02s)
=== RUN TestUptimeHandler_Delete_Error
--- PASS: TestUptimeHandler_Delete_Error (0.02s)
=== RUN TestUptimeHandler_CheckMonitor_NotFound
--- PASS: TestUptimeHandler_CheckMonitor_NotFound (0.02s)
=== RUN TestNotificationHandler_List_Error
--- PASS: TestNotificationHandler_List_Error (0.01s)
=== RUN TestNotificationHandler_List_UnreadOnly
--- PASS: TestNotificationHandler_List_UnreadOnly (0.01s)
=== RUN TestNotificationHandler_MarkAsRead_Error
--- PASS: TestNotificationHandler_MarkAsRead_Error (0.01s)
=== RUN TestNotificationHandler_MarkAllAsRead_Error
--- PASS: TestNotificationHandler_MarkAllAsRead_Error (0.01s)
=== RUN TestNotificationProviderHandler_List_Error
--- PASS: TestNotificationProviderHandler_List_Error (0.01s)
=== RUN TestNotificationProviderHandler_Create_InvalidJSON
--- PASS: TestNotificationProviderHandler_Create_InvalidJSON (0.01s)
=== RUN TestNotificationProviderHandler_Create_DBError
--- PASS: TestNotificationProviderHandler_Create_DBError (0.01s)
=== RUN TestNotificationProviderHandler_Create_InvalidTemplate
--- PASS: TestNotificationProviderHandler_Create_InvalidTemplate (0.01s)
=== RUN TestNotificationProviderHandler_Update_InvalidJSON
--- PASS: TestNotificationProviderHandler_Update_InvalidJSON (0.01s)
=== RUN TestNotificationProviderHandler_Update_InvalidTemplate
--- PASS: TestNotificationProviderHandler_Update_InvalidTemplate (0.01s)
=== RUN TestNotificationProviderHandler_Update_DBError
--- PASS: TestNotificationProviderHandler_Update_DBError (0.00s)
=== RUN TestNotificationProviderHandler_Delete_Error
--- PASS: TestNotificationProviderHandler_Delete_Error (0.01s)
=== RUN TestNotificationProviderHandler_Test_InvalidJSON
--- PASS: TestNotificationProviderHandler_Test_InvalidJSON (0.00s)
=== RUN TestNotificationProviderHandler_Templates
--- PASS: TestNotificationProviderHandler_Templates (0.00s)
=== RUN TestNotificationProviderHandler_Preview_InvalidJSON
--- PASS: TestNotificationProviderHandler_Preview_InvalidJSON (0.00s)
=== RUN TestNotificationProviderHandler_Preview_WithData
--- PASS: TestNotificationProviderHandler_Preview_WithData (0.01s)
=== RUN TestNotificationProviderHandler_Preview_InvalidTemplate
--- PASS: TestNotificationProviderHandler_Preview_InvalidTemplate (0.01s)
=== RUN TestNotificationTemplateHandler_List_Error
--- PASS: TestNotificationTemplateHandler_List_Error (0.01s)
=== RUN TestNotificationTemplateHandler_Create_BadJSON
--- PASS: TestNotificationTemplateHandler_Create_BadJSON (0.00s)
=== RUN TestNotificationTemplateHandler_Create_DBError
--- PASS: TestNotificationTemplateHandler_Create_DBError (0.01s)
=== RUN TestNotificationTemplateHandler_Update_BadJSON
--- PASS: TestNotificationTemplateHandler_Update_BadJSON (0.01s)
=== RUN TestNotificationTemplateHandler_Update_DBError
--- PASS: TestNotificationTemplateHandler_Update_DBError (0.01s)
=== RUN TestNotificationTemplateHandler_Delete_Error
--- PASS: TestNotificationTemplateHandler_Delete_Error (0.01s)
=== RUN TestNotificationTemplateHandler_Preview_BadJSON
--- PASS: TestNotificationTemplateHandler_Preview_BadJSON (0.01s)
=== RUN TestNotificationTemplateHandler_Preview_TemplateNotFound
--- PASS: TestNotificationTemplateHandler_Preview_TemplateNotFound (0.01s)
=== RUN TestNotificationTemplateHandler_Preview_WithStoredTemplate
--- PASS: TestNotificationTemplateHandler_Preview_WithStoredTemplate (0.01s)
=== RUN TestNotificationTemplateHandler_Preview_InvalidTemplate
--- PASS: TestNotificationTemplateHandler_Preview_InvalidTemplate (0.01s)
=== RUN TestNotificationTemplateHandler_CRUDAndPreview
--- PASS: TestNotificationTemplateHandler_CRUDAndPreview (0.01s)
=== RUN TestNotificationTemplateHandler_Create_InvalidJSON
--- PASS: TestNotificationTemplateHandler_Create_InvalidJSON (0.00s)
=== RUN TestNotificationTemplateHandler_Update_InvalidJSON
--- PASS: TestNotificationTemplateHandler_Update_InvalidJSON (0.00s)
=== RUN TestNotificationTemplateHandler_Preview_InvalidJSON
--- PASS: TestNotificationTemplateHandler_Preview_InvalidJSON (0.00s)
=== RUN TestPerf_GetStatus_AssertThreshold
perf_assert_test.go:107: GetStatus avg=0.386ms p95=0.520ms max=2.700ms
--- PASS: TestPerf_GetStatus_AssertThreshold (0.20s)
=== RUN TestPerf_GetStatus_Parallel_AssertThreshold
perf_assert_test.go:150: GetStatus Parallel avg=0.584ms p95=1.505ms max=4.662ms
--- PASS: TestPerf_GetStatus_Parallel_AssertThreshold (0.14s)
=== RUN TestPerf_ListDecisions_AssertThreshold
perf_assert_test.go:179: ListDecisions avg=2.203ms p95=2.787ms max=6.314ms
--- PASS: TestPerf_ListDecisions_AssertThreshold (0.68s)
=== RUN TestPluginHandler_NewPluginHandler
--- PASS: TestPluginHandler_NewPluginHandler (0.00s)
=== RUN TestPluginHandler_ListPlugins
--- PASS: TestPluginHandler_ListPlugins (0.06s)
=== RUN TestPluginHandler_GetPlugin_InvalidID
--- PASS: TestPluginHandler_GetPlugin_InvalidID (0.00s)
=== RUN TestPluginHandler_GetPlugin_NotFound
--- PASS: TestPluginHandler_GetPlugin_NotFound (0.00s)
=== RUN TestPluginHandler_GetPlugin_Success
--- PASS: TestPluginHandler_GetPlugin_Success (0.00s)
=== RUN TestPluginHandler_EnablePlugin_InvalidID
--- PASS: TestPluginHandler_EnablePlugin_InvalidID (0.00s)
=== RUN TestPluginHandler_EnablePlugin_NotFound
--- PASS: TestPluginHandler_EnablePlugin_NotFound (0.00s)
=== RUN TestPluginHandler_EnablePlugin_AlreadyEnabled
--- PASS: TestPluginHandler_EnablePlugin_AlreadyEnabled (0.00s)
=== RUN TestPluginHandler_EnablePlugin_Success
--- PASS: TestPluginHandler_EnablePlugin_Success (0.00s)
=== RUN TestPluginHandler_DisablePlugin_InvalidID
--- PASS: TestPluginHandler_DisablePlugin_InvalidID (0.00s)
=== RUN TestPluginHandler_DisablePlugin_NotFound
--- PASS: TestPluginHandler_DisablePlugin_NotFound (0.00s)
=== RUN TestPluginHandler_DisablePlugin_AlreadyDisabled
--- PASS: TestPluginHandler_DisablePlugin_AlreadyDisabled (0.00s)
=== RUN TestPluginHandler_DisablePlugin_InUse
--- PASS: TestPluginHandler_DisablePlugin_InUse (0.00s)
=== RUN TestPluginHandler_DisablePlugin_Success
--- PASS: TestPluginHandler_DisablePlugin_Success (0.00s)
=== RUN TestPluginHandler_ReloadPlugins_Success
--- PASS: TestPluginHandler_ReloadPlugins_Success (0.00s)
=== RUN TestPluginHandler_ListPlugins_WithBuiltInProviders
--- PASS: TestPluginHandler_ListPlugins_WithBuiltInProviders (0.00s)
=== RUN TestPluginHandler_ListPlugins_ExternalLoadedPlugin
--- PASS: TestPluginHandler_ListPlugins_ExternalLoadedPlugin (0.01s)
=== RUN TestPluginHandler_GetPlugin_WithProvider
--- PASS: TestPluginHandler_GetPlugin_WithProvider (0.00s)
=== RUN TestPluginHandler_EnablePlugin_WithLoadError
--- PASS: TestPluginHandler_EnablePlugin_WithLoadError (0.00s)
=== RUN TestPluginHandler_DisablePlugin_WithUnloadError
--- PASS: TestPluginHandler_DisablePlugin_WithUnloadError (0.01s)
=== RUN TestPluginHandler_DisablePlugin_MultipleProviders
--- PASS: TestPluginHandler_DisablePlugin_MultipleProviders (0.00s)
=== RUN TestPluginHandler_ReloadPlugins_WithErrors
--- PASS: TestPluginHandler_ReloadPlugins_WithErrors (0.00s)
=== RUN TestPluginHandler_ListPlugins_FailedPluginWithLoadedAt
--- PASS: TestPluginHandler_ListPlugins_FailedPluginWithLoadedAt (0.00s)
=== RUN TestPluginHandler_GetPlugin_WithLoadedAt
--- PASS: TestPluginHandler_GetPlugin_WithLoadedAt (0.01s)
=== RUN TestPluginHandler_Count
plugin_handler_test.go:851: Total plugin handler tests: Aim for 15-20 tests
--- PASS: TestPluginHandler_Count (0.00s)
=== RUN TestPluginHandler_EnablePlugin_DBUpdateError
--- PASS: TestPluginHandler_EnablePlugin_DBUpdateError (0.00s)
=== RUN TestPluginHandler_DisablePlugin_DBUpdateError
--- PASS: TestPluginHandler_DisablePlugin_DBUpdateError (0.00s)
=== RUN TestPluginHandler_GetPlugin_DBInternalError
--- PASS: TestPluginHandler_GetPlugin_DBInternalError (0.00s)
=== RUN TestPluginHandler_EnablePlugin_FirstDBLookupError
--- PASS: TestPluginHandler_EnablePlugin_FirstDBLookupError (0.00s)
=== RUN TestPluginHandler_DisablePlugin_FirstDBLookupError
--- PASS: TestPluginHandler_DisablePlugin_FirstDBLookupError (0.00s)
=== RUN TestPluginHandler_EnablePlugin_DatabaseUpdateError
--- PASS: TestPluginHandler_EnablePlugin_DatabaseUpdateError (0.00s)
=== RUN TestPluginHandler_DisablePlugin_DatabaseUpdateError
--- PASS: TestPluginHandler_DisablePlugin_DatabaseUpdateError (0.00s)
=== RUN TestPluginHandler_GetPlugin_DatabaseError
--- PASS: TestPluginHandler_GetPlugin_DatabaseError (0.00s)
=== RUN TestPluginHandler_EnablePlugin_DatabaseFirstError
--- PASS: TestPluginHandler_EnablePlugin_DatabaseFirstError (0.00s)
=== RUN TestPluginHandler_DisablePlugin_DatabaseFirstError
--- PASS: TestPluginHandler_DisablePlugin_DatabaseFirstError (0.00s)
=== RUN TestEncryptionHandler_Validate_NonAdminAccess
--- PASS: TestEncryptionHandler_Validate_NonAdminAccess (0.03s)
=== RUN TestEncryptionHandler_GetHistory_PaginationBoundary
--- PASS: TestEncryptionHandler_GetHistory_PaginationBoundary (0.03s)
=== RUN TestEncryptionHandler_GetStatus_VersionInfo
--- PASS: TestEncryptionHandler_GetStatus_VersionInfo (0.03s)
=== RUN TestSettingsHandler_TestPublicURL_RoleNotExists
--- PASS: TestSettingsHandler_TestPublicURL_RoleNotExists (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_InvalidURLFormat
--- PASS: TestSettingsHandler_TestPublicURL_InvalidURLFormat (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_PrivateIPBlocked_Coverage
--- PASS: TestSettingsHandler_TestPublicURL_PrivateIPBlocked_Coverage (0.00s)
=== RUN TestSettingsHandler_ValidatePublicURL_WithTrailingSlash
--- PASS: TestSettingsHandler_ValidatePublicURL_WithTrailingSlash (0.00s)
=== RUN TestSettingsHandler_ValidatePublicURL_MissingScheme
--- PASS: TestSettingsHandler_ValidatePublicURL_MissingScheme (0.00s)
=== RUN TestAuditLogHandler_List_PaginationEdgeCases
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.315ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_1","test",NULL,"","{}","","","2026-01-10 02:23:59.873") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.249ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_2","test",NULL,"","{}","","","2026-01-10 02:23:59.873") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.385ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_3","test",NULL,"","{}","","","2026-01-10 02:23:59.873") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.424ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_4","test",NULL,"","{}","","","2026-01-10 02:23:59.874") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.194ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_5","test",NULL,"","{}","","","2026-01-10 02:23:59.875") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.239ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_6","test",NULL,"","{}","","","2026-01-10 02:23:59.875") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.169ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_7","test",NULL,"","{}","","","2026-01-10 02:23:59.875") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.214ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_8","test",NULL,"","{}","","","2026-01-10 02:23:59.875") RETURNING `id`
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:408 UNIQUE constraint failed: security_audits.uuid
[0.157ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user1","action_9","test",NULL,"","{}","","","2026-01-10 02:23:59.876") RETURNING `id`
--- PASS: TestAuditLogHandler_List_PaginationEdgeCases (0.04s)
=== RUN TestAuditLogHandler_List_CategoryFilter
2026/01/10 02:23:59 /projects/Charon/backend/internal/api/handlers/pr_coverage_test.go:447 UNIQUE constraint failed: security_audits.uuid
[0.321ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("","user2","action2","security",NULL,"","{}","","","2026-01-10 02:23:59.909") RETURNING `id`
--- PASS: TestAuditLogHandler_List_CategoryFilter (0.03s)
=== RUN TestAuditLogHandler_ListByProvider_DatabaseError
2026/01/10 02:23:59 /projects/Charon/backend/internal/services/security_service.go:339 sql: database is closed
[0.025ms] [rows:0] SELECT count(*) FROM `security_audits` WHERE event_category = "dns_provider" AND resource_id = 1
--- PASS: TestAuditLogHandler_ListByProvider_DatabaseError (0.03s)
=== RUN TestAuditLogHandler_ListByProvider_InvalidProviderID
--- PASS: TestAuditLogHandler_ListByProvider_InvalidProviderID (0.03s)
=== RUN TestGetActorFromGinContext_InvalidUserIDType
--- PASS: TestGetActorFromGinContext_InvalidUserIDType (0.00s)
=== RUN TestIsAdmin_NonAdminRole
--- PASS: TestIsAdmin_NonAdminRole (0.00s)
=== RUN TestCredentialHandler_Update_InvalidProviderType
--- PASS: TestCredentialHandler_Update_InvalidProviderType (0.01s)
=== RUN TestCredentialHandler_List_DatabaseClosed
2026/01/10 02:23:59 /projects/Charon/backend/internal/services/credential_service.go:86 sql: database is closed
[0.032ms] [rows:0] SELECT * FROM `dns_providers` WHERE `dns_providers`.`id` = 1 ORDER BY `dns_providers`.`id` LIMIT 1
--- PASS: TestCredentialHandler_List_DatabaseClosed (0.00s)
=== RUN TestSettingsHandler_MaskPasswordForTestFunction
=== RUN TestSettingsHandler_MaskPasswordForTestFunction/empty_string
=== RUN TestSettingsHandler_MaskPasswordForTestFunction/non-empty_password
=== RUN TestSettingsHandler_MaskPasswordForTestFunction/already_masked
=== RUN TestSettingsHandler_MaskPasswordForTestFunction/single_char
--- PASS: TestSettingsHandler_MaskPasswordForTestFunction (0.00s)
--- PASS: TestSettingsHandler_MaskPasswordForTestFunction/empty_string (0.00s)
--- PASS: TestSettingsHandler_MaskPasswordForTestFunction/non-empty_password (0.00s)
--- PASS: TestSettingsHandler_MaskPasswordForTestFunction/already_masked (0.00s)
--- PASS: TestSettingsHandler_MaskPasswordForTestFunction/single_char (0.00s)
=== RUN TestCredentialHandler_Update_NotFoundError
2026/01/10 02:23:59 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.132ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 9999 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Update_NotFoundError (0.01s)
=== RUN TestCredentialHandler_Update_MalformedJSON
--- PASS: TestCredentialHandler_Update_MalformedJSON (0.01s)
=== RUN TestCredentialHandler_Update_BadCredentialID
--- PASS: TestCredentialHandler_Update_BadCredentialID (0.00s)
=== RUN TestCredentialHandler_Delete_NotFoundError
2026/01/10 02:24:00 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.118ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 9999 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Delete_NotFoundError (0.01s)
=== RUN TestCredentialHandler_Delete_BadCredentialID
--- PASS: TestCredentialHandler_Delete_BadCredentialID (0.02s)
=== RUN TestCredentialHandler_Test_BadCredentialID
--- PASS: TestCredentialHandler_Test_BadCredentialID (0.01s)
=== RUN TestCredentialHandler_EnableMultiCredentials_BadProviderID
--- PASS: TestCredentialHandler_EnableMultiCredentials_BadProviderID (0.01s)
=== RUN TestEncryptionHandler_Validate_AdminSuccess
--- PASS: TestEncryptionHandler_Validate_AdminSuccess (0.09s)
=== RUN TestBulkUpdateSecurityHeaders_Success
--- PASS: TestBulkUpdateSecurityHeaders_Success (0.03s)
=== RUN TestBulkUpdateSecurityHeaders_RemoveProfile
--- PASS: TestBulkUpdateSecurityHeaders_RemoveProfile (0.02s)
=== RUN TestBulkUpdateSecurityHeaders_InvalidProfileID
2026/01/10 02:24:00 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:615 record not found
[0.101ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 99999 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestBulkUpdateSecurityHeaders_InvalidProfileID (0.02s)
=== RUN TestBulkUpdateSecurityHeaders_EmptyUUIDs
--- PASS: TestBulkUpdateSecurityHeaders_EmptyUUIDs (0.02s)
=== RUN TestBulkUpdateSecurityHeaders_PartialFailure
2026/01/10 02:24:00 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:638 record not found
[0.138ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "non-existent-uuid" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestBulkUpdateSecurityHeaders_PartialFailure (0.03s)
=== RUN TestBulkUpdateSecurityHeaders_TransactionRollback
2026/01/10 02:24:00 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:638 record not found
[0.144ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "invalid-uuid-1" ORDER BY `proxy_hosts`.`id` LIMIT 1
2026/01/10 02:24:00 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:638 record not found
[0.137ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "invalid-uuid-2" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestBulkUpdateSecurityHeaders_TransactionRollback (0.03s)
=== RUN TestBulkUpdateSecurityHeaders_InvalidJSON
--- PASS: TestBulkUpdateSecurityHeaders_InvalidJSON (0.02s)
=== RUN TestBulkUpdateSecurityHeaders_MixedProfileStates
--- PASS: TestBulkUpdateSecurityHeaders_MixedProfileStates (0.04s)
=== RUN TestBulkUpdateSecurityHeaders_SingleHost
--- PASS: TestBulkUpdateSecurityHeaders_SingleHost (0.02s)
=== RUN TestProxyHostLifecycle
=== PAUSE TestProxyHostLifecycle
=== RUN TestProxyHostDelete_WithUptimeCleanup
=== PAUSE TestProxyHostDelete_WithUptimeCleanup
=== RUN TestProxyHostErrors
=== PAUSE TestProxyHostErrors
=== RUN TestProxyHostValidation
=== PAUSE TestProxyHostValidation
=== RUN TestProxyHostCreate_AdvancedConfig_InvalidJSON
=== PAUSE TestProxyHostCreate_AdvancedConfig_InvalidJSON
=== RUN TestProxyHostCreate_AdvancedConfig_Normalization
=== PAUSE TestProxyHostCreate_AdvancedConfig_Normalization
=== RUN TestProxyHostUpdate_CertificateID_Null
=== PAUSE TestProxyHostUpdate_CertificateID_Null
=== RUN TestProxyHostConnection
=== PAUSE TestProxyHostConnection
=== RUN TestProxyHostHandler_List_Error
=== PAUSE TestProxyHostHandler_List_Error
=== RUN TestProxyHostWithCaddyIntegration
=== PAUSE TestProxyHostWithCaddyIntegration
=== RUN TestProxyHostHandler_BulkUpdateACL_Success
=== PAUSE TestProxyHostHandler_BulkUpdateACL_Success
=== RUN TestProxyHostHandler_BulkUpdateACL_RemoveACL
=== PAUSE TestProxyHostHandler_BulkUpdateACL_RemoveACL
=== RUN TestProxyHostHandler_BulkUpdateACL_PartialFailure
=== PAUSE TestProxyHostHandler_BulkUpdateACL_PartialFailure
=== RUN TestProxyHostHandler_BulkUpdateACL_EmptyUUIDs
=== PAUSE TestProxyHostHandler_BulkUpdateACL_EmptyUUIDs
=== RUN TestProxyHostHandler_BulkUpdateACL_InvalidJSON
=== PAUSE TestProxyHostHandler_BulkUpdateACL_InvalidJSON
=== RUN TestProxyHostUpdate_AdvancedConfig_ClearAndBackup
=== PAUSE TestProxyHostUpdate_AdvancedConfig_ClearAndBackup
=== RUN TestProxyHostUpdate_AdvancedConfig_InvalidJSON
=== PAUSE TestProxyHostUpdate_AdvancedConfig_InvalidJSON
=== RUN TestProxyHostUpdate_SetCertificateID
=== PAUSE TestProxyHostUpdate_SetCertificateID
=== RUN TestProxyHostUpdate_AdvancedConfig_SetBackup
=== PAUSE TestProxyHostUpdate_AdvancedConfig_SetBackup
=== RUN TestProxyHostUpdate_ForwardPort_StringValue
=== PAUSE TestProxyHostUpdate_ForwardPort_StringValue
=== RUN TestProxyHostUpdate_Locations_InvalidPayload
=== PAUSE TestProxyHostUpdate_Locations_InvalidPayload
=== RUN TestProxyHostUpdate_SetBooleansAndApplication
=== PAUSE TestProxyHostUpdate_SetBooleansAndApplication
=== RUN TestProxyHostUpdate_Locations_Replace
=== PAUSE TestProxyHostUpdate_Locations_Replace
=== RUN TestProxyHostCreate_WithCertificateAndLocations
=== PAUSE TestProxyHostCreate_WithCertificateAndLocations
=== RUN TestProxyHostCreate_WithSecurityHeaderProfile
=== PAUSE TestProxyHostCreate_WithSecurityHeaderProfile
=== RUN TestProxyHostUpdate_AssignSecurityHeaderProfile
=== PAUSE TestProxyHostUpdate_AssignSecurityHeaderProfile
=== RUN TestProxyHostUpdate_ChangeSecurityHeaderProfile
=== PAUSE TestProxyHostUpdate_ChangeSecurityHeaderProfile
=== RUN TestProxyHostUpdate_RemoveSecurityHeaderProfile
=== PAUSE TestProxyHostUpdate_RemoveSecurityHeaderProfile
=== RUN TestProxyHostUpdate_InvalidSecurityHeaderProfileID
=== PAUSE TestProxyHostUpdate_InvalidSecurityHeaderProfileID
=== RUN TestProxyHostUpdate_SecurityHeaderProfile_StrictToBasic
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfile_StrictToBasic
=== RUN TestProxyHostUpdate_SecurityHeaderProfile_ToNone
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfile_ToNone
=== RUN TestProxyHostUpdate_SecurityHeaderProfile_FromNoneToValid
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfile_FromNoneToValid
=== RUN TestProxyHostUpdate_SecurityHeaderProfile_InvalidString
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfile_InvalidString
=== RUN TestProxyHostUpdate_SecurityHeaderProfile_InvalidFloat
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfile_InvalidFloat
=== RUN TestProxyHostUpdate_SecurityHeaderProfile_ValidString
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfile_ValidString
=== RUN TestProxyHostUpdate_SecurityHeaderProfile_UnsupportedType
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfile_UnsupportedType
=== RUN TestUpdate_EnableStandardHeaders
=== PAUSE TestUpdate_EnableStandardHeaders
=== RUN TestUpdate_ForwardAuthEnabled
=== PAUSE TestUpdate_ForwardAuthEnabled
=== RUN TestUpdate_WAFDisabled
=== PAUSE TestUpdate_WAFDisabled
=== RUN TestUpdate_IntegrationCaddyConfig
=== PAUSE TestUpdate_IntegrationCaddyConfig
=== RUN TestUpdate_ExistingHostsBackwardCompatibility
=== PAUSE TestUpdate_ExistingHostsBackwardCompatibility
=== RUN TestProxyHostHandler_BulkUpdateSecurityHeaders_Success
=== PAUSE TestProxyHostHandler_BulkUpdateSecurityHeaders_Success
=== RUN TestProxyHostHandler_BulkUpdateSecurityHeaders_RemoveProfile
=== PAUSE TestProxyHostHandler_BulkUpdateSecurityHeaders_RemoveProfile
=== RUN TestProxyHostHandler_BulkUpdateSecurityHeaders_PartialFailure
=== PAUSE TestProxyHostHandler_BulkUpdateSecurityHeaders_PartialFailure
=== RUN TestProxyHostHandler_BulkUpdateSecurityHeaders_EmptyUUIDs
=== PAUSE TestProxyHostHandler_BulkUpdateSecurityHeaders_EmptyUUIDs
=== RUN TestProxyHostHandler_BulkUpdateSecurityHeaders_InvalidJSON
=== PAUSE TestProxyHostHandler_BulkUpdateSecurityHeaders_InvalidJSON
=== RUN TestProxyHostHandler_BulkUpdateSecurityHeaders_ProfileNotFound
=== PAUSE TestProxyHostHandler_BulkUpdateSecurityHeaders_ProfileNotFound
=== RUN TestProxyHostHandler_BulkUpdateSecurityHeaders_AllFail
=== PAUSE TestProxyHostHandler_BulkUpdateSecurityHeaders_AllFail
=== RUN TestProxyHostUpdate_NegativeIntCertificateID
=== PAUSE TestProxyHostUpdate_NegativeIntCertificateID
=== RUN TestProxyHostUpdate_AccessListID_StringValue
=== PAUSE TestProxyHostUpdate_AccessListID_StringValue
=== RUN TestProxyHostUpdate_AccessListID_IntValue
=== PAUSE TestProxyHostUpdate_AccessListID_IntValue
=== RUN TestProxyHostUpdate_CertificateID_IntValue
=== PAUSE TestProxyHostUpdate_CertificateID_IntValue
=== RUN TestProxyHostUpdate_CertificateID_StringValue
=== PAUSE TestProxyHostUpdate_CertificateID_StringValue
=== RUN TestProxyHostUpdate_EnableStandardHeaders_Null
=== PAUSE TestProxyHostUpdate_EnableStandardHeaders_Null
=== RUN TestProxyHostUpdate_EnableStandardHeaders_True
=== PAUSE TestProxyHostUpdate_EnableStandardHeaders_True
=== RUN TestProxyHostUpdate_EnableStandardHeaders_False
=== PAUSE TestProxyHostUpdate_EnableStandardHeaders_False
=== RUN TestProxyHostUpdate_ForwardAuthEnabled
=== PAUSE TestProxyHostUpdate_ForwardAuthEnabled
=== RUN TestProxyHostUpdate_WAFDisabled
=== PAUSE TestProxyHostUpdate_WAFDisabled
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_NegativeFloat
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_NegativeFloat
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_NegativeInt
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_NegativeInt
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_InvalidString
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_InvalidString
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_SetToNull
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_SetToNull
=== RUN TestBulkUpdateSecurityHeaders_DBError_NonNotFound
=== PAUSE TestBulkUpdateSecurityHeaders_DBError_NonNotFound
=== RUN TestSanitizeForLog
--- PASS: TestSanitizeForLog (0.00s)
=== RUN TestSecurityHandler_GetGeoIPStatus_NotInitialized
--- PASS: TestSecurityHandler_GetGeoIPStatus_NotInitialized (0.00s)
=== RUN TestSecurityHandler_GetGeoIPStatus_Initialized_NotLoaded
--- PASS: TestSecurityHandler_GetGeoIPStatus_Initialized_NotLoaded (0.00s)
=== RUN TestSecurityHandler_ReloadGeoIP_NotInitialized
--- PASS: TestSecurityHandler_ReloadGeoIP_NotInitialized (0.00s)
=== RUN TestSecurityHandler_ReloadGeoIP_LoadError
time="2026-01-10T02:24:00Z" level=error msg="Failed to reload GeoIP database" error="open : no such file or directory"
--- PASS: TestSecurityHandler_ReloadGeoIP_LoadError (0.00s)
=== RUN TestSecurityHandler_LookupGeoIP_MissingIPAddress
--- PASS: TestSecurityHandler_LookupGeoIP_MissingIPAddress (0.00s)
=== RUN TestSecurityHandler_LookupGeoIP_ServiceUnavailable
--- PASS: TestSecurityHandler_LookupGeoIP_ServiceUnavailable (0.00s)
=== RUN TestSecurityHandler_GetConfigAndUpdateConfig
2026/01/10 02:24:00 /projects/Charon/backend/internal/services/security_service.go:70 record not found
[0.082ms] [rows:0] SELECT * FROM `security_configs` ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:00 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.107ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityHandler_GetConfigAndUpdateConfig (0.00s)
=== RUN TestSecurityHandler_GetStatus_SQLInjection
--- PASS: TestSecurityHandler_GetStatus_SQLInjection (0.03s)
=== RUN TestSecurityHandler_CreateDecision_SQLInjection
=== RUN TestSecurityHandler_CreateDecision_SQLInjection/payload_0
=== RUN TestSecurityHandler_CreateDecision_SQLInjection/payload_1
=== RUN TestSecurityHandler_CreateDecision_SQLInjection/payload_2
=== RUN TestSecurityHandler_CreateDecision_SQLInjection/payload_3
--- PASS: TestSecurityHandler_CreateDecision_SQLInjection (0.02s)
--- PASS: TestSecurityHandler_CreateDecision_SQLInjection/payload_0 (0.00s)
--- PASS: TestSecurityHandler_CreateDecision_SQLInjection/payload_1 (0.00s)
--- PASS: TestSecurityHandler_CreateDecision_SQLInjection/payload_2 (0.00s)
--- PASS: TestSecurityHandler_CreateDecision_SQLInjection/payload_3 (0.00s)
=== RUN TestSecurityHandler_UpsertRuleSet_MassivePayload
--- PASS: TestSecurityHandler_UpsertRuleSet_MassivePayload (0.57s)
=== RUN TestSecurityHandler_UpsertRuleSet_EmptyName
--- PASS: TestSecurityHandler_UpsertRuleSet_EmptyName (0.01s)
=== RUN TestSecurityHandler_CreateDecision_EmptyFields
=== RUN TestSecurityHandler_CreateDecision_EmptyFields/empty_ip
=== RUN TestSecurityHandler_CreateDecision_EmptyFields/empty_action
=== RUN TestSecurityHandler_CreateDecision_EmptyFields/both_empty
=== RUN TestSecurityHandler_CreateDecision_EmptyFields/valid
--- PASS: TestSecurityHandler_CreateDecision_EmptyFields (0.02s)
--- PASS: TestSecurityHandler_CreateDecision_EmptyFields/empty_ip (0.00s)
--- PASS: TestSecurityHandler_CreateDecision_EmptyFields/empty_action (0.00s)
--- PASS: TestSecurityHandler_CreateDecision_EmptyFields/both_empty (0.00s)
--- PASS: TestSecurityHandler_CreateDecision_EmptyFields/valid (0.00s)
=== RUN TestSecurityHandler_GetStatus_SettingsOverride
--- PASS: TestSecurityHandler_GetStatus_SettingsOverride (0.02s)
=== RUN TestSecurityHandler_GetStatus_DisabledViaSettings
--- PASS: TestSecurityHandler_GetStatus_DisabledViaSettings (0.02s)
=== RUN TestSecurityAudit_DeleteRuleSet_InvalidID
=== RUN TestSecurityAudit_DeleteRuleSet_InvalidID/empty_id
=== RUN TestSecurityAudit_DeleteRuleSet_InvalidID/non_numeric
=== RUN TestSecurityAudit_DeleteRuleSet_InvalidID/negative
=== RUN TestSecurityAudit_DeleteRuleSet_InvalidID/sql_injection
=== RUN TestSecurityAudit_DeleteRuleSet_InvalidID/not_found
--- PASS: TestSecurityAudit_DeleteRuleSet_InvalidID (0.02s)
--- PASS: TestSecurityAudit_DeleteRuleSet_InvalidID/empty_id (0.00s)
--- PASS: TestSecurityAudit_DeleteRuleSet_InvalidID/non_numeric (0.00s)
--- PASS: TestSecurityAudit_DeleteRuleSet_InvalidID/negative (0.00s)
--- PASS: TestSecurityAudit_DeleteRuleSet_InvalidID/sql_injection (0.00s)
--- PASS: TestSecurityAudit_DeleteRuleSet_InvalidID/not_found (0.00s)
=== RUN TestSecurityHandler_UpsertRuleSet_XSSInContent
--- PASS: TestSecurityHandler_UpsertRuleSet_XSSInContent (0.03s)
=== RUN TestSecurityHandler_UpdateConfig_RateLimitBounds
=== RUN TestSecurityHandler_UpdateConfig_RateLimitBounds/valid_limits
=== RUN TestSecurityHandler_UpdateConfig_RateLimitBounds/zero_requests
=== RUN TestSecurityHandler_UpdateConfig_RateLimitBounds/negative_burst
=== RUN TestSecurityHandler_UpdateConfig_RateLimitBounds/huge_values
--- PASS: TestSecurityHandler_UpdateConfig_RateLimitBounds (0.02s)
--- PASS: TestSecurityHandler_UpdateConfig_RateLimitBounds/valid_limits (0.00s)
--- PASS: TestSecurityHandler_UpdateConfig_RateLimitBounds/zero_requests (0.00s)
--- PASS: TestSecurityHandler_UpdateConfig_RateLimitBounds/negative_burst (0.00s)
--- PASS: TestSecurityHandler_UpdateConfig_RateLimitBounds/huge_values (0.00s)
=== RUN TestSecurityHandler_GetStatus_NilDB
--- PASS: TestSecurityHandler_GetStatus_NilDB (0.00s)
=== RUN TestSecurityHandler_Enable_WithoutWhitelist
--- PASS: TestSecurityHandler_Enable_WithoutWhitelist (0.01s)
=== RUN TestSecurityHandler_Disable_RequiresToken
--- PASS: TestSecurityHandler_Disable_RequiresToken (0.03s)
=== RUN TestSecurityHandler_GetStatus_CrowdSecModeValidation
=== RUN TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_remote
=== RUN TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_external
=== RUN TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_cloud
=== RUN TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_api
=== RUN TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_../../../etc/passwd
--- PASS: TestSecurityHandler_GetStatus_CrowdSecModeValidation (0.03s)
--- PASS: TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_remote (0.01s)
--- PASS: TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_external (0.00s)
--- PASS: TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_cloud (0.00s)
--- PASS: TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_api (0.00s)
--- PASS: TestSecurityHandler_GetStatus_CrowdSecModeValidation/mode_../../../etc/passwd (0.00s)
=== RUN TestSecurityHandler_GetStatus_Clean
--- PASS: TestSecurityHandler_GetStatus_Clean (0.00s)
=== RUN TestSecurityHandler_Cerberus_DBOverride
--- PASS: TestSecurityHandler_Cerberus_DBOverride (0.01s)
=== RUN TestSecurityHandler_ACL_DBOverride
--- PASS: TestSecurityHandler_ACL_DBOverride (0.02s)
=== RUN TestSecurityHandler_GenerateBreakGlass_ReturnsToken
--- PASS: TestSecurityHandler_GenerateBreakGlass_ReturnsToken (1.09s)
=== RUN TestSecurityHandler_ACL_DisabledWhenCerberusOff
--- PASS: TestSecurityHandler_ACL_DisabledWhenCerberusOff (0.01s)
=== RUN TestSecurityHandler_CrowdSec_Mode_DBOverride
--- PASS: TestSecurityHandler_CrowdSec_Mode_DBOverride (0.01s)
=== RUN TestSecurityHandler_CrowdSec_ExternalMappedToDisabled_DBOverride
--- PASS: TestSecurityHandler_CrowdSec_ExternalMappedToDisabled_DBOverride (0.01s)
=== RUN TestSecurityHandler_ExternalModeMappedToDisabled
--- PASS: TestSecurityHandler_ExternalModeMappedToDisabled (0.00s)
=== RUN TestSecurityHandler_Enable_Disable_WithAdminWhitelistAndToken
--- PASS: TestSecurityHandler_Enable_Disable_WithAdminWhitelistAndToken (1.52s)
=== RUN TestSecurityHandler_UpdateConfig_Success
--- PASS: TestSecurityHandler_UpdateConfig_Success (0.02s)
=== RUN TestSecurityHandler_UpdateConfig_DefaultName
--- PASS: TestSecurityHandler_UpdateConfig_DefaultName (0.02s)
=== RUN TestSecurityHandler_UpdateConfig_InvalidPayload
--- PASS: TestSecurityHandler_UpdateConfig_InvalidPayload (0.01s)
=== RUN TestSecurityHandler_GetConfig_Success
--- PASS: TestSecurityHandler_GetConfig_Success (0.01s)
=== RUN TestSecurityHandler_GetConfig_NotFound
--- PASS: TestSecurityHandler_GetConfig_NotFound (0.01s)
=== RUN TestSecurityHandler_ListDecisions_Success
--- PASS: TestSecurityHandler_ListDecisions_Success (0.01s)
=== RUN TestSecurityHandler_ListDecisions_WithLimit
--- PASS: TestSecurityHandler_ListDecisions_WithLimit (0.01s)
=== RUN TestSecurityHandler_CreateDecision_Success
--- PASS: TestSecurityHandler_CreateDecision_Success (0.01s)
=== RUN TestSecurityHandler_CreateDecision_MissingIP
--- PASS: TestSecurityHandler_CreateDecision_MissingIP (0.01s)
=== RUN TestSecurityHandler_CreateDecision_MissingAction
--- PASS: TestSecurityHandler_CreateDecision_MissingAction (0.01s)
=== RUN TestSecurityHandler_CreateDecision_InvalidPayload
--- PASS: TestSecurityHandler_CreateDecision_InvalidPayload (0.01s)
=== RUN TestSecurityHandler_ListRuleSets_Success
--- PASS: TestSecurityHandler_ListRuleSets_Success (0.01s)
=== RUN TestSecurityHandler_UpsertRuleSet_Success
--- PASS: TestSecurityHandler_UpsertRuleSet_Success (0.01s)
=== RUN TestSecurityHandler_UpsertRuleSet_MissingName
--- PASS: TestSecurityHandler_UpsertRuleSet_MissingName (0.00s)
=== RUN TestSecurityHandler_UpsertRuleSet_InvalidPayload
--- PASS: TestSecurityHandler_UpsertRuleSet_InvalidPayload (0.01s)
=== RUN TestSecurityHandler_DeleteRuleSet_Success
--- PASS: TestSecurityHandler_DeleteRuleSet_Success (0.01s)
=== RUN TestSecurityHandler_DeleteRuleSet_NotFound
--- PASS: TestSecurityHandler_DeleteRuleSet_NotFound (0.01s)
=== RUN TestSecurityHandler_DeleteRuleSet_InvalidID
--- PASS: TestSecurityHandler_DeleteRuleSet_InvalidID (0.01s)
=== RUN TestSecurityHandler_DeleteRuleSet_EmptyID
--- PASS: TestSecurityHandler_DeleteRuleSet_EmptyID (0.00s)
=== RUN TestSecurityHandler_Enable_NoConfigNoWhitelist
--- PASS: TestSecurityHandler_Enable_NoConfigNoWhitelist (0.01s)
=== RUN TestSecurityHandler_Enable_WithWhitelist
--- PASS: TestSecurityHandler_Enable_WithWhitelist (0.01s)
=== RUN TestSecurityHandler_Enable_IPNotInWhitelist
--- PASS: TestSecurityHandler_Enable_IPNotInWhitelist (0.01s)
=== RUN TestSecurityHandler_Enable_WithValidBreakGlassToken
--- PASS: TestSecurityHandler_Enable_WithValidBreakGlassToken (1.51s)
=== RUN TestSecurityHandler_Enable_WithInvalidBreakGlassToken
--- PASS: TestSecurityHandler_Enable_WithInvalidBreakGlassToken (0.01s)
=== RUN TestSecurityHandler_Disable_FromLocalhost
--- PASS: TestSecurityHandler_Disable_FromLocalhost (0.01s)
=== RUN TestSecurityHandler_Disable_FromRemoteWithToken
--- PASS: TestSecurityHandler_Disable_FromRemoteWithToken (1.49s)
=== RUN TestSecurityHandler_Disable_FromRemoteNoToken
--- PASS: TestSecurityHandler_Disable_FromRemoteNoToken (0.01s)
=== RUN TestSecurityHandler_Disable_FromRemoteInvalidToken
--- PASS: TestSecurityHandler_Disable_FromRemoteInvalidToken (0.01s)
=== RUN TestSecurityHandler_GenerateBreakGlass_NoConfig
--- PASS: TestSecurityHandler_GenerateBreakGlass_NoConfig (0.79s)
=== RUN TestSecurityHandler_Disable_FromIPv6Localhost
--- PASS: TestSecurityHandler_Disable_FromIPv6Localhost (0.01s)
=== RUN TestSecurityHandler_Enable_WithCIDRWhitelist
--- PASS: TestSecurityHandler_Enable_WithCIDRWhitelist (0.01s)
=== RUN TestSecurityHandler_Enable_WithExactIPWhitelist
--- PASS: TestSecurityHandler_Enable_WithExactIPWhitelist (0.01s)
=== RUN TestSecurityHandler_GetStatus_Fixed
=== RUN TestSecurityHandler_GetStatus_Fixed/All_Disabled
=== RUN TestSecurityHandler_GetStatus_Fixed/All_Enabled
--- PASS: TestSecurityHandler_GetStatus_Fixed (0.00s)
--- PASS: TestSecurityHandler_GetStatus_Fixed/All_Disabled (0.00s)
--- PASS: TestSecurityHandler_GetStatus_Fixed/All_Enabled (0.00s)
=== RUN TestSecurityHandler_CreateAndListDecisionAndRulesets
2026/01/10 02:24:08 /projects/Charon/backend/internal/services/security_service.go:366 record not found
[0.186ms] [rows:0] SELECT * FROM `security_rule_sets` WHERE name = "owasp-crs" ORDER BY `security_rule_sets`.`id` LIMIT 1
--- PASS: TestSecurityHandler_CreateAndListDecisionAndRulesets (0.27s)
=== RUN TestSecurityHandler_UpsertDeleteTriggersApplyConfig
2026/01/10 02:24:08 /projects/Charon/backend/internal/services/security_service.go:251 attempt to write a readonly database
[0.701ms] [rows:0] INSERT INTO `security_audits` (`uuid`,`actor`,`action`,`event_category`,`resource_id`,`resource_uuid`,`details`,`ip_address`,`user_agent`,`created_at`) VALUES ("6418b3c6-0b2e-46da-8fee-112ba3795600","192.0.2.1","delete_ruleset","",NULL,"","1","","","2026-01-10 02:24:08.191") RETURNING `id`
Failed to write audit log: attempt to write a readonly database
2026/01/10 02:24:08 /projects/Charon/backend/internal/services/security_service.go:366 record not found
[0.101ms] [rows:0] SELECT * FROM `security_rule_sets` WHERE name = "owasp-crs" ORDER BY `security_rule_sets`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:90 no such table: dns_providers
[0.044ms] [rows:0] SELECT * FROM `dns_providers` WHERE enabled = true
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.706ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.083ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.097ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.067ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:90 no such table: dns_providers
[0.106ms] [rows:0] SELECT * FROM `dns_providers` WHERE enabled = true
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.098ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.102ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.065ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.065ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:08 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestSecurityHandler_UpsertDeleteTriggersApplyConfig (0.04s)
=== RUN TestSecurityHandler_GetStatus_RespectsSettingsTable
=== RUN TestSecurityHandler_GetStatus_RespectsSettingsTable/WAF_enabled_via_settings_overrides_disabled_config
=== RUN TestSecurityHandler_GetStatus_RespectsSettingsTable/Rate_Limit_enabled_via_settings_overrides_disabled_config
=== RUN TestSecurityHandler_GetStatus_RespectsSettingsTable/CrowdSec_enabled_via_settings_overrides_disabled_config
=== RUN TestSecurityHandler_GetStatus_RespectsSettingsTable/All_modules_enabled_via_settings
=== RUN TestSecurityHandler_GetStatus_RespectsSettingsTable/WAF_disabled_via_settings_overrides_enabled_config
=== RUN TestSecurityHandler_GetStatus_RespectsSettingsTable/No_settings_-_falls_back_to_config_(enabled)
--- PASS: TestSecurityHandler_GetStatus_RespectsSettingsTable (0.04s)
--- PASS: TestSecurityHandler_GetStatus_RespectsSettingsTable/WAF_enabled_via_settings_overrides_disabled_config (0.01s)
--- PASS: TestSecurityHandler_GetStatus_RespectsSettingsTable/Rate_Limit_enabled_via_settings_overrides_disabled_config (0.01s)
--- PASS: TestSecurityHandler_GetStatus_RespectsSettingsTable/CrowdSec_enabled_via_settings_overrides_disabled_config (0.01s)
--- PASS: TestSecurityHandler_GetStatus_RespectsSettingsTable/All_modules_enabled_via_settings (0.01s)
--- PASS: TestSecurityHandler_GetStatus_RespectsSettingsTable/WAF_disabled_via_settings_overrides_enabled_config (0.01s)
--- PASS: TestSecurityHandler_GetStatus_RespectsSettingsTable/No_settings_-_falls_back_to_config_(enabled) (0.01s)
=== RUN TestSecurityHandler_GetStatus_WAFModeFromSettings
--- PASS: TestSecurityHandler_GetStatus_WAFModeFromSettings (0.01s)
=== RUN TestSecurityHandler_GetStatus_RateLimitModeFromSettings
--- PASS: TestSecurityHandler_GetStatus_RateLimitModeFromSettings (0.01s)
=== RUN TestSecurityHandler_GetWAFExclusions_Empty
--- PASS: TestSecurityHandler_GetWAFExclusions_Empty (0.01s)
=== RUN TestSecurityHandler_GetWAFExclusions_WithExclusions
--- PASS: TestSecurityHandler_GetWAFExclusions_WithExclusions (0.01s)
=== RUN TestSecurityHandler_GetWAFExclusions_InvalidJSON
time="2026-01-10T02:24:08Z" level=warning msg="Failed to parse WAF exclusions" error="invalid character 'i' looking for beginning of value"
--- PASS: TestSecurityHandler_GetWAFExclusions_InvalidJSON (0.01s)
=== RUN TestSecurityHandler_AddWAFExclusion_Success
--- PASS: TestSecurityHandler_AddWAFExclusion_Success (0.02s)
=== RUN TestSecurityHandler_AddWAFExclusion_WithTarget
--- PASS: TestSecurityHandler_AddWAFExclusion_WithTarget (0.01s)
=== RUN TestSecurityHandler_AddWAFExclusion_ToExistingConfig
--- PASS: TestSecurityHandler_AddWAFExclusion_ToExistingConfig (0.02s)
=== RUN TestSecurityHandler_AddWAFExclusion_Duplicate
--- PASS: TestSecurityHandler_AddWAFExclusion_Duplicate (0.01s)
=== RUN TestSecurityHandler_AddWAFExclusion_DuplicateWithDifferentTarget
--- PASS: TestSecurityHandler_AddWAFExclusion_DuplicateWithDifferentTarget (0.02s)
=== RUN TestSecurityHandler_AddWAFExclusion_MissingRuleID
--- PASS: TestSecurityHandler_AddWAFExclusion_MissingRuleID (0.01s)
=== RUN TestSecurityHandler_AddWAFExclusion_InvalidRuleID
--- PASS: TestSecurityHandler_AddWAFExclusion_InvalidRuleID (0.01s)
=== RUN TestSecurityHandler_AddWAFExclusion_NegativeRuleID
--- PASS: TestSecurityHandler_AddWAFExclusion_NegativeRuleID (0.01s)
=== RUN TestSecurityHandler_AddWAFExclusion_InvalidPayload
--- PASS: TestSecurityHandler_AddWAFExclusion_InvalidPayload (0.01s)
=== RUN TestSecurityHandler_DeleteWAFExclusion_Success
--- PASS: TestSecurityHandler_DeleteWAFExclusion_Success (0.01s)
=== RUN TestSecurityHandler_DeleteWAFExclusion_WithTarget
--- PASS: TestSecurityHandler_DeleteWAFExclusion_WithTarget (0.02s)
=== RUN TestSecurityHandler_DeleteWAFExclusion_NotFound
--- PASS: TestSecurityHandler_DeleteWAFExclusion_NotFound (0.01s)
=== RUN TestSecurityHandler_DeleteWAFExclusion_NoConfig
--- PASS: TestSecurityHandler_DeleteWAFExclusion_NoConfig (0.01s)
=== RUN TestSecurityHandler_DeleteWAFExclusion_InvalidRuleID
--- PASS: TestSecurityHandler_DeleteWAFExclusion_InvalidRuleID (0.01s)
=== RUN TestSecurityHandler_DeleteWAFExclusion_ZeroRuleID
--- PASS: TestSecurityHandler_DeleteWAFExclusion_ZeroRuleID (0.01s)
=== RUN TestSecurityHandler_DeleteWAFExclusion_NegativeRuleID
--- PASS: TestSecurityHandler_DeleteWAFExclusion_NegativeRuleID (0.01s)
=== RUN TestSecurityHandler_WAFExclusion_FullWorkflow
--- PASS: TestSecurityHandler_WAFExclusion_FullWorkflow (0.01s)
=== RUN TestProxyHost_WAFDisabled_DefaultFalse
--- PASS: TestProxyHost_WAFDisabled_DefaultFalse (0.02s)
=== RUN TestProxyHost_WAFDisabled_SetTrue
--- PASS: TestProxyHost_WAFDisabled_SetTrue (0.02s)
=== RUN TestSecurityConfig_WAFParanoiaLevel_Default
--- PASS: TestSecurityConfig_WAFParanoiaLevel_Default (0.01s)
=== RUN TestSecurityConfig_WAFParanoiaLevel_CustomValue
--- PASS: TestSecurityConfig_WAFParanoiaLevel_CustomValue (0.01s)
=== RUN TestSecurityConfig_WAFExclusions_Empty
--- PASS: TestSecurityConfig_WAFExclusions_Empty (0.01s)
=== RUN TestSecurityConfig_WAFExclusions_JSONArray
--- PASS: TestSecurityConfig_WAFExclusions_JSONArray (0.01s)
=== RUN TestListProfiles
--- PASS: TestListProfiles (0.01s)
=== RUN TestGetProfile_ByID
--- PASS: TestGetProfile_ByID (0.02s)
=== RUN TestGetProfile_ByUUID
--- PASS: TestGetProfile_ByUUID (0.01s)
=== RUN TestGetProfile_NotFound
2026/01/10 02:24:08 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:72 record not found
[0.131ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 99999 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestGetProfile_NotFound (0.01s)
=== RUN TestCreateProfile
--- PASS: TestCreateProfile (0.01s)
=== RUN TestCreateProfile_MissingName
--- PASS: TestCreateProfile_MissingName (0.01s)
=== RUN TestUpdateProfile
--- PASS: TestUpdateProfile (0.01s)
=== RUN TestUpdateProfile_CannotModifyPreset
--- PASS: TestUpdateProfile_CannotModifyPreset (0.01s)
=== RUN TestDeleteProfile
--- PASS: TestDeleteProfile (0.01s)
=== RUN TestDeleteProfile_CannotDeletePreset
--- PASS: TestDeleteProfile_CannotDeletePreset (0.02s)
=== RUN TestDeleteProfile_InUse
--- PASS: TestDeleteProfile_InUse (0.01s)
=== RUN TestGetPresets
--- PASS: TestGetPresets (0.01s)
=== RUN TestApplyPreset
--- PASS: TestApplyPreset (0.02s)
=== RUN TestApplyPreset_InvalidType
--- PASS: TestApplyPreset_InvalidType (0.01s)
=== RUN TestCalculateScore
--- PASS: TestCalculateScore (0.01s)
=== RUN TestValidateCSP_Valid
--- PASS: TestValidateCSP_Valid (0.01s)
=== RUN TestValidateCSP_Invalid
--- PASS: TestValidateCSP_Invalid (0.01s)
=== RUN TestValidateCSP_UnsafeDirectives
--- PASS: TestValidateCSP_UnsafeDirectives (0.01s)
=== RUN TestBuildCSP
--- PASS: TestBuildCSP (0.01s)
=== RUN TestListProfiles_DBError
2026/01/10 02:24:08 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:56 sql: database is closed
[0.032ms] [rows:0] SELECT * FROM `security_header_profiles` ORDER BY is_preset DESC, name ASC
--- PASS: TestListProfiles_DBError (0.01s)
=== RUN TestGetProfile_UUID_NotFound
2026/01/10 02:24:08 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:82 record not found
[0.115ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "non-existent-uuid-12345" ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestGetProfile_UUID_NotFound (0.01s)
=== RUN TestGetProfile_ID_DBError
2026/01/10 02:24:08 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:72 sql: database is closed
[0.050ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 1 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestGetProfile_ID_DBError (0.01s)
=== RUN TestGetProfile_UUID_DBError
2026/01/10 02:24:08 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:82 sql: database is closed
[0.038ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "some-uuid-format" ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestGetProfile_UUID_DBError (0.01s)
=== RUN TestCreateProfile_InvalidJSON
--- PASS: TestCreateProfile_InvalidJSON (0.01s)
=== RUN TestCreateProfile_DBError
--- PASS: TestCreateProfile_DBError (0.02s)
=== RUN TestUpdateProfile_InvalidID
--- PASS: TestUpdateProfile_InvalidID (0.01s)
=== RUN TestUpdateProfile_NotFound
2026/01/10 02:24:08 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:136 record not found
[0.141ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 99999 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestUpdateProfile_NotFound (0.01s)
=== RUN TestUpdateProfile_InvalidJSON
--- PASS: TestUpdateProfile_InvalidJSON (0.01s)
=== RUN TestUpdateProfile_DBError
2026/01/10 02:24:08 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:136 sql: database is closed
[0.037ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 1 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestUpdateProfile_DBError (0.02s)
=== RUN TestUpdateProfile_LookupDBError
2026/01/10 02:24:09 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:136 sql: database is closed
[0.041ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 1 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestUpdateProfile_LookupDBError (0.01s)
=== RUN TestDeleteProfile_InvalidID
--- PASS: TestDeleteProfile_InvalidID (0.01s)
=== RUN TestDeleteProfile_NotFound
2026/01/10 02:24:09 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:183 record not found
[0.119ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 99999 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestDeleteProfile_NotFound (0.01s)
=== RUN TestDeleteProfile_LookupDBError
2026/01/10 02:24:09 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:183 sql: database is closed
[0.055ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 1 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestDeleteProfile_LookupDBError (0.02s)
=== RUN TestDeleteProfile_CountDBError
2026/01/10 02:24:09 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:200 no such table: proxy_hosts
[4.018ms] [rows:0] SELECT count(*) FROM `proxy_hosts` WHERE security_header_profile_id = 1
--- PASS: TestDeleteProfile_CountDBError (0.01s)
=== RUN TestDeleteProfile_DeleteDBError
2026/01/10 02:24:09 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:183 sql: database is closed
[0.063ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 1 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestDeleteProfile_DeleteDBError (0.01s)
=== RUN TestApplyPreset_InvalidJSON
--- PASS: TestApplyPreset_InvalidJSON (0.01s)
=== RUN TestCalculateScore_InvalidJSON
--- PASS: TestCalculateScore_InvalidJSON (0.02s)
=== RUN TestValidateCSP_InvalidJSON
--- PASS: TestValidateCSP_InvalidJSON (0.01s)
=== RUN TestValidateCSP_EmptyCSP
--- PASS: TestValidateCSP_EmptyCSP (0.01s)
=== RUN TestValidateCSP_UnknownDirective
--- PASS: TestValidateCSP_UnknownDirective (0.01s)
=== RUN TestBuildCSP_InvalidJSON
--- PASS: TestBuildCSP_InvalidJSON (0.02s)
=== RUN TestGetProfile_UUID_DBError_NonNotFound
2026/01/10 02:24:09 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:82 sql: database is closed
[0.042ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "550e8400-e29b-41d4-a716-446655440000" ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestGetProfile_UUID_DBError_NonNotFound (0.01s)
=== RUN TestUpdateProfile_SaveError
2026/01/10 02:24:09 /projects/Charon/backend/internal/api/handlers/security_headers_handler.go:136 sql: database is closed
[0.039ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 1 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestUpdateProfile_SaveError (0.01s)
=== RUN TestNewSecurityNotificationHandler
=== PAUSE TestNewSecurityNotificationHandler
=== RUN TestSecurityNotificationHandler_GetSettings_Success
=== PAUSE TestSecurityNotificationHandler_GetSettings_Success
=== RUN TestSecurityNotificationHandler_GetSettings_ServiceError
=== PAUSE TestSecurityNotificationHandler_GetSettings_ServiceError
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidJSON
=== PAUSE TestSecurityNotificationHandler_UpdateSettings_InvalidJSON
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel
=== PAUSE TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF
=== PAUSE TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF
=== RUN TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook
=== PAUSE TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook
=== RUN TestSecurityNotificationHandler_UpdateSettings_ServiceError
=== PAUSE TestSecurityNotificationHandler_UpdateSettings_ServiceError
=== RUN TestSecurityNotificationHandler_UpdateSettings_Success
=== PAUSE TestSecurityNotificationHandler_UpdateSettings_Success
=== RUN TestSecurityNotificationHandler_UpdateSettings_EmptyWebhookURL
=== PAUSE TestSecurityNotificationHandler_UpdateSettings_EmptyWebhookURL
=== RUN TestSecurityHandler_Priority_SettingsOverSecurityConfig
=== RUN TestSecurityHandler_Priority_SettingsOverSecurityConfig/Settings_table_overrides_SecurityConfig_DB
=== RUN TestSecurityHandler_Priority_SettingsOverSecurityConfig/SecurityConfig_DB_overrides_static_config
=== RUN TestSecurityHandler_Priority_SettingsOverSecurityConfig/Static_config_used_when_no_DB_overrides
--- PASS: TestSecurityHandler_Priority_SettingsOverSecurityConfig (0.04s)
--- PASS: TestSecurityHandler_Priority_SettingsOverSecurityConfig/Settings_table_overrides_SecurityConfig_DB (0.01s)
--- PASS: TestSecurityHandler_Priority_SettingsOverSecurityConfig/SecurityConfig_DB_overrides_static_config (0.01s)
--- PASS: TestSecurityHandler_Priority_SettingsOverSecurityConfig/Static_config_used_when_no_DB_overrides (0.01s)
=== RUN TestSecurityHandler_Priority_AllModules
--- PASS: TestSecurityHandler_Priority_AllModules (0.01s)
=== RUN TestSecurityHandler_GetRateLimitPresets
--- PASS: TestSecurityHandler_GetRateLimitPresets (0.00s)
=== RUN TestSecurityHandler_GetRateLimitPresets_StandardPreset
--- PASS: TestSecurityHandler_GetRateLimitPresets_StandardPreset (0.00s)
=== RUN TestSecurityHandler_GetRateLimitPresets_LoginPreset
--- PASS: TestSecurityHandler_GetRateLimitPresets_LoginPreset (0.00s)
=== RUN TestGetClientIPHeadersAndRemoteAddr
--- PASS: TestGetClientIPHeadersAndRemoteAddr (0.00s)
=== RUN TestGetMyIPHandler
=== RUN TestGetMyIPHandler/with_CF_header
=== RUN TestGetMyIPHandler/with_X-Forwarded-For_header
=== RUN TestGetMyIPHandler/with_X-Real-IP_header
=== RUN TestGetMyIPHandler/direct_connection
--- PASS: TestGetMyIPHandler (0.00s)
--- PASS: TestGetMyIPHandler/with_CF_header (0.00s)
--- PASS: TestGetMyIPHandler/with_X-Forwarded-For_header (0.00s)
--- PASS: TestGetMyIPHandler/with_X-Real-IP_header (0.00s)
--- PASS: TestGetMyIPHandler/direct_connection (0.00s)
=== RUN TestWaitForCondition_PassesImmediately
--- PASS: TestWaitForCondition_PassesImmediately (0.00s)
=== RUN TestWaitForCondition_PassesAfterIterations
--- PASS: TestWaitForCondition_PassesAfterIterations (0.02s)
=== RUN TestWaitForConditionWithInterval_PassesImmediately
--- PASS: TestWaitForConditionWithInterval_PassesImmediately (0.00s)
=== RUN TestWaitForConditionWithInterval_CustomInterval
--- PASS: TestWaitForConditionWithInterval_CustomInterval (0.06s)
=== RUN TestWaitForCondition_Timeout
--- PASS: TestWaitForCondition_Timeout (0.03s)
=== RUN TestWaitForConditionWithInterval_Timeout
--- PASS: TestWaitForConditionWithInterval_Timeout (0.06s)
=== RUN TestWaitForCondition_ZeroTimeout
--- PASS: TestWaitForCondition_ZeroTimeout (0.00s)
=== RUN TestGetTemplateDB
--- PASS: TestGetTemplateDB (0.00s)
=== RUN TestGetTemplateDB_HasTables
--- PASS: TestGetTemplateDB_HasTables (0.00s)
=== RUN TestOpenTestDB
--- PASS: TestOpenTestDB (0.00s)
=== RUN TestOpenTestDB_Uniqueness
--- PASS: TestOpenTestDB_Uniqueness (0.00s)
=== RUN TestOpenTestDBWithMigrations
--- PASS: TestOpenTestDBWithMigrations (0.00s)
=== RUN TestOpenTestDBWithMigrations_CanInsertData
--- PASS: TestOpenTestDBWithMigrations_CanInsertData (0.02s)
=== RUN TestOpenTestDBWithMigrations_MultipleModels
--- PASS: TestOpenTestDBWithMigrations_MultipleModels (0.01s)
=== RUN TestOpenTestDBWithMigrations_FallbackPath
--- PASS: TestOpenTestDBWithMigrations_FallbackPath (0.01s)
=== RUN TestOpenTestDB_ParallelSafety
=== PAUSE TestOpenTestDB_ParallelSafety
=== RUN TestOpenTestDBWithMigrations_ParallelSafety
=== RUN TestOpenTestDBWithMigrations_ParallelSafety/parallel-migrations-0
=== RUN TestOpenTestDBWithMigrations_ParallelSafety/parallel-migrations-1
=== RUN TestOpenTestDBWithMigrations_ParallelSafety/parallel-migrations-2
--- PASS: TestOpenTestDBWithMigrations_ParallelSafety (0.02s)
--- PASS: TestOpenTestDBWithMigrations_ParallelSafety/parallel-migrations-0 (0.01s)
--- PASS: TestOpenTestDBWithMigrations_ParallelSafety/parallel-migrations-1 (0.01s)
--- PASS: TestOpenTestDBWithMigrations_ParallelSafety/parallel-migrations-2 (0.01s)
=== RUN TestUpdateHandler_Check
--- PASS: TestUpdateHandler_Check (0.00s)
=== RUN TestUserHandler_GetSetupStatus_Error
--- PASS: TestUserHandler_GetSetupStatus_Error (0.02s)
=== RUN TestUserHandler_Setup_CheckStatusError
--- PASS: TestUserHandler_Setup_CheckStatusError (0.02s)
=== RUN TestUserHandler_Setup_AlreadyCompleted
--- PASS: TestUserHandler_Setup_AlreadyCompleted (0.74s)
=== RUN TestUserHandler_Setup_InvalidJSON
--- PASS: TestUserHandler_Setup_InvalidJSON (0.02s)
=== RUN TestUserHandler_RegenerateAPIKey_Unauthorized
--- PASS: TestUserHandler_RegenerateAPIKey_Unauthorized (0.02s)
=== RUN TestUserHandler_RegenerateAPIKey_DBError
--- PASS: TestUserHandler_RegenerateAPIKey_DBError (0.02s)
=== RUN TestUserHandler_GetProfile_Unauthorized
--- PASS: TestUserHandler_GetProfile_Unauthorized (0.02s)
=== RUN TestUserHandler_GetProfile_NotFound
--- PASS: TestUserHandler_GetProfile_NotFound (0.02s)
=== RUN TestUserHandler_UpdateProfile_Unauthorized
--- PASS: TestUserHandler_UpdateProfile_Unauthorized (0.01s)
=== RUN TestUserHandler_UpdateProfile_InvalidJSON
--- PASS: TestUserHandler_UpdateProfile_InvalidJSON (0.02s)
=== RUN TestUserHandler_UpdateProfile_UserNotFound
--- PASS: TestUserHandler_UpdateProfile_UserNotFound (0.02s)
=== RUN TestUserHandler_UpdateProfile_EmailConflict
--- PASS: TestUserHandler_UpdateProfile_EmailConflict (1.48s)
=== RUN TestUserHandler_UpdateProfile_EmailChangeNoPassword
--- PASS: TestUserHandler_UpdateProfile_EmailChangeNoPassword (0.75s)
=== RUN TestUserHandler_UpdateProfile_WrongPassword
--- PASS: TestUserHandler_UpdateProfile_WrongPassword (1.47s)
=== RUN TestUserHandler_GetSetupStatus
--- PASS: TestUserHandler_GetSetupStatus (0.02s)
=== RUN TestUserHandler_Setup
--- PASS: TestUserHandler_Setup (0.74s)
=== RUN TestUserHandler_Setup_DBError
--- PASS: TestUserHandler_Setup_DBError (0.00s)
=== RUN TestUserHandler_RegenerateAPIKey
--- PASS: TestUserHandler_RegenerateAPIKey (0.01s)
=== RUN TestUserHandler_GetProfile
--- PASS: TestUserHandler_GetProfile (0.02s)
=== RUN TestUserHandler_RegisterRoutes
--- PASS: TestUserHandler_RegisterRoutes (0.01s)
=== RUN TestUserHandler_Errors
2026/01/10 02:24:14 /projects/Charon/backend/internal/api/handlers/user_handler.go:171 record not found
[0.103ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 99999 ORDER BY `users`.`id` LIMIT 1
2026/01/10 02:24:14 /projects/Charon/backend/internal/api/handlers/user_handler.go:154 no such table: users
[0.155ms] [rows:0] UPDATE `users` SET `api_key`="e55dd8a0-c3ca-4679-a77b-509d128435d1",`updated_at`="2026-01-10 02:24:14.927" WHERE id = 99999
--- PASS: TestUserHandler_Errors (0.02s)
=== RUN TestUserHandler_UpdateProfile
=== RUN TestUserHandler_UpdateProfile/Success_Name_Only
=== RUN TestUserHandler_UpdateProfile/Success_Email_Change
=== RUN TestUserHandler_UpdateProfile/Fail_Email_Change_No_Password
=== RUN TestUserHandler_UpdateProfile/Fail_Email_Change_Wrong_Password
=== RUN TestUserHandler_UpdateProfile/Fail_Email_In_Use
--- PASS: TestUserHandler_UpdateProfile (2.36s)
--- PASS: TestUserHandler_UpdateProfile/Success_Name_Only (0.00s)
--- PASS: TestUserHandler_UpdateProfile/Success_Email_Change (0.77s)
--- PASS: TestUserHandler_UpdateProfile/Fail_Email_Change_No_Password (0.00s)
--- PASS: TestUserHandler_UpdateProfile/Fail_Email_Change_Wrong_Password (0.73s)
--- PASS: TestUserHandler_UpdateProfile/Fail_Email_In_Use (0.00s)
=== RUN TestUserHandler_UpdateProfile_Errors
2026/01/10 02:24:17 /projects/Charon/backend/internal/api/handlers/user_handler.go:207 record not found
[0.135ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_UpdateProfile_Errors (0.01s)
=== RUN TestUserHandler_ListUsers_NonAdmin
--- PASS: TestUserHandler_ListUsers_NonAdmin (0.02s)
=== RUN TestUserHandler_ListUsers_Admin
--- PASS: TestUserHandler_ListUsers_Admin (0.01s)
=== RUN TestUserHandler_CreateUser_NonAdmin
--- PASS: TestUserHandler_CreateUser_NonAdmin (0.01s)
=== RUN TestUserHandler_CreateUser_Admin
--- PASS: TestUserHandler_CreateUser_Admin (0.73s)
=== RUN TestUserHandler_CreateUser_InvalidJSON
--- PASS: TestUserHandler_CreateUser_InvalidJSON (0.01s)
=== RUN TestUserHandler_CreateUser_DuplicateEmail
--- PASS: TestUserHandler_CreateUser_DuplicateEmail (0.01s)
=== RUN TestUserHandler_CreateUser_WithPermittedHosts
--- PASS: TestUserHandler_CreateUser_WithPermittedHosts (0.73s)
=== RUN TestUserHandler_GetUser_NonAdmin
--- PASS: TestUserHandler_GetUser_NonAdmin (0.01s)
=== RUN TestUserHandler_GetUser_InvalidID
--- PASS: TestUserHandler_GetUser_InvalidID (0.02s)
=== RUN TestUserHandler_GetUser_NotFound
2026/01/10 02:24:18 /projects/Charon/backend/internal/api/handlers/user_handler.go:571 record not found
[0.080ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_GetUser_NotFound (0.02s)
=== RUN TestUserHandler_GetUser_Success
--- PASS: TestUserHandler_GetUser_Success (0.01s)
=== RUN TestUserHandler_UpdateUser_NonAdmin
--- PASS: TestUserHandler_UpdateUser_NonAdmin (0.02s)
=== RUN TestUserHandler_UpdateUser_InvalidID
--- PASS: TestUserHandler_UpdateUser_InvalidID (0.01s)
=== RUN TestUserHandler_UpdateUser_InvalidJSON
--- PASS: TestUserHandler_UpdateUser_InvalidJSON (0.01s)
=== RUN TestUserHandler_UpdateUser_NotFound
2026/01/10 02:24:18 /projects/Charon/backend/internal/api/handlers/user_handler.go:623 record not found
[0.103ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_UpdateUser_NotFound (0.02s)
=== RUN TestUserHandler_UpdateUser_Success
--- PASS: TestUserHandler_UpdateUser_Success (0.02s)
=== RUN TestUserHandler_DeleteUser_NonAdmin
--- PASS: TestUserHandler_DeleteUser_NonAdmin (0.01s)
=== RUN TestUserHandler_DeleteUser_InvalidID
--- PASS: TestUserHandler_DeleteUser_InvalidID (0.02s)
=== RUN TestUserHandler_DeleteUser_NotFound
2026/01/10 02:24:19 /projects/Charon/backend/internal/api/handlers/user_handler.go:693 record not found
[0.096ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_DeleteUser_NotFound (0.02s)
=== RUN TestUserHandler_DeleteUser_Success
--- PASS: TestUserHandler_DeleteUser_Success (0.02s)
=== RUN TestUserHandler_DeleteUser_CannotDeleteSelf
--- PASS: TestUserHandler_DeleteUser_CannotDeleteSelf (0.02s)
=== RUN TestUserHandler_UpdateUserPermissions_NonAdmin
--- PASS: TestUserHandler_UpdateUserPermissions_NonAdmin (0.01s)
=== RUN TestUserHandler_UpdateUserPermissions_InvalidID
--- PASS: TestUserHandler_UpdateUserPermissions_InvalidID (0.02s)
=== RUN TestUserHandler_UpdateUserPermissions_InvalidJSON
--- PASS: TestUserHandler_UpdateUserPermissions_InvalidJSON (0.01s)
=== RUN TestUserHandler_UpdateUserPermissions_NotFound
2026/01/10 02:24:19 /projects/Charon/backend/internal/api/handlers/user_handler.go:734 record not found
[0.079ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_UpdateUserPermissions_NotFound (0.01s)
=== RUN TestUserHandler_UpdateUserPermissions_Success
--- PASS: TestUserHandler_UpdateUserPermissions_Success (0.02s)
=== RUN TestUserHandler_ValidateInvite_MissingToken
--- PASS: TestUserHandler_ValidateInvite_MissingToken (0.01s)
=== RUN TestUserHandler_ValidateInvite_InvalidToken
2026/01/10 02:24:19 /projects/Charon/backend/internal/api/handlers/user_handler.go:783 record not found
[0.091ms] [rows:0] SELECT * FROM `users` WHERE invite_token = "invalidtoken" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_ValidateInvite_InvalidToken (0.01s)
=== RUN TestUserHandler_ValidateInvite_ExpiredToken
--- PASS: TestUserHandler_ValidateInvite_ExpiredToken (0.02s)
=== RUN TestUserHandler_ValidateInvite_AlreadyAccepted
--- PASS: TestUserHandler_ValidateInvite_AlreadyAccepted (0.01s)
=== RUN TestUserHandler_ValidateInvite_Success
--- PASS: TestUserHandler_ValidateInvite_Success (0.02s)
=== RUN TestUserHandler_AcceptInvite_InvalidJSON
--- PASS: TestUserHandler_AcceptInvite_InvalidJSON (0.02s)
=== RUN TestUserHandler_AcceptInvite_InvalidToken
2026/01/10 02:24:19 /projects/Charon/backend/internal/api/handlers/user_handler.go:822 record not found
[0.115ms] [rows:0] SELECT * FROM `users` WHERE invite_token = "invalidtoken" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_AcceptInvite_InvalidToken (0.02s)
=== RUN TestUserHandler_AcceptInvite_Success
--- PASS: TestUserHandler_AcceptInvite_Success (0.78s)
=== RUN TestGenerateSecureToken
--- PASS: TestGenerateSecureToken (0.00s)
=== RUN TestUserHandler_InviteUser_NonAdmin
--- PASS: TestUserHandler_InviteUser_NonAdmin (0.02s)
=== RUN TestUserHandler_InviteUser_InvalidJSON
--- PASS: TestUserHandler_InviteUser_InvalidJSON (0.02s)
=== RUN TestUserHandler_InviteUser_DuplicateEmail
--- PASS: TestUserHandler_InviteUser_DuplicateEmail (0.02s)
=== RUN TestUserHandler_InviteUser_Success
2026/01/10 02:24:20 /projects/Charon/backend/internal/api/handlers/user_handler.go:422 record not found
[0.088ms] [rows:0] SELECT * FROM `users` WHERE email = "newinvite@example.com" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_InviteUser_Success (0.02s)
=== RUN TestUserHandler_InviteUser_WithPermittedHosts
2026/01/10 02:24:20 /projects/Charon/backend/internal/api/handlers/user_handler.go:422 record not found
[0.098ms] [rows:0] SELECT * FROM `users` WHERE email = "invitee-perms@example.com" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_InviteUser_WithPermittedHosts (0.02s)
=== RUN TestUserHandler_InviteUser_WithSMTPConfigured
2026/01/10 02:24:20 /projects/Charon/backend/internal/api/handlers/user_handler.go:422 record not found
[0.107ms] [rows:0] SELECT * FROM `users` WHERE email = "smtp-test@example.com" ORDER BY `users`.`id` LIMIT 1
2026/01/10 02:24:20 /projects/Charon/backend/internal/utils/url.go:17 record not found
[0.081ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestUserHandler_InviteUser_WithSMTPConfigured (0.03s)
=== RUN TestUserHandler_InviteUser_WithSMTPConfigured_DefaultAppName
2026/01/10 02:24:20 /projects/Charon/backend/internal/api/handlers/user_handler.go:422 record not found
[0.117ms] [rows:0] SELECT * FROM `users` WHERE email = "smtp-test-default@example.com" ORDER BY `users`.`id` LIMIT 1
2026/01/10 02:24:20 /projects/Charon/backend/internal/utils/url.go:17 record not found
[0.087ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:20 /projects/Charon/backend/internal/api/handlers/user_handler.go:549 record not found
[0.075ms] [rows:0] SELECT * FROM `settings` WHERE key = "app_name" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestUserHandler_InviteUser_WithSMTPConfigured_DefaultAppName (0.02s)
=== RUN TestUserHandler_AcceptInvite_ExpiredToken
--- PASS: TestUserHandler_AcceptInvite_ExpiredToken (0.02s)
=== RUN TestUserHandler_AcceptInvite_AlreadyAccepted
--- PASS: TestUserHandler_AcceptInvite_AlreadyAccepted (0.02s)
=== RUN TestUserHandler_PreviewInviteURL_NonAdmin
--- PASS: TestUserHandler_PreviewInviteURL_NonAdmin (0.01s)
=== RUN TestUserHandler_PreviewInviteURL_InvalidJSON
--- PASS: TestUserHandler_PreviewInviteURL_InvalidJSON (0.01s)
=== RUN TestUserHandler_PreviewInviteURL_Success_Unconfigured
2026/01/10 02:24:20 /projects/Charon/backend/internal/utils/url.go:17 record not found
[0.102ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:20 /projects/Charon/backend/internal/api/handlers/user_handler.go:529 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestUserHandler_PreviewInviteURL_Success_Unconfigured (0.02s)
=== RUN TestUserHandler_PreviewInviteURL_Success_Configured
--- PASS: TestUserHandler_PreviewInviteURL_Success_Configured (0.02s)
=== RUN TestGetAppName_Default
2026/01/10 02:24:20 /projects/Charon/backend/internal/api/handlers/user_handler.go:549 record not found
[0.093ms] [rows:0] SELECT * FROM `settings` WHERE key = "app_name" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestGetAppName_Default (0.01s)
=== RUN TestGetAppName_FromSettings
--- PASS: TestGetAppName_FromSettings (0.02s)
=== RUN TestGetAppName_EmptyValue
--- PASS: TestGetAppName_EmptyValue (0.01s)
=== RUN TestUserHandler_UpdateUser_EmailConflict
--- PASS: TestUserHandler_UpdateUser_EmailConflict (0.02s)
=== RUN TestUserHandler_CreateUser_EmailNormalization
--- PASS: TestUserHandler_CreateUser_EmailNormalization (0.74s)
=== RUN TestUserHandler_InviteUser_EmailNormalization
2026/01/10 02:24:21 /projects/Charon/backend/internal/api/handlers/user_handler.go:422 record not found
[0.102ms] [rows:0] SELECT * FROM `users` WHERE email = "invite@example.com" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_InviteUser_EmailNormalization (0.02s)
=== RUN TestUserHandler_CreateUser_DefaultPermissionMode
--- PASS: TestUserHandler_CreateUser_DefaultPermissionMode (0.76s)
=== RUN TestUserHandler_InviteUser_DefaultPermissionMode
2026/01/10 02:24:21 /projects/Charon/backend/internal/api/handlers/user_handler.go:422 record not found
[0.081ms] [rows:0] SELECT * FROM `users` WHERE email = "defaultinvite@example.com" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_InviteUser_DefaultPermissionMode (0.02s)
=== RUN TestUserHandler_CreateUser_DefaultRole
--- PASS: TestUserHandler_CreateUser_DefaultRole (0.81s)
=== RUN TestUserHandler_InviteUser_DefaultRole
2026/01/10 02:24:22 /projects/Charon/backend/internal/api/handlers/user_handler.go:422 record not found
[0.104ms] [rows:0] SELECT * FROM `users` WHERE email = "defaultroleinvite@example.com" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestUserHandler_InviteUser_DefaultRole (0.02s)
=== RUN TestUserHandler_CreateUser_EmptyPermittedHosts
--- PASS: TestUserHandler_CreateUser_EmptyPermittedHosts (0.75s)
=== RUN TestUserHandler_CreateUser_NonExistentPermittedHosts
--- PASS: TestUserHandler_CreateUser_NonExistentPermittedHosts (0.71s)
=== RUN TestUserLoginAfterEmailChange
--- PASS: TestUserLoginAfterEmailChange (3.64s)
=== RUN TestWebSocketStatusHandler_GetConnections
--- PASS: TestWebSocketStatusHandler_GetConnections (0.00s)
=== RUN TestWebSocketStatusHandler_GetConnectionsEmpty
--- PASS: TestWebSocketStatusHandler_GetConnectionsEmpty (0.00s)
=== RUN TestWebSocketStatusHandler_GetStats
--- PASS: TestWebSocketStatusHandler_GetStats (0.00s)
=== RUN TestWebSocketStatusHandler_GetStatsEmpty
--- PASS: TestWebSocketStatusHandler_GetStatsEmpty (0.00s)
=== RUN TestCredentialHandler_Create
--- PASS: TestCredentialHandler_Create (0.01s)
=== RUN TestCredentialHandler_Create_InvalidProviderID
--- PASS: TestCredentialHandler_Create_InvalidProviderID (0.01s)
=== RUN TestCredentialHandler_List
--- PASS: TestCredentialHandler_List (0.06s)
=== RUN TestCredentialHandler_Get
--- PASS: TestCredentialHandler_Get (0.01s)
=== RUN TestCredentialHandler_Get_NotFound
2026/01/10 02:24:27 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.111ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 9999 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Get_NotFound (0.01s)
=== RUN TestCredentialHandler_Update
--- PASS: TestCredentialHandler_Update (0.02s)
=== RUN TestCredentialHandler_Delete
2026/01/10 02:24:27 /projects/Charon/backend/internal/services/credential_service.go:349 database table is locked
[0.198ms] [rows:0] DELETE FROM `dns_provider_credentials` WHERE `dns_provider_credentials`.`id` = 1
credential_handler_test.go:271:
Error Trace: /projects/Charon/backend/internal/api/handlers/credential_handler_test.go:271
Error: Not equal:
expected: 204
actual : 500
Test: TestCredentialHandler_Delete
credential_handler_test.go:275:
Error Trace: /projects/Charon/backend/internal/api/handlers/credential_handler_test.go:275
Error: Expected error with "credential not found" in chain but got nil.
Test: TestCredentialHandler_Delete
--- FAIL: TestCredentialHandler_Delete (0.01s)
=== RUN TestCredentialHandler_Test
2026/01/10 02:24:27 /projects/Charon/backend/internal/services/credential_service.go:431 database table is locked
[0.284ms] [rows:0] UPDATE `dns_provider_credentials` SET `uuid`="f40f619f-7684-4790-b783-ac5e44294763",`dns_provider_id`=1,`label`="Test",`zone_filter`="",`enabled`=true,`credentials_encrypted`="NBrnkSpfbFdR/MjU6p0DHJ+vnHw83TDcFg9uM543VBlnMlK1Sdw/IvMOMEVHGmAumg==",`key_version`=1,`propagation_timeout`=120,`polling_interval`=5,`last_used_at`=NULL,`success_count`=1,`failure_count`=0,`last_error`="",`created_at`="2026-01-10 02:24:27.934",`updated_at`="2026-01-10 02:24:27.935" WHERE `id` = 1
--- PASS: TestCredentialHandler_Test (0.01s)
=== RUN TestCredentialHandler_EnableMultiCredentials
--- PASS: TestCredentialHandler_EnableMultiCredentials (0.01s)
=== RUN TestCredentialHandler_List_InvalidProviderID
--- PASS: TestCredentialHandler_List_InvalidProviderID (0.01s)
=== RUN TestCredentialHandler_List_ProviderNotFound
2026/01/10 02:24:27 /projects/Charon/backend/internal/services/credential_service.go:86 record not found
[0.095ms] [rows:0] SELECT * FROM `dns_providers` WHERE `dns_providers`.`id` = 9999 ORDER BY `dns_providers`.`id` LIMIT 1
--- PASS: TestCredentialHandler_List_ProviderNotFound (0.01s)
=== RUN TestCredentialHandler_List_MultiCredentialNotEnabled
--- PASS: TestCredentialHandler_List_MultiCredentialNotEnabled (0.00s)
=== RUN TestCredentialHandler_Create_ProviderNotFound
2026/01/10 02:24:27 /projects/Charon/backend/internal/services/credential_service.go:127 record not found
[0.098ms] [rows:0] SELECT * FROM `dns_providers` WHERE `dns_providers`.`id` = 9999 ORDER BY `dns_providers`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Create_ProviderNotFound (0.01s)
=== RUN TestCredentialHandler_Create_MultiCredentialNotEnabled
--- PASS: TestCredentialHandler_Create_MultiCredentialNotEnabled (0.01s)
=== RUN TestCredentialHandler_Create_InvalidJSON
--- PASS: TestCredentialHandler_Create_InvalidJSON (0.00s)
=== RUN TestCredentialHandler_Create_MissingRequiredFields
--- PASS: TestCredentialHandler_Create_MissingRequiredFields (0.01s)
=== RUN TestCredentialHandler_Create_InvalidProviderType
--- PASS: TestCredentialHandler_Create_InvalidProviderType (0.01s)
=== RUN TestCredentialHandler_Get_InvalidProviderID
--- PASS: TestCredentialHandler_Get_InvalidProviderID (0.01s)
=== RUN TestCredentialHandler_Get_InvalidCredentialID
--- PASS: TestCredentialHandler_Get_InvalidCredentialID (0.00s)
=== RUN TestCredentialHandler_Update_InvalidProviderID
--- PASS: TestCredentialHandler_Update_InvalidProviderID (0.01s)
=== RUN TestCredentialHandler_Update_InvalidCredentialID
--- PASS: TestCredentialHandler_Update_InvalidCredentialID (0.01s)
=== RUN TestCredentialHandler_Update_NotFound
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.103ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 9999 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Update_NotFound (0.01s)
=== RUN TestCredentialHandler_Update_InvalidJSON
--- PASS: TestCredentialHandler_Update_InvalidJSON (0.01s)
=== RUN TestCredentialHandler_Delete_InvalidProviderID
--- PASS: TestCredentialHandler_Delete_InvalidProviderID (0.00s)
=== RUN TestCredentialHandler_Delete_InvalidCredentialID
--- PASS: TestCredentialHandler_Delete_InvalidCredentialID (0.00s)
=== RUN TestCredentialHandler_Delete_NotFound
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.136ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 9999 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Delete_NotFound (0.00s)
=== RUN TestCredentialHandler_Test_InvalidProviderID
--- PASS: TestCredentialHandler_Test_InvalidProviderID (0.00s)
=== RUN TestCredentialHandler_Test_InvalidCredentialID
--- PASS: TestCredentialHandler_Test_InvalidCredentialID (0.00s)
=== RUN TestCredentialHandler_Test_NotFound
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.094ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 9999 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Test_NotFound (0.01s)
=== RUN TestCredentialHandler_EnableMultiCredentials_InvalidProviderID
--- PASS: TestCredentialHandler_EnableMultiCredentials_InvalidProviderID (0.00s)
=== RUN TestCredentialHandler_EnableMultiCredentials_ProviderNotFound
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/credential_service.go:555 record not found
[0.115ms] [rows:0] SELECT * FROM `dns_providers` WHERE `dns_providers`.`id` = 9999 ORDER BY `dns_providers`.`id` LIMIT 1
--- PASS: TestCredentialHandler_EnableMultiCredentials_ProviderNotFound (0.01s)
=== RUN TestCredentialHandler_Create_EncryptionError
--- PASS: TestCredentialHandler_Create_EncryptionError (0.01s)
=== RUN TestCredentialHandler_Update_EncryptionError
--- PASS: TestCredentialHandler_Update_EncryptionError (0.02s)
=== RUN TestCredentialHandler_Update_InvalidProviderType
--- PASS: TestCredentialHandler_Update_InvalidProviderType (0.02s)
=== RUN TestCredentialHandler_Update_InvalidCredentials
--- PASS: TestCredentialHandler_Update_InvalidCredentials (0.02s)
=== RUN TestCredentialHandler_Create_EmptyLabel
--- PASS: TestCredentialHandler_Create_EmptyLabel (0.01s)
=== RUN TestCredentialHandler_Update_WithZoneFilter
--- PASS: TestCredentialHandler_Update_WithZoneFilter (0.02s)
=== RUN TestCredentialHandler_Delete_ProviderNotFound
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.109ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 1 AND dns_provider_id = 9999 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Delete_ProviderNotFound (0.01s)
=== RUN TestCredentialHandler_Test_ProviderNotFound
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.088ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 1 AND dns_provider_id = 9999 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialHandler_Test_ProviderNotFound (0.01s)
=== RUN TestRemoteServerHandler_List
=== PAUSE TestRemoteServerHandler_List
=== RUN TestRemoteServerHandler_Create
=== PAUSE TestRemoteServerHandler_Create
=== RUN TestRemoteServerHandler_TestConnection
=== PAUSE TestRemoteServerHandler_TestConnection
=== RUN TestRemoteServerHandler_Get
=== PAUSE TestRemoteServerHandler_Get
=== RUN TestRemoteServerHandler_Update
=== PAUSE TestRemoteServerHandler_Update
=== RUN TestRemoteServerHandler_Delete
=== PAUSE TestRemoteServerHandler_Delete
=== RUN TestProxyHostHandler_List
=== PAUSE TestProxyHostHandler_List
=== RUN TestProxyHostHandler_Create
=== PAUSE TestProxyHostHandler_Create
=== RUN TestProxyHostHandler_PartialUpdate_DoesNotWipeFields
=== PAUSE TestProxyHostHandler_PartialUpdate_DoesNotWipeFields
=== RUN TestHealthHandler
=== PAUSE TestHealthHandler
=== RUN TestRemoteServerHandler_Errors
=== PAUSE TestRemoteServerHandler_Errors
=== RUN TestImportHandler_GetStatus
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:60 record not found
[0.180ms] [rows:0] SELECT * FROM `import_sessions` WHERE status IN ("pending","reviewing") ORDER BY created_at DESC,`import_sessions`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:60 record not found
[0.101ms] [rows:0] SELECT * FROM `import_sessions` WHERE status IN ("pending","reviewing") ORDER BY created_at DESC,`import_sessions`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:70 record not found
[0.077ms] [rows:0] SELECT * FROM `import_sessions` WHERE source_file = "/tmp/TestImportHandler_GetStatus2696916650/001/mounted.caddyfile" AND status = "committed" ORDER BY committed_at DESC,`import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_GetStatus (0.02s)
=== RUN TestImportHandler_GetPreview
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:122 record not found
[0.193ms] [rows:0] SELECT * FROM `import_sessions` WHERE status IN ("pending","reviewing") ORDER BY created_at DESC,`import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_GetPreview (0.02s)
=== RUN TestImportHandler_Cancel
--- PASS: TestImportHandler_Cancel (0.01s)
=== RUN TestImportHandler_Commit
--- PASS: TestImportHandler_Commit (0.01s)
=== RUN TestImportHandler_Upload
--- PASS: TestImportHandler_Upload (0.02s)
=== RUN TestImportHandler_GetPreview_WithContent
--- PASS: TestImportHandler_GetPreview_WithContent (0.02s)
=== RUN TestImportHandler_Commit_Errors
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:583 record not found
[0.080ms] [rows:0] SELECT * FROM `import_sessions` WHERE uuid = "non-existent" AND status = "reviewing" ORDER BY `import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_Commit_Errors (0.01s)
=== RUN TestImportHandler_Cancel_Errors
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:734 record not found
[0.123ms] [rows:0] SELECT * FROM `import_sessions` WHERE uuid = "non-existent" ORDER BY `import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_Cancel_Errors (0.01s)
=== RUN TestCheckMountedImport
--- PASS: TestCheckMountedImport (0.01s)
=== RUN TestImportHandler_Upload_Failure
--- PASS: TestImportHandler_Upload_Failure (0.02s)
=== RUN TestImportHandler_Upload_Conflict
--- PASS: TestImportHandler_Upload_Conflict (0.02s)
=== RUN TestImportHandler_GetPreview_BackupContent
--- PASS: TestImportHandler_GetPreview_BackupContent (0.02s)
=== RUN TestImportHandler_RegisterRoutes
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:60 record not found
[0.152ms] [rows:0] SELECT * FROM `import_sessions` WHERE status IN ("pending","reviewing") ORDER BY created_at DESC,`import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_RegisterRoutes (0.02s)
=== RUN TestImportHandler_GetPreview_TransientMount
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:122 record not found
[0.162ms] [rows:0] SELECT * FROM `import_sessions` WHERE status IN ("pending","reviewing") ORDER BY created_at DESC,`import_sessions`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:167 record not found
[0.074ms] [rows:0] SELECT * FROM `import_sessions` WHERE source_file = "/tmp/TestImportHandler_GetPreview_TransientMount3200069616/001/mounted.caddyfile" AND status = "committed" ORDER BY committed_at DESC,`import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_GetPreview_TransientMount (0.02s)
=== RUN TestImportHandler_Commit_TransientUpload
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:583 record not found
[0.101ms] [rows:0] SELECT * FROM `import_sessions` WHERE uuid = "07b56185-d75c-46c0-8e2d-ece5943f0c14" AND status = "reviewing" ORDER BY `import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_Commit_TransientUpload (0.02s)
=== RUN TestImportHandler_Commit_TransientMount
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:583 record not found
[0.112ms] [rows:0] SELECT * FROM `import_sessions` WHERE uuid = "7b3daafe-be1a-4222-a08f-4b5b10b631e8" AND status = "reviewing" ORDER BY `import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_Commit_TransientMount (0.02s)
=== RUN TestImportHandler_Cancel_TransientUpload
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:734 record not found
[0.108ms] [rows:0] SELECT * FROM `import_sessions` WHERE uuid = "49cca609-8bee-4ea1-bb1f-0381031e0894" ORDER BY `import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_Cancel_TransientUpload (0.03s)
=== RUN TestImportHandler_Errors
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:583 record not found
[0.156ms] [rows:0] SELECT * FROM `import_sessions` WHERE uuid = "non-existent" AND status = "reviewing" ORDER BY `import_sessions`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/import_handler.go:734 record not found
[0.063ms] [rows:0] SELECT * FROM `import_sessions` WHERE uuid = "non-existent" ORDER BY `import_sessions`.`id` LIMIT 1
--- PASS: TestImportHandler_Errors (0.01s)
=== RUN TestImportHandler_DetectImports
=== RUN TestImportHandler_DetectImports/no_imports
=== RUN TestImportHandler_DetectImports/single_import
=== RUN TestImportHandler_DetectImports/multiple_imports
=== RUN TestImportHandler_DetectImports/import_with_comment
--- PASS: TestImportHandler_DetectImports (0.02s)
--- PASS: TestImportHandler_DetectImports/no_imports (0.00s)
--- PASS: TestImportHandler_DetectImports/single_import (0.00s)
--- PASS: TestImportHandler_DetectImports/multiple_imports (0.00s)
--- PASS: TestImportHandler_DetectImports/import_with_comment (0.00s)
=== RUN TestImportHandler_DetectImports_InvalidJSON
--- PASS: TestImportHandler_DetectImports_InvalidJSON (0.01s)
=== RUN TestImportHandler_UploadMulti
=== RUN TestImportHandler_UploadMulti/single_Caddyfile
=== RUN TestImportHandler_UploadMulti/Caddyfile_with_site_files
=== RUN TestImportHandler_UploadMulti/missing_Caddyfile
=== RUN TestImportHandler_UploadMulti/path_traversal_in_filename
=== RUN TestImportHandler_UploadMulti/empty_file_content
--- PASS: TestImportHandler_UploadMulti (0.03s)
--- PASS: TestImportHandler_UploadMulti/single_Caddyfile (0.00s)
--- PASS: TestImportHandler_UploadMulti/Caddyfile_with_site_files (0.00s)
--- PASS: TestImportHandler_UploadMulti/missing_Caddyfile (0.00s)
--- PASS: TestImportHandler_UploadMulti/path_traversal_in_filename (0.00s)
--- PASS: TestImportHandler_UploadMulti/empty_file_content (0.00s)
=== RUN TestNotificationHandler_List
--- PASS: TestNotificationHandler_List (0.01s)
=== RUN TestNotificationHandler_MarkAsRead
--- PASS: TestNotificationHandler_MarkAsRead (0.01s)
=== RUN TestNotificationHandler_MarkAllAsRead
--- PASS: TestNotificationHandler_MarkAllAsRead (0.01s)
=== RUN TestNotificationHandler_MarkAllAsRead_Error
--- PASS: TestNotificationHandler_MarkAllAsRead_Error (0.01s)
=== RUN TestNotificationHandler_DBError
--- PASS: TestNotificationHandler_DBError (0.01s)
=== RUN TestNotificationProviderHandler_CRUD
[GIN] 2026/01/10 - 02:24:28 | 201 | 455.583µs | | POST "/api/v1/notifications/providers"
[GIN] 2026/01/10 - 02:24:28 | 200 | 237.03µs | | GET "/api/v1/notifications/providers"
[GIN] 2026/01/10 - 02:24:28 | 200 | 395.081µs | | PUT "/api/v1/notifications/providers/19f9ccc0-a4f6-421b-9541-c556bdee06d9"
[GIN] 2026/01/10 - 02:24:28 | 200 | 153.631µs | | DELETE "/api/v1/notifications/providers/19f9ccc0-a4f6-421b-9541-c556bdee06d9"
--- PASS: TestNotificationProviderHandler_CRUD (0.01s)
=== RUN TestNotificationProviderHandler_Templates
[GIN] 2026/01/10 - 02:24:28 | 200 | 84.391µs | | GET "/api/v1/notifications/templates"
--- PASS: TestNotificationProviderHandler_Templates (0.01s)
=== RUN TestNotificationProviderHandler_Test
[GIN] 2026/01/10 - 02:24:28 | 400 | 535.722µs | | POST "/api/v1/notifications/providers/test"
--- PASS: TestNotificationProviderHandler_Test (0.00s)
=== RUN TestNotificationProviderHandler_Errors
[GIN] 2026/01/10 - 02:24:28 | 400 | 38.21µs | | POST "/api/v1/notifications/providers"
[GIN] 2026/01/10 - 02:24:28 | 400 | 20.67µs | | PUT "/api/v1/notifications/providers/123"
[GIN] 2026/01/10 - 02:24:28 | 400 | 19.43µs | | POST "/api/v1/notifications/providers/test"
--- PASS: TestNotificationProviderHandler_Errors (0.00s)
=== RUN TestNotificationProviderHandler_InvalidCustomTemplate_Rejects
[GIN] 2026/01/10 - 02:24:28 | 400 | 203.791µs | | POST "/api/v1/notifications/providers"
[GIN] 2026/01/10 - 02:24:28 | 201 | 416.732µs | | POST "/api/v1/notifications/providers"
[GIN] 2026/01/10 - 02:24:28 | 400 | 137.501µs | | PUT "/api/v1/notifications/providers/c3d48686-6348-4440-8417-eaec4cd16093"
--- PASS: TestNotificationProviderHandler_InvalidCustomTemplate_Rejects (0.01s)
=== RUN TestNotificationProviderHandler_Preview
[GIN] 2026/01/10 - 02:24:28 | 200 | 415.902µs | | POST "/api/v1/notifications/providers/preview"
[GIN] 2026/01/10 - 02:24:28 | 400 | 248.891µs | | POST "/api/v1/notifications/providers/preview"
--- PASS: TestNotificationProviderHandler_Preview (0.00s)
=== RUN TestRemoteServerHandler_TestConnectionCustom
[GIN] 2026/01/10 - 02:24:28 | 200 | 1.952616ms | | POST "/api/v1/remote-servers/test"
--- PASS: TestRemoteServerHandler_TestConnectionCustom (0.03s)
=== RUN TestRemoteServerHandler_FullCRUD
[GIN] 2026/01/10 - 02:24:28 | 201 | 1.055584ms | | POST "/api/v1/remote-servers"
[GIN] 2026/01/10 - 02:24:28 | 200 | 274.871µs | | GET "/api/v1/remote-servers"
[GIN] 2026/01/10 - 02:24:28 | 200 | 233.741µs | | GET "/api/v1/remote-servers/5a619327-d8de-4d58-917a-f6d159264bbc"
[GIN] 2026/01/10 - 02:24:28 | 200 | 675.653µs | | PUT "/api/v1/remote-servers/5a619327-d8de-4d58-917a-f6d159264bbc"
[GIN] 2026/01/10 - 02:24:28 | 204 | 504.062µs | | DELETE "/api/v1/remote-servers/5a619327-d8de-4d58-917a-f6d159264bbc"
[GIN] 2026/01/10 - 02:24:28 | 400 | 32.881µs | | POST "/api/v1/remote-servers"
[GIN] 2026/01/10 - 02:24:28 | 404 | 131.18µs | | PUT "/api/v1/remote-servers/non-existent-uuid"
[GIN] 2026/01/10 - 02:24:28 | 404 | 113.17µs | | DELETE "/api/v1/remote-servers/non-existent-uuid"
--- PASS: TestRemoteServerHandler_FullCRUD (0.03s)
=== RUN TestSettingsHandler_GetSettings
--- PASS: TestSettingsHandler_GetSettings (0.00s)
=== RUN TestSettingsHandler_GetSettings_DatabaseError
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/settings_handler.go:30 sql: database is closed
[0.026ms] [rows:0] SELECT * FROM `settings`
--- PASS: TestSettingsHandler_GetSettings_DatabaseError (0.00s)
=== RUN TestSettingsHandler_UpdateSettings
--- PASS: TestSettingsHandler_UpdateSettings (0.00s)
=== RUN TestSettingsHandler_UpdateSetting_DatabaseError
2026/01/10 02:24:28 /projects/Charon/backend/internal/api/handlers/settings_handler.go:72 sql: database is closed
[0.026ms] [rows:0] SELECT * FROM `settings` WHERE `settings`.`key` = "test_key" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestSettingsHandler_UpdateSetting_DatabaseError (0.00s)
=== RUN TestSettingsHandler_Errors
--- PASS: TestSettingsHandler_Errors (0.00s)
=== RUN TestSettingsHandler_GetSMTPConfig
--- PASS: TestSettingsHandler_GetSMTPConfig (0.00s)
=== RUN TestSettingsHandler_GetSMTPConfig_Empty
--- PASS: TestSettingsHandler_GetSMTPConfig_Empty (0.01s)
=== RUN TestSettingsHandler_GetSMTPConfig_DatabaseError
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:91 sql: database is closed
[0.019ms] [rows:0] SELECT * FROM `settings` WHERE category = "smtp"
--- PASS: TestSettingsHandler_GetSMTPConfig_DatabaseError (0.00s)
=== RUN TestSettingsHandler_UpdateSMTPConfig_NonAdmin
--- PASS: TestSettingsHandler_UpdateSMTPConfig_NonAdmin (0.00s)
=== RUN TestSettingsHandler_UpdateSMTPConfig_InvalidJSON
--- PASS: TestSettingsHandler_UpdateSMTPConfig_InvalidJSON (0.00s)
=== RUN TestSettingsHandler_UpdateSMTPConfig_Success
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 record not found
[0.047ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_host" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 record not found
[0.078ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_port" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 record not found
[0.104ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_username" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_password" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 record not found
[0.054ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_from_address" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 record not found
[0.080ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_encryption" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestSettingsHandler_UpdateSMTPConfig_Success (0.00s)
=== RUN TestSettingsHandler_UpdateSMTPConfig_KeepExistingPassword
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 record not found
[0.066ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_username" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestSettingsHandler_UpdateSMTPConfig_KeepExistingPassword (0.00s)
=== RUN TestSettingsHandler_TestSMTPConfig_NonAdmin
--- PASS: TestSettingsHandler_TestSMTPConfig_NonAdmin (0.00s)
=== RUN TestSettingsHandler_TestSMTPConfig_NotConfigured
--- PASS: TestSettingsHandler_TestSMTPConfig_NotConfigured (0.00s)
=== RUN TestSettingsHandler_TestSMTPConfig_Success
--- PASS: TestSettingsHandler_TestSMTPConfig_Success (0.00s)
=== RUN TestSettingsHandler_SendTestEmail_NonAdmin
--- PASS: TestSettingsHandler_SendTestEmail_NonAdmin (0.00s)
=== RUN TestSettingsHandler_SendTestEmail_InvalidJSON
--- PASS: TestSettingsHandler_SendTestEmail_InvalidJSON (0.00s)
=== RUN TestSettingsHandler_SendTestEmail_NotConfigured
--- PASS: TestSettingsHandler_SendTestEmail_NotConfigured (0.00s)
=== RUN TestSettingsHandler_SendTestEmail_Success
--- PASS: TestSettingsHandler_SendTestEmail_Success (0.00s)
=== RUN TestMaskPassword
--- PASS: TestMaskPassword (0.00s)
=== RUN TestSettingsHandler_ValidatePublicURL_NonAdmin
--- PASS: TestSettingsHandler_ValidatePublicURL_NonAdmin (0.00s)
=== RUN TestSettingsHandler_ValidatePublicURL_InvalidFormat
=== RUN TestSettingsHandler_ValidatePublicURL_InvalidFormat/Missing_scheme
=== RUN TestSettingsHandler_ValidatePublicURL_InvalidFormat/Invalid_scheme
=== RUN TestSettingsHandler_ValidatePublicURL_InvalidFormat/URL_with_path
--- PASS: TestSettingsHandler_ValidatePublicURL_InvalidFormat (0.00s)
--- PASS: TestSettingsHandler_ValidatePublicURL_InvalidFormat/Missing_scheme (0.00s)
--- PASS: TestSettingsHandler_ValidatePublicURL_InvalidFormat/Invalid_scheme (0.00s)
--- PASS: TestSettingsHandler_ValidatePublicURL_InvalidFormat/URL_with_path (0.00s)
=== RUN TestSettingsHandler_ValidatePublicURL_Success
=== RUN TestSettingsHandler_ValidatePublicURL_Success/HTTPS_URL
=== RUN TestSettingsHandler_ValidatePublicURL_Success/HTTP_URL
=== RUN TestSettingsHandler_ValidatePublicURL_Success/URL_with_port
=== RUN TestSettingsHandler_ValidatePublicURL_Success/URL_with_trailing_slash
--- PASS: TestSettingsHandler_ValidatePublicURL_Success (0.00s)
--- PASS: TestSettingsHandler_ValidatePublicURL_Success/HTTPS_URL (0.00s)
--- PASS: TestSettingsHandler_ValidatePublicURL_Success/HTTP_URL (0.00s)
--- PASS: TestSettingsHandler_ValidatePublicURL_Success/URL_with_port (0.00s)
--- PASS: TestSettingsHandler_ValidatePublicURL_Success/URL_with_trailing_slash (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_NonAdmin
--- PASS: TestSettingsHandler_TestPublicURL_NonAdmin (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_NoRole
--- PASS: TestSettingsHandler_TestPublicURL_NoRole (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_InvalidJSON
--- PASS: TestSettingsHandler_TestPublicURL_InvalidJSON (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_InvalidURL
--- PASS: TestSettingsHandler_TestPublicURL_InvalidURL (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_PrivateIPBlocked
=== RUN TestSettingsHandler_TestPublicURL_PrivateIPBlocked/localhost
=== RUN TestSettingsHandler_TestPublicURL_PrivateIPBlocked/127.0.0.1
=== RUN TestSettingsHandler_TestPublicURL_PrivateIPBlocked/Private_10.x
=== RUN TestSettingsHandler_TestPublicURL_PrivateIPBlocked/Private_192.168.x
=== RUN TestSettingsHandler_TestPublicURL_PrivateIPBlocked/AWS_metadata
--- PASS: TestSettingsHandler_TestPublicURL_PrivateIPBlocked (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_PrivateIPBlocked/localhost (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_PrivateIPBlocked/127.0.0.1 (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_PrivateIPBlocked/Private_10.x (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_PrivateIPBlocked/Private_192.168.x (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_PrivateIPBlocked/AWS_metadata (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_Success
2026/01/10 02:24:28 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:24:28Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011868760076519","result":"allowed","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestSettingsHandler_TestPublicURL_Success (0.08s)
=== RUN TestSettingsHandler_TestPublicURL_DNSFailure
--- PASS: TestSettingsHandler_TestPublicURL_DNSFailure (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_ConnectivityError
--- PASS: TestSettingsHandler_TestPublicURL_ConnectivityError (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_RFC_1918_-_10.x
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_RFC_1918_-_192.168.x
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_RFC_1918_-_172.16.x
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_localhost
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_127.0.0.1
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_cloud_metadata
=== RUN TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_link-local
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection (0.01s)
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_RFC_1918_-_10.x (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_RFC_1918_-_192.168.x (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_RFC_1918_-_172.16.x (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_localhost (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_127.0.0.1 (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_cloud_metadata (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_SSRFProtection/blocks_link-local (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_EmbeddedCredentials
--- PASS: TestSettingsHandler_TestPublicURL_EmbeddedCredentials (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_EmptyURL
=== RUN TestSettingsHandler_TestPublicURL_EmptyURL/empty_string
=== RUN TestSettingsHandler_TestPublicURL_EmptyURL/missing_field
--- PASS: TestSettingsHandler_TestPublicURL_EmptyURL (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_EmptyURL/empty_string (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_EmptyURL/missing_field (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_InvalidScheme
=== RUN TestSettingsHandler_TestPublicURL_InvalidScheme/ftp_scheme
=== RUN TestSettingsHandler_TestPublicURL_InvalidScheme/file_scheme
=== RUN TestSettingsHandler_TestPublicURL_InvalidScheme/javascript_scheme
--- PASS: TestSettingsHandler_TestPublicURL_InvalidScheme (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_InvalidScheme/ftp_scheme (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_InvalidScheme/file_scheme (0.00s)
--- PASS: TestSettingsHandler_TestPublicURL_InvalidScheme/javascript_scheme (0.00s)
=== RUN TestSettingsHandler_ValidatePublicURL_InvalidJSON
--- PASS: TestSettingsHandler_ValidatePublicURL_InvalidJSON (0.00s)
=== RUN TestSettingsHandler_ValidatePublicURL_URLWithWarning
--- PASS: TestSettingsHandler_ValidatePublicURL_URLWithWarning (0.00s)
=== RUN TestSettingsHandler_UpdateSMTPConfig_DatabaseError
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:91 sql: database is closed
[0.037ms] [rows:0] SELECT * FROM `settings` WHERE category = "smtp"
2026/01/10 02:24:28 /projects/Charon/backend/internal/services/mail_service.go:142 sql: database is closed
[0.026ms] [rows:0] SELECT * FROM `settings` WHERE key = "smtp_host" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestSettingsHandler_UpdateSMTPConfig_DatabaseError (0.00s)
=== RUN TestSettingsHandler_TestPublicURL_IPv6LocalhostBlocked
--- PASS: TestSettingsHandler_TestPublicURL_IPv6LocalhostBlocked (0.00s)
=== RUN TestUptimeHandler_List
[GIN] 2026/01/10 - 02:24:28 | 200 | 437.171µs | | GET "/api/v1/uptime"
--- PASS: TestUptimeHandler_List (0.03s)
=== RUN TestUptimeHandler_GetHistory
[GIN] 2026/01/10 - 02:24:28 | 200 | 266.771µs | | GET "/api/v1/uptime/monitor-1/history"
--- PASS: TestUptimeHandler_GetHistory (0.02s)
=== RUN TestUptimeHandler_CheckMonitor
[GIN] 2026/01/10 - 02:24:28 | 200 | 272.301µs | | POST "/api/v1/uptime/check-mon-1/check"
--- PASS: TestUptimeHandler_CheckMonitor (0.03s)
=== RUN TestUptimeHandler_CheckMonitor_NotFound
[GIN] 2026/01/10 - 02:24:28 | 404 | 286.201µs | | POST "/api/v1/uptime/nonexistent/check"
--- PASS: TestUptimeHandler_CheckMonitor_NotFound (0.02s)
=== RUN TestUptimeHandler_Update
=== RUN TestUptimeHandler_Update/success
[GIN] 2026/01/10 - 02:24:28 | 200 | 589.321µs | | PUT "/api/v1/uptime/monitor-update"
=== RUN TestUptimeHandler_Update/invalid_json
[GIN] 2026/01/10 - 02:24:29 | 400 | 159.921µs | | PUT "/api/v1/uptime/monitor-1"
=== RUN TestUptimeHandler_Update/not_found
[GIN] 2026/01/10 - 02:24:29 | 500 | 239.771µs | | PUT "/api/v1/uptime/nonexistent"
--- PASS: TestUptimeHandler_Update (0.08s)
--- PASS: TestUptimeHandler_Update/success (0.03s)
--- PASS: TestUptimeHandler_Update/invalid_json (0.02s)
--- PASS: TestUptimeHandler_Update/not_found (0.02s)
=== RUN TestUptimeHandler_DeleteAndSync
=== RUN TestUptimeHandler_DeleteAndSync/delete_monitor
[GIN] 2026/01/10 - 02:24:29 | 200 | 455.851µs | | DELETE "/api/v1/uptime/mon-delete"
=== RUN TestUptimeHandler_DeleteAndSync/sync_creates_monitor_for_proxy_host
[GIN] 2026/01/10 - 02:24:29 | 200 | 1.287745ms | | POST "/api/v1/uptime/sync"
=== RUN TestUptimeHandler_DeleteAndSync/update_enabled_via_PUT
[GIN] 2026/01/10 - 02:24:29 | 200 | 564.043µs | | PUT "/api/v1/uptime/mon-enable"
--- PASS: TestUptimeHandler_DeleteAndSync (0.07s)
--- PASS: TestUptimeHandler_DeleteAndSync/delete_monitor (0.02s)
--- PASS: TestUptimeHandler_DeleteAndSync/sync_creates_monitor_for_proxy_host (0.02s)
--- PASS: TestUptimeHandler_DeleteAndSync/update_enabled_via_PUT (0.02s)
=== RUN TestUptimeHandler_Sync_Success
[GIN] 2026/01/10 - 02:24:29 | 200 | 265.551µs | | POST "/api/v1/uptime/sync"
--- PASS: TestUptimeHandler_Sync_Success (0.03s)
=== RUN TestUptimeHandler_Delete_Error
[GIN] 2026/01/10 - 02:24:29 | 500 | 178.732µs | | DELETE "/api/v1/uptime/nonexistent"
--- PASS: TestUptimeHandler_Delete_Error (0.02s)
=== RUN TestUptimeHandler_List_Error
[GIN] 2026/01/10 - 02:24:29 | 500 | 230.432µs | | GET "/api/v1/uptime"
--- PASS: TestUptimeHandler_List_Error (0.02s)
=== RUN TestUptimeHandler_GetHistory_Error
[GIN] 2026/01/10 - 02:24:29 | 500 | 175.441µs | | GET "/api/v1/uptime/monitor-1/history"
--- PASS: TestUptimeHandler_GetHistory_Error (0.02s)
=== CONT TestAuthHandler_Login
=== CONT TestCrowdsecHandler_Status_LAPINotReady
=== CONT TestExportConfigStreamsArchive
=== CONT TestProxyHostHandler_BulkUpdateSecurityHeaders_RemoveProfile
--- PASS: TestExportConfigStreamsArchive (0.02s)
=== CONT TestExportConfig
--- PASS: TestCrowdsecHandler_Status_LAPINotReady (0.03s)
=== CONT TestImportCreatesBackup
--- PASS: TestExportConfig (0.01s)
=== CONT TestListAndReadFile
--- PASS: TestImportCreatesBackup (0.01s)
=== CONT TestRemoteServerHandler_Errors
--- PASS: TestListAndReadFile (0.00s)
=== CONT TestHealthHandler
--- PASS: TestHealthHandler (0.00s)
=== CONT TestProxyHostHandler_PartialUpdate_DoesNotWipeFields
--- PASS: TestProxyHostHandler_BulkUpdateSecurityHeaders_RemoveProfile (0.07s)
--- PASS: TestRemoteServerHandler_Errors (0.04s)
=== CONT TestProxyHostHandler_Create
=== CONT TestProxyHostHandler_List
--- PASS: TestProxyHostHandler_PartialUpdate_DoesNotWipeFields (0.06s)
=== CONT TestRemoteServerHandler_Update
--- PASS: TestProxyHostHandler_Create (0.03s)
=== CONT TestRemoteServerHandler_Get
--- PASS: TestProxyHostHandler_List (0.05s)
=== CONT TestRemoteServerHandler_TestConnection
--- PASS: TestRemoteServerHandler_Update (0.03s)
=== CONT TestRemoteServerHandler_Create
--- PASS: TestRemoteServerHandler_Get (0.03s)
=== CONT TestRemoteServerHandler_Delete
--- PASS: TestRemoteServerHandler_TestConnection (0.03s)
=== CONT TestOpenTestDB_ParallelSafety
=== RUN TestOpenTestDB_ParallelSafety/parallel-0
=== PAUSE TestOpenTestDB_ParallelSafety/parallel-0
=== RUN TestOpenTestDB_ParallelSafety/parallel-1
=== PAUSE TestOpenTestDB_ParallelSafety/parallel-1
=== RUN TestOpenTestDB_ParallelSafety/parallel-2
=== PAUSE TestOpenTestDB_ParallelSafety/parallel-2
=== RUN TestOpenTestDB_ParallelSafety/parallel-3
=== PAUSE TestOpenTestDB_ParallelSafety/parallel-3
=== RUN TestOpenTestDB_ParallelSafety/parallel-4
=== PAUSE TestOpenTestDB_ParallelSafety/parallel-4
=== CONT TestRemoteServerHandler_List
--- PASS: TestRemoteServerHandler_Create (0.04s)
=== CONT TestSecurityNotificationHandler_UpdateSettings_Success
--- PASS: TestSecurityNotificationHandler_UpdateSettings_Success (0.00s)
--- PASS: TestRemoteServerHandler_Delete (0.03s)
=== CONT TestSecurityNotificationHandler_UpdateSettings_ServiceError
--- PASS: TestSecurityNotificationHandler_UpdateSettings_ServiceError (0.00s)
=== CONT TestSecurityNotificationHandler_UpdateSettings_EmptyWebhookURL
--- PASS: TestSecurityNotificationHandler_UpdateSettings_EmptyWebhookURL (0.00s)
=== CONT TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/AWS_Metadata
=== CONT TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/trace
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/GCP_Metadata
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/critical
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/fatal
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/unknown
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/trace (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/critical (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/fatal (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidMinLogLevel/unknown (0.00s)
=== CONT TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook
=== RUN TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook/http://127.0.0.1/hook
=== RUN TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook/http://localhost/webhook
=== RUN TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook/http://[::1]/api
--- PASS: TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook/http://127.0.0.1/hook (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook/http://localhost/webhook (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_PrivateIPWebhook/http://[::1]/api (0.00s)
=== CONT TestSecurityNotificationHandler_GetSettings_ServiceError
--- PASS: TestSecurityNotificationHandler_GetSettings_ServiceError (0.00s)
=== CONT TestSecurityNotificationHandler_GetSettings_Success
--- PASS: TestSecurityNotificationHandler_GetSettings_Success (0.00s)
=== CONT TestSecurityNotificationHandler_UpdateSettings_InvalidJSON
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidJSON (0.00s)
=== CONT TestBulkUpdateSecurityHeaders_DBError_NonNotFound
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Azure_Metadata
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Private_IP_10.x
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Private_IP_172.16.x
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Private_IP_192.168.x
=== RUN TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Link-local
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF (0.01s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/AWS_Metadata (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/GCP_Metadata (0.01s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Azure_Metadata (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Private_IP_10.x (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Private_IP_172.16.x (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Private_IP_192.168.x (0.00s)
--- PASS: TestSecurityNotificationHandler_UpdateSettings_InvalidWebhookURL_SSRF/Link-local (0.00s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_SetToNull
--- PASS: TestRemoteServerHandler_List (0.03s)
=== CONT TestNewSecurityNotificationHandler
--- PASS: TestNewSecurityNotificationHandler (0.00s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType
2026/01/10 02:24:29 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:615 sql: database is closed
[0.029ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 1 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestBulkUpdateSecurityHeaders_DBError_NonNotFound (0.02s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_InvalidString
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_true
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_true
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_false
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_false
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/array
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/array
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/object
=== PAUSE TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/object
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_SetToNull (0.05s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_NegativeFloat
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_InvalidString (0.04s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_NegativeInt
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_NegativeFloat (0.02s)
=== CONT TestProxyHostUpdate_ForwardAuthEnabled
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment/as_float64
=== RUN TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment/as_string
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_NegativeInt (0.03s)
=== CONT TestProxyHostUpdate_EnableStandardHeaders_False
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment (0.05s)
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment/as_float64 (0.00s)
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_ValidAssignment/as_string (0.01s)
=== CONT TestProxyHostUpdate_WAFDisabled
--- PASS: TestProxyHostUpdate_ForwardAuthEnabled (0.04s)
=== CONT TestProxyHostUpdate_EnableStandardHeaders_True
--- PASS: TestProxyHostUpdate_WAFDisabled (0.03s)
=== CONT TestProxyHostUpdate_CertificateID_StringValue
--- PASS: TestProxyHostUpdate_EnableStandardHeaders_False (0.03s)
=== CONT TestProxyHostUpdate_EnableStandardHeaders_Null
--- PASS: TestProxyHostUpdate_EnableStandardHeaders_True (0.02s)
=== CONT TestProxyHostUpdate_CertificateID_IntValue
--- PASS: TestProxyHostUpdate_EnableStandardHeaders_Null (0.03s)
=== CONT TestProxyHostUpdate_AccessListID_IntValue
--- PASS: TestProxyHostUpdate_CertificateID_StringValue (0.03s)
=== CONT TestProxyHostUpdate_NegativeIntCertificateID
--- PASS: TestProxyHostUpdate_CertificateID_IntValue (0.03s)
=== CONT TestProxyHostHandler_BulkUpdateSecurityHeaders_AllFail
--- PASS: TestProxyHostUpdate_NegativeIntCertificateID (0.02s)
=== CONT TestProxyHostHandler_BulkUpdateSecurityHeaders_ProfileNotFound
--- PASS: TestProxyHostUpdate_AccessListID_IntValue (0.04s)
=== CONT TestProxyHostUpdate_AccessListID_StringValue
2026/01/10 02:24:29 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:615 record not found
[0.111ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE `security_header_profiles`.`id` = 99999 ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestProxyHostHandler_BulkUpdateSecurityHeaders_ProfileNotFound (0.04s)
=== CONT TestProxyHostHandler_BulkUpdateSecurityHeaders_EmptyUUIDs
2026/01/10 02:24:29 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:638 record not found
[0.104ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "8c5c2bdf-0760-4ddb-9980-c72c43b5fe33" ORDER BY `proxy_hosts`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:638 record not found
[0.100ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "ea888497-0fec-4c2e-a9ba-9017bc322ac3" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestProxyHostHandler_BulkUpdateSecurityHeaders_AllFail (0.05s)
=== CONT TestProxyHostHandler_BulkUpdateSecurityHeaders_InvalidJSON
--- PASS: TestProxyHostUpdate_AccessListID_StringValue (0.04s)
=== CONT TestProxyHostHandler_BulkUpdateSecurityHeaders_PartialFailure
--- PASS: TestProxyHostHandler_BulkUpdateSecurityHeaders_EmptyUUIDs (0.03s)
=== CONT TestUpdate_ExistingHostsBackwardCompatibility
--- PASS: TestProxyHostHandler_BulkUpdateSecurityHeaders_InvalidJSON (0.03s)
=== CONT TestUpdate_IntegrationCaddyConfig
2026/01/10 02:24:29 /projects/Charon/backend/internal/api/handlers/proxy_host_handler.go:638 record not found
[0.170ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "d6bdf056-cc3d-4ff3-bc3f-ce1e4dde3499" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestProxyHostHandler_BulkUpdateSecurityHeaders_PartialFailure (0.06s)
=== CONT TestUpdate_WAFDisabled
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.114ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[2.830ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.088ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.079ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.037ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.014ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:24:29 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[3.027ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestUpdate_WAFDisabled (0.04s)
=== CONT TestProxyHostHandler_BulkUpdateSecurityHeaders_Success
--- PASS: TestUpdate_IntegrationCaddyConfig (0.08s)
=== CONT TestUpdate_ForwardAuthEnabled
--- PASS: TestUpdate_ForwardAuthEnabled (0.04s)
=== CONT TestUpdate_EnableStandardHeaders
--- PASS: TestUpdate_ExistingHostsBackwardCompatibility (0.14s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfile_UnsupportedType
--- PASS: TestProxyHostHandler_BulkUpdateSecurityHeaders_Success (0.07s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfile_InvalidFloat
--- PASS: TestUpdate_EnableStandardHeaders (0.06s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfile_InvalidString
--- PASS: TestProxyHostUpdate_SecurityHeaderProfile_InvalidFloat (0.04s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfile_ValidString
--- PASS: TestProxyHostUpdate_SecurityHeaderProfile_UnsupportedType (0.07s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfile_FromNoneToValid
--- PASS: TestProxyHostUpdate_SecurityHeaderProfile_InvalidString (0.03s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfile_ToNone
--- PASS: TestProxyHostUpdate_SecurityHeaderProfile_ValidString (0.05s)
=== CONT TestProxyHostUpdate_InvalidSecurityHeaderProfileID
--- PASS: TestProxyHostUpdate_SecurityHeaderProfile_FromNoneToValid (0.05s)
=== CONT TestProxyHostUpdate_RemoveSecurityHeaderProfile
--- PASS: TestProxyHostUpdate_SecurityHeaderProfile_ToNone (0.05s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfile_StrictToBasic
--- PASS: TestProxyHostUpdate_InvalidSecurityHeaderProfileID (0.10s)
=== CONT TestProxyHostUpdate_AssignSecurityHeaderProfile
--- PASS: TestProxyHostUpdate_RemoveSecurityHeaderProfile (0.10s)
=== CONT TestProxyHostUpdate_ChangeSecurityHeaderProfile
--- PASS: TestProxyHostUpdate_SecurityHeaderProfile_StrictToBasic (0.10s)
=== CONT TestProxyHostCreate_WithCertificateAndLocations
--- PASS: TestProxyHostUpdate_AssignSecurityHeaderProfile (0.04s)
=== CONT TestProxyHostCreate_WithSecurityHeaderProfile
--- PASS: TestProxyHostCreate_WithCertificateAndLocations (0.03s)
=== CONT TestProxyHostUpdate_SetBooleansAndApplication
--- PASS: TestProxyHostCreate_WithSecurityHeaderProfile (0.04s)
=== CONT TestProxyHostUpdate_Locations_InvalidPayload
--- PASS: TestProxyHostUpdate_ChangeSecurityHeaderProfile (0.06s)
=== CONT TestProxyHostUpdate_Locations_Replace
--- PASS: TestProxyHostUpdate_SetBooleansAndApplication (0.04s)
=== CONT TestProxyHostUpdate_ForwardPort_StringValue
--- PASS: TestProxyHostUpdate_Locations_InvalidPayload (0.02s)
=== CONT TestProxyHostUpdate_AdvancedConfig_SetBackup
--- PASS: TestProxyHostUpdate_ForwardPort_StringValue (0.03s)
=== CONT TestProxyHostUpdate_SetCertificateID
--- PASS: TestProxyHostUpdate_Locations_Replace (0.05s)
=== CONT TestProxyHostUpdate_AdvancedConfig_InvalidJSON
--- PASS: TestProxyHostUpdate_AdvancedConfig_SetBackup (0.03s)
=== CONT TestProxyHostUpdate_AdvancedConfig_ClearAndBackup
--- PASS: TestProxyHostUpdate_SetCertificateID (0.03s)
=== CONT TestProxyHostHandler_BulkUpdateACL_EmptyUUIDs
--- PASS: TestProxyHostUpdate_AdvancedConfig_InvalidJSON (0.03s)
=== CONT TestProxyHostHandler_BulkUpdateACL_PartialFailure
--- PASS: TestProxyHostUpdate_AdvancedConfig_ClearAndBackup (0.03s)
=== CONT TestProxyHostHandler_BulkUpdateACL_InvalidJSON
--- PASS: TestProxyHostHandler_BulkUpdateACL_InvalidJSON (0.03s)
=== CONT TestProxyHostHandler_BulkUpdateACL_Success
--- PASS: TestProxyHostHandler_BulkUpdateACL_EmptyUUIDs (0.04s)
=== CONT TestProxyHostWithCaddyIntegration
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/proxyhost_service.go:117 record not found
[0.088ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "07e9e0fb-b069-425f-a470-33bdf2cf6e2e" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestProxyHostHandler_BulkUpdateACL_PartialFailure (0.03s)
=== CONT TestProxyHostHandler_BulkUpdateACL_RemoveACL
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.273ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.126ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.092ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.104ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.033ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.826ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.760ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestProxyHostHandler_BulkUpdateACL_Success (0.03s)
=== CONT TestProxyHostConnection
--- PASS: TestProxyHostHandler_BulkUpdateACL_RemoveACL (0.04s)
=== CONT TestProxyHostHandler_List_Error
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/notification_service.go:96 no such table: notification_providers
[1.014ms] [rows:0] SELECT * FROM `notification_providers` WHERE enabled = true
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.118ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.039ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.311ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.097ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.093ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.039ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.037ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.040ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.124ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.064ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.095ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.131ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.095ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.039ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.032ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.058ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/notification_service.go:96 no such table: notification_providers
[0.069ms] [rows:0] SELECT * FROM `notification_providers` WHERE enabled = true
--- PASS: TestProxyHostWithCaddyIntegration (0.06s)
=== CONT TestProxyHostCreate_AdvancedConfig_Normalization
--- PASS: TestProxyHostConnection (0.03s)
=== CONT TestProxyHostUpdate_CertificateID_Null
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/proxyhost_service.go:126 sql: database is closed
[0.031ms] [rows:0] SELECT * FROM `proxy_hosts` ORDER BY updated_at desc
--- PASS: TestProxyHostHandler_List_Error (0.02s)
=== CONT TestProxyHostValidation
--- PASS: TestProxyHostUpdate_CertificateID_Null (0.04s)
=== CONT TestProxyHostCreate_AdvancedConfig_InvalidJSON
--- PASS: TestProxyHostCreate_AdvancedConfig_Normalization (0.04s)
=== CONT TestProxyHostDelete_WithUptimeCleanup
--- PASS: TestProxyHostValidation (0.05s)
=== CONT TestProxyHostLifecycle
--- PASS: TestProxyHostCreate_AdvancedConfig_InvalidJSON (0.02s)
=== CONT TestCrowdsecHandler_HubEndpoints
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/notification_service.go:96 no such table: notification_providers
[3.430ms] [rows:0] SELECT * FROM `notification_providers` WHERE enabled = true
2026/01/10 02:24:30 /projects/Charon/backend/internal/api/handlers/proxy_host_handler_test.go:143 record not found
[0.133ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "ph-delete-1" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestProxyHostDelete_WithUptimeCleanup (0.03s)
=== CONT TestProxyHostErrors
--- PASS: TestCrowdsecHandler_HubEndpoints (0.01s)
=== CONT TestCrowdsecHandler_Status_LAPIReady
--- PASS: TestCrowdsecHandler_Status_LAPIReady (0.01s)
=== CONT TestCrowdsecHandler_ListDecisions_WithCreatedAt
--- PASS: TestCrowdsecHandler_ListDecisions_WithCreatedAt (0.01s)
=== CONT TestCrowdsecHandler_BanIP_WithConfigYaml
--- PASS: TestCrowdsecHandler_BanIP_WithConfigYaml (0.00s)
=== CONT TestCrowdsecHandler_UnbanIP_WithConfigYaml
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/proxyhost_service.go:117 record not found
[0.108ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "baa89836-1f8a-4d50-9840-30e46e95211b" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestProxyHostLifecycle (0.03s)
=== CONT TestCrowdsecHandler_UpdateAcquisitionConfig_InvalidJSON
--- PASS: TestCrowdsecHandler_UnbanIP_WithConfigYaml (0.01s)
=== CONT TestCrowdsecHandler_UpdateAcquisitionConfig_MissingContent
--- PASS: TestCrowdsecHandler_UpdateAcquisitionConfig_InvalidJSON (0.00s)
=== CONT TestCrowdsecHandler_ListDecisions_WithConfigYaml
--- PASS: TestCrowdsecHandler_UpdateAcquisitionConfig_MissingContent (0.00s)
=== CONT TestCrowdsecHandler_CheckLAPIHealth_InvalidURL
--- PASS: TestCrowdsecHandler_ListDecisions_WithConfigYaml (0.01s)
=== CONT TestCrowdsecHandler_BanIP_ExecutionError
--- PASS: TestCrowdsecHandler_BanIP_ExecutionError (0.11s)
=== CONT TestCrowdsecHandler_GetLAPIDecisions_Fallback
--- PASS: TestCrowdsecHandler_CheckLAPIHealth_InvalidURL (0.12s)
=== CONT TestCrowdsecHandler_UnbanIP_Error
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.028ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.075ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.025ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[3.112ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.784ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestCrowdsecHandler_UnbanIP_Error (0.01s)
=== CONT TestCrowdsecHandler_BanIP_DefaultDuration
--- PASS: TestCrowdsecHandler_GetLAPIDecisions_Fallback (0.02s)
=== CONT TestCrowdsecHandler_UnbanIP_Success
--- PASS: TestCrowdsecHandler_BanIP_DefaultDuration (0.01s)
=== CONT TestCrowdsecHandler_BanIP_EmptyIP
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/proxyhost_service.go:117 record not found
[0.123ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "non-existent-uuid" ORDER BY `proxy_hosts`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/proxyhost_service.go:117 record not found
[0.119ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "non-existent-uuid" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestCrowdsecHandler_UnbanIP_Success (0.01s)
=== CONT TestCrowdsecHandler_BanIP_MissingIP
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.092ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.105ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.086ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.084ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.093ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.092ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.045ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.081ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.037ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestCrowdsecHandler_BanIP_EmptyIP (0.01s)
=== CONT TestCrowdsecHandler_ListDecisions_InvalidJSON
--- PASS: TestCrowdsecHandler_BanIP_MissingIP (0.01s)
=== CONT TestCrowdsecHandler_BanIP_Success
2026/01/10 02:24:30 /projects/Charon/backend/internal/services/proxyhost_service.go:117 record not found
[0.159ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE uuid = "non-existent-uuid" ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestCrowdsecHandler_ListDecisions_InvalidJSON (0.01s)
=== CONT TestCrowdsecHandler_ListDecisions_Empty
=== CONT TestCrowdsecHandler_ListDecisions_Success
--- PASS: TestCrowdsecHandler_ListDecisions_Empty (0.01s)
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.740ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.082ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestCrowdsecHandler_BanIP_Success (0.01s)
=== CONT TestCrowdsecHandler_ReadFile_MissingPath
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.082ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.104ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.110ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.057ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.063ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:24:30 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.069ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestCrowdsecHandler_ListDecisions_Success (0.01s)
=== CONT TestCrowdsecHandler_ListDecisions_CscliError
--- PASS: TestCrowdsecHandler_ReadFile_MissingPath (0.01s)
--- PASS: TestCrowdsecHandler_ListDecisions_CscliError (0.00s)
=== CONT TestCrowdsecHandler_Start_ExecutorError
=== CONT TestCrowdsecHandler_ExportConfig_DirNotFound
--- PASS: TestCrowdsecHandler_ExportConfig_DirNotFound (0.01s)
=== CONT TestCrowdsecHandler_ReadFile_NotFound
--- PASS: TestProxyHostErrors (0.20s)
=== CONT TestCrowdsecStart_LAPINotReadyTimeout
--- PASS: TestCrowdsecHandler_ReadFile_NotFound (0.00s)
=== CONT TestCrowdsecHandler_Status_Error
--- PASS: TestCrowdsecHandler_Start_ExecutorError (0.01s)
=== CONT TestGetAcquisitionConfigNotFound
--- PASS: TestGetAcquisitionConfigNotFound (0.00s)
=== CONT TestRegisterBouncerExecutionError
--- PASS: TestCrowdsecHandler_Status_Error (0.00s)
=== CONT TestGetAcquisitionConfigSuccess
--- PASS: TestRegisterBouncerExecutionError (0.00s)
=== CONT TestRegisterBouncerScriptNotFound
--- PASS: TestGetAcquisitionConfigSuccess (0.00s)
=== CONT TestRegisterBouncerSuccess
--- PASS: TestRegisterBouncerSuccess (0.00s)
=== CONT TestIsConsoleEnrollmentDisabledFromDB
--- PASS: TestRegisterBouncerScriptNotFound (0.00s)
=== CONT TestIsConsoleEnrollmentEnabledFromDB
--- PASS: TestIsConsoleEnrollmentDisabledFromDB (0.01s)
=== CONT TestIsCerberusEnabledFromDB
--- PASS: TestIsConsoleEnrollmentEnabledFromDB (0.01s)
=== CONT TestListFilesMissingDir
--- PASS: TestListFilesMissingDir (0.00s)
=== CONT TestImportConfigRejectsEmptyUpload
=== CONT TestListFilesReturnsEntries
--- PASS: TestImportConfigRejectsEmptyUpload (0.00s)
=== CONT TestWriteFileInvalidPayload
--- PASS: TestWriteFileInvalidPayload (0.00s)
=== CONT TestCrowdsecEndpoints
--- PASS: TestIsCerberusEnabledFromDB (0.00s)
--- PASS: TestListFilesReturnsEntries (0.00s)
=== CONT TestCerberusLogsHandler_UpgradeFailure
--- PASS: TestCerberusLogsHandler_UpgradeFailure (0.00s)
=== CONT TestCerberusLogsHandler_MultipleClients
--- PASS: TestCerberusLogsHandler_MultipleClients (0.40s)
=== CONT TestImportConfig
--- PASS: TestImportConfig (0.00s)
=== CONT TestCerberusLogsHandler_ClientDisconnect
--- PASS: TestCerberusLogsHandler_ClientDisconnect (0.10s)
=== CONT TestCerberusLogsHandler_IPFilter
--- PASS: TestAuthHandler_Login (1.84s)
=== CONT TestCerberusLogsHandler_SourceFilter
--- PASS: TestCerberusLogsHandler_IPFilter (0.30s)
=== CONT TestCerberusLogsHandler_BlockedOnlyFilter
=== CONT TestCerberusLogsHandler_ReceiveLogEntries
--- PASS: TestCerberusLogsHandler_SourceFilter (0.30s)
--- PASS: TestCerberusLogsHandler_BlockedOnlyFilter (0.30s)
=== CONT TestCerberusLogsHandler_NewHandler
--- PASS: TestCerberusLogsHandler_NewHandler (0.00s)
=== CONT TestAuthHandler_CheckHostAccess_Denied
--- PASS: TestAuthHandler_CheckHostAccess_Denied (0.02s)
=== CONT TestAuthHandler_CheckHostAccess_Allowed
--- PASS: TestCerberusLogsHandler_ReceiveLogEntries (0.30s)
=== CONT TestCerberusLogsHandler_SuccessfulConnection
--- PASS: TestCerberusLogsHandler_SuccessfulConnection (0.00s)
=== CONT TestAuthHandler_CheckHostAccess_Unauthorized
--- PASS: TestAuthHandler_CheckHostAccess_Allowed (0.02s)
=== CONT TestWriteFileMissingPath
--- PASS: TestWriteFileMissingPath (0.00s)
=== CONT TestImportConfigRequiresFile
--- PASS: TestImportConfigRequiresFile (0.00s)
=== CONT TestWriteFileInvalidPath
--- PASS: TestWriteFileInvalidPath (0.00s)
=== CONT TestReadFileInvalidPath
--- PASS: TestReadFileInvalidPath (0.00s)
=== CONT TestWriteFileCreatesBackup
--- PASS: TestAuthHandler_CheckHostAccess_Unauthorized (0.02s)
=== CONT TestAuthHandler_GetAccessibleHosts_UserNotFound
--- PASS: TestWriteFileCreatesBackup (0.00s)
=== CONT TestAuthHandler_GetAccessibleHosts_PermittedHosts
2026/01/10 02:24:31 /projects/Charon/backend/internal/api/handlers/auth_handler.go:334 record not found
[0.106ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 99999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestAuthHandler_GetAccessibleHosts_UserNotFound (0.02s)
=== CONT TestAuthHandler_GetAccessibleHosts_DenyAll
--- PASS: TestAuthHandler_GetAccessibleHosts_PermittedHosts (0.03s)
=== CONT TestAuthHandler_GetAccessibleHosts_AllowAll
--- PASS: TestAuthHandler_GetAccessibleHosts_DenyAll (0.02s)
=== CONT TestAuthHandler_GetAccessibleHosts_Unauthorized
--- PASS: TestAuthHandler_GetAccessibleHosts_AllowAll (0.02s)
=== CONT TestAuthHandler_VerifyStatus_DisabledUser
--- PASS: TestAuthHandler_GetAccessibleHosts_Unauthorized (0.02s)
=== CONT TestAuthHandler_VerifyStatus_Authenticated
--- PASS: TestAuthHandler_VerifyStatus_Authenticated (0.73s)
=== CONT TestAuthHandler_VerifyStatus_InvalidToken
--- PASS: TestAuthHandler_VerifyStatus_DisabledUser (0.75s)
=== CONT TestAuthHandler_CheckHostAccess_InvalidHostID
--- PASS: TestAuthHandler_VerifyStatus_InvalidToken (0.02s)
=== CONT TestAuthHandler_VerifyStatus_NotAuthenticated
--- PASS: TestAuthHandler_CheckHostAccess_InvalidHostID (0.02s)
=== CONT TestAuthHandler_Verify_ForwardAuthDenied
--- PASS: TestAuthHandler_VerifyStatus_NotAuthenticated (0.03s)
=== CONT TestAuthHandler_Verify_DisabledUser
--- PASS: TestAuthHandler_Verify_ForwardAuthDenied (0.75s)
=== CONT TestAuthHandler_Verify_ValidToken
--- PASS: TestAuthHandler_Verify_DisabledUser (0.77s)
=== CONT TestAuthHandler_Verify_InvalidToken
--- PASS: TestAuthHandler_Verify_InvalidToken (0.02s)
=== CONT TestAuthHandler_Verify_BearerToken
--- PASS: TestAuthHandler_Verify_ValidToken (0.75s)
=== CONT TestNewAuthHandlerWithDB
--- PASS: TestNewAuthHandlerWithDB (0.01s)
=== CONT TestAuthHandler_Verify_NoCookie
--- PASS: TestAuthHandler_Verify_NoCookie (0.02s)
=== CONT TestAuthHandler_ChangePassword_Errors
--- PASS: TestAuthHandler_ChangePassword_Errors (0.02s)
=== CONT TestAuthHandler_ChangePassword_WrongOld
--- PASS: TestAuthHandler_Verify_BearerToken (0.75s)
=== CONT TestAuthHandler_ChangePassword
--- PASS: TestAuthHandler_ChangePassword_WrongOld (1.71s)
=== CONT TestAuthHandler_Me
--- PASS: TestAuthHandler_Me (0.03s)
=== CONT TestAuthHandler_Me_NotFound
2026/01/10 02:24:35 /projects/Charon/backend/internal/services/auth_service.go:147 record not found
[0.110ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestAuthHandler_Me_NotFound (0.02s)
=== CONT TestAuthHandler_Logout
--- PASS: TestAuthHandler_Logout (0.02s)
=== CONT TestAuthHandler_Register
--- PASS: TestAuthHandler_Register (0.78s)
=== CONT TestAuthHandler_Login_Errors
2026/01/10 02:24:36 /projects/Charon/backend/internal/services/auth_service.go:64 record not found
[0.126ms] [rows:0] SELECT * FROM `users` WHERE email = "nonexistent@example.com" ORDER BY `users`.`id` LIMIT 1
--- PASS: TestAuthHandler_Login_Errors (0.02s)
=== CONT TestAuthHandler_Register_Duplicate
--- PASS: TestAuthHandler_ChangePassword (3.20s)
=== CONT TestSetSecureCookie_HTTP_Lax
--- PASS: TestSetSecureCookie_HTTP_Lax (0.00s)
=== CONT TestOpenTestDB_ParallelSafety/parallel-3
=== CONT TestOpenTestDB_ParallelSafety/parallel-4
=== CONT TestOpenTestDB_ParallelSafety/parallel-2
=== CONT TestOpenTestDB_ParallelSafety/parallel-1
=== CONT TestOpenTestDB_ParallelSafety/parallel-0
--- PASS: TestOpenTestDB_ParallelSafety (0.00s)
--- PASS: TestOpenTestDB_ParallelSafety/parallel-3 (0.00s)
--- PASS: TestOpenTestDB_ParallelSafety/parallel-4 (0.00s)
--- PASS: TestOpenTestDB_ParallelSafety/parallel-2 (0.00s)
--- PASS: TestOpenTestDB_ParallelSafety/parallel-1 (0.00s)
--- PASS: TestOpenTestDB_ParallelSafety/parallel-0 (0.00s)
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_false
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/array
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/object
=== CONT TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_true
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType (0.04s)
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_false (0.00s)
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/array (0.00s)
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/object (0.00s)
--- PASS: TestProxyHostUpdate_SecurityHeaderProfileID_UnsupportedType/boolean_true (0.00s)
2026/01/10 02:24:37 /projects/Charon/backend/internal/services/auth_service.go:54 UNIQUE constraint failed: users.email
[0.517ms] [rows:0] INSERT INTO `users` (`uuid`,`email`,`api_key`,`password_hash`,`name`,`role`,`enabled`,`failed_login_attempts`,`locked_until`,`last_login`,`invite_token`,`invite_expires`,`invited_at`,`invited_by`,`invite_status`,`permission_mode`,`created_at`,`updated_at`) VALUES ("6fce0af7-2cd7-43c4-bd3c-4b55b59b90f9","dup@example.com","a727f701-f3cc-478a-b4ce-b0e4725a470f","$2a$10$wfJbDIjJM9wSS4ZzXClUTe1qVO5jZMtW9QpArDQ09rMPsAnaa/S5S","Dup User","user",true,0,NULL,NULL,"",NULL,NULL,NULL,"","allow_all","2026-01-10 02:24:36.614","2026-01-10 02:24:36.614") RETURNING `id`
--- PASS: TestAuthHandler_Register_Duplicate (0.76s)
--- PASS: TestCrowdsecStart_LAPINotReadyTimeout (60.12s)
--- PASS: TestCrowdsecEndpoints (60.14s)
FAIL
coverage: 86.9% of statements
FAIL github.com/Wikid82/charon/backend/internal/api/handlers 474.816s
=== RUN TestAuthMiddleware_MissingHeader
--- PASS: TestAuthMiddleware_MissingHeader (0.00s)
=== RUN TestRequireRole_Success
--- PASS: TestRequireRole_Success (0.00s)
=== RUN TestRequireRole_Forbidden
--- PASS: TestRequireRole_Forbidden (0.00s)
=== RUN TestAuthMiddleware_Cookie
--- PASS: TestAuthMiddleware_Cookie (1.22s)
=== RUN TestAuthMiddleware_ValidToken
--- PASS: TestAuthMiddleware_ValidToken (0.85s)
=== RUN TestAuthMiddleware_PrefersAuthorizationHeader
--- PASS: TestAuthMiddleware_PrefersAuthorizationHeader (0.82s)
=== RUN TestAuthMiddleware_InvalidToken
--- PASS: TestAuthMiddleware_InvalidToken (0.03s)
=== RUN TestRequireRole_MissingRoleInContext
--- PASS: TestRequireRole_MissingRoleInContext (0.00s)
=== RUN TestAuthMiddleware_QueryParamFallback
--- PASS: TestAuthMiddleware_QueryParamFallback (0.87s)
=== RUN TestAuthMiddleware_PrefersCookieOverQueryParam
--- PASS: TestAuthMiddleware_PrefersCookieOverQueryParam (1.64s)
=== RUN TestRecoveryLogsStacktraceVerbose
--- PASS: TestRecoveryLogsStacktraceVerbose (0.00s)
=== RUN TestRecoveryLogsBriefWhenNotVerbose
--- PASS: TestRecoveryLogsBriefWhenNotVerbose (0.00s)
=== RUN TestRecoveryDoesNotLogSensitiveHeaders
--- PASS: TestRecoveryDoesNotLogSensitiveHeaders (0.00s)
=== RUN TestRecoveryTruncatesLongPanicMessage
--- PASS: TestRecoveryTruncatesLongPanicMessage (0.00s)
=== RUN TestRecoveryNoPanicNormalFlow
--- PASS: TestRecoveryNoPanicNormalFlow (0.00s)
=== RUN TestRecoveryPanicWithNilValue
--- PASS: TestRecoveryPanicWithNilValue (0.00s)
=== RUN TestRequestIDAddsHeaderAndLogger
--- PASS: TestRequestIDAddsHeaderAndLogger (0.00s)
=== RUN TestRequestLoggerSanitizesPath
--- PASS: TestRequestLoggerSanitizesPath (0.00s)
=== RUN TestRequestLoggerIncludesRequestID
--- PASS: TestRequestLoggerIncludesRequestID (0.00s)
=== RUN TestSanitizeHeaders
=== RUN TestSanitizeHeaders/nil_headers
=== RUN TestSanitizeHeaders/redacts_sensitive_headers
=== RUN TestSanitizeHeaders/sanitizes_and_truncates_values
--- PASS: TestSanitizeHeaders (0.00s)
--- PASS: TestSanitizeHeaders/nil_headers (0.00s)
--- PASS: TestSanitizeHeaders/redacts_sensitive_headers (0.00s)
--- PASS: TestSanitizeHeaders/sanitizes_and_truncates_values (0.00s)
=== RUN TestSanitizePath
--- PASS: TestSanitizePath (0.00s)
=== RUN TestSecurityHeaders
=== RUN TestSecurityHeaders/production_mode_sets_HSTS
=== RUN TestSecurityHeaders/development_mode_skips_HSTS
=== RUN TestSecurityHeaders/sets_X-Frame-Options
=== RUN TestSecurityHeaders/sets_X-Content-Type-Options
=== RUN TestSecurityHeaders/sets_X-XSS-Protection
=== RUN TestSecurityHeaders/sets_Referrer-Policy
=== RUN TestSecurityHeaders/sets_Content-Security-Policy
=== RUN TestSecurityHeaders/development_mode_CSP_allows_unsafe-eval
=== RUN TestSecurityHeaders/sets_Permissions-Policy
=== RUN TestSecurityHeaders/sets_Cross-Origin-Opener-Policy_in_production
=== RUN TestSecurityHeaders/skips_Cross-Origin-Opener-Policy_in_development
=== RUN TestSecurityHeaders/sets_Cross-Origin-Resource-Policy
--- PASS: TestSecurityHeaders (0.00s)
--- PASS: TestSecurityHeaders/production_mode_sets_HSTS (0.00s)
--- PASS: TestSecurityHeaders/development_mode_skips_HSTS (0.00s)
--- PASS: TestSecurityHeaders/sets_X-Frame-Options (0.00s)
--- PASS: TestSecurityHeaders/sets_X-Content-Type-Options (0.00s)
--- PASS: TestSecurityHeaders/sets_X-XSS-Protection (0.00s)
--- PASS: TestSecurityHeaders/sets_Referrer-Policy (0.00s)
--- PASS: TestSecurityHeaders/sets_Content-Security-Policy (0.00s)
--- PASS: TestSecurityHeaders/development_mode_CSP_allows_unsafe-eval (0.00s)
--- PASS: TestSecurityHeaders/sets_Permissions-Policy (0.00s)
--- PASS: TestSecurityHeaders/sets_Cross-Origin-Opener-Policy_in_production (0.00s)
--- PASS: TestSecurityHeaders/skips_Cross-Origin-Opener-Policy_in_development (0.00s)
--- PASS: TestSecurityHeaders/sets_Cross-Origin-Resource-Policy (0.00s)
=== RUN TestSecurityHeadersCustomCSP
--- PASS: TestSecurityHeadersCustomCSP (0.00s)
=== RUN TestDefaultSecurityHeadersConfig
--- PASS: TestDefaultSecurityHeadersConfig (0.00s)
=== RUN TestSecurityHeaders_COOP_DevelopmentMode
--- PASS: TestSecurityHeaders_COOP_DevelopmentMode (0.00s)
=== RUN TestSecurityHeaders_COOP_ProductionMode
--- PASS: TestSecurityHeaders_COOP_ProductionMode (0.00s)
=== RUN TestBuildCSP
=== RUN TestBuildCSP/production_CSP
=== RUN TestBuildCSP/development_CSP
--- PASS: TestBuildCSP (0.00s)
--- PASS: TestBuildCSP/production_CSP (0.00s)
--- PASS: TestBuildCSP/development_CSP (0.00s)
=== RUN TestBuildPermissionsPolicy
--- PASS: TestBuildPermissionsPolicy (0.00s)
PASS
coverage: 99.1% of statements
ok github.com/Wikid82/charon/backend/internal/api/middleware (cached) coverage: 99.1% of statements
=== RUN TestRegister
time="2026-01-10T02:16:51Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:51Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:51Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.131ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-basic" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.138ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-api-friendly" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.123ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-strict" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.164ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-paranoid" ORDER BY `security_header_profiles`.`id` LIMIT 1
time="2026-01-10T02:16:51Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:51Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:51Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister (0.13s)
=== RUN TestRegister_WithDevelopmentEnvironment
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:51Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:51Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:51Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:51Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:51Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:51Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_WithDevelopmentEnvironment (0.48s)
=== RUN TestRegister_WithProductionEnvironment
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:51Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:51Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:51Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:51Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:51Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:51Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_WithProductionEnvironment (0.31s)
=== RUN TestRegister_AutoMigrateFailure
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: disk sync complete" count=0
2026/01/10 02:16:51 /projects/Charon/backend/internal/api/routes/routes.go:42 sql: database is closed
[0.005ms] [rows:0] CREATE TABLE `ssl_certificates` (`id` integer PRIMARY KEY AUTOINCREMENT,`uuid` text,`name` text,`provider` text,`domains` text,`certificate` text,`private_key` text,`expires_at` datetime,`auto_renew` numeric DEFAULT false,`created_at` datetime,`updated_at` datetime)
--- PASS: TestRegister_AutoMigrateFailure (0.04s)
=== RUN TestRegisterImportHandler
--- PASS: TestRegisterImportHandler (0.00s)
=== RUN TestRegister_RoutesRegistration
time="2026-01-10T02:16:52Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:52Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:52Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:52Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:52Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:52Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_RoutesRegistration (0.27s)
=== RUN TestRegister_ProxyHostsRequireAuth
time="2026-01-10T02:16:52Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:52Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:52Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:52Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:52Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:52Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
2026/01/10 02:16:52 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.099ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:52 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_ProxyHostsRequireAuth (0.17s)
=== RUN TestRegister_DNSProviders_NotRegisteredWhenEncryptionKeyMissing
time="2026-01-10T02:16:52Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:52Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:52Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:52Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:52Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:52Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_DNSProviders_NotRegisteredWhenEncryptionKeyMissing (0.15s)
=== RUN TestRegister_DNSProviders_NotRegisteredWhenEncryptionKeyInvalid
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:52Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:52Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:52Z" level=error msg="Failed to initialize encryption service - DNS provider features will be unavailable" error="invalid base64 key: illegal base64 data at input byte 3"
time="2026-01-10T02:16:52Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:52Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:52Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_DNSProviders_NotRegisteredWhenEncryptionKeyInvalid (0.18s)
=== RUN TestRegister_DNSProviders_RegisteredWhenEncryptionKeyValid
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:52Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:52Z" level=info msg="Backup service cron scheduler started"
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
time="2026-01-10T02:16:52Z" level=warning msg="Failed to initialize rotation service - key rotation features will be unavailable" error="CHARON_ENCRYPTION_KEY is required"
time="2026-01-10T02:16:52Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:52Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:52Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_DNSProviders_RegisteredWhenEncryptionKeyValid (0.19s)
=== RUN TestRegister_AllRoutesRegistered
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:52Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:53Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:53Z" level=info msg="Backup service cron scheduler started"
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
time="2026-01-10T02:16:53Z" level=warning msg="Failed to initialize rotation service - key rotation features will be unavailable" error="CHARON_ENCRYPTION_KEY is required"
time="2026-01-10T02:16:53Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:53Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:53Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_AllRoutesRegistered (0.17s)
=== RUN TestRegister_MiddlewareApplied
time="2026-01-10T02:16:53Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:53Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:53Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:53Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:53Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:53Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_MiddlewareApplied (0.18s)
=== RUN TestRegister_AuthenticatedRoutes
time="2026-01-10T02:16:53Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:53Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:53Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:53Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:53Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:53Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
=== RUN TestRegister_AuthenticatedRoutes/GET_/api/v1/backups
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.172ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.086ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
=== RUN TestRegister_AuthenticatedRoutes/POST_/api/v1/backups
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.269ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_AuthenticatedRoutes/GET_/api/v1/logs
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.110ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: disk sync complete" count=0
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.531ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_AuthenticatedRoutes/GET_/api/v1/settings
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.170ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.098ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_AuthenticatedRoutes/GET_/api/v1/notifications
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.137ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.080ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_AuthenticatedRoutes/GET_/api/v1/users
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_AuthenticatedRoutes/GET_/api/v1/auth/me
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_AuthenticatedRoutes/POST_/api/v1/auth/logout
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.086ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.067ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_AuthenticatedRoutes/GET_/api/v1/uptime/monitors
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.104ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestRegister_AuthenticatedRoutes (0.20s)
--- PASS: TestRegister_AuthenticatedRoutes/GET_/api/v1/backups (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/POST_/api/v1/backups (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/GET_/api/v1/logs (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/GET_/api/v1/settings (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/GET_/api/v1/notifications (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/GET_/api/v1/users (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/GET_/api/v1/auth/me (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/POST_/api/v1/auth/logout (0.00s)
--- PASS: TestRegister_AuthenticatedRoutes/GET_/api/v1/uptime/monitors (0.00s)
=== RUN TestRegister_AdminRoutes
time="2026-01-10T02:16:53Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:53Z" level=info msg="Backup service cron scheduler started"
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
time="2026-01-10T02:16:53Z" level=warning msg="Failed to initialize rotation service - key rotation features will be unavailable" error="CHARON_ENCRYPTION_KEY is required"
time="2026-01-10T02:16:53Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:53Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:53Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.190ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.096ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.086ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: disk sync complete" count=0
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.120ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestRegister_AdminRoutes (0.17s)
=== RUN TestRegister_PublicRoutes
time="2026-01-10T02:16:53Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:53Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:53Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:53Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:53Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:53Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
=== RUN TestRegister_PublicRoutes/GET_/api/v1/health
=== RUN TestRegister_PublicRoutes/GET_/metrics
=== RUN TestRegister_PublicRoutes/GET_/api/v1/setup
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.312ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.098ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
=== RUN TestRegister_PublicRoutes/GET_/api/v1/auth/status
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.188ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
2026/01/10 02:16:53 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.359ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestRegister_PublicRoutes (0.20s)
--- PASS: TestRegister_PublicRoutes/GET_/api/v1/health (0.00s)
--- PASS: TestRegister_PublicRoutes/GET_/metrics (0.00s)
--- PASS: TestRegister_PublicRoutes/GET_/api/v1/setup (0.00s)
--- PASS: TestRegister_PublicRoutes/GET_/api/v1/auth/status (0.00s)
=== RUN TestRegister_HealthEndpoint
time="2026-01-10T02:16:53Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:54Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:54Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:54Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:54Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:54Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:54Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_HealthEndpoint (0.21s)
=== RUN TestRegister_MetricsEndpoint
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:54Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:54Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:54Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:54Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:54Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:54Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_MetricsEndpoint (0.19s)
=== RUN TestRegister_DBHealthEndpoint
time="2026-01-10T02:16:54Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:54Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:54Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:54Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:54Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:54Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_DBHealthEndpoint (0.18s)
=== RUN TestRegister_LoginEndpoint
time="2026-01-10T02:16:54Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:54Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:54Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:54Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:54Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:54Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
2026/01/10 02:16:54 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.237ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: disk sync complete" count=0
2026/01/10 02:16:54 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.640ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestRegister_LoginEndpoint (0.21s)
=== RUN TestRegister_SetupEndpoint
time="2026-01-10T02:16:54Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:54Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:54Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:54Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:54Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:54Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
2026/01/10 02:16:54 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.124ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:54 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.149ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestRegister_SetupEndpoint (0.22s)
time="2026-01-10T02:16:54Z" level=info msg="CertificateService: disk sync complete" count=0
=== RUN TestRegister_WithEncryptionRoutes
time="2026-01-10T02:16:55Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:55Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:55Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:55Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:55Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_WithEncryptionRoutes (0.21s)
=== RUN TestRegister_UptimeCheckEndpoint
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:55Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:55Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:55Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:55Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:55Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:55Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
2026/01/10 02:16:55 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.092ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:55 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.494ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_UptimeCheckEndpoint (0.17s)
=== RUN TestRegister_CrowdSecRoutes
time="2026-01-10T02:16:55Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:55Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:55Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:55Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:55Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:55Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_CrowdSecRoutes (0.19s)
=== RUN TestRegister_SecurityRoutes
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:55Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:55Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:55Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:55Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:55Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:55Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_SecurityRoutes (0.18s)
=== RUN TestRegister_AccessListRoutes
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:55Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:55Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:55Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:55Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:55Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:55Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_AccessListRoutes (0.17s)
=== RUN TestRegister_CertificateRoutes
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:55Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:55Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:55Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:55Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:55Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:55Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_CertificateRoutes (0.17s)
=== RUN TestRegister_NilHandlers
time="2026-01-10T02:16:55Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:56Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:56Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:56Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:56Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:56Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:56Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_NilHandlers (0.20s)
=== RUN TestRegister_MiddlewareOrder
time="2026-01-10T02:16:56Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:56Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:56Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:56Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:56Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:56Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_MiddlewareOrder (0.17s)
=== RUN TestRegister_GzipCompression
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:56Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:56Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:56Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:56Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:56Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:56Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_GzipCompression (0.20s)
=== RUN TestRegister_CerberusMiddleware
time="2026-01-10T02:16:56Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:56Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:56Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:56Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:56Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:56Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_CerberusMiddleware (0.17s)
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
=== RUN TestRegister_FeatureFlagsEndpoint
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:56Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:56Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:56Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:56Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:56Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:56Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
2026/01/10 02:16:56 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:56 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestRegister_FeatureFlagsEndpoint (0.23s)
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:56Z" level=info msg="CertificateService: disk sync complete" count=0
=== RUN TestRegister_WebSocketRoutes
time="2026-01-10T02:16:57Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:57Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:57Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:57Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:57Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:57Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_WebSocketRoutes (0.19s)
=== RUN TestRegister_NotificationRoutes
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:57Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:57Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:57Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:57Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:57Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:57Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
--- PASS: TestRegister_NotificationRoutes (0.18s)
=== RUN TestRegister_DomainRoutes
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:57Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:57Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:57Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:57Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:57Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:57Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_DomainRoutes (0.20s)
=== RUN TestRegister_VerifyAuthEndpoint
time="2026-01-10T02:16:57Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:57Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:57Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:57Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:57Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:57Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
2026/01/10 02:16:57 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.165ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:57 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.115ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestRegister_VerifyAuthEndpoint (0.21s)
=== RUN TestRegister_SMTPRoutes
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:57Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:57Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:57Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:57Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:57Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:57Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_SMTPRoutes (0.23s)
=== RUN TestRegisterImportHandler_RoutesExist
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:57Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegisterImportHandler_RoutesExist (0.00s)
=== RUN TestRegister_EncryptionRoutesWithValidKey
time="2026-01-10T02:16:58Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:58Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:58Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:58Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:58Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_EncryptionRoutesWithValidKey (0.26s)
=== RUN TestRegister_WAFExclusionRoutes
time="2026-01-10T02:16:58Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:58Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:58Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:58Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:58Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:58Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
--- PASS: TestRegister_WAFExclusionRoutes (0.18s)
=== RUN TestRegister_BreakGlassRoute
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:58Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:58Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:58Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:58Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:58Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:58Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_BreakGlassRoute (0.20s)
=== RUN TestRegister_RateLimitPresetsRoute
time="2026-01-10T02:16:58Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:58Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:58Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:58Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:58Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:58Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=/data
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: scanning cert directory" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/data/certificates
time="2026-01-10T02:16:58Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestRegister_RateLimitPresetsRoute (0.16s)
=== RUN TestRegisterImportHandler
--- PASS: TestRegisterImportHandler (0.02s)
PASS
coverage: 87.1% of statements
ok github.com/Wikid82/charon/backend/internal/api/routes (cached) coverage: 87.1% of statements
=== RUN TestIntegration_WAF_BlockAndMonitor
time="2026-01-10T02:16:51Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:51Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:51Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.091ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-basic" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.134ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-api-friendly" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.127ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-strict" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:16:51 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.094ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-paranoid" ORDER BY `security_header_profiles`.`id` LIMIT 1
time="2026-01-10T02:16:51Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:51Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:51Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=data/caddy/data
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: scanning cert directory" certRoot=data/caddy/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: cert directory does not exist" certRoot=data/caddy/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: disk sync complete" count=0
time="2026-01-10T02:16:51Z" level=info msg="Cleaning up invalid Let's Encrypt certificate associations..."
time="2026-01-10T02:16:51Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:16:51Z" level=warning msg="CHARON_ENCRYPTION_KEY not set - DNS provider and plugin features will be unavailable"
time="2026-01-10T02:16:51Z" level=info msg="GeoIP database not found - geo-blocking features will be unavailable" path=/app/data/geoip/GeoLite2-Country.mmdb
time="2026-01-10T02:16:51Z" level=info msg="LogWatcher started" path=/var/log/caddy/access.log
time="2026-01-10T02:16:51Z" level=info msg="Using Caddy data directory for certificates scan" caddy_data_dir=data/caddy/data
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: scanning cert directory" certRoot=data/caddy/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: cert directory does not exist" certRoot=data/caddy/data/certificates
time="2026-01-10T02:16:51Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestIntegration_WAF_BlockAndMonitor (0.55s)
=== RUN TestInviteToken_MustBeUnguessable
--- PASS: TestInviteToken_MustBeUnguessable (1.00s)
=== RUN TestInviteToken_ExpiredCannotBeUsed
--- PASS: TestInviteToken_ExpiredCannotBeUsed (0.84s)
=== RUN TestInviteToken_CannotBeReused
--- PASS: TestInviteToken_CannotBeReused (1.67s)
=== RUN TestInviteUser_EmailValidation
=== RUN TestInviteUser_EmailValidation/empty_email
=== RUN TestInviteUser_EmailValidation/invalid_email_no_@
=== RUN TestInviteUser_EmailValidation/invalid_email_no_domain
=== RUN TestInviteUser_EmailValidation/sql_injection_attempt
=== RUN TestInviteUser_EmailValidation/script_injection
=== RUN TestInviteUser_EmailValidation/valid_email
--- PASS: TestInviteUser_EmailValidation (0.83s)
--- PASS: TestInviteUser_EmailValidation/empty_email (0.00s)
--- PASS: TestInviteUser_EmailValidation/invalid_email_no_@ (0.00s)
--- PASS: TestInviteUser_EmailValidation/invalid_email_no_domain (0.00s)
--- PASS: TestInviteUser_EmailValidation/sql_injection_attempt (0.00s)
--- PASS: TestInviteUser_EmailValidation/script_injection (0.00s)
--- PASS: TestInviteUser_EmailValidation/valid_email (0.00s)
=== RUN TestAcceptInvite_PasswordValidation
=== RUN TestAcceptInvite_PasswordValidation/empty_password
=== RUN TestAcceptInvite_PasswordValidation/too_short
=== RUN TestAcceptInvite_PasswordValidation/7_chars
=== RUN TestAcceptInvite_PasswordValidation/8_chars_valid
--- PASS: TestAcceptInvite_PasswordValidation (1.71s)
--- PASS: TestAcceptInvite_PasswordValidation/empty_password (0.00s)
--- PASS: TestAcceptInvite_PasswordValidation/too_short (0.00s)
--- PASS: TestAcceptInvite_PasswordValidation/7_chars (0.00s)
--- PASS: TestAcceptInvite_PasswordValidation/8_chars_valid (0.85s)
=== RUN TestUserEndpoints_RequireAdmin
=== RUN TestUserEndpoints_RequireAdmin/GET_/api/users
=== RUN TestUserEndpoints_RequireAdmin/POST_/api/users
=== RUN TestUserEndpoints_RequireAdmin/POST_/api/users/invite
=== RUN TestUserEndpoints_RequireAdmin/GET_/api/users/1
=== RUN TestUserEndpoints_RequireAdmin/PUT_/api/users/1
=== RUN TestUserEndpoints_RequireAdmin/DELETE_/api/users/1
=== RUN TestUserEndpoints_RequireAdmin/PUT_/api/users/1/permissions
--- PASS: TestUserEndpoints_RequireAdmin (0.91s)
--- PASS: TestUserEndpoints_RequireAdmin/GET_/api/users (0.00s)
--- PASS: TestUserEndpoints_RequireAdmin/POST_/api/users (0.00s)
--- PASS: TestUserEndpoints_RequireAdmin/POST_/api/users/invite (0.00s)
--- PASS: TestUserEndpoints_RequireAdmin/GET_/api/users/1 (0.00s)
--- PASS: TestUserEndpoints_RequireAdmin/PUT_/api/users/1 (0.00s)
--- PASS: TestUserEndpoints_RequireAdmin/DELETE_/api/users/1 (0.00s)
--- PASS: TestUserEndpoints_RequireAdmin/PUT_/api/users/1/permissions (0.00s)
=== RUN TestSMTPEndpoints_RequireAdmin
=== RUN TestSMTPEndpoints_RequireAdmin/POST_/api/settings/smtp
=== RUN TestSMTPEndpoints_RequireAdmin/POST_/api/settings/smtp/test
=== RUN TestSMTPEndpoints_RequireAdmin/POST_/api/settings/smtp/test-email
--- PASS: TestSMTPEndpoints_RequireAdmin (0.82s)
--- PASS: TestSMTPEndpoints_RequireAdmin/POST_/api/settings/smtp (0.00s)
--- PASS: TestSMTPEndpoints_RequireAdmin/POST_/api/settings/smtp/test (0.00s)
--- PASS: TestSMTPEndpoints_RequireAdmin/POST_/api/settings/smtp/test-email (0.00s)
=== RUN TestSMTPConfig_PasswordMasked
--- PASS: TestSMTPConfig_PasswordMasked (0.78s)
=== RUN TestSMTPConfig_PortValidation
=== RUN TestSMTPConfig_PortValidation/port_0_invalid
=== RUN TestSMTPConfig_PortValidation/port_-1_invalid
=== RUN TestSMTPConfig_PortValidation/port_65536_invalid
=== RUN TestSMTPConfig_PortValidation/port_587_valid
=== RUN TestSMTPConfig_PortValidation/port_465_valid
=== RUN TestSMTPConfig_PortValidation/port_25_valid
--- PASS: TestSMTPConfig_PortValidation (0.99s)
--- PASS: TestSMTPConfig_PortValidation/port_0_invalid (0.00s)
--- PASS: TestSMTPConfig_PortValidation/port_-1_invalid (0.00s)
--- PASS: TestSMTPConfig_PortValidation/port_65536_invalid (0.00s)
--- PASS: TestSMTPConfig_PortValidation/port_587_valid (0.01s)
--- PASS: TestSMTPConfig_PortValidation/port_465_valid (0.00s)
--- PASS: TestSMTPConfig_PortValidation/port_25_valid (0.00s)
=== RUN TestSMTPConfig_EncryptionValidation
=== RUN TestSMTPConfig_EncryptionValidation/empty_encryption_invalid
=== RUN TestSMTPConfig_EncryptionValidation/invalid_encryption
=== RUN TestSMTPConfig_EncryptionValidation/tls_lowercase_valid
=== RUN TestSMTPConfig_EncryptionValidation/starttls_valid
=== RUN TestSMTPConfig_EncryptionValidation/none_valid
--- PASS: TestSMTPConfig_EncryptionValidation (2.40s)
--- PASS: TestSMTPConfig_EncryptionValidation/empty_encryption_invalid (0.00s)
--- PASS: TestSMTPConfig_EncryptionValidation/invalid_encryption (0.00s)
--- PASS: TestSMTPConfig_EncryptionValidation/tls_lowercase_valid (0.00s)
--- PASS: TestSMTPConfig_EncryptionValidation/starttls_valid (0.00s)
--- PASS: TestSMTPConfig_EncryptionValidation/none_valid (0.00s)
=== RUN TestInviteUser_DuplicateEmailBlocked
--- PASS: TestInviteUser_DuplicateEmailBlocked (0.93s)
=== RUN TestInviteUser_EmailCaseInsensitive
--- PASS: TestInviteUser_EmailCaseInsensitive (0.82s)
=== RUN TestDeleteUser_CannotDeleteSelf
--- PASS: TestDeleteUser_CannotDeleteSelf (0.83s)
=== RUN TestUpdatePermissions_ValidModes
=== RUN TestUpdatePermissions_ValidModes/allow_all_valid
=== RUN TestUpdatePermissions_ValidModes/deny_all_valid
=== RUN TestUpdatePermissions_ValidModes/invalid_mode
=== RUN TestUpdatePermissions_ValidModes/empty_mode
--- PASS: TestUpdatePermissions_ValidModes (0.85s)
--- PASS: TestUpdatePermissions_ValidModes/allow_all_valid (0.00s)
--- PASS: TestUpdatePermissions_ValidModes/deny_all_valid (0.00s)
--- PASS: TestUpdatePermissions_ValidModes/invalid_mode (0.00s)
--- PASS: TestUpdatePermissions_ValidModes/empty_mode (0.00s)
=== RUN TestPublicEndpoints_NoAuthRequired
--- PASS: TestPublicEndpoints_NoAuthRequired (0.81s)
PASS
coverage: [no statements]
ok github.com/Wikid82/charon/backend/internal/api/tests (cached) coverage: [no statements]
=== RUN TestClient_Load_Success
--- PASS: TestClient_Load_Success (0.01s)
=== RUN TestClient_Load_Failure
--- PASS: TestClient_Load_Failure (0.01s)
=== RUN TestClient_GetConfig_Success
--- PASS: TestClient_GetConfig_Success (0.00s)
=== RUN TestClient_Ping_Success
--- PASS: TestClient_Ping_Success (0.00s)
=== RUN TestClient_Ping_Unreachable
--- PASS: TestClient_Ping_Unreachable (0.00s)
=== RUN TestClient_Load_CreateRequestFailure
--- PASS: TestClient_Load_CreateRequestFailure (0.00s)
=== RUN TestClient_Ping_CreateRequestFailure
--- PASS: TestClient_Ping_CreateRequestFailure (0.00s)
=== RUN TestClient_GetConfig_Failure
--- PASS: TestClient_GetConfig_Failure (0.00s)
=== RUN TestClient_GetConfig_InvalidJSON
--- PASS: TestClient_GetConfig_InvalidJSON (0.00s)
=== RUN TestClient_Ping_Failure
--- PASS: TestClient_Ping_Failure (0.00s)
=== RUN TestClient_RequestCreationErrors
--- PASS: TestClient_RequestCreationErrors (0.00s)
=== RUN TestClient_NetworkErrors
--- PASS: TestClient_NetworkErrors (0.00s)
=== RUN TestClient_Load_MarshalFailure
--- PASS: TestClient_Load_MarshalFailure (0.00s)
=== RUN TestClient_Ping_TransportError
--- PASS: TestClient_Ping_TransportError (0.00s)
=== RUN TestClient_GetConfig_BaseURLNil_ReturnsError
--- PASS: TestClient_GetConfig_BaseURLNil_ReturnsError (0.00s)
=== RUN TestClient_RequestCreationErrors_FromInvalidResolvedURL
--- PASS: TestClient_RequestCreationErrors_FromInvalidResolvedURL (0.00s)
=== RUN TestBuildACLHandler_GeoBlacklist
--- PASS: TestBuildACLHandler_GeoBlacklist (0.00s)
=== RUN TestBuildACLHandler_UnknownTypeReturnsNil
--- PASS: TestBuildACLHandler_UnknownTypeReturnsNil (0.00s)
=== RUN TestBuildACLHandler_GeoWhitelist
--- PASS: TestBuildACLHandler_GeoWhitelist (0.00s)
=== RUN TestBuildACLHandler_LocalNetwork
--- PASS: TestBuildACLHandler_LocalNetwork (0.00s)
=== RUN TestBuildACLHandler_IPRules
--- PASS: TestBuildACLHandler_IPRules (0.00s)
=== RUN TestBuildACLHandler_InvalidIPJSON
--- PASS: TestBuildACLHandler_InvalidIPJSON (0.00s)
=== RUN TestBuildACLHandler_NoIPRulesReturnsNil
--- PASS: TestBuildACLHandler_NoIPRulesReturnsNil (0.00s)
=== RUN TestBuildACLHandler_Whitelist
--- PASS: TestBuildACLHandler_Whitelist (0.00s)
=== RUN TestBuildCrowdSecHandler_Disabled
--- PASS: TestBuildCrowdSecHandler_Disabled (0.00s)
=== RUN TestBuildCrowdSecHandler_EnabledWithoutConfig
--- PASS: TestBuildCrowdSecHandler_EnabledWithoutConfig (0.00s)
=== RUN TestBuildCrowdSecHandler_EnabledWithEmptyAPIURL
--- PASS: TestBuildCrowdSecHandler_EnabledWithEmptyAPIURL (0.00s)
=== RUN TestBuildCrowdSecHandler_EnabledWithCustomAPIURL
--- PASS: TestBuildCrowdSecHandler_EnabledWithCustomAPIURL (0.00s)
=== RUN TestBuildCrowdSecHandler_JSONFormat
--- PASS: TestBuildCrowdSecHandler_JSONFormat (0.00s)
=== RUN TestBuildCrowdSecHandler_WithHost
--- PASS: TestBuildCrowdSecHandler_WithHost (0.00s)
=== RUN TestGenerateConfig_WithCrowdSec
--- PASS: TestGenerateConfig_WithCrowdSec (0.00s)
=== RUN TestGenerateConfig_CrowdSecDisabled
--- PASS: TestGenerateConfig_CrowdSecDisabled (0.00s)
=== RUN TestGenerateConfig_CatchAllFrontend
--- PASS: TestGenerateConfig_CatchAllFrontend (0.00s)
=== RUN TestGenerateConfig_AdvancedInvalidJSON
time="2026-01-10T02:16:57Z" level=warning msg="Failed to parse advanced_config for host" error="invalid character 'i' looking for beginning of object key string" host=adv1
--- PASS: TestGenerateConfig_AdvancedInvalidJSON (0.00s)
=== RUN TestGenerateConfig_AdvancedArrayHandler
--- PASS: TestGenerateConfig_AdvancedArrayHandler (0.00s)
=== RUN TestGenerateConfig_LowercaseDomains
--- PASS: TestGenerateConfig_LowercaseDomains (0.00s)
=== RUN TestGenerateConfig_AdvancedObjectHandler
--- PASS: TestGenerateConfig_AdvancedObjectHandler (0.00s)
=== RUN TestGenerateConfig_AdvancedHeadersStringToArray
--- PASS: TestGenerateConfig_AdvancedHeadersStringToArray (0.00s)
=== RUN TestGenerateConfig_ACLWhitelistIncluded
--- PASS: TestGenerateConfig_ACLWhitelistIncluded (0.00s)
=== RUN TestGenerateConfig_SkipsEmptyDomainEntries
--- PASS: TestGenerateConfig_SkipsEmptyDomainEntries (0.00s)
=== RUN TestGenerateConfig_AdvancedNoHandlerKey
time="2026-01-10T02:16:57Z" level=warning msg="advanced_config for host is not a handler object" host=adv3
--- PASS: TestGenerateConfig_AdvancedNoHandlerKey (0.00s)
=== RUN TestGenerateConfig_AdvancedUnexpectedJSONStructure
time="2026-01-10T02:16:57Z" level=warning msg="advanced_config for host has unexpected JSON structure" host=adv4
--- PASS: TestGenerateConfig_AdvancedUnexpectedJSONStructure (0.00s)
=== RUN TestBuildACLHandler_UnknownIPTypeReturnsNil
--- PASS: TestBuildACLHandler_UnknownIPTypeReturnsNil (0.00s)
=== RUN TestGenerateConfig_SecurityPipeline_Order
--- PASS: TestGenerateConfig_SecurityPipeline_Order (0.00s)
=== RUN TestGenerateConfig_SecurityPipeline_OmitWhenDisabled
--- PASS: TestGenerateConfig_SecurityPipeline_OmitWhenDisabled (0.00s)
=== RUN TestGetAccessLogPath
=== RUN TestGetAccessLogPath/CrowdSecEnabled_UsesStandardPath
=== RUN TestGetAccessLogPath/Production_UsesStandardPath
=== RUN TestGetAccessLogPath/Development_UsesRelativePath
=== RUN TestGetAccessLogPath/NoEnv_CrowdSecEnabled_UsesStandardPath
--- PASS: TestGetAccessLogPath (0.00s)
--- PASS: TestGetAccessLogPath/CrowdSecEnabled_UsesStandardPath (0.00s)
--- PASS: TestGetAccessLogPath/Production_UsesStandardPath (0.00s)
--- PASS: TestGetAccessLogPath/Development_UsesRelativePath (0.00s)
--- PASS: TestGetAccessLogPath/NoEnv_CrowdSecEnabled_UsesStandardPath (0.00s)
=== RUN TestGenerateConfig_LoggingConfigured
--- PASS: TestGenerateConfig_LoggingConfigured (0.00s)
=== RUN TestGenerateConfig_ZerosslAndBothProviders
--- PASS: TestGenerateConfig_ZerosslAndBothProviders (0.00s)
=== RUN TestGenerateConfig_SecurityPipeline_Order_Locations
--- PASS: TestGenerateConfig_SecurityPipeline_Order_Locations (0.00s)
=== RUN TestGenerateConfig_ACLLogWarning
--- PASS: TestGenerateConfig_ACLLogWarning (0.00s)
=== RUN TestGenerateConfig_ACLHandlerIncluded
--- PASS: TestGenerateConfig_ACLHandlerIncluded (0.00s)
=== RUN TestGenerateConfig_DecisionsBlockWithAdminExclusion
config_generate_additional_test.go:147: handles: [
{
"handler": "subroute",
"routes": [
{
"handle": [
{
"body": "Access denied: Blocked by security decision",
"handler": "static_response",
"status_code": 403
}
],
"match": [
{
"remote_ip": {
"ranges": [
"1.2.3.4"
]
}
},
{
"not": [
{
"remote_ip": {
"ranges": [
"10.0.0.1/32"
]
}
}
]
}
],
"terminal": true
}
]
},
{
"flush_interval": -1,
"handler": "reverse_proxy",
"headers": {
"request": {
"set": {
"X-Forwarded-Host": [
"{http.request.host}"
],
"X-Forwarded-Port": [
"{http.request.port}"
],
"X-Forwarded-Proto": [
"{http.request.scheme}"
],
"X-Real-IP": [
"{http.request.remote.host}"
]
}
}
},
"upstreams": [
{
"dial": "app:8080"
}
]
}
]
--- PASS: TestGenerateConfig_DecisionsBlockWithAdminExclusion (0.00s)
=== RUN TestGenerateConfig_WAFModeAndRulesetReference
--- PASS: TestGenerateConfig_WAFModeAndRulesetReference (0.00s)
=== RUN TestGenerateConfig_WAFModeDisabledSkipsHandler
--- PASS: TestGenerateConfig_WAFModeDisabledSkipsHandler (0.00s)
=== RUN TestGenerateConfig_WAFSelectedSetsContentAndMode
--- PASS: TestGenerateConfig_WAFSelectedSetsContentAndMode (0.00s)
=== RUN TestGenerateConfig_DecisionAdminPartsEmpty
--- PASS: TestGenerateConfig_DecisionAdminPartsEmpty (0.00s)
=== RUN TestNormalizeHeaderOps_PreserveStringArray
--- PASS: TestNormalizeHeaderOps_PreserveStringArray (0.00s)
=== RUN TestGenerateConfig_WAFUsesRuleSet
--- PASS: TestGenerateConfig_WAFUsesRuleSet (0.00s)
=== RUN TestGenerateConfig_WAFUsesRuleSetFromAdvancedConfig
--- PASS: TestGenerateConfig_WAFUsesRuleSetFromAdvancedConfig (0.00s)
=== RUN TestGenerateConfig_WAFUsesRuleSetFromAdvancedConfig_Array
--- PASS: TestGenerateConfig_WAFUsesRuleSetFromAdvancedConfig_Array (0.00s)
=== RUN TestGenerateConfig_WAFUsesRulesetFromSecCfgFallback
--- PASS: TestGenerateConfig_WAFUsesRulesetFromSecCfgFallback (0.00s)
=== RUN TestGenerateConfig_RateLimitFromSecCfg
--- PASS: TestGenerateConfig_RateLimitFromSecCfg (0.00s)
=== RUN TestGenerateConfig_CrowdSecHandlerFromSecCfg
--- PASS: TestGenerateConfig_CrowdSecHandlerFromSecCfg (0.00s)
=== RUN TestGenerateConfig_EmptyHostsAndNoFrontend
--- PASS: TestGenerateConfig_EmptyHostsAndNoFrontend (0.00s)
=== RUN TestGenerateConfig_SkipsInvalidCustomCert
--- PASS: TestGenerateConfig_SkipsInvalidCustomCert (0.00s)
=== RUN TestGenerateConfig_SkipsDuplicateDomains
--- PASS: TestGenerateConfig_SkipsDuplicateDomains (0.00s)
=== RUN TestGenerateConfig_LoadPEMSetsTLSWhenNoACME
--- PASS: TestGenerateConfig_LoadPEMSetsTLSWhenNoACME (0.00s)
=== RUN TestGenerateConfig_DefaultAcmeStaging
--- PASS: TestGenerateConfig_DefaultAcmeStaging (0.00s)
=== RUN TestGenerateConfig_ACLHandlerBuildError
--- PASS: TestGenerateConfig_ACLHandlerBuildError (0.00s)
=== RUN TestGenerateConfig_SkipHostDomainEmptyAndDisabled
--- PASS: TestGenerateConfig_SkipHostDomainEmptyAndDisabled (0.00s)
=== RUN TestGenerateConfig_CustomCertsAndTLS
--- PASS: TestGenerateConfig_CustomCertsAndTLS (0.00s)
=== RUN TestGenerateConfig_DNSChallenge_LetsEncrypt_StagingCAAndPropagationTimeout
--- PASS: TestGenerateConfig_DNSChallenge_LetsEncrypt_StagingCAAndPropagationTimeout (0.00s)
=== RUN TestGenerateConfig_DNSChallenge_ZeroSSL_IssuerShape
--- PASS: TestGenerateConfig_DNSChallenge_ZeroSSL_IssuerShape (0.00s)
=== RUN TestGenerateConfig_DNSChallenge_SkipsPolicyWhenProviderConfigMissing
--- PASS: TestGenerateConfig_DNSChallenge_SkipsPolicyWhenProviderConfigMissing (0.00s)
=== RUN TestGenerateConfig_HTTPChallenge_ExcludesIPDomains
--- PASS: TestGenerateConfig_HTTPChallenge_ExcludesIPDomains (0.00s)
=== RUN TestGetCrowdSecAPIKey_EnvPriority
--- PASS: TestGetCrowdSecAPIKey_EnvPriority (0.00s)
=== RUN TestHasWildcard_TrueFalse
--- PASS: TestHasWildcard_TrueFalse (0.00s)
=== RUN TestGenerateConfig_MultiCredential_ZoneSpecificPolicies
--- PASS: TestGenerateConfig_MultiCredential_ZoneSpecificPolicies (0.00s)
=== RUN TestGenerateConfig_MultiCredential_ZeroSSL_Issuer
--- PASS: TestGenerateConfig_MultiCredential_ZeroSSL_Issuer (0.00s)
=== RUN TestGenerateConfig_MultiCredential_BothIssuers
--- PASS: TestGenerateConfig_MultiCredential_BothIssuers (0.00s)
=== RUN TestGenerateConfig_MultiCredential_ACMEStaging
--- PASS: TestGenerateConfig_MultiCredential_ACMEStaging (0.00s)
=== RUN TestGenerateConfig_MultiCredential_NoMatchingDomains
--- PASS: TestGenerateConfig_MultiCredential_NoMatchingDomains (0.00s)
=== RUN TestGenerateConfig_MultiCredential_ProviderTypeNotFound
--- PASS: TestGenerateConfig_MultiCredential_ProviderTypeNotFound (0.00s)
=== RUN TestGenerateConfig_MultiCredential_SupportsMultiCredential_UsesZoneConfigAndStagingBothIssuers
--- PASS: TestGenerateConfig_MultiCredential_SupportsMultiCredential_UsesZoneConfigAndStagingBothIssuers (0.00s)
=== RUN TestGenerateConfig_DNSChallenge_SingleCredential_BothIssuers_ACMEStaging
--- PASS: TestGenerateConfig_DNSChallenge_SingleCredential_BothIssuers_ACMEStaging (0.00s)
=== RUN TestGenerateConfig_DNSChallenge_SingleCredential_ProviderTypeNotFound_SkipsPolicy
--- PASS: TestGenerateConfig_DNSChallenge_SingleCredential_ProviderTypeNotFound_SkipsPolicy (0.00s)
=== RUN TestGenerateConfig_DefaultPolicy_LetsEncrypt_StagingCA
--- PASS: TestGenerateConfig_DefaultPolicy_LetsEncrypt_StagingCA (0.00s)
=== RUN TestGenerateConfig_DefaultPolicy_ZeroSSL_Issuer
--- PASS: TestGenerateConfig_DefaultPolicy_ZeroSSL_Issuer (0.00s)
=== RUN TestGenerateConfig_DefaultPolicy_BothIssuers_StagingCA
--- PASS: TestGenerateConfig_DefaultPolicy_BothIssuers_StagingCA (0.00s)
=== RUN TestGenerateConfig_IPSubjects_InitializesTLSAppAndAutomation
--- PASS: TestGenerateConfig_IPSubjects_InitializesTLSAppAndAutomation (0.00s)
=== RUN TestGetAccessLogPath_DockerEnv_UsesCrowdSecPath
--- PASS: TestGetAccessLogPath_DockerEnv_UsesCrowdSecPath (0.00s)
=== RUN TestBuildSecurityHeadersHandler_AllEnabled
--- PASS: TestBuildSecurityHeadersHandler_AllEnabled (0.00s)
=== RUN TestBuildSecurityHeadersHandler_HSTSOnly
--- PASS: TestBuildSecurityHeadersHandler_HSTSOnly (0.00s)
=== RUN TestBuildSecurityHeadersHandler_CSPOnly
--- PASS: TestBuildSecurityHeadersHandler_CSPOnly (0.00s)
=== RUN TestBuildSecurityHeadersHandler_CSPReportOnly
--- PASS: TestBuildSecurityHeadersHandler_CSPReportOnly (0.00s)
=== RUN TestBuildSecurityHeadersHandler_NoProfile
--- PASS: TestBuildSecurityHeadersHandler_NoProfile (0.00s)
=== RUN TestBuildSecurityHeadersHandler_Disabled
--- PASS: TestBuildSecurityHeadersHandler_Disabled (0.00s)
=== RUN TestBuildSecurityHeadersHandler_NilHost
--- PASS: TestBuildSecurityHeadersHandler_NilHost (0.00s)
=== RUN TestBuildCSPString
=== RUN TestBuildCSPString/simple_CSP
=== RUN TestBuildCSPString/multiple_directives
=== RUN TestBuildCSPString/empty_string
=== RUN TestBuildCSPString/invalid_JSON
--- PASS: TestBuildCSPString (0.00s)
--- PASS: TestBuildCSPString/simple_CSP (0.00s)
--- PASS: TestBuildCSPString/multiple_directives (0.00s)
--- PASS: TestBuildCSPString/empty_string (0.00s)
--- PASS: TestBuildCSPString/invalid_JSON (0.00s)
=== RUN TestBuildPermissionsPolicyString
=== RUN TestBuildPermissionsPolicyString/single_feature_no_allowlist
=== RUN TestBuildPermissionsPolicyString/single_feature_with_self
=== RUN TestBuildPermissionsPolicyString/multiple_features
=== RUN TestBuildPermissionsPolicyString/empty_string
=== RUN TestBuildPermissionsPolicyString/invalid_JSON
--- PASS: TestBuildPermissionsPolicyString (0.00s)
--- PASS: TestBuildPermissionsPolicyString/single_feature_no_allowlist (0.00s)
--- PASS: TestBuildPermissionsPolicyString/single_feature_with_self (0.00s)
--- PASS: TestBuildPermissionsPolicyString/multiple_features (0.00s)
--- PASS: TestBuildPermissionsPolicyString/empty_string (0.00s)
--- PASS: TestBuildPermissionsPolicyString/invalid_JSON (0.00s)
=== RUN TestGetDefaultSecurityHeaderProfile
--- PASS: TestGetDefaultSecurityHeaderProfile (0.00s)
=== RUN TestBuildSecurityHeadersHandler_PermissionsPolicy
--- PASS: TestBuildSecurityHeadersHandler_PermissionsPolicy (0.00s)
=== RUN TestBuildSecurityHeadersHandler_InvalidCSPJSON
--- PASS: TestBuildSecurityHeadersHandler_InvalidCSPJSON (0.00s)
=== RUN TestBuildSecurityHeadersHandler_InvalidPermissionsJSON
--- PASS: TestBuildSecurityHeadersHandler_InvalidPermissionsJSON (0.00s)
=== RUN TestBuildSecurityHeadersHandler_APIFriendlyPreset
--- PASS: TestBuildSecurityHeadersHandler_APIFriendlyPreset (0.00s)
=== RUN TestGenerateConfig_Empty
--- PASS: TestGenerateConfig_Empty (0.00s)
=== RUN TestGenerateConfig_SingleHost
--- PASS: TestGenerateConfig_SingleHost (0.00s)
=== RUN TestGenerateConfig_MultipleHosts
--- PASS: TestGenerateConfig_MultipleHosts (0.00s)
=== RUN TestGenerateConfig_WebSocketEnabled
--- PASS: TestGenerateConfig_WebSocketEnabled (0.00s)
=== RUN TestGenerateConfig_EmptyDomain
--- PASS: TestGenerateConfig_EmptyDomain (0.00s)
=== RUN TestGenerateConfig_Logging
--- PASS: TestGenerateConfig_Logging (0.00s)
=== RUN TestGenerateConfig_IPHostsSkipAutoHTTPS
--- PASS: TestGenerateConfig_IPHostsSkipAutoHTTPS (0.00s)
=== RUN TestGenerateConfig_Advanced
--- PASS: TestGenerateConfig_Advanced (0.00s)
=== RUN TestGenerateConfig_ACMEStaging
--- PASS: TestGenerateConfig_ACMEStaging (0.00s)
=== RUN TestBuildACLHandler_WhitelistAndBlacklistAdminMerge
--- PASS: TestBuildACLHandler_WhitelistAndBlacklistAdminMerge (0.00s)
=== RUN TestBuildACLHandler_GeoAndLocalNetwork
--- PASS: TestBuildACLHandler_GeoAndLocalNetwork (0.00s)
=== RUN TestBuildACLHandler_AdminWhitelistParsing
--- PASS: TestBuildACLHandler_AdminWhitelistParsing (0.00s)
=== RUN TestBuildRateLimitHandler_Disabled
--- PASS: TestBuildRateLimitHandler_Disabled (0.00s)
=== RUN TestBuildRateLimitHandler_InvalidValues
--- PASS: TestBuildRateLimitHandler_InvalidValues (0.00s)
=== RUN TestBuildRateLimitHandler_ValidConfig
--- PASS: TestBuildRateLimitHandler_ValidConfig (0.00s)
=== RUN TestBuildRateLimitHandler_JSONFormat
--- PASS: TestBuildRateLimitHandler_JSONFormat (0.00s)
=== RUN TestGenerateConfig_WithRateLimiting
--- PASS: TestGenerateConfig_WithRateLimiting (0.00s)
=== RUN TestBuildRateLimitHandler_UsesBurst
--- PASS: TestBuildRateLimitHandler_UsesBurst (0.00s)
=== RUN TestBuildRateLimitHandler_DefaultBurst
--- PASS: TestBuildRateLimitHandler_DefaultBurst (0.00s)
=== RUN TestGetAccessLogPath_CrowdSecEnabled
--- PASS: TestGetAccessLogPath_CrowdSecEnabled (0.00s)
=== RUN TestGetAccessLogPath_DockerEnv
--- PASS: TestGetAccessLogPath_DockerEnv (0.00s)
=== RUN TestGetAccessLogPath_Development
--- PASS: TestGetAccessLogPath_Development (0.00s)
=== RUN TestBuildPermissionsPolicyString_EmptyAllowlist
--- PASS: TestBuildPermissionsPolicyString_EmptyAllowlist (0.00s)
=== RUN TestBuildPermissionsPolicyString_SelfAndStar
--- PASS: TestBuildPermissionsPolicyString_SelfAndStar (0.00s)
=== RUN TestBuildPermissionsPolicyString_DomainValues
--- PASS: TestBuildPermissionsPolicyString_DomainValues (0.00s)
=== RUN TestBuildPermissionsPolicyString_Mixed
--- PASS: TestBuildPermissionsPolicyString_Mixed (0.00s)
=== RUN TestBuildPermissionsPolicyString_InvalidJSON
--- PASS: TestBuildPermissionsPolicyString_InvalidJSON (0.00s)
=== RUN TestBuildCSPString_EmptyDirective
--- PASS: TestBuildCSPString_EmptyDirective (0.00s)
=== RUN TestBuildCSPString_InvalidJSON
--- PASS: TestBuildCSPString_InvalidJSON (0.00s)
=== RUN TestBuildSecurityHeadersHandler_CompleteProfile
--- PASS: TestBuildSecurityHeadersHandler_CompleteProfile (0.00s)
=== RUN TestGenerateConfig_SSLProviderZeroSSL
--- PASS: TestGenerateConfig_SSLProviderZeroSSL (0.00s)
=== RUN TestGenerateConfig_SSLProviderBoth
--- PASS: TestGenerateConfig_SSLProviderBoth (0.00s)
=== RUN TestGenerateConfig_DuplicateDomains
--- PASS: TestGenerateConfig_DuplicateDomains (0.00s)
=== RUN TestGenerateConfig_WithCrowdSecApp
--- PASS: TestGenerateConfig_WithCrowdSecApp (0.00s)
=== RUN TestGenerateConfig_CrowdSecHandlerAdded
--- PASS: TestGenerateConfig_CrowdSecHandlerAdded (0.00s)
=== RUN TestGenerateConfig_WithSecurityDecisions
--- PASS: TestGenerateConfig_WithSecurityDecisions (0.00s)
=== RUN TestBuildRateLimitHandler_BypassList
--- PASS: TestBuildRateLimitHandler_BypassList (0.00s)
=== RUN TestBuildRateLimitHandler_BypassList_PlainIPs
--- PASS: TestBuildRateLimitHandler_BypassList_PlainIPs (0.00s)
=== RUN TestBuildRateLimitHandler_BypassList_InvalidEntries
--- PASS: TestBuildRateLimitHandler_BypassList_InvalidEntries (0.00s)
=== RUN TestBuildRateLimitHandler_BypassList_Empty
--- PASS: TestBuildRateLimitHandler_BypassList_Empty (0.00s)
=== RUN TestBuildRateLimitHandler_BypassList_AllInvalid
--- PASS: TestBuildRateLimitHandler_BypassList_AllInvalid (0.00s)
=== RUN TestParseBypassCIDRs
=== RUN TestParseBypassCIDRs/empty
=== RUN TestParseBypassCIDRs/single_cidr
=== RUN TestParseBypassCIDRs/multiple_cidrs
=== RUN TestParseBypassCIDRs/plain_ipv4
=== RUN TestParseBypassCIDRs/plain_ipv6
=== RUN TestParseBypassCIDRs/mixed
=== RUN TestParseBypassCIDRs/with_spaces
=== RUN TestParseBypassCIDRs/all_invalid
--- PASS: TestParseBypassCIDRs (0.00s)
--- PASS: TestParseBypassCIDRs/empty (0.00s)
--- PASS: TestParseBypassCIDRs/single_cidr (0.00s)
--- PASS: TestParseBypassCIDRs/multiple_cidrs (0.00s)
--- PASS: TestParseBypassCIDRs/plain_ipv4 (0.00s)
--- PASS: TestParseBypassCIDRs/plain_ipv6 (0.00s)
--- PASS: TestParseBypassCIDRs/mixed (0.00s)
--- PASS: TestParseBypassCIDRs/with_spaces (0.00s)
--- PASS: TestParseBypassCIDRs/all_invalid (0.00s)
=== RUN TestBuildWAFHandler_ParanoiaLevel
=== RUN TestBuildWAFHandler_ParanoiaLevel/level_1_default
=== RUN TestBuildWAFHandler_ParanoiaLevel/level_1_explicit
=== RUN TestBuildWAFHandler_ParanoiaLevel/level_2
=== RUN TestBuildWAFHandler_ParanoiaLevel/level_3
=== RUN TestBuildWAFHandler_ParanoiaLevel/level_4_max
=== RUN TestBuildWAFHandler_ParanoiaLevel/level_invalid_high
=== RUN TestBuildWAFHandler_ParanoiaLevel/level_invalid_neg
--- PASS: TestBuildWAFHandler_ParanoiaLevel (0.00s)
--- PASS: TestBuildWAFHandler_ParanoiaLevel/level_1_default (0.00s)
--- PASS: TestBuildWAFHandler_ParanoiaLevel/level_1_explicit (0.00s)
--- PASS: TestBuildWAFHandler_ParanoiaLevel/level_2 (0.00s)
--- PASS: TestBuildWAFHandler_ParanoiaLevel/level_3 (0.00s)
--- PASS: TestBuildWAFHandler_ParanoiaLevel/level_4_max (0.00s)
--- PASS: TestBuildWAFHandler_ParanoiaLevel/level_invalid_high (0.00s)
--- PASS: TestBuildWAFHandler_ParanoiaLevel/level_invalid_neg (0.00s)
=== RUN TestBuildWAFHandler_Exclusions
--- PASS: TestBuildWAFHandler_Exclusions (0.00s)
=== RUN TestBuildWAFHandler_ExclusionsWithTarget
--- PASS: TestBuildWAFHandler_ExclusionsWithTarget (0.00s)
=== RUN TestBuildWAFHandler_PerHostDisabled
--- PASS: TestBuildWAFHandler_PerHostDisabled (0.00s)
=== RUN TestBuildWAFHandler_MonitorMode
--- PASS: TestBuildWAFHandler_MonitorMode (0.00s)
=== RUN TestBuildWAFHandler_GlobalDisabled
--- PASS: TestBuildWAFHandler_GlobalDisabled (0.00s)
=== RUN TestBuildWAFHandler_NoRuleset
--- PASS: TestBuildWAFHandler_NoRuleset (0.00s)
=== RUN TestParseWAFExclusions
=== RUN TestParseWAFExclusions/empty
=== RUN TestParseWAFExclusions/single_exclusion
=== RUN TestParseWAFExclusions/multiple_exclusions
=== RUN TestParseWAFExclusions/invalid_json
--- PASS: TestParseWAFExclusions (0.00s)
--- PASS: TestParseWAFExclusions/empty (0.00s)
--- PASS: TestParseWAFExclusions/single_exclusion (0.00s)
--- PASS: TestParseWAFExclusions/multiple_exclusions (0.00s)
--- PASS: TestParseWAFExclusions/invalid_json (0.00s)
=== RUN TestGenerateConfig_WithWAFPerHostDisabled
--- PASS: TestGenerateConfig_WithWAFPerHostDisabled (0.00s)
=== RUN TestGenerateConfig_WithDisabledHost
--- PASS: TestGenerateConfig_WithDisabledHost (0.00s)
=== RUN TestGenerateConfig_WithFrontendDir
--- PASS: TestGenerateConfig_WithFrontendDir (0.00s)
=== RUN TestGenerateConfig_CustomCertificate
--- PASS: TestGenerateConfig_CustomCertificate (0.00s)
=== RUN TestGenerateConfig_CustomCertificateMissingData
--- PASS: TestGenerateConfig_CustomCertificateMissingData (0.00s)
=== RUN TestGenerateConfig_LetsEncryptCertificateNotLoaded
--- PASS: TestGenerateConfig_LetsEncryptCertificateNotLoaded (0.00s)
=== RUN TestGenerateConfig_NormalizeAdvancedConfig
--- PASS: TestGenerateConfig_NormalizeAdvancedConfig (0.00s)
=== RUN TestGenerateConfig_NoACMEEmailNoTLS
--- PASS: TestGenerateConfig_NoACMEEmailNoTLS (0.00s)
=== RUN TestGenerateConfig_SecurityDecisionsWithAdminWhitelist
--- PASS: TestGenerateConfig_SecurityDecisionsWithAdminWhitelist (0.00s)
=== RUN TestBuildSecurityHeadersHandler_DefaultProfile
--- PASS: TestBuildSecurityHeadersHandler_DefaultProfile (0.00s)
=== RUN TestHasWildcard
=== RUN TestHasWildcard/no_wildcard
=== RUN TestHasWildcard/with_wildcard
=== RUN TestHasWildcard/only_wildcard
=== RUN TestHasWildcard/empty
--- PASS: TestHasWildcard (0.00s)
--- PASS: TestHasWildcard/no_wildcard (0.00s)
--- PASS: TestHasWildcard/with_wildcard (0.00s)
--- PASS: TestHasWildcard/only_wildcard (0.00s)
--- PASS: TestHasWildcard/empty (0.00s)
=== RUN TestDedupeDomains
=== RUN TestDedupeDomains/no_dupes
=== RUN TestDedupeDomains/with_dupes
=== RUN TestDedupeDomains/all_dupes
=== RUN TestDedupeDomains/empty
--- PASS: TestDedupeDomains (0.00s)
--- PASS: TestDedupeDomains/no_dupes (0.00s)
--- PASS: TestDedupeDomains/with_dupes (0.00s)
--- PASS: TestDedupeDomains/all_dupes (0.00s)
--- PASS: TestDedupeDomains/empty (0.00s)
=== RUN TestNormalizeAdvancedConfig_NestedRoutes
--- PASS: TestNormalizeAdvancedConfig_NestedRoutes (0.00s)
=== RUN TestNormalizeAdvancedConfig_ArrayInput
--- PASS: TestNormalizeAdvancedConfig_ArrayInput (0.00s)
=== RUN TestGetCrowdSecAPIKey
--- PASS: TestGetCrowdSecAPIKey (0.00s)
=== RUN TestBuildWAFHandler_PathTraversalAttack
=== RUN TestBuildWAFHandler_PathTraversalAttack/Path_traversal_in_ruleset_name
=== RUN TestBuildWAFHandler_PathTraversalAttack/Null_byte_injection
=== RUN TestBuildWAFHandler_PathTraversalAttack/URL_encoded_traversal
--- PASS: TestBuildWAFHandler_PathTraversalAttack (0.00s)
--- PASS: TestBuildWAFHandler_PathTraversalAttack/Path_traversal_in_ruleset_name (0.00s)
--- PASS: TestBuildWAFHandler_PathTraversalAttack/Null_byte_injection (0.00s)
--- PASS: TestBuildWAFHandler_PathTraversalAttack/URL_encoded_traversal (0.00s)
=== RUN TestBuildWAFHandler_SQLInjectionInRulesetName
=== RUN TestBuildWAFHandler_SQLInjectionInRulesetName/';_DROP_TABLE_rulesets;_--
=== RUN TestBuildWAFHandler_SQLInjectionInRulesetName/1'_OR_'1'='1
=== RUN TestBuildWAFHandler_SQLInjectionInRulesetName/UNION_SELECT_*_FROM_users--
=== RUN TestBuildWAFHandler_SQLInjectionInRulesetName/admin'/*
--- PASS: TestBuildWAFHandler_SQLInjectionInRulesetName (0.00s)
--- PASS: TestBuildWAFHandler_SQLInjectionInRulesetName/';_DROP_TABLE_rulesets;_-- (0.00s)
--- PASS: TestBuildWAFHandler_SQLInjectionInRulesetName/1'_OR_'1'='1 (0.00s)
--- PASS: TestBuildWAFHandler_SQLInjectionInRulesetName/UNION_SELECT_*_FROM_users-- (0.00s)
--- PASS: TestBuildWAFHandler_SQLInjectionInRulesetName/admin'/* (0.00s)
=== RUN TestBuildWAFHandler_XSSInAdvancedConfig
=== RUN TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"<script>alert(1)</script>"}
=== RUN TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"<img_src=x_onerror=alert(1)>"}
=== RUN TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"javascript:alert(1)"}
=== RUN TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"<svg/onload=alert(1)>"}
--- PASS: TestBuildWAFHandler_XSSInAdvancedConfig (0.00s)
--- PASS: TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"<script>alert(1)</script>"} (0.00s)
--- PASS: TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"<img_src=x_onerror=alert(1)>"} (0.00s)
--- PASS: TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"javascript:alert(1)"} (0.00s)
--- PASS: TestBuildWAFHandler_XSSInAdvancedConfig/{"ruleset_name":"<svg/onload=alert(1)>"} (0.00s)
=== RUN TestBuildWAFHandler_HugePayload
--- PASS: TestBuildWAFHandler_HugePayload (0.00s)
=== RUN TestBuildWAFHandler_EmptyAndWhitespaceInputs
=== RUN TestBuildWAFHandler_EmptyAndWhitespaceInputs/Empty_string_WAFRulesSource
=== RUN TestBuildWAFHandler_EmptyAndWhitespaceInputs/Whitespace-only_WAFRulesSource
=== RUN TestBuildWAFHandler_EmptyAndWhitespaceInputs/Tab_and_newline_in_WAFRulesSource
--- PASS: TestBuildWAFHandler_EmptyAndWhitespaceInputs (0.00s)
--- PASS: TestBuildWAFHandler_EmptyAndWhitespaceInputs/Empty_string_WAFRulesSource (0.00s)
--- PASS: TestBuildWAFHandler_EmptyAndWhitespaceInputs/Whitespace-only_WAFRulesSource (0.00s)
--- PASS: TestBuildWAFHandler_EmptyAndWhitespaceInputs/Tab_and_newline_in_WAFRulesSource (0.00s)
=== RUN TestBuildWAFHandler_ConcurrentRulesetSelection
--- PASS: TestBuildWAFHandler_ConcurrentRulesetSelection (0.00s)
=== RUN TestBuildWAFHandler_NilSecCfg
--- PASS: TestBuildWAFHandler_NilSecCfg (0.00s)
=== RUN TestBuildWAFHandler_NilHost
--- PASS: TestBuildWAFHandler_NilHost (0.00s)
=== RUN TestBuildWAFHandler_SpecialCharactersInRulesetName
=== RUN TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset_with_spaces
=== RUN TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset/with/slashes
=== RUN TestBuildWAFHandler_SpecialCharactersInRulesetName/UPPERCASE-RULESET
=== RUN TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset_with_underscores
=== RUN TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset.with.dots
--- PASS: TestBuildWAFHandler_SpecialCharactersInRulesetName (0.00s)
--- PASS: TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset_with_spaces (0.00s)
--- PASS: TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset/with/slashes (0.00s)
--- PASS: TestBuildWAFHandler_SpecialCharactersInRulesetName/UPPERCASE-RULESET (0.00s)
--- PASS: TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset_with_underscores (0.00s)
--- PASS: TestBuildWAFHandler_SpecialCharactersInRulesetName/ruleset.with.dots (0.00s)
=== RUN TestBuildWAFHandler_RulesetSelectionPriority
=== RUN TestBuildWAFHandler_RulesetSelectionPriority/WAFRulesSource_takes_priority_over_owasp-crs
=== RUN TestBuildWAFHandler_RulesetSelectionPriority/hostRulesetName_takes_priority_over_owasp-crs
=== RUN TestBuildWAFHandler_RulesetSelectionPriority/host.Application_takes_priority_over_owasp-crs
=== RUN TestBuildWAFHandler_RulesetSelectionPriority/owasp-crs_used_as_fallback_when_no_other_match
=== RUN TestBuildWAFHandler_RulesetSelectionPriority/WAFRulesSource_takes_priority_over_host.Application_and_owasp-crs
--- PASS: TestBuildWAFHandler_RulesetSelectionPriority (0.00s)
--- PASS: TestBuildWAFHandler_RulesetSelectionPriority/WAFRulesSource_takes_priority_over_owasp-crs (0.00s)
--- PASS: TestBuildWAFHandler_RulesetSelectionPriority/hostRulesetName_takes_priority_over_owasp-crs (0.00s)
--- PASS: TestBuildWAFHandler_RulesetSelectionPriority/host.Application_takes_priority_over_owasp-crs (0.00s)
--- PASS: TestBuildWAFHandler_RulesetSelectionPriority/owasp-crs_used_as_fallback_when_no_other_match (0.00s)
--- PASS: TestBuildWAFHandler_RulesetSelectionPriority/WAFRulesSource_takes_priority_over_host.Application_and_owasp-crs (0.00s)
=== RUN TestBuildWAFHandler_NoDirectivesReturnsNil
=== RUN TestBuildWAFHandler_NoDirectivesReturnsNil/Empty_rulesets_returns_nil
=== RUN TestBuildWAFHandler_NoDirectivesReturnsNil/Ruleset_exists_but_no_path_mapping_returns_nil
=== RUN TestBuildWAFHandler_NoDirectivesReturnsNil/WAFRulesSource_specified_but_not_in_rulesets_or_paths_returns_nil
=== RUN TestBuildWAFHandler_NoDirectivesReturnsNil/Empty_path_in_rulesetPaths_returns_nil
--- PASS: TestBuildWAFHandler_NoDirectivesReturnsNil (0.00s)
--- PASS: TestBuildWAFHandler_NoDirectivesReturnsNil/Empty_rulesets_returns_nil (0.00s)
--- PASS: TestBuildWAFHandler_NoDirectivesReturnsNil/Ruleset_exists_but_no_path_mapping_returns_nil (0.00s)
--- PASS: TestBuildWAFHandler_NoDirectivesReturnsNil/WAFRulesSource_specified_but_not_in_rulesets_or_paths_returns_nil (0.00s)
--- PASS: TestBuildWAFHandler_NoDirectivesReturnsNil/Empty_path_in_rulesetPaths_returns_nil (0.00s)
=== RUN TestBuildWAFHandler_DisabledModes
=== RUN TestBuildWAFHandler_DisabledModes/wafEnabled_false_returns_nil
=== RUN TestBuildWAFHandler_DisabledModes/WAFMode_disabled_returns_nil
--- PASS: TestBuildWAFHandler_DisabledModes (0.00s)
--- PASS: TestBuildWAFHandler_DisabledModes/wafEnabled_false_returns_nil (0.00s)
--- PASS: TestBuildWAFHandler_DisabledModes/WAFMode_disabled_returns_nil (0.00s)
=== RUN TestBuildWAFHandler_HandlerStructure
--- PASS: TestBuildWAFHandler_HandlerStructure (0.00s)
=== RUN TestBuildWAFHandler_AdvancedConfigParsing
=== RUN TestBuildWAFHandler_AdvancedConfigParsing/Valid_ruleset_name_in_advanced_config
=== RUN TestBuildWAFHandler_AdvancedConfigParsing/Invalid_JSON_falls_back_to_owasp-crs
=== RUN TestBuildWAFHandler_AdvancedConfigParsing/Empty_advanced_config_falls_back_to_owasp-crs
=== RUN TestBuildWAFHandler_AdvancedConfigParsing/Empty_ruleset_name_string_falls_back_to_owasp-crs
=== RUN TestBuildWAFHandler_AdvancedConfigParsing/Non-string_ruleset_name_falls_back_to_owasp-crs
--- PASS: TestBuildWAFHandler_AdvancedConfigParsing (0.00s)
--- PASS: TestBuildWAFHandler_AdvancedConfigParsing/Valid_ruleset_name_in_advanced_config (0.00s)
--- PASS: TestBuildWAFHandler_AdvancedConfigParsing/Invalid_JSON_falls_back_to_owasp-crs (0.00s)
--- PASS: TestBuildWAFHandler_AdvancedConfigParsing/Empty_advanced_config_falls_back_to_owasp-crs (0.00s)
--- PASS: TestBuildWAFHandler_AdvancedConfigParsing/Empty_ruleset_name_string_falls_back_to_owasp-crs (0.00s)
--- PASS: TestBuildWAFHandler_AdvancedConfigParsing/Non-string_ruleset_name_falls_back_to_owasp-crs (0.00s)
=== RUN TestImporter_ExtractHosts_DialWithoutPortDefaultsTo80
--- PASS: TestImporter_ExtractHosts_DialWithoutPortDefaultsTo80 (0.00s)
=== RUN TestImporter_ExtractHosts_DetectsWebsocketFromHeaders
--- PASS: TestImporter_ExtractHosts_DetectsWebsocketFromHeaders (0.00s)
=== RUN TestImporter_ImportFile_ParseOutputInvalidJSON
--- PASS: TestImporter_ImportFile_ParseOutputInvalidJSON (0.00s)
=== RUN TestImporter_ImportFile_ExecutorError
--- PASS: TestImporter_ImportFile_ExecutorError (0.00s)
=== RUN TestImporter_ExtractHosts_TLSConnectionPolicyAndDialWithoutPort
--- PASS: TestImporter_ExtractHosts_TLSConnectionPolicyAndDialWithoutPort (0.00s)
=== RUN TestExtractHandlers_Subroute_WithUnsupportedSubhandle
--- PASS: TestExtractHandlers_Subroute_WithUnsupportedSubhandle (0.00s)
=== RUN TestExtractHandlers_Subroute_WithNonMapRoutes
--- PASS: TestExtractHandlers_Subroute_WithNonMapRoutes (0.00s)
=== RUN TestImporter_ExtractHosts_UpstreamsNonMapAndWarnings
--- PASS: TestImporter_ExtractHosts_UpstreamsNonMapAndWarnings (0.00s)
=== RUN TestBackupCaddyfile_ReadFailure
--- PASS: TestBackupCaddyfile_ReadFailure (0.00s)
=== RUN TestExtractHandlers_Subroute_EmptyAndHandleNotArray
--- PASS: TestExtractHandlers_Subroute_EmptyAndHandleNotArray (0.00s)
=== RUN TestImporter_ExtractHosts_ReverseProxyNoUpstreams
--- PASS: TestImporter_ExtractHosts_ReverseProxyNoUpstreams (0.00s)
=== RUN TestBackupCaddyfile_Success
--- PASS: TestBackupCaddyfile_Success (0.00s)
=== RUN TestExtractHandlers_Subroute_WithHeadersUpstreams
--- PASS: TestExtractHandlers_Subroute_WithHeadersUpstreams (0.00s)
=== RUN TestImporter_ExtractHosts_DuplicateHost
--- PASS: TestImporter_ExtractHosts_DuplicateHost (0.00s)
=== RUN TestBackupCaddyfile_WriteFailure
--- PASS: TestBackupCaddyfile_WriteFailure (0.00s)
=== RUN TestImporter_ExtractHosts_SSLForcedByDomainScheme
--- PASS: TestImporter_ExtractHosts_SSLForcedByDomainScheme (0.00s)
=== RUN TestImporter_ExtractHosts_MultipleHostsInMatch
--- PASS: TestImporter_ExtractHosts_MultipleHostsInMatch (0.00s)
=== RUN TestImporter_ExtractHosts_UpgradeHeaderAsString
--- PASS: TestImporter_ExtractHosts_UpgradeHeaderAsString (0.00s)
=== RUN TestImporter_ExtractHosts_SscanfFailureOnPort
--- PASS: TestImporter_ExtractHosts_SscanfFailureOnPort (0.00s)
=== RUN TestImporter_ExtractHosts_PartsSscanfFail
--- PASS: TestImporter_ExtractHosts_PartsSscanfFail (0.00s)
=== RUN TestImporter_ExtractHosts_PartsEmptyPortField
--- PASS: TestImporter_ExtractHosts_PartsEmptyPortField (0.00s)
=== RUN TestImporter_ExtractHosts_ForceSplitFallback_PartsNumericPort
--- PASS: TestImporter_ExtractHosts_ForceSplitFallback_PartsNumericPort (0.00s)
=== RUN TestImporter_ExtractHosts_ForceSplitFallback_PartsSscanfFail
--- PASS: TestImporter_ExtractHosts_ForceSplitFallback_PartsSscanfFail (0.00s)
=== RUN TestBackupCaddyfile_WriteErrorDeterministic
--- PASS: TestBackupCaddyfile_WriteErrorDeterministic (0.00s)
=== RUN TestParseCaddyfile_InvalidPath
--- PASS: TestParseCaddyfile_InvalidPath (0.00s)
=== RUN TestBackupCaddyfile_InvalidOriginalPath
--- PASS: TestBackupCaddyfile_InvalidOriginalPath (0.00s)
=== RUN TestExtractHandlers_Subroute
--- PASS: TestExtractHandlers_Subroute (0.00s)
=== RUN TestNewImporter
--- PASS: TestNewImporter (0.00s)
=== RUN TestImporter_ParseCaddyfile_NotFound
--- PASS: TestImporter_ParseCaddyfile_NotFound (0.00s)
=== RUN TestImporter_ParseCaddyfile_Success
--- PASS: TestImporter_ParseCaddyfile_Success (0.00s)
=== RUN TestImporter_ParseCaddyfile_Failure
--- PASS: TestImporter_ParseCaddyfile_Failure (0.00s)
=== RUN TestImporter_ExtractHosts
--- PASS: TestImporter_ExtractHosts (0.00s)
=== RUN TestImporter_ImportFile
--- PASS: TestImporter_ImportFile (0.00s)
=== RUN TestConvertToProxyHosts
--- PASS: TestConvertToProxyHosts (0.00s)
=== RUN TestImporter_ValidateCaddyBinary
--- PASS: TestImporter_ValidateCaddyBinary (0.00s)
=== RUN TestBackupCaddyfile
--- PASS: TestBackupCaddyfile (0.00s)
=== RUN TestDefaultExecutor_Execute
--- PASS: TestDefaultExecutor_Execute (0.01s)
=== RUN TestManager_ListSnapshots_ReadDirError
--- PASS: TestManager_ListSnapshots_ReadDirError (0.00s)
=== RUN TestManager_RotateSnapshots_NoOp
--- PASS: TestManager_RotateSnapshots_NoOp (0.00s)
=== RUN TestManager_Rollback_NoSnapshots
--- PASS: TestManager_Rollback_NoSnapshots (0.00s)
=== RUN TestManager_Rollback_UnmarshalError
--- PASS: TestManager_Rollback_UnmarshalError (0.00s)
=== RUN TestManager_Rollback_LoadSnapshotFail
--- PASS: TestManager_Rollback_LoadSnapshotFail (0.00s)
=== RUN TestManager_SaveSnapshot_WriteError
--- PASS: TestManager_SaveSnapshot_WriteError (0.00s)
=== RUN TestBackupCaddyfile_MkdirAllFailure
--- PASS: TestBackupCaddyfile_MkdirAllFailure (0.00s)
=== RUN TestManager_SaveSnapshot_Success
--- PASS: TestManager_SaveSnapshot_Success (0.00s)
=== RUN TestManager_ApplyConfig_WithSettings
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.870ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.071ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.058ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.080ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.029ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.660ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.009ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_WithSettings (0.05s)
=== RUN TestManager_RotateSnapshots_ListDirError
--- PASS: TestManager_RotateSnapshots_ListDirError (0.00s)
=== RUN TestManager_RotateSnapshots_DeletesOld
--- PASS: TestManager_RotateSnapshots_DeletesOld (0.00s)
=== RUN TestManager_ApplyConfig_RotateSnapshotsWarning
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.118ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.097ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[3.490ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.104ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.075ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.065ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.031ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.993ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.807ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RotateSnapshotsWarning (0.04s)
=== RUN TestManager_ApplyConfig_LoadFailsAndRollbackFails
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.049ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.081ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.990ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.048ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.042ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.039ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.713ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.297ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_LoadFailsAndRollbackFails (0.05s)
=== RUN TestManager_ApplyConfig_SaveSnapshotFails
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.057ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.046ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.847ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.051ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.039ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.035ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.022ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.168ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.519ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SaveSnapshotFails (0.03s)
=== RUN TestManager_ApplyConfig_LoadFailsThenRollbackSucceeds
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.053ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.071ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.532ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.106ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.279ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.052ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[2.196ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.848ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_LoadFailsThenRollbackSucceeds (0.04s)
=== RUN TestManager_SaveSnapshot_MarshalError
--- PASS: TestManager_SaveSnapshot_MarshalError (0.00s)
=== RUN TestManager_RotateSnapshots_DeleteError
--- PASS: TestManager_RotateSnapshots_DeleteError (0.00s)
=== RUN TestManager_ApplyConfig_GenerateConfigFails
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.229ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.226ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.086ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.106ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.079ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.047ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[3.675ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.945ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_GenerateConfigFails (0.03s)
=== RUN TestManager_ApplyConfig_WarnsWhenCerberusEnabledWithoutAdminWhitelist
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.084ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.109ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.071ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.054ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[2.722ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.750ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_WarnsWhenCerberusEnabledWithoutAdminWhitelist (0.03s)
=== RUN TestManager_ApplyConfig_ValidateFails
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.058ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.053ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[3.064ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.049ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.046ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.028ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[2.537ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.732ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_ValidateFails (0.02s)
=== RUN TestManager_Rollback_ReadFileError
--- PASS: TestManager_Rollback_ReadFileError (0.00s)
=== RUN TestManager_ApplyConfig_RotateSnapshotsWarning_Stderr
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.065ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.070ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.128ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.181ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.109ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.099ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.041ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[2.253ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.361ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RotateSnapshotsWarning_Stderr (0.03s)
=== RUN TestManager_ApplyConfig_PassesAdminWhitelistToGenerateConfig
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.088ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.078ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.055ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.048ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.890ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.535ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_PassesAdminWhitelistToGenerateConfig (0.03s)
=== RUN TestManager_ApplyConfig_PassesRuleSetsToGenerateConfig
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.050ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.045ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.042ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.039ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.990ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_PassesRuleSetsToGenerateConfig (0.05s)
=== RUN TestManager_ApplyConfig_IncludesWAFHandlerWithRuleset
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.102ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.102ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.044ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.668ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
manager_additional_test.go:727: generated config: {"admin":{"listen":"0.0.0.0:2019"},"apps":{"http":{"servers":{"charon_server":{"listen":[":80",":443"],"routes":[{"match":[{"host":["ruleset.example.com"]}],"handle":[{"directives":"SecRuleEngine On\nSecRequestBodyAccess On\nSecResponseBodyAccess Off\nSecAction \"id:900000,phase:1,nolog,pass,t:none,setvar:tx.paranoia_level=1\"\nInclude /tmp/TestManager_ApplyConfig_IncludesWAFHandlerWithRuleset1320949653/001/coraza/rulesets/owasp-crs-05ec1bde.conf\n","handler":"waf"},{"handler":"headers","response":{"set":{"Cross-Origin-Opener-Policy":["same-origin"],"Cross-Origin-Resource-Policy":["same-origin"],"Referrer-Policy":["strict-origin-when-cross-origin"],"Strict-Transport-Security":["max-age=31536000"],"X-Content-Type-Options":["nosniff"],"X-Frame-Options":["SAMEORIGIN"],"X-XSS-Protection":["1; mode=block"]}}},{"handler":"vars"},{"flush_interval":-1,"handler":"reverse_proxy","headers":{"request":{"set":{"X-Forwarded-Host":["{http.request.host}"],"X-Forwarded-Port":["{http.request.port}"],"X-Forwarded-Proto":["{http.request.scheme}"],"X-Real-IP":["{http.request.remote.host}"]}}},"upstreams":[{"dial":"127.0.0.1:8080"}]}],"terminal":true}],"automatic_https":{},"logs":{"default_logger_name":"access_log"},"trusted_proxies":{"source":"static","ranges":["127.0.0.1/32","::1/128","172.16.0.0/12","10.0.0.0/8","192.168.0.0/16"]}}}}},"logging":{"logs":{"access":{"writer":{"output":"file","filename":"/tmp/TestManager_ApplyConfig_IncludesWAFHandlerWithRuleset1320949653/logs/access.log","roll":true,"roll_size_mb":10,"roll_keep":5,"roll_keep_days":7},"encoder":{"format":"json"},"level":"INFO","include":["http.log.access.access_log"]}}},"storage":{"module":"file_system","root":"/tmp/TestManager_ApplyConfig_IncludesWAFHandlerWithRuleset1320949653/001/data"}}
--- PASS: TestManager_ApplyConfig_IncludesWAFHandlerWithRuleset (0.03s)
=== RUN TestManager_ApplyConfig_RulesetWriteFileFailure
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.104ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.102ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.096ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.079ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.334ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RulesetWriteFileFailure (0.04s)
=== RUN TestManager_ApplyConfig_RulesetDirMkdirFailure
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.054ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.054ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.053ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.057ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.052ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.739ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RulesetDirMkdirFailure (0.04s)
=== RUN TestManager_ApplyConfig_ReappliesOnFlagChange
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.065ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.078ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.281ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.079ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.035ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.490ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.567ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.050ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.066ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.048ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.078ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.075ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.038ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.036ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.023ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.030ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.043ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.043ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.032ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.050ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_ReappliesOnFlagChange (0.05s)
=== RUN TestManager_ApplyConfig_PrependsSecRuleEngineDirectives
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.042ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.044ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.366ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.165ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.861ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_PrependsSecRuleEngineDirectives (0.04s)
=== RUN TestManager_ApplyConfig_DoesNotPrependIfSecRuleEngineExists
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.067ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.071ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.057ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[2.184ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_DoesNotPrependIfSecRuleEngineExists (0.03s)
=== RUN TestManager_ApplyConfig_DebugMarshalFailure
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.045ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.049ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.222ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.053ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.035ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_DebugMarshalFailure (0.03s)
=== RUN TestManager_ApplyConfig_WAFModeMonitorUsesDetectionOnly
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.041ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.046ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.039ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.039ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[2.842ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_WAFModeMonitorUsesDetectionOnly (0.04s)
=== RUN TestManager_ApplyConfig_PerRulesetModeOverride
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.053ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.055ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.123ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_PerRulesetModeOverride (0.04s)
=== RUN TestManager_ApplyConfig_RulesetFileCleanup
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.081ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.067ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.067ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.073ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.760ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RulesetFileCleanup (0.03s)
=== RUN TestManager_ApplyConfig_RulesetCleanupReadDirError
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.093ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.053ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.044ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.037ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.134ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RulesetCleanupReadDirError (0.03s)
=== RUN TestManager_ApplyConfig_RulesetCleanupRemoveError
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.055ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.063ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.052ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.050ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.048ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.576ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RulesetCleanupRemoveError (0.03s)
=== RUN TestManager_ApplyConfig_WAFModeBlockExplicit
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.066ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.085ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.082ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.079ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.136ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_WAFModeBlockExplicit (0.03s)
=== RUN TestManager_ApplyConfig_RulesetNamePathTraversal
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[2.064ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_RulesetNamePathTraversal (0.03s)
=== RUN TestExtractBaseDomain_EmptyInput
--- PASS: TestExtractBaseDomain_EmptyInput (0.00s)
=== RUN TestExtractBaseDomain_OnlyCommas
--- PASS: TestExtractBaseDomain_OnlyCommas (0.00s)
=== RUN TestExtractBaseDomain_SingleDomain
--- PASS: TestExtractBaseDomain_SingleDomain (0.00s)
=== RUN TestExtractBaseDomain_WildcardDomain
--- PASS: TestExtractBaseDomain_WildcardDomain (0.00s)
=== RUN TestExtractBaseDomain_MultipleDomains
--- PASS: TestExtractBaseDomain_MultipleDomains (0.00s)
=== RUN TestExtractBaseDomain_MultipleDomainsWithWildcard
--- PASS: TestExtractBaseDomain_MultipleDomainsWithWildcard (0.00s)
=== RUN TestExtractBaseDomain_WithWhitespace
--- PASS: TestExtractBaseDomain_WithWhitespace (0.00s)
=== RUN TestExtractBaseDomain_CaseNormalization
--- PASS: TestExtractBaseDomain_CaseNormalization (0.00s)
=== RUN TestExtractBaseDomain_Subdomain
--- PASS: TestExtractBaseDomain_Subdomain (0.00s)
=== RUN TestExtractBaseDomain_MultiLevelSubdomain
--- PASS: TestExtractBaseDomain_MultiLevelSubdomain (0.00s)
=== RUN TestMatchesZoneFilter_EmptyFilter
--- PASS: TestMatchesZoneFilter_EmptyFilter (0.00s)
=== RUN TestMatchesZoneFilter_EmptyZonesInList
--- PASS: TestMatchesZoneFilter_EmptyZonesInList (0.00s)
=== RUN TestMatchesZoneFilter_ExactMatch
--- PASS: TestMatchesZoneFilter_ExactMatch (0.00s)
=== RUN TestMatchesZoneFilter_ExactMatchOnly
--- PASS: TestMatchesZoneFilter_ExactMatchOnly (0.00s)
=== RUN TestMatchesZoneFilter_WildcardMatch
--- PASS: TestMatchesZoneFilter_WildcardMatch (0.00s)
=== RUN TestMatchesZoneFilter_MultipleZones
--- PASS: TestMatchesZoneFilter_MultipleZones (0.00s)
=== RUN TestMatchesZoneFilter_MultipleZonesWithWildcard
--- PASS: TestMatchesZoneFilter_MultipleZonesWithWildcard (0.00s)
=== RUN TestMatchesZoneFilter_WhitespaceTrimming_Detailed
--- PASS: TestMatchesZoneFilter_WhitespaceTrimming_Detailed (0.00s)
=== RUN TestMatchesZoneFilter_DeepSubdomain
--- PASS: TestMatchesZoneFilter_DeepSubdomain (0.00s)
=== RUN TestGetCredentialForDomain_NoEncryptionKey
--- PASS: TestGetCredentialForDomain_NoEncryptionKey (0.00s)
=== RUN TestGetCredentialForDomain_MultiCredential_NoMatch
--- PASS: TestGetCredentialForDomain_MultiCredential_NoMatch (0.00s)
=== RUN TestGetCredentialForDomain_MultiCredential_DisabledSkipped
--- PASS: TestGetCredentialForDomain_MultiCredential_DisabledSkipped (0.00s)
=== RUN TestGetCredentialForDomain_MultiCredential_CatchAllMatch
--- PASS: TestGetCredentialForDomain_MultiCredential_CatchAllMatch (0.00s)
=== RUN TestComputeEffectiveFlags_DB_SecurityConfigWAFDisabled
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.045ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.039ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_SecurityConfigWAFDisabled (0.01s)
=== RUN TestComputeEffectiveFlags_DB_RateLimitFromBooleanField
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.058ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.085ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_RateLimitFromBooleanField (0.00s)
=== RUN TestComputeEffectiveFlags_DB_CrowdSecModeFromSecurityConfig
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.079ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_CrowdSecModeFromSecurityConfig (0.01s)
=== RUN TestComputeEffectiveFlags_DB_LegacyCerberusKey
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.121ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.084ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" AND `settings`.`id` = 1 ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_LegacyCerberusKey (0.00s)
=== RUN TestApplyConfig_SingleCredential_BackwardCompatibility
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.036ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 record not found
[0.102ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.086ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.067ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 record not found
[0.092ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.906ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.875ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:572 no such table: caddy_configs
[0.970ms] [rows:0] INSERT INTO `caddy_configs` (`config_hash`,`applied_at`,`success`,`error_msg`) VALUES ("5e816e57eb11055dffe0c15e31a606002ac4a0e55d5cffaf5a0d83b81d660105","2026-01-10 02:16:58.944",true,"") RETURNING `id`
--- PASS: TestApplyConfig_SingleCredential_BackwardCompatibility (0.03s)
=== RUN TestApplyConfig_MultiCredential_ExactMatch
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:598 record not found
[0.108ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.095ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:285 record not found
[0.087ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.132ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.930ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:16:58 /projects/Charon/backend/internal/caddy/manager.go:572 no such table: caddy_configs
[2.050ms] [rows:0] INSERT INTO `caddy_configs` (`config_hash`,`applied_at`,`success`,`error_msg`) VALUES ("84844f433ace3d57bfa2bcb2f12ca1d13fe94265f9e4652ad1d94ab8627c9bca","2026-01-10 02:16:58.979",true,"") RETURNING `id`
--- PASS: TestApplyConfig_MultiCredential_ExactMatch (0.04s)
=== RUN TestApplyConfig_MultiCredential_WildcardMatch
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.380ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 record not found
[0.129ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 record not found
[0.108ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.125ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.346ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:572 no such table: caddy_configs
[0.904ms] [rows:0] INSERT INTO `caddy_configs` (`config_hash`,`applied_at`,`success`,`error_msg`) VALUES ("3b0f21b3fd87815befff8bee0f98a4e2a859adf7aecc02d7b8d0a627a477187e","2026-01-10 02:16:59.011",true,"") RETURNING `id`
--- PASS: TestApplyConfig_MultiCredential_WildcardMatch (0.03s)
=== RUN TestApplyConfig_MultiCredential_CatchAll
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.037ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 record not found
[0.096ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.087ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 record not found
[0.075ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.964ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[2.521ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:572 no such table: caddy_configs
[1.072ms] [rows:0] INSERT INTO `caddy_configs` (`config_hash`,`applied_at`,`success`,`error_msg`) VALUES ("03b090b404ed34a6054d2a728c08991e385b3587215219e1371b9d8944ce3099","2026-01-10 02:16:59.049",true,"") RETURNING `id`
--- PASS: TestApplyConfig_MultiCredential_CatchAll (0.04s)
=== RUN TestExtractBaseDomain
=== RUN TestExtractBaseDomain/wildcard_domain
=== RUN TestExtractBaseDomain/normal_domain
=== RUN TestExtractBaseDomain/multiple_domains
=== RUN TestExtractBaseDomain/empty
=== RUN TestExtractBaseDomain/with_spaces
--- PASS: TestExtractBaseDomain (0.00s)
--- PASS: TestExtractBaseDomain/wildcard_domain (0.00s)
--- PASS: TestExtractBaseDomain/normal_domain (0.00s)
--- PASS: TestExtractBaseDomain/multiple_domains (0.00s)
--- PASS: TestExtractBaseDomain/empty (0.00s)
--- PASS: TestExtractBaseDomain/with_spaces (0.00s)
=== RUN TestMatchesZoneFilter
=== RUN TestMatchesZoneFilter/exact_match
=== RUN TestMatchesZoneFilter/exact_match_(not_exact_only)
=== RUN TestMatchesZoneFilter/wildcard_match
=== RUN TestMatchesZoneFilter/wildcard_no_match_(exact_only)
=== RUN TestMatchesZoneFilter/wildcard_base_domain_match
=== RUN TestMatchesZoneFilter/no_match
=== RUN TestMatchesZoneFilter/comma-separated_zones
=== RUN TestMatchesZoneFilter/empty_filter
--- PASS: TestMatchesZoneFilter (0.00s)
--- PASS: TestMatchesZoneFilter/exact_match (0.00s)
--- PASS: TestMatchesZoneFilter/exact_match_(not_exact_only) (0.00s)
--- PASS: TestMatchesZoneFilter/wildcard_match (0.00s)
--- PASS: TestMatchesZoneFilter/wildcard_no_match_(exact_only) (0.00s)
--- PASS: TestMatchesZoneFilter/wildcard_base_domain_match (0.00s)
--- PASS: TestMatchesZoneFilter/no_match (0.00s)
--- PASS: TestMatchesZoneFilter/comma-separated_zones (0.00s)
--- PASS: TestMatchesZoneFilter/empty_filter (0.00s)
=== RUN TestManager_GetCredentialForDomain_NoMatch
--- PASS: TestManager_GetCredentialForDomain_NoMatch (0.00s)
=== RUN TestManager_GetCredentialForDomain_NoEncryptionKey
--- PASS: TestManager_GetCredentialForDomain_NoEncryptionKey (0.00s)
=== RUN TestManager_GetCredentialForDomain_DecryptionFailure
--- PASS: TestManager_GetCredentialForDomain_DecryptionFailure (0.00s)
=== RUN TestManager_GetCredentialForDomain_InvalidJSON
--- PASS: TestManager_GetCredentialForDomain_InvalidJSON (0.01s)
=== RUN TestManager_GetCredentialForDomain_SkipsDisabledCredentials
--- PASS: TestManager_GetCredentialForDomain_SkipsDisabledCredentials (0.00s)
=== RUN TestManager_GetCredentialForDomain_MultiCredential_DecryptionFailure
--- PASS: TestManager_GetCredentialForDomain_MultiCredential_DecryptionFailure (0.00s)
=== RUN TestManager_GetCredentialForDomain_MultiCredential_InvalidJSON
--- PASS: TestManager_GetCredentialForDomain_MultiCredential_InvalidJSON (0.00s)
=== RUN TestExtractBaseDomain_EmptyAfterSplit
--- PASS: TestExtractBaseDomain_EmptyAfterSplit (0.00s)
=== RUN TestMatchesZoneFilter_WhitespaceInFilter
--- PASS: TestMatchesZoneFilter_WhitespaceInFilter (0.00s)
=== RUN TestMatchesZoneFilter_CaseInsensitive
--- PASS: TestMatchesZoneFilter_CaseInsensitive (0.00s)
=== RUN TestManagerApplyConfig_DNSProviders_NoKey_SkipsDecryption
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.053ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.048ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.045ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.039ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.038ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestManagerApplyConfig_DNSProviders_NoKey_SkipsDecryption (0.03s)
=== RUN TestManagerApplyConfig_DNSProviders_UsesFallbackEnvKeys
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.078ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.057ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.055ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.051ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.050ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestManagerApplyConfig_DNSProviders_UsesFallbackEnvKeys (0.03s)
=== RUN TestManagerApplyConfig_DNSProviders_SkipsDecryptOrJSONFailures
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.071ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.086ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.086ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestManagerApplyConfig_DNSProviders_SkipsDecryptOrJSONFailures (0.03s)
=== RUN TestManager_ApplyConfig_SSLProvider_Auto
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.057ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.781ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.054ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.048ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.043ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.023ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.729ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[2.131ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SSLProvider_Auto (0.03s)
=== RUN TestManager_ApplyConfig_SSLProvider_LetsEncryptStaging
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.286ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.084ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.059ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.030ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.013ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.887ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SSLProvider_LetsEncryptStaging (0.03s)
=== RUN TestManager_ApplyConfig_SSLProvider_LetsEncryptProd
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.230ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.807ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.117ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.181ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.116ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.044ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[2.410ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.124ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SSLProvider_LetsEncryptProd (0.04s)
=== RUN TestManager_ApplyConfig_SSLProvider_ZeroSSL
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.063ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.212ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.075ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.260ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.041ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.164ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[4.163ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SSLProvider_ZeroSSL (0.03s)
=== RUN TestManager_ApplyConfig_SSLProvider_Empty
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.069ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[2.277ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.090ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.079ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.087ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.043ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.310ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.091ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SSLProvider_Empty (0.04s)
=== RUN TestManager_ApplyConfig_SSLProvider_EmptyWithNoStaging
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.048ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.772ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.085ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.060ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.091ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.027ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.838ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.890ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SSLProvider_EmptyWithNoStaging (0.03s)
=== RUN TestManager_ApplyConfig_SSLProvider_Unknown
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.455ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.081ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.109ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.148ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.627ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.903ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_SSLProvider_Unknown (0.03s)
=== RUN TestManager_ApplyConfig
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.067ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.071ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.036ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[2.232ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.888ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig (0.03s)
=== RUN TestManager_ApplyConfig_Failure
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.046ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[2.970ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.145ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.073ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.071ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.125ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.062ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.021ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_Failure (0.03s)
=== RUN TestManager_Ping
--- PASS: TestManager_Ping (0.00s)
=== RUN TestManager_GetCurrentConfig
--- PASS: TestManager_GetCurrentConfig (0.00s)
=== RUN TestManager_RotateSnapshots
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.077ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.146ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.042ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.088ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.146ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.380ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.064ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.854ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.975ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_RotateSnapshots (0.03s)
=== RUN TestManager_Rollback_Success
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.049ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.074ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.865ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.070ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.078ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.046ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[1.293ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:16:59 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.878ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.098ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.097ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.058ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.094ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.093ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.080ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.043ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.044ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[0.039ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_Rollback_Success (1.14s)
=== RUN TestManager_ApplyConfig_DBError
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:84 sql: database is closed
[0.073ms] [rows:0] SELECT * FROM `proxy_hosts`
--- PASS: TestManager_ApplyConfig_DBError (0.03s)
=== RUN TestManager_ApplyConfig_ValidationError
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.080ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[4.193ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.126ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.084ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.089ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.031ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[0.977ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[2.278ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_ApplyConfig_ValidationError (0.04s)
=== RUN TestManager_Rollback_Failure
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.065ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.903ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.091ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.065ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.060ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:285 no such table: security_configs
[0.044ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:295 no such table: security_rule_sets
[3.050ms] [rows:0] SELECT * FROM `security_rule_sets`
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:302 no such table: security_decisions
[1.947ms] [rows:0] SELECT * FROM `security_decisions` ORDER BY created_at desc
--- PASS: TestManager_Rollback_Failure (0.04s)
=== RUN TestComputeEffectiveFlags_DefaultsNoDB
--- PASS: TestComputeEffectiveFlags_DefaultsNoDB (0.00s)
=== RUN TestComputeEffectiveFlags_DB_CerberusDisabled
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.646ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.085ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" AND `settings`.`id` = 1 ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_CerberusDisabled (0.00s)
=== RUN TestComputeEffectiveFlags_DB_CrowdSecExternal
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.790ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.115ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.082ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.068ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_CrowdSecExternal (0.01s)
=== RUN TestComputeEffectiveFlags_DB_CrowdSecUnknown
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.991ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.114ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.072ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.051ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_CrowdSecUnknown (0.00s)
=== RUN TestComputeEffectiveFlags_DB_CrowdSecLocal
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[2.212ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.272ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.081ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.093ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_CrowdSecLocal (0.00s)
=== RUN TestComputeEffectiveFlags_DB_ACLTrueAndFalse
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[1.074ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.084ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.075ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:598 no such table: security_configs
[0.054ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.101ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.081ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_ACLTrueAndFalse (0.01s)
=== RUN TestComputeEffectiveFlags_DB_WAFMonitor
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.178ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.121ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.098ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestComputeEffectiveFlags_DB_WAFMonitor (0.01s)
=== RUN TestManager_ApplyConfig_WAFMonitor
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:239 record not found
[0.056ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.acme_email" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:246 record not found
[0.055ms] [rows:0] SELECT * FROM `settings` WHERE key = "caddy.ssl_provider" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:627 record not found
[0.054ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:629 record not found
[0.080ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:00 /projects/Charon/backend/internal/caddy/manager.go:634 record not found
[0.061ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.acl.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestManager_ApplyConfig_WAFMonitor (0.04s)
=== RUN TestNormalizeAdvancedConfig_MapWithNestedHandles
--- PASS: TestNormalizeAdvancedConfig_MapWithNestedHandles (0.00s)
=== RUN TestNormalizeAdvancedConfig_ArrayTopLevel
--- PASS: TestNormalizeAdvancedConfig_ArrayTopLevel (0.00s)
=== RUN TestNormalizeAdvancedConfig_DefaultPrimitives
--- PASS: TestNormalizeAdvancedConfig_DefaultPrimitives (0.00s)
=== RUN TestNormalizeAdvancedConfig_CoerceNonStandardTypes
--- PASS: TestNormalizeAdvancedConfig_CoerceNonStandardTypes (0.00s)
=== RUN TestNormalizeAdvancedConfig_JSONRoundtrip
--- PASS: TestNormalizeAdvancedConfig_JSONRoundtrip (0.00s)
=== RUN TestNormalizeAdvancedConfig_TopLevelHeaders
--- PASS: TestNormalizeAdvancedConfig_TopLevelHeaders (0.00s)
=== RUN TestNormalizeAdvancedConfig_HeadersAlreadyArray
--- PASS: TestNormalizeAdvancedConfig_HeadersAlreadyArray (0.00s)
=== RUN TestNormalizeAdvancedConfig_MapWithTopLevelHandle
--- PASS: TestNormalizeAdvancedConfig_MapWithTopLevelHandle (0.00s)
=== RUN TestReverseProxyHandler_PlexAndOthers
--- PASS: TestReverseProxyHandler_PlexAndOthers (0.00s)
=== RUN TestReverseProxyHandler_WebSocketHeaders
--- PASS: TestReverseProxyHandler_WebSocketHeaders (0.00s)
=== RUN TestReverseProxyHandler_StandardProxyHeadersAlwaysSet
--- PASS: TestReverseProxyHandler_StandardProxyHeadersAlwaysSet (0.00s)
=== RUN TestReverseProxyHandler_ApplicationSpecificHeaders
--- PASS: TestReverseProxyHandler_ApplicationSpecificHeaders (0.00s)
=== RUN TestReverseProxyHandler_WebSocketWithApplication
--- PASS: TestReverseProxyHandler_WebSocketWithApplication (0.00s)
=== RUN TestReverseProxyHandler_FeatureFlagDisabled
--- PASS: TestReverseProxyHandler_FeatureFlagDisabled (0.00s)
=== RUN TestReverseProxyHandler_XForwardedForNotDuplicated
--- PASS: TestReverseProxyHandler_XForwardedForNotDuplicated (0.00s)
=== RUN TestReverseProxyHandler_TrustedProxiesConfiguration
--- PASS: TestReverseProxyHandler_TrustedProxiesConfiguration (0.00s)
=== RUN TestHandlers
--- PASS: TestHandlers (0.00s)
=== RUN TestReverseProxyHandler_NoWebSocket
--- PASS: TestReverseProxyHandler_NoWebSocket (0.00s)
=== RUN TestReverseProxyHandler_WithWebSocket
--- PASS: TestReverseProxyHandler_WithWebSocket (0.00s)
=== RUN TestReverseProxyHandler_StandardHeaders
--- PASS: TestReverseProxyHandler_StandardHeaders (0.00s)
=== RUN TestReverseProxyHandler_Plex
--- PASS: TestReverseProxyHandler_Plex (0.00s)
=== RUN TestReverseProxyHandler_PlexWithoutStandardHeaders
--- PASS: TestReverseProxyHandler_PlexWithoutStandardHeaders (0.00s)
=== RUN TestReverseProxyHandler_Jellyfin
--- PASS: TestReverseProxyHandler_Jellyfin (0.00s)
=== RUN TestReverseProxyHandler_JellyfinWithoutStandardHeaders
--- PASS: TestReverseProxyHandler_JellyfinWithoutStandardHeaders (0.00s)
=== RUN TestReverseProxyHandler_Emby
--- PASS: TestReverseProxyHandler_Emby (0.00s)
=== RUN TestReverseProxyHandler_HomeAssistant
--- PASS: TestReverseProxyHandler_HomeAssistant (0.00s)
=== RUN TestReverseProxyHandler_Nextcloud
--- PASS: TestReverseProxyHandler_Nextcloud (0.00s)
=== RUN TestReverseProxyHandler_Vaultwarden
--- PASS: TestReverseProxyHandler_Vaultwarden (0.00s)
=== RUN TestReverseProxyHandler_UnknownApplication
--- PASS: TestReverseProxyHandler_UnknownApplication (0.00s)
=== RUN TestReverseProxyHandler_NoHeaders
--- PASS: TestReverseProxyHandler_NoHeaders (0.00s)
=== RUN TestHeaderHandler_EmptyHeaders
--- PASS: TestHeaderHandler_EmptyHeaders (0.00s)
=== RUN TestHeaderHandler_MultipleHeaders
--- PASS: TestHeaderHandler_MultipleHeaders (0.00s)
=== RUN TestValidate_NilConfig
--- PASS: TestValidate_NilConfig (0.00s)
=== RUN TestValidateHandler_MissingHandlerField
--- PASS: TestValidateHandler_MissingHandlerField (0.00s)
=== RUN TestValidateHandler_UnknownHandlerAllowed
--- PASS: TestValidateHandler_UnknownHandlerAllowed (0.00s)
=== RUN TestValidateHandler_FileServerAndStaticResponseAllowed
--- PASS: TestValidateHandler_FileServerAndStaticResponseAllowed (0.00s)
=== RUN TestValidateRoute_InvalidHandler
--- PASS: TestValidateRoute_InvalidHandler (0.00s)
=== RUN TestValidateListenAddr_InvalidHostName
--- PASS: TestValidateListenAddr_InvalidHostName (0.00s)
=== RUN TestValidateListenAddr_InvalidPortNonNumeric
--- PASS: TestValidateListenAddr_InvalidPortNonNumeric (0.00s)
=== RUN TestValidate_MarshalError
--- PASS: TestValidate_MarshalError (0.00s)
=== RUN TestValidate_EmptyConfig
--- PASS: TestValidate_EmptyConfig (0.00s)
=== RUN TestValidate_ValidConfig
--- PASS: TestValidate_ValidConfig (0.00s)
=== RUN TestValidate_DuplicateHosts
--- PASS: TestValidate_DuplicateHosts (0.00s)
=== RUN TestValidate_NoListenAddresses
--- PASS: TestValidate_NoListenAddresses (0.00s)
=== RUN TestValidate_InvalidPort
--- PASS: TestValidate_InvalidPort (0.00s)
=== RUN TestValidate_NoHandlers
--- PASS: TestValidate_NoHandlers (0.00s)
=== RUN TestValidateListenAddr
=== RUN TestValidateListenAddr/Valid
=== RUN TestValidateListenAddr/ValidIP
=== RUN TestValidateListenAddr/ValidTCP
=== RUN TestValidateListenAddr/ValidUDP
=== RUN TestValidateListenAddr/InvalidFormat
=== RUN TestValidateListenAddr/InvalidPort
=== RUN TestValidateListenAddr/InvalidPortNegative
=== RUN TestValidateListenAddr/InvalidIP
--- PASS: TestValidateListenAddr (0.00s)
--- PASS: TestValidateListenAddr/Valid (0.00s)
--- PASS: TestValidateListenAddr/ValidIP (0.00s)
--- PASS: TestValidateListenAddr/ValidTCP (0.00s)
--- PASS: TestValidateListenAddr/ValidUDP (0.00s)
--- PASS: TestValidateListenAddr/InvalidFormat (0.00s)
--- PASS: TestValidateListenAddr/InvalidPort (0.00s)
--- PASS: TestValidateListenAddr/InvalidPortNegative (0.00s)
--- PASS: TestValidateListenAddr/InvalidIP (0.00s)
=== RUN TestValidateReverseProxy
=== RUN TestValidateReverseProxy/Valid
=== RUN TestValidateReverseProxy/MissingUpstreams
=== RUN TestValidateReverseProxy/EmptyUpstreams
=== RUN TestValidateReverseProxy/MissingDial
=== RUN TestValidateReverseProxy/InvalidDial
--- PASS: TestValidateReverseProxy (0.00s)
--- PASS: TestValidateReverseProxy/Valid (0.00s)
--- PASS: TestValidateReverseProxy/MissingUpstreams (0.00s)
--- PASS: TestValidateReverseProxy/EmptyUpstreams (0.00s)
--- PASS: TestValidateReverseProxy/MissingDial (0.00s)
--- PASS: TestValidateReverseProxy/InvalidDial (0.00s)
PASS
coverage: 98.7% of statements
ok github.com/Wikid82/charon/backend/internal/caddy (cached) coverage: 98.7% of statements
=== RUN TestIsEnabled_ConfigTrue
--- PASS: TestIsEnabled_ConfigTrue (0.00s)
=== RUN TestIsEnabled_WAFModeEnabled
--- PASS: TestIsEnabled_WAFModeEnabled (0.00s)
=== RUN TestIsEnabled_ACLModeEnabled
--- PASS: TestIsEnabled_ACLModeEnabled (0.00s)
=== RUN TestIsEnabled_RateLimitModeEnabled
--- PASS: TestIsEnabled_RateLimitModeEnabled (0.00s)
=== RUN TestIsEnabled_CrowdSecModeLocal
--- PASS: TestIsEnabled_CrowdSecModeLocal (0.00s)
=== RUN TestIsEnabled_DBSetting_FeatureFlag
--- PASS: TestIsEnabled_DBSetting_FeatureFlag (0.01s)
=== RUN TestIsEnabled_DBSetting_LegacyKey
2026/01/10 02:17:04 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.095ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestIsEnabled_DBSetting_LegacyKey (0.01s)
=== RUN TestIsEnabled_DBSetting_FeatureFlagTakesPrecedence
--- PASS: TestIsEnabled_DBSetting_FeatureFlagTakesPrecedence (0.00s)
=== RUN TestIsEnabled_DBSettingCaseInsensitive
--- PASS: TestIsEnabled_DBSettingCaseInsensitive (0.00s)
=== RUN TestIsEnabled_DBSettingFalse
--- PASS: TestIsEnabled_DBSettingFalse (0.00s)
=== RUN TestIsEnabled_DefaultTrue
--- PASS: TestIsEnabled_DefaultTrue (0.00s)
=== RUN TestMiddleware_WAFEnabledTracksMetrics
--- PASS: TestMiddleware_WAFEnabledTracksMetrics (0.01s)
=== RUN TestMiddleware_ACLBlocksClientIP
2026/01/10 02:17:04 /projects/Charon/backend/internal/services/security_notification_service.go:32 no such table: notification_configs
[3.914ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestMiddleware_ACLBlocksClientIP (0.01s)
=== RUN TestMiddleware_ACLAllowsClientIP
--- PASS: TestMiddleware_ACLAllowsClientIP (0.01s)
=== RUN TestMiddleware_NotEnabledSkips
2026/01/10 02:17:04 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.062ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
2026/01/10 02:17:04 /projects/Charon/backend/internal/cerberus/cerberus.go:61 record not found
[0.052ms] [rows:0] SELECT * FROM `settings` WHERE key = "security.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestMiddleware_NotEnabledSkips (0.01s)
=== RUN TestMiddleware_WAFPassesWithNoPayload
--- PASS: TestMiddleware_WAFPassesWithNoPayload (0.01s)
=== RUN TestMiddleware_WAFMonitorLogsButDoesNotBlock
--- PASS: TestMiddleware_WAFMonitorLogsButDoesNotBlock (0.02s)
=== RUN TestMiddleware_ACLDisabledDoesNotBlock
--- PASS: TestMiddleware_ACLDisabledDoesNotBlock (0.01s)
=== RUN TestCerberus_IsEnabled_ConfigTrue
--- PASS: TestCerberus_IsEnabled_ConfigTrue (0.00s)
=== RUN TestCerberus_IsEnabled_DBSetting
--- PASS: TestCerberus_IsEnabled_DBSetting (0.00s)
=== RUN TestCerberus_IsEnabled_Disabled
cerberus_test.go:68: cfg: {CrowdSecMode: CrowdSecAPIURL: CrowdSecAPIKey: CrowdSecConfigDir: WAFMode: RateLimitMode: ACLMode: CerberusEnabled:false}
cerberus_test.go:69: IsEnabled() -> false
--- PASS: TestCerberus_IsEnabled_Disabled (0.00s)
=== RUN TestCerberus_IsEnabled_CrowdSecLocal
--- PASS: TestCerberus_IsEnabled_CrowdSecLocal (0.00s)
=== RUN TestCerberus_IsEnabled_WAFEnabled
--- PASS: TestCerberus_IsEnabled_WAFEnabled (0.00s)
=== RUN TestCerberus_IsEnabled_RateLimitEnabled
--- PASS: TestCerberus_IsEnabled_RateLimitEnabled (0.00s)
=== RUN TestCerberus_IsEnabled_ACLEnabled
--- PASS: TestCerberus_IsEnabled_ACLEnabled (0.00s)
=== RUN TestCerberus_IsEnabled_LegacySetting
2026/01/10 02:17:04 /projects/Charon/backend/internal/cerberus/cerberus.go:57 record not found
[0.149ms] [rows:0] SELECT * FROM `settings` WHERE key = "feature.cerberus.enabled" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestCerberus_IsEnabled_LegacySetting (0.00s)
=== RUN TestCerberus_Middleware_Disabled
--- PASS: TestCerberus_Middleware_Disabled (0.00s)
=== RUN TestCerberus_Middleware_WAFEnabled
--- PASS: TestCerberus_Middleware_WAFEnabled (0.01s)
=== RUN TestCerberus_Middleware_ACLEnabled_NoAccessLists
--- PASS: TestCerberus_Middleware_ACLEnabled_NoAccessLists (0.01s)
=== RUN TestCerberus_Middleware_ACLEnabled_DisabledList
--- PASS: TestCerberus_Middleware_ACLEnabled_DisabledList (0.01s)
=== RUN TestCerberus_Middleware_ACLEnabled_Blocked
2026/01/10 02:17:04 /projects/Charon/backend/internal/services/security_notification_service.go:32 no such table: notification_configs
[3.089ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestCerberus_Middleware_ACLEnabled_Blocked (0.01s)
=== RUN TestCerberus_Middleware_CrowdSecLocal
--- PASS: TestCerberus_Middleware_CrowdSecLocal (0.01s)
PASS
coverage: 100.0% of statements
ok github.com/Wikid82/charon/backend/internal/cerberus (cached) coverage: 100.0% of statements
=== RUN TestLoad
--- PASS: TestLoad (0.00s)
=== RUN TestLoad_Defaults
--- PASS: TestLoad_Defaults (0.00s)
=== RUN TestLoad_CharonPrefersOverCPM
--- PASS: TestLoad_CharonPrefersOverCPM (0.00s)
=== RUN TestLoad_Error
--- PASS: TestLoad_Error (0.00s)
=== RUN TestGetEnvAny
--- PASS: TestGetEnvAny (0.00s)
=== RUN TestLoad_SecurityConfig
--- PASS: TestLoad_SecurityConfig (0.00s)
=== RUN TestLoad_DatabasePathError
--- PASS: TestLoad_DatabasePathError (0.00s)
=== RUN TestLoad_ACMEStaging
--- PASS: TestLoad_ACMEStaging (0.00s)
=== RUN TestLoad_DebugMode
--- PASS: TestLoad_DebugMode (0.00s)
PASS
coverage: 100.0% of statements
ok github.com/Wikid82/charon/backend/internal/config (cached) coverage: 100.0% of statements
=== RUN TestConsoleEnrollSuccess
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.126ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent-one config= correlation_id=ed782206-e7ca-420b-b94f-8fc8e147de23 force=false tenant=tenant-a
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-one correlation_id=ed782206-e7ca-420b-b94f-8fc8e147de23 tenant=tenant-a
--- PASS: TestConsoleEnrollSuccess (0.01s)
=== RUN TestConsoleEnrollFailureRedactsSecret
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.098ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent config= correlation_id=0892af32-2308-4d12-9c9d-773e6b81216c force=false tenant=tenant
time="2026-01-10T02:17:06Z" level=warning msg="crowdsec console enrollment failed" correlation_id=0892af32-2308-4d12-9c9d-773e6b81216c error="bad key <redacted>" output="invalid <redacted>" tenant=tenant
--- PASS: TestConsoleEnrollFailureRedactsSecret (0.01s)
=== RUN TestConsoleEnrollIdempotentWhenAlreadyEnrolled
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.114ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent config= correlation_id=7deabff7-eca2-4211-884e-f699e7f87a70 force=false tenant=tenant
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent correlation_id=7deabff7-eca2-4211-884e-f699e7f87a70 tenant=tenant
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
time="2026-01-10T02:17:06Z" level=info msg="console enrollment skipped: already enrolled or pending acceptance - use force=true to re-enroll" agent_name=agent status=pending_acceptance tenant=tenant
--- PASS: TestConsoleEnrollIdempotentWhenAlreadyEnrolled (0.01s)
=== RUN TestConsoleEnrollBlockedWhenInProgress
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
--- PASS: TestConsoleEnrollBlockedWhenInProgress (0.01s)
=== RUN TestConsoleEnrollNormalizesFullCommand
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.125ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent config= correlation_id=4caeb337-bfc6-4fd1-ad6a-b2bae08fb89c force=false tenant=tenant
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent correlation_id=4caeb337-bfc6-4fd1-ad6a-b2bae08fb89c tenant=tenant
--- PASS: TestConsoleEnrollNormalizesFullCommand (0.01s)
=== RUN TestConsoleEnrollRejectsUnsafeInput
--- PASS: TestConsoleEnrollRejectsUnsafeInput (0.01s)
=== RUN TestConsoleEnrollPassesTenantAsTags
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.105ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent-one config= correlation_id=74dd0030-7778-437b-b72d-b780578102b4 force=false tenant=some-tenant-id
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-one correlation_id=74dd0030-7778-437b-b72d-b780578102b4 tenant=some-tenant-id
--- PASS: TestConsoleEnrollPassesTenantAsTags (0.01s)
=== RUN TestConsoleEnrollNoTenantOmitsTags
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.092ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent-one config= correlation_id=55b45045-c01d-493d-be66-9f6abd028810 force=false tenant=
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-one correlation_id=55b45045-c01d-493d-be66-9f6abd028810 tenant=
--- PASS: TestConsoleEnrollNoTenantOmitsTags (0.01s)
=== RUN TestConsoleEnrollPassesForceAsOverwrite
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.116ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent-one config= correlation_id=4e911619-d08f-4515-8175-9568e2ab1387 force=true tenant=
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-one correlation_id=4e911619-d08f-4515-8175-9568e2ab1387 tenant=
--- PASS: TestConsoleEnrollPassesForceAsOverwrite (0.01s)
=== RUN TestConsoleEnrollNoForceOmitsOverwrite
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.104ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent-one config= correlation_id=7a445029-c21f-4ac6-b265-2eccc0e6b9c0 force=false tenant=
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-one correlation_id=7a445029-c21f-4ac6-b265-2eccc0e6b9c0 tenant=
--- PASS: TestConsoleEnrollNoForceOmitsOverwrite (0.01s)
=== RUN TestConsoleEnrollWithTenantAndForce
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.079ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=agent-one config= correlation_id=915fc0c4-36f4-4008-aef1-658e49da6714 force=true tenant=my-tenant
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-one correlation_id=915fc0c4-36f4-4008-aef1-658e49da6714 tenant=my-tenant
--- PASS: TestConsoleEnrollWithTenantAndForce (0.01s)
=== RUN TestSecureCommandExecutorExecuteWithEnv
=== RUN TestSecureCommandExecutorExecuteWithEnv/executes_command_successfully
=== RUN TestSecureCommandExecutorExecuteWithEnv/passes_environment_variables
=== RUN TestSecureCommandExecutorExecuteWithEnv/handles_empty_env_map
=== RUN TestSecureCommandExecutorExecuteWithEnv/handles_command_failure
=== RUN TestSecureCommandExecutorExecuteWithEnv/handles_context_timeout
--- PASS: TestSecureCommandExecutorExecuteWithEnv (0.01s)
--- PASS: TestSecureCommandExecutorExecuteWithEnv/executes_command_successfully (0.00s)
--- PASS: TestSecureCommandExecutorExecuteWithEnv/passes_environment_variables (0.00s)
--- PASS: TestSecureCommandExecutorExecuteWithEnv/handles_empty_env_map (0.00s)
--- PASS: TestSecureCommandExecutorExecuteWithEnv/handles_command_failure (0.00s)
--- PASS: TestSecureCommandExecutorExecuteWithEnv/handles_context_timeout (0.00s)
=== RUN TestFormatEnv
=== RUN TestFormatEnv/formats_single_env_var
=== RUN TestFormatEnv/formats_multiple_env_vars
=== RUN TestFormatEnv/handles_empty_map
=== RUN TestFormatEnv/handles_nil_map
=== RUN TestFormatEnv/handles_special_characters
--- PASS: TestFormatEnv (0.00s)
--- PASS: TestFormatEnv/formats_single_env_var (0.00s)
--- PASS: TestFormatEnv/formats_multiple_env_vars (0.00s)
--- PASS: TestFormatEnv/handles_empty_map (0.00s)
--- PASS: TestFormatEnv/handles_nil_map (0.00s)
--- PASS: TestFormatEnv/handles_special_characters (0.00s)
=== RUN TestConsoleEnrollmentStatus
=== RUN TestConsoleEnrollmentStatus/returns_not_enrolled_for_new_service
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.077ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
=== RUN TestConsoleEnrollmentStatus/returns_pending_acceptance_status_after_enrollment
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.097ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=test-agent config= correlation_id=52fce0c6-2ff8-4cc4-afc7-a8db06d702f5 force=false tenant=
time="2026-01-10T02:17:06Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=test-agent correlation_id=52fce0c6-2ff8-4cc4-afc7-a8db06d702f5 tenant=
=== RUN TestConsoleEnrollmentStatus/returns_failed_status_after_failed_enrollment
time="2026-01-10T02:17:06Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:06 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.116ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:06Z" level=info msg="starting crowdsec console enrollment" agent=test-agent config= correlation_id=5a7b3017-86c9-4975-8525-afe1029750c1 force=false tenant=
time="2026-01-10T02:17:06Z" level=warning msg="crowdsec console enrollment failed" correlation_id=5a7b3017-86c9-4975-8525-afe1029750c1 error="enroll failed" output=error tenant=
--- PASS: TestConsoleEnrollmentStatus (0.02s)
--- PASS: TestConsoleEnrollmentStatus/returns_not_enrolled_for_new_service (0.00s)
--- PASS: TestConsoleEnrollmentStatus/returns_pending_acceptance_status_after_enrollment (0.00s)
--- PASS: TestConsoleEnrollmentStatus/returns_failed_status_after_failed_enrollment (0.01s)
=== RUN TestDeriveKey
=== RUN TestDeriveKey/derives_consistent_key
=== RUN TestDeriveKey/derives_different_keys_for_different_secrets
=== RUN TestDeriveKey/uses_default_for_empty_secret
--- PASS: TestDeriveKey (0.00s)
--- PASS: TestDeriveKey/derives_consistent_key (0.00s)
--- PASS: TestDeriveKey/derives_different_keys_for_different_secrets (0.00s)
--- PASS: TestDeriveKey/uses_default_for_empty_secret (0.00s)
=== RUN TestNormalizeEnrollmentKey
=== RUN TestNormalizeEnrollmentKey/valid_raw_key
=== RUN TestNormalizeEnrollmentKey/full_command_with_sudo
=== RUN TestNormalizeEnrollmentKey/full_command_without_sudo
=== RUN TestNormalizeEnrollmentKey/key_with_whitespace
=== RUN TestNormalizeEnrollmentKey/empty_key
=== RUN TestNormalizeEnrollmentKey/only_whitespace
=== RUN TestNormalizeEnrollmentKey/invalid_format
=== RUN TestNormalizeEnrollmentKey/injection_attempt
--- PASS: TestNormalizeEnrollmentKey (0.00s)
--- PASS: TestNormalizeEnrollmentKey/valid_raw_key (0.00s)
--- PASS: TestNormalizeEnrollmentKey/full_command_with_sudo (0.00s)
--- PASS: TestNormalizeEnrollmentKey/full_command_without_sudo (0.00s)
--- PASS: TestNormalizeEnrollmentKey/key_with_whitespace (0.00s)
--- PASS: TestNormalizeEnrollmentKey/empty_key (0.00s)
--- PASS: TestNormalizeEnrollmentKey/only_whitespace (0.00s)
--- PASS: TestNormalizeEnrollmentKey/invalid_format (0.00s)
--- PASS: TestNormalizeEnrollmentKey/injection_attempt (0.00s)
=== RUN TestRedactSecret
=== RUN TestRedactSecret/redacts_secret_from_message
=== RUN TestRedactSecret/handles_empty_secret
=== RUN TestRedactSecret/handles_secret_not_in_message
=== RUN TestRedactSecret/redacts_multiple_occurrences
--- PASS: TestRedactSecret (0.00s)
--- PASS: TestRedactSecret/redacts_secret_from_message (0.00s)
--- PASS: TestRedactSecret/handles_empty_secret (0.00s)
--- PASS: TestRedactSecret/handles_secret_not_in_message (0.00s)
--- PASS: TestRedactSecret/redacts_multiple_occurrences (0.00s)
=== RUN TestExtractCscliErrorMessage
=== RUN TestExtractCscliErrorMessage/msg_format_with_quotes
=== RUN TestExtractCscliErrorMessage/ERRO_format_with_timestamp
=== RUN TestExtractCscliErrorMessage/plain_error_message
=== RUN TestExtractCscliErrorMessage/multiline_with_error_in_middle
=== RUN TestExtractCscliErrorMessage/empty_output
=== RUN TestExtractCscliErrorMessage/whitespace_only
=== RUN TestExtractCscliErrorMessage/no_recognizable_pattern_-_returns_first_line
=== RUN TestExtractCscliErrorMessage/failed_keyword_detection
=== RUN TestExtractCscliErrorMessage/invalid_keyword_detection
=== RUN TestExtractCscliErrorMessage/complex_cscli_output_with_msg
--- PASS: TestExtractCscliErrorMessage (0.00s)
--- PASS: TestExtractCscliErrorMessage/msg_format_with_quotes (0.00s)
--- PASS: TestExtractCscliErrorMessage/ERRO_format_with_timestamp (0.00s)
--- PASS: TestExtractCscliErrorMessage/plain_error_message (0.00s)
--- PASS: TestExtractCscliErrorMessage/multiline_with_error_in_middle (0.00s)
--- PASS: TestExtractCscliErrorMessage/empty_output (0.00s)
--- PASS: TestExtractCscliErrorMessage/whitespace_only (0.00s)
--- PASS: TestExtractCscliErrorMessage/no_recognizable_pattern_-_returns_first_line (0.00s)
--- PASS: TestExtractCscliErrorMessage/failed_keyword_detection (0.00s)
--- PASS: TestExtractCscliErrorMessage/invalid_keyword_detection (0.00s)
--- PASS: TestExtractCscliErrorMessage/complex_cscli_output_with_msg (0.00s)
=== RUN TestEncryptDecrypt
=== RUN TestEncryptDecrypt/encrypts_and_decrypts_successfully
=== RUN TestEncryptDecrypt/handles_empty_string
=== RUN TestEncryptDecrypt/different_encryptions_produce_different_ciphertext
--- PASS: TestEncryptDecrypt (0.00s)
--- PASS: TestEncryptDecrypt/encrypts_and_decrypts_successfully (0.00s)
--- PASS: TestEncryptDecrypt/handles_empty_string (0.00s)
--- PASS: TestEncryptDecrypt/different_encryptions_produce_different_ciphertext (0.00s)
=== RUN TestCheckLAPIAvailable_Retries
--- PASS: TestCheckLAPIAvailable_Retries (4.00s)
=== RUN TestCheckLAPIAvailable_RetriesExhausted
--- PASS: TestCheckLAPIAvailable_RetriesExhausted (4.01s)
=== RUN TestCheckLAPIAvailable_FirstAttemptSuccess
--- PASS: TestCheckLAPIAvailable_FirstAttemptSuccess (0.01s)
=== RUN TestEnroll_RequiresLAPI
--- PASS: TestEnroll_RequiresLAPI (4.01s)
=== RUN TestConsoleEnrollService_ClearEnrollment
time="2026-01-10T02:17:18Z" level=info msg="clearing console enrollment state" previous_status=enrolled
--- PASS: TestConsoleEnrollService_ClearEnrollment (0.00s)
=== RUN TestConsoleEnrollService_ClearEnrollment_NoRecord
2026/01/10 02:17:18 /projects/Charon/backend/internal/crowdsec/console_enroll.go:355 record not found
[0.073ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
--- PASS: TestConsoleEnrollService_ClearEnrollment_NoRecord (0.00s)
=== RUN TestConsoleEnrollService_ClearEnrollment_NilDB
--- PASS: TestConsoleEnrollService_ClearEnrollment_NilDB (0.00s)
=== RUN TestConsoleEnrollService_ClearEnrollment_ThenReenroll
time="2026-01-10T02:17:18Z" level=info msg="registering with crowdsec capi"
2026/01/10 02:17:18 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.087ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:18Z" level=info msg="starting crowdsec console enrollment" agent=agent-one config= correlation_id=a1a86ed2-7fe3-4d42-a98c-fa439d219941 force=false tenant=
time="2026-01-10T02:17:18Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-one correlation_id=a1a86ed2-7fe3-4d42-a98c-fa439d219941 tenant=
time="2026-01-10T02:17:18Z" level=info msg="clearing console enrollment state" previous_status=pending_acceptance
2026/01/10 02:17:18 /projects/Charon/backend/internal/crowdsec/console_enroll.go:327 record not found
[0.057ms] [rows:0] SELECT * FROM `crowdsec_console_enrollments` ORDER BY `crowdsec_console_enrollments`.`id` LIMIT 1
time="2026-01-10T02:17:18Z" level=info msg="registering with crowdsec capi"
time="2026-01-10T02:17:18Z" level=info msg="starting crowdsec console enrollment" agent=agent-two config= correlation_id=c2001970-5a34-40d1-9454-a2ac1d48c5b8 force=false tenant=
time="2026-01-10T02:17:18Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=agent-two correlation_id=c2001970-5a34-40d1-9454-a2ac1d48c5b8 tenant=
--- PASS: TestConsoleEnrollService_ClearEnrollment_ThenReenroll (0.01s)
=== RUN TestConsoleEnrollService_LogsWhenSkipped
time="2026-01-10T02:17:18Z" level=info msg="registering with crowdsec capi"
time="2026-01-10T02:17:18Z" level=info msg="console enrollment skipped: already enrolled or pending acceptance - use force=true to re-enroll" agent_name=test-agent status=enrolled tenant=test-tenant
--- PASS: TestConsoleEnrollService_LogsWhenSkipped (0.00s)
=== RUN TestConsoleEnrollService_LogsWhenSkipped_PendingAcceptance
time="2026-01-10T02:17:18Z" level=info msg="registering with crowdsec capi"
time="2026-01-10T02:17:18Z" level=info msg="console enrollment skipped: already enrolled or pending acceptance - use force=true to re-enroll" agent_name=test-agent status=pending_acceptance tenant=test-tenant
--- PASS: TestConsoleEnrollService_LogsWhenSkipped_PendingAcceptance (0.00s)
=== RUN TestConsoleEnrollService_ForceOverridesSkip
time="2026-01-10T02:17:18Z" level=info msg="registering with crowdsec capi"
time="2026-01-10T02:17:18Z" level=info msg="starting crowdsec console enrollment" agent=new-agent config= correlation_id=b0b9632b-d724-4339-a04b-171797fd2b39 force=true tenant=
time="2026-01-10T02:17:18Z" level=info msg="crowdsec console enrollment request sent - pending acceptance on crowdsec.net" agent=new-agent correlation_id=b0b9632b-d724-4339-a04b-171797fd2b39 tenant=
--- PASS: TestConsoleEnrollService_ForceOverridesSkip (0.00s)
=== RUN TestEnroll_InvalidAgentNameCharacters
--- PASS: TestEnroll_InvalidAgentNameCharacters (0.00s)
=== RUN TestEnroll_InvalidTenantNameCharacters
--- PASS: TestEnroll_InvalidTenantNameCharacters (0.00s)
=== RUN TestEnsureCAPIRegistered_StandardLayoutExists
--- PASS: TestEnsureCAPIRegistered_StandardLayoutExists (0.00s)
=== RUN TestEnsureCAPIRegistered_RegisterError
time="2026-01-10T02:17:18Z" level=info msg="registering with crowdsec capi"
--- PASS: TestEnsureCAPIRegistered_RegisterError (0.00s)
=== RUN TestFindConfigPath_StandardLayout
--- PASS: TestFindConfigPath_StandardLayout (0.00s)
=== RUN TestFindConfigPath_RootLayout
--- PASS: TestFindConfigPath_RootLayout (0.00s)
=== RUN TestFindConfigPath_NeitherExists
--- PASS: TestFindConfigPath_NeitherExists (0.00s)
=== RUN TestStatusFromModel_NilModel
--- PASS: TestStatusFromModel_NilModel (0.00s)
=== RUN TestNormalizeEnrollmentKey_InvalidCharacters
--- PASS: TestNormalizeEnrollmentKey_InvalidCharacters (0.00s)
=== RUN TestNormalizeEnrollmentKey_TooShort
--- PASS: TestNormalizeEnrollmentKey_TooShort (0.00s)
=== RUN TestNormalizeEnrollmentKey_NonMatchingFormat
--- PASS: TestNormalizeEnrollmentKey_NonMatchingFormat (0.00s)
=== RUN TestApplyWithOpenFileHandles
time="2026-01-10T02:17:18Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyWithOpenFileHandles3946802142/001/test/preset/bundle.tgz cache_key=test/preset-1768011438 meta_path=/tmp/TestApplyWithOpenFileHandles3946802142/001/test/preset/metadata.json preview_path=/tmp/TestApplyWithOpenFileHandles3946802142/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:18Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestApplyWithOpenFileHandles3946802142/001/test/preset/bundle.tgz cache_key=test/preset-1768011438 slug=test/preset
--- PASS: TestApplyWithOpenFileHandles (0.02s)
=== RUN TestBackupPathOnlySetAfterSuccessfulBackup
=== RUN TestBackupPathOnlySetAfterSuccessfulBackup/backup_path_not_set_when_cache_missing
time="2026-01-10T02:17:18Z" level=warning msg="failed to load cached preset metadata" error="cache miss" slug=nonexistent/preset
time="2026-01-10T02:17:18Z" level=info msg="attempting to repull preset after cache load failure" error="load cache for nonexistent/preset: cache miss" slug=nonexistent/preset
time="2026-01-10T02:17:18Z" level=warning msg="hub index fetch failed, trying mirror" attempt=1 error="https://hub-data.crowdsec.net/api/index.json (status 403)" hub_index="https://hub-data.crowdsec.net/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=true hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json"
time="2026-01-10T02:17:19Z" level=warning msg="cache refresh failed; rolled back backup" backup_path=/tmp/TestBackupPathOnlySetAfterSuccessfulBackupbackup_path_not_set_w4106602953/002/crowdsec.backup.20260110-021718 error="load cache for nonexistent/preset: cache miss: refresh cache: preset not found in hub" slug=nonexistent/preset
=== RUN TestBackupPathOnlySetAfterSuccessfulBackup/backup_path_set_only_after_successful_backup
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestBackupPathOnlySetAfterSuccessfulBackupbackup_path_set_only_1030315152/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestBackupPathOnlySetAfterSuccessfulBackupbackup_path_set_only_1030315152/001/test/preset/metadata.json preview_path=/tmp/TestBackupPathOnlySetAfterSuccessfulBackupbackup_path_set_only_1030315152/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestBackupPathOnlySetAfterSuccessfulBackupbackup_path_set_only_1030315152/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 slug=test/preset
--- PASS: TestBackupPathOnlySetAfterSuccessfulBackup (1.24s)
--- PASS: TestBackupPathOnlySetAfterSuccessfulBackup/backup_path_not_set_when_cache_missing (1.24s)
--- PASS: TestBackupPathOnlySetAfterSuccessfulBackup/backup_path_set_only_after_successful_backup (0.01s)
=== RUN TestHubCacheStoreLoadAndExpire
=== PAUSE TestHubCacheStoreLoadAndExpire
=== RUN TestHubCacheRejectsBadSlug
=== PAUSE TestHubCacheRejectsBadSlug
=== RUN TestHubCacheListAndEvict
=== PAUSE TestHubCacheListAndEvict
=== RUN TestHubCacheTouchUpdatesTTL
=== PAUSE TestHubCacheTouchUpdatesTTL
=== RUN TestHubCachePreviewExistsAndSize
=== PAUSE TestHubCachePreviewExistsAndSize
=== RUN TestHubCacheExistsHonorsTTL
=== PAUSE TestHubCacheExistsHonorsTTL
=== RUN TestSanitizeSlugCases
=== PAUSE TestSanitizeSlugCases
=== RUN TestNewHubCacheRequiresBaseDir
=== PAUSE TestNewHubCacheRequiresBaseDir
=== RUN TestHubCacheTouchMissing
=== PAUSE TestHubCacheTouchMissing
=== RUN TestHubCacheTouchInvalidSlug
=== PAUSE TestHubCacheTouchInvalidSlug
=== RUN TestHubCacheStoreContextCanceled
=== PAUSE TestHubCacheStoreContextCanceled
=== RUN TestHubCacheLoadInvalidSlug
=== PAUSE TestHubCacheLoadInvalidSlug
=== RUN TestHubCacheExistsContextCanceled
=== PAUSE TestHubCacheExistsContextCanceled
=== RUN TestHubCacheListSkipsExpired
=== PAUSE TestHubCacheListSkipsExpired
=== RUN TestHubCacheEvictInvalidSlug
=== PAUSE TestHubCacheEvictInvalidSlug
=== RUN TestHubCacheListContextCanceled
=== PAUSE TestHubCacheListContextCanceled
=== RUN TestHubCacheTTL
=== PAUSE TestHubCacheTTL
=== RUN TestPullThenApplyFlow
hub_pull_apply_test.go:90: Step 1: Pulling preset
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://test.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/test.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/test.yaml" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=158 etag=etag123 hub_endpoint="http://test.example.com/test.tgz" preview_size=24 slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullThenApplyFlow2203214519/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestPullThenApplyFlow2203214519/001/test/preset/metadata.json preview_path=/tmp/TestPullThenApplyFlow2203214519/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestPullThenApplyFlow2203214519/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 preview_path=/tmp/TestPullThenApplyFlow2203214519/001/test/preset/preview.yaml slug=test/preset
hub_pull_apply_test.go:110: Step 2: Verifying cache can be loaded
hub_pull_apply_test.go:117: Step 3: Applying preset from cache
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestPullThenApplyFlow2203214519/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 slug=test/preset
--- PASS: TestPullThenApplyFlow (0.01s)
=== RUN TestApplyRepullsOnCacheMissAfterCSCLIFailure
time="2026-01-10T02:17:19Z" level=warning msg="failed to load cached preset metadata" error="cache miss" slug=test/preset
time="2026-01-10T02:17:19Z" level=warning msg="cscli install failed; attempting cache fallback" error="install failed" slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="attempting to repull preset after cache load failure" error="load cache for test/preset: cache miss" slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://test.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/test/preset.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/test/preset.yaml" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=110 etag=e1 hub_endpoint="http://test.example.com/test/preset.tgz" preview_size=7 slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyRepullsOnCacheMissAfterCSCLIFailure1830341465/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestApplyRepullsOnCacheMissAfterCSCLIFailure1830341465/001/test/preset/metadata.json preview_path=/tmp/TestApplyRepullsOnCacheMissAfterCSCLIFailure1830341465/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestApplyRepullsOnCacheMissAfterCSCLIFailure1830341465/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 preview_path=/tmp/TestApplyRepullsOnCacheMissAfterCSCLIFailure1830341465/001/test/preset/preview.yaml slug=test/preset
--- PASS: TestApplyRepullsOnCacheMissAfterCSCLIFailure (0.01s)
=== RUN TestApplyRepullsOnCacheExpired
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/bundle.tgz cache_key=expired/preset-1768011439 meta_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/metadata.json preview_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/preview.yaml slug=expired/preset
time="2026-01-10T02:17:19Z" level=warning msg="failed to load cached preset metadata" error="cache expired" slug=expired/preset
time="2026-01-10T02:17:19Z" level=info msg="attempting to repull preset after cache load failure" error="load cache for expired/preset: cache expired" slug=expired/preset
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://test.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/expired/preset.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/expired/preset.yaml" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=112 etag=e2 hub_endpoint="http://test.example.com/expired/preset.tgz" preview_size=11 slug=expired/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/bundle.tgz cache_key=expired/preset-1768011439 meta_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/metadata.json preview_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/preview.yaml slug=expired/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/bundle.tgz cache_key=expired/preset-1768011439 preview_path=/tmp/TestApplyRepullsOnCacheExpired748670146/001/expired/preset/preview.yaml slug=expired/preset
--- PASS: TestApplyRepullsOnCacheExpired (0.02s)
=== RUN TestPullAcceptsNamespacedIndexEntry
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://test.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/crowdsecurity/bot-mitigation-essentials.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/crowdsecurity/bot-mitigation-essentials.yaml" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=114 etag=etag-bme hub_endpoint="http://test.example.com/crowdsecurity/bot-mitigation-essentials.tgz" preview_size=18 slug=bot-mitigation-essentials
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullAcceptsNamespacedIndexEntry586165543/001/bot-mitigation-essentials/bundle.tgz cache_key=bot-mitigation-essentials-1768011439 meta_path=/tmp/TestPullAcceptsNamespacedIndexEntry586165543/001/bot-mitigation-essentials/metadata.json preview_path=/tmp/TestPullAcceptsNamespacedIndexEntry586165543/001/bot-mitigation-essentials/preview.yaml slug=bot-mitigation-essentials
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestPullAcceptsNamespacedIndexEntry586165543/001/bot-mitigation-essentials/bundle.tgz cache_key=bot-mitigation-essentials-1768011439 preview_path=/tmp/TestPullAcceptsNamespacedIndexEntry586165543/001/bot-mitigation-essentials/preview.yaml slug=bot-mitigation-essentials
--- PASS: TestPullAcceptsNamespacedIndexEntry (0.00s)
=== RUN TestHubFallbackToMirrorOnForbidden
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=1 error="http://primary.example.com/api/index.json (status 403)" hub_index="http://primary.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=true hub_index="http://mirror.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub fetch failed, attempting fallback" attempt=1 endpoint="http://primary.example.com/fallback/preset.tgz" error="http://primary.example.com/fallback/preset.tgz (status 403)"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://mirror.example.com/fallback/preset.tgz" fallback_used=true
time="2026-01-10T02:17:19Z" level=warning msg="hub fetch failed, attempting fallback" attempt=1 endpoint="http://primary.example.com/fallback/preset.yaml" error="http://primary.example.com/fallback/preset.yaml (status 403)"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://mirror.example.com/fallback/preset.yaml" fallback_used=true
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=104 etag=etag-mirror hub_endpoint="http://mirror.example.com/fallback/preset.tgz" preview_size=14 slug=fallback/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubFallbackToMirrorOnForbidden3143303761/001/fallback/preset/bundle.tgz cache_key=fallback/preset-1768011439 meta_path=/tmp/TestHubFallbackToMirrorOnForbidden3143303761/001/fallback/preset/metadata.json preview_path=/tmp/TestHubFallbackToMirrorOnForbidden3143303761/001/fallback/preset/preview.yaml slug=fallback/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestHubFallbackToMirrorOnForbidden3143303761/001/fallback/preset/bundle.tgz cache_key=fallback/preset-1768011439 preview_path=/tmp/TestHubFallbackToMirrorOnForbidden3143303761/001/fallback/preset/preview.yaml slug=fallback/preset
--- PASS: TestHubFallbackToMirrorOnForbidden (0.01s)
=== RUN TestApplyWithoutPullFails
time="2026-01-10T02:17:19Z" level=warning msg="failed to load cached preset metadata" error="cache miss" slug=nonexistent/preset
time="2026-01-10T02:17:19Z" level=info msg="attempting to repull preset after cache load failure" error="load cache for nonexistent/preset: cache miss" slug=nonexistent/preset
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=1 error="http://test.example.com/api/index.json (status 500)" hub_index="http://test.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=2 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json (status 500)" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=3 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json (status 500)" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=4 error="https://hub-data.crowdsec.net/api/index.json (status 500)" hub_index="https://hub-data.crowdsec.net/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="cache refresh failed; rolled back backup" backup_path=/tmp/TestApplyWithoutPullFails1841293971/002.backup.20260110-021719 error="load cache for nonexistent/preset: cache miss: refresh cache: fetch hub index: http://test.example.com/api/index.json: http://test.example.com/api/index.json (status 500)\nhttps://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json: https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json (status 500)\nhttps://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json: https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json (status 500)\nhttps://hub-data.crowdsec.net/api/index.json: https://hub-data.crowdsec.net/api/index.json (status 500)" slug=nonexistent/preset
--- PASS: TestApplyWithoutPullFails (0.00s)
=== RUN TestCacheExpiration
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestCacheExpiration2058278143/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestCacheExpiration2058278143/001/test/preset/metadata.json preview_path=/tmp/TestCacheExpiration2058278143/001/test/preset/preview.yaml slug=test/preset
--- PASS: TestCacheExpiration (0.01s)
=== RUN TestCacheListAfterPull
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://test.example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/preset1.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.example.com/preset1.yaml" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=105 etag=e1 hub_endpoint="http://test.example.com/preset1.tgz" preview_size=8 slug=preset1
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestCacheListAfterPull3507341671/001/preset1/bundle.tgz cache_key=preset1-1768011439 meta_path=/tmp/TestCacheListAfterPull3507341671/001/preset1/metadata.json preview_path=/tmp/TestCacheListAfterPull3507341671/001/preset1/preview.yaml slug=preset1
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestCacheListAfterPull3507341671/001/preset1/bundle.tgz cache_key=preset1-1768011439 preview_path=/tmp/TestCacheListAfterPull3507341671/001/preset1/preview.yaml slug=preset1
--- PASS: TestCacheListAfterPull (0.01s)
=== RUN TestApplyReadsArchiveBeforeBackup
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyReadsArchiveBeforeBackup1310230569/001/crowdsec/hub_cache/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestApplyReadsArchiveBeforeBackup1310230569/001/crowdsec/hub_cache/test/preset/metadata.json preview_path=/tmp/TestApplyReadsArchiveBeforeBackup1310230569/001/crowdsec/hub_cache/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestApplyReadsArchiveBeforeBackup1310230569/001/crowdsec/hub_cache/test/preset/bundle.tgz cache_key=test/preset-1768011439 slug=test/preset
--- PASS: TestApplyReadsArchiveBeforeBackup (0.01s)
=== RUN TestFetchIndexParsesRawIndexFormat
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://example.com/api/index.json"
--- PASS: TestFetchIndexParsesRawIndexFormat (0.00s)
=== RUN TestFetchIndexPrefersCSCLI
=== PAUSE TestFetchIndexPrefersCSCLI
=== RUN TestFetchIndexFallbackHTTP
=== PAUSE TestFetchIndexFallbackHTTP
=== RUN TestFetchIndexHTTPRejectsRedirect
=== PAUSE TestFetchIndexHTTPRejectsRedirect
=== RUN TestFetchIndexHTTPRejectsHTML
=== PAUSE TestFetchIndexHTTPRejectsHTML
=== RUN TestFetchIndexHTTPFallsBackToDefaultHub
=== PAUSE TestFetchIndexHTTPFallsBackToDefaultHub
=== RUN TestFetchIndexFallsBackToMirrorOnForbidden
=== PAUSE TestFetchIndexFallsBackToMirrorOnForbidden
=== RUN TestPullCachesPreview
=== PAUSE TestPullCachesPreview
=== RUN TestApplyUsesCacheWhenCSCLIFails
=== PAUSE TestApplyUsesCacheWhenCSCLIFails
=== RUN TestApplyRollsBackOnBadArchive
=== PAUSE TestApplyRollsBackOnBadArchive
=== RUN TestApplyUsesCacheWhenCscliMissing
=== PAUSE TestApplyUsesCacheWhenCscliMissing
=== RUN TestPullReturnsCachedPreviewWithoutNetwork
=== PAUSE TestPullReturnsCachedPreviewWithoutNetwork
=== RUN TestPullEvictsExpiredCacheAndRefreshes
=== PAUSE TestPullEvictsExpiredCacheAndRefreshes
=== RUN TestPullFallsBackToArchivePreview
=== PAUSE TestPullFallsBackToArchivePreview
=== RUN TestPullFallsBackToMirrorArchiveOnForbidden
=== PAUSE TestPullFallsBackToMirrorArchiveOnForbidden
=== RUN TestFetchWithLimitRejectsLargePayload
=== PAUSE TestFetchWithLimitRejectsLargePayload
=== RUN TestExtractTarGzRejectsSymlink
=== PAUSE TestExtractTarGzRejectsSymlink
=== RUN TestExtractTarGzRejectsAbsolutePath
=== PAUSE TestExtractTarGzRejectsAbsolutePath
=== RUN TestFetchIndexHTTPError
=== PAUSE TestFetchIndexHTTPError
=== RUN TestPullValidatesSlugAndMissingPreset
=== PAUSE TestPullValidatesSlugAndMissingPreset
=== RUN TestFetchPreviewRequiresURL
=== PAUSE TestFetchPreviewRequiresURL
=== RUN TestFetchWithLimitRequiresClient
=== PAUSE TestFetchWithLimitRequiresClient
=== RUN TestRunCSCLIRejectsUnsafeSlug
=== PAUSE TestRunCSCLIRejectsUnsafeSlug
=== RUN TestApplyUsesCSCLISuccess
=== PAUSE TestApplyUsesCSCLISuccess
=== RUN TestFetchIndexCSCLIParseError
=== PAUSE TestFetchIndexCSCLIParseError
=== RUN TestFetchWithLimitStatusError
=== PAUSE TestFetchWithLimitStatusError
=== RUN TestApplyRollsBackWhenCacheMissing
=== PAUSE TestApplyRollsBackWhenCacheMissing
=== RUN TestNormalizeHubBaseURL
=== PAUSE TestNormalizeHubBaseURL
=== RUN TestBuildIndexURL
=== PAUSE TestBuildIndexURL
=== RUN TestUniqueStrings
=== PAUSE TestUniqueStrings
=== RUN TestFirstNonEmpty
=== PAUSE TestFirstNonEmpty
=== RUN TestCleanShellArg
=== PAUSE TestCleanShellArg
=== RUN TestHasCSCLI
=== PAUSE TestHasCSCLI
=== RUN TestFindPreviewFileFromArchive
=== PAUSE TestFindPreviewFileFromArchive
=== RUN TestApplyWithCopyBasedBackup
=== PAUSE TestApplyWithCopyBasedBackup
=== RUN TestBackupExistingHandlesDeviceBusy
=== PAUSE TestBackupExistingHandlesDeviceBusy
=== RUN TestCopyFile
=== PAUSE TestCopyFile
=== RUN TestCopyDir
=== PAUSE TestCopyDir
=== RUN TestFetchIndexHTTPAcceptsTextPlain
=== PAUSE TestFetchIndexHTTPAcceptsTextPlain
=== RUN TestValidateHubURL_ValidHTTPSProduction
=== PAUSE TestValidateHubURL_ValidHTTPSProduction
=== RUN TestValidateHubURL_InvalidSchemes
=== PAUSE TestValidateHubURL_InvalidSchemes
=== RUN TestValidateHubURL_LocalhostExceptions
=== PAUSE TestValidateHubURL_LocalhostExceptions
=== RUN TestValidateHubURL_UnknownDomainRejection
=== PAUSE TestValidateHubURL_UnknownDomainRejection
=== RUN TestValidateHubURL_HTTPRejectedForProduction
=== PAUSE TestValidateHubURL_HTTPRejectedForProduction
=== RUN TestBuildResourceURLs
=== PAUSE TestBuildResourceURLs
=== RUN TestParseRawIndex
=== PAUSE TestParseRawIndex
=== RUN TestFetchIndexHTTPFromURL_HTMLDetection
=== PAUSE TestFetchIndexHTTPFromURL_HTMLDetection
=== RUN TestHubService_Apply_ArchiveReadBeforeBackup
=== PAUSE TestHubService_Apply_ArchiveReadBeforeBackup
=== RUN TestHubService_Apply_CacheRefresh
=== PAUSE TestHubService_Apply_CacheRefresh
=== RUN TestHubService_Apply_RollbackOnExtractionFailure
=== PAUSE TestHubService_Apply_RollbackOnExtractionFailure
=== RUN TestCopyDirAndCopyFile
=== PAUSE TestCopyDirAndCopyFile
=== RUN TestEmptyDir
=== PAUSE TestEmptyDir
=== RUN TestExtractTarGz
=== PAUSE TestExtractTarGz
=== RUN TestBackupExisting
=== PAUSE TestBackupExisting
=== RUN TestRollback
=== PAUSE TestRollback
=== RUN TestHubHTTPErrorError
=== PAUSE TestHubHTTPErrorError
=== RUN TestHubHTTPErrorUnwrap
=== PAUSE TestHubHTTPErrorUnwrap
=== RUN TestHubHTTPErrorCanFallback
=== PAUSE TestHubHTTPErrorCanFallback
=== RUN TestValidateHubURL_EdgeCases
=== PAUSE TestValidateHubURL_EdgeCases
=== RUN TestNewHubService_DefaultTimeouts
=== PAUSE TestNewHubService_DefaultTimeouts
=== RUN TestNewHubService_EnvVarTimeouts_Valid
--- PASS: TestNewHubService_EnvVarTimeouts_Valid (0.00s)
=== RUN TestNewHubService_EnvVarTimeouts_Invalid
--- PASS: TestNewHubService_EnvVarTimeouts_Invalid (0.00s)
=== RUN TestNewHubService_EnvVarTimeouts_Negative
--- PASS: TestNewHubService_EnvVarTimeouts_Negative (0.00s)
=== RUN TestNewHubService_EnvVarTimeouts_Whitespace
--- PASS: TestNewHubService_EnvVarTimeouts_Whitespace (0.00s)
=== RUN TestNewHubService_CustomHubBaseURL
--- PASS: TestNewHubService_CustomHubBaseURL (0.00s)
=== RUN TestNewHubService_CustomMirrorBaseURL
--- PASS: TestNewHubService_CustomMirrorBaseURL (0.00s)
=== RUN TestBackupExisting_CopyFallback_Success
=== PAUSE TestBackupExisting_CopyFallback_Success
=== RUN TestBackupExisting_RenameSuccess
=== PAUSE TestBackupExisting_RenameSuccess
=== RUN TestBackupExisting_EmptyDirectory
=== PAUSE TestBackupExisting_EmptyDirectory
=== RUN TestBackupExisting_PreservesPermissions
=== PAUSE TestBackupExisting_PreservesPermissions
=== RUN TestExtractTarGz_NestedPathTraversal
=== PAUSE TestExtractTarGz_NestedPathTraversal
=== RUN TestExtractTarGz_AbsolutePathWithDots
=== PAUSE TestExtractTarGz_AbsolutePathWithDots
=== RUN TestExtractTarGz_EmptyArchive
=== PAUSE TestExtractTarGz_EmptyArchive
=== RUN TestExtractTarGz_InvalidTarAfterGzip
=== PAUSE TestExtractTarGz_InvalidTarAfterGzip
=== RUN TestExtractTarGz_LargeNestedStructure
=== PAUSE TestExtractTarGz_LargeNestedStructure
=== RUN TestExtractTarGz_SpecialCharactersInFilenames
=== PAUSE TestExtractTarGz_SpecialCharactersInFilenames
=== RUN TestExtractTarGz_DirectoriesWithoutFiles
=== PAUSE TestExtractTarGz_DirectoriesWithoutFiles
=== RUN TestExtractTarGz_SkipsSpecialFileTypes
=== PAUSE TestExtractTarGz_SkipsSpecialFileTypes
=== RUN TestAsString_Nil
=== PAUSE TestAsString_Nil
=== RUN TestAsString_String
=== PAUSE TestAsString_String
=== RUN TestAsString_Int
=== PAUSE TestAsString_Int
=== RUN TestAsString_Float
=== PAUSE TestAsString_Float
=== RUN TestAsString_Bool
=== PAUSE TestAsString_Bool
=== RUN TestAsString_Struct
=== PAUSE TestAsString_Struct
=== RUN TestAsString_EmptyString
=== PAUSE TestAsString_EmptyString
=== RUN TestFetchIndexHTTPFromURL_ParseRawIndexFallback
=== PAUSE TestFetchIndexHTTPFromURL_ParseRawIndexFallback
=== RUN TestFetchIndexHTTPFromURL_EmptyJSONArray
=== PAUSE TestFetchIndexHTTPFromURL_EmptyJSONArray
=== RUN TestFetchIndexHTTPFromURL_InvalidJSON
=== PAUSE TestFetchIndexHTTPFromURL_InvalidJSON
=== RUN TestIsGzip_ValidGzip
=== PAUSE TestIsGzip_ValidGzip
=== RUN TestIsGzip_NotGzip
=== PAUSE TestIsGzip_NotGzip
=== RUN TestIsGzip_TooShort
=== PAUSE TestIsGzip_TooShort
=== RUN TestPeekFirstYAML_FindsYAML
=== PAUSE TestPeekFirstYAML_FindsYAML
=== RUN TestPeekFirstYAML_NoYAMLFiles
=== PAUSE TestPeekFirstYAML_NoYAMLFiles
=== RUN TestPeekFirstYAML_InvalidArchive
=== PAUSE TestPeekFirstYAML_InvalidArchive
=== RUN TestFindIndexEntry_ExactMatch
=== PAUSE TestFindIndexEntry_ExactMatch
=== RUN TestFindIndexEntry_ShortName
=== PAUSE TestFindIndexEntry_ShortName
=== RUN TestFindIndexEntry_AmbiguousShortName
=== PAUSE TestFindIndexEntry_AmbiguousShortName
=== RUN TestFindIndexEntry_NotFound
=== PAUSE TestFindIndexEntry_NotFound
=== RUN TestFindIndexEntry_EmptySlug
=== PAUSE TestFindIndexEntry_EmptySlug
=== RUN TestListCuratedPresetsReturnsCopy
=== PAUSE TestListCuratedPresetsReturnsCopy
=== RUN TestFindPreset
=== PAUSE TestFindPreset
=== RUN TestFindPresetCaseVariants
=== PAUSE TestFindPresetCaseVariants
=== RUN TestListCuratedPresetsReturnsDifferentCopy
=== PAUSE TestListCuratedPresetsReturnsDifferentCopy
=== RUN TestCheckLAPIHealth_Healthy
--- PASS: TestCheckLAPIHealth_Healthy (0.00s)
=== RUN TestCheckLAPIHealth_Unhealthy
--- PASS: TestCheckLAPIHealth_Unhealthy (0.00s)
=== RUN TestCheckLAPIHealth_Unreachable
--- PASS: TestCheckLAPIHealth_Unreachable (0.00s)
=== RUN TestCheckLAPIHealth_FallbackToDecisions
--- PASS: TestCheckLAPIHealth_FallbackToDecisions (0.00s)
=== RUN TestCheckLAPIHealth_DefaultURL
--- PASS: TestCheckLAPIHealth_DefaultURL (0.00s)
=== RUN TestGetBouncerAPIKey_FromEnv
--- PASS: TestGetBouncerAPIKey_FromEnv (0.00s)
=== RUN TestGetBouncerAPIKey_Empty
--- PASS: TestGetBouncerAPIKey_Empty (0.00s)
=== RUN TestGetBouncerAPIKey_Fallback
--- PASS: TestGetBouncerAPIKey_Fallback (0.00s)
=== RUN TestEnsureBouncerRegistered_UsesEnvKey
--- PASS: TestEnsureBouncerRegistered_UsesEnvKey (0.00s)
=== RUN TestEnsureBouncerRegistered_NoEnvNoCSCLI
--- PASS: TestEnsureBouncerRegistered_NoEnvNoCSCLI (0.00s)
=== RUN TestEnsureBouncerRegistered_ReturnsExistingBouncerKey
--- PASS: TestEnsureBouncerRegistered_ReturnsExistingBouncerKey (0.00s)
=== RUN TestEnsureBouncerRegistered_RegistersNewWhenNoneExists
--- PASS: TestEnsureBouncerRegistered_RegistersNewWhenNoneExists (0.01s)
=== RUN TestGetLAPIVersion_JSON
--- PASS: TestGetLAPIVersion_JSON (0.00s)
=== RUN TestGetLAPIVersion_PlainText
--- PASS: TestGetLAPIVersion_PlainText (0.00s)
=== RUN TestValidateLAPIURL
=== RUN TestValidateLAPIURL/valid_localhost_with_port
=== RUN TestValidateLAPIURL/valid_127.0.0.1
=== RUN TestValidateLAPIURL/external_URL_blocked
=== RUN TestValidateLAPIURL/HTTPS_localhost
=== RUN TestValidateLAPIURL/invalid_scheme
=== RUN TestValidateLAPIURL/no_scheme
=== RUN TestValidateLAPIURL/empty_URL_allowed_(defaults_to_localhost)
=== RUN TestValidateLAPIURL/IPv6_localhost
=== RUN TestValidateLAPIURL/private_IP_192.168.x.x_blocked_(security)
=== RUN TestValidateLAPIURL/private_IP_10.x.x.x_blocked_(security)
=== RUN TestValidateLAPIURL/missing_hostname
--- PASS: TestValidateLAPIURL (0.00s)
--- PASS: TestValidateLAPIURL/valid_localhost_with_port (0.00s)
--- PASS: TestValidateLAPIURL/valid_127.0.0.1 (0.00s)
--- PASS: TestValidateLAPIURL/external_URL_blocked (0.00s)
--- PASS: TestValidateLAPIURL/HTTPS_localhost (0.00s)
--- PASS: TestValidateLAPIURL/invalid_scheme (0.00s)
--- PASS: TestValidateLAPIURL/no_scheme (0.00s)
--- PASS: TestValidateLAPIURL/empty_URL_allowed_(defaults_to_localhost) (0.00s)
--- PASS: TestValidateLAPIURL/IPv6_localhost (0.00s)
--- PASS: TestValidateLAPIURL/private_IP_192.168.x.x_blocked_(security) (0.00s)
--- PASS: TestValidateLAPIURL/private_IP_10.x.x.x_blocked_(security) (0.00s)
--- PASS: TestValidateLAPIURL/missing_hostname (0.00s)
=== RUN TestEnsureBouncerRegistered_InvalidURL
=== RUN TestEnsureBouncerRegistered_InvalidURL/external_URL_rejected
=== RUN TestEnsureBouncerRegistered_InvalidURL/invalid_scheme_rejected
--- PASS: TestEnsureBouncerRegistered_InvalidURL (0.00s)
--- PASS: TestEnsureBouncerRegistered_InvalidURL/external_URL_rejected (0.00s)
--- PASS: TestEnsureBouncerRegistered_InvalidURL/invalid_scheme_rejected (0.00s)
=== CONT TestHubCacheStoreLoadAndExpire
=== CONT TestPullEvictsExpiredCacheAndRefreshes
=== CONT TestValidateHubURL_UnknownDomainRejection
=== RUN TestValidateHubURL_UnknownDomainRejection/https://evil.com/index.json
=== CONT TestValidateHubURL_ValidHTTPSProduction
=== RUN TestValidateHubURL_ValidHTTPSProduction/https://hub-data.crowdsec.net/api/index.json
=== PAUSE TestValidateHubURL_ValidHTTPSProduction/https://hub-data.crowdsec.net/api/index.json
=== RUN TestValidateHubURL_ValidHTTPSProduction/https://hub.crowdsec.net/api/index.json
=== PAUSE TestValidateHubURL_ValidHTTPSProduction/https://hub.crowdsec.net/api/index.json
=== RUN TestValidateHubURL_ValidHTTPSProduction/https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json
=== PAUSE TestValidateHubURL_ValidHTTPSProduction/https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json
=== CONT TestFetchIndexHTTPAcceptsTextPlain
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="https://hub-data.crowdsec.net/api/index.json"
=== PAUSE TestValidateHubURL_UnknownDomainRejection/https://evil.com/index.json
=== RUN TestValidateHubURL_UnknownDomainRejection/https://attacker.net/hub/index.json
--- PASS: TestFetchIndexHTTPAcceptsTextPlain (0.00s)
=== PAUSE TestValidateHubURL_UnknownDomainRejection/https://attacker.net/hub/index.json
=== RUN TestValidateHubURL_UnknownDomainRejection/https://hub.evil.com/index.json
=== CONT TestCopyDir
=== PAUSE TestValidateHubURL_UnknownDomainRejection/https://hub.evil.com/index.json
=== CONT TestBackupExistingHandlesDeviceBusy
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubCacheStoreLoadAndExpire3016545954/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestHubCacheStoreLoadAndExpire3016545954/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestHubCacheStoreLoadAndExpire3016545954/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
--- PASS: TestBackupExistingHandlesDeviceBusy (0.00s)
=== CONT TestApplyWithCopyBasedBackup
--- PASS: TestHubCacheStoreLoadAndExpire (0.01s)
=== CONT TestCopyFile
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011437 meta_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://example.com/demo.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://example.com/demo.yaml" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=99 etag=etag2 hub_endpoint="http://example.com/demo.tgz" preview_size=13 slug=crowdsecurity/demo
--- PASS: TestCopyFile (0.00s)
=== CONT TestFindPreviewFileFromArchive
=== RUN TestFindPreviewFileFromArchive/finds_yaml_in_archive
=== PAUSE TestFindPreviewFileFromArchive/finds_yaml_in_archive
=== RUN TestFindPreviewFileFromArchive/returns_empty_for_no_yaml
=== PAUSE TestFindPreviewFileFromArchive/returns_empty_for_no_yaml
=== RUN TestFindPreviewFileFromArchive/returns_empty_for_invalid_archive
=== PAUSE TestFindPreviewFileFromArchive/returns_empty_for_invalid_archive
=== CONT TestHasCSCLI
=== RUN TestHasCSCLI/cscli_available
=== PAUSE TestHasCSCLI/cscli_available
=== RUN TestHasCSCLI/cscli_not_found
=== PAUSE TestHasCSCLI/cscli_not_found
=== CONT TestCleanShellArg
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011440 meta_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011440 preview_path=/tmp/TestPullEvictsExpiredCacheAndRefreshes3657415151/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
=== RUN TestCleanShellArg/clean_slug
=== PAUSE TestCleanShellArg/clean_slug
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyWithCopyBasedBackup1615199222/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestApplyWithCopyBasedBackup1615199222/001/test/preset/metadata.json preview_path=/tmp/TestApplyWithCopyBasedBackup1615199222/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestApplyWithCopyBasedBackup1615199222/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 slug=test/preset
=== CONT TestBuildIndexURL
=== RUN TestBuildIndexURL/empty_base_uses_default
=== PAUSE TestBuildIndexURL/empty_base_uses_default
=== RUN TestBuildIndexURL/standard_base_appends_path
=== PAUSE TestBuildIndexURL/standard_base_appends_path
=== RUN TestBuildIndexURL/trailing_slash_removed
=== PAUSE TestBuildIndexURL/trailing_slash_removed
=== RUN TestBuildIndexURL/direct_json_url_unchanged
=== PAUSE TestBuildIndexURL/direct_json_url_unchanged
=== RUN TestBuildIndexURL/case_insensitive_json
=== PAUSE TestBuildIndexURL/case_insensitive_json
=== CONT TestNormalizeHubBaseURL
=== RUN TestNormalizeHubBaseURL/empty_uses_default
=== PAUSE TestNormalizeHubBaseURL/empty_uses_default
=== RUN TestNormalizeHubBaseURL/whitespace_uses_default
=== PAUSE TestNormalizeHubBaseURL/whitespace_uses_default
=== RUN TestNormalizeHubBaseURL/removes_trailing_slash
=== PAUSE TestNormalizeHubBaseURL/removes_trailing_slash
=== RUN TestNormalizeHubBaseURL/removes_multiple_trailing_slashes
=== PAUSE TestNormalizeHubBaseURL/removes_multiple_trailing_slashes
=== RUN TestNormalizeHubBaseURL/trims_spaces
=== PAUSE TestNormalizeHubBaseURL/trims_spaces
=== RUN TestNormalizeHubBaseURL/no_slash_unchanged
--- PASS: TestPullEvictsExpiredCacheAndRefreshes (0.02s)
--- PASS: TestCopyDir (0.01s)
=== RUN TestCleanShellArg/with_dash
--- PASS: TestApplyWithCopyBasedBackup (0.01s)
=== CONT TestApplyRollsBackWhenCacheMissing
time="2026-01-10T02:17:19Z" level=error msg="cache unavailable for apply" slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=warning msg="cache refresh failed; rolled back backup" backup_path=/tmp/TestApplyRollsBackWhenCacheMissing965748357/001/crowdsec.backup.20260110-021719 error="cache unavailable for manual apply" slug=crowdsecurity/demo
=== PAUSE TestCleanShellArg/with_dash
=== RUN TestCleanShellArg/with_underscore
=== PAUSE TestCleanShellArg/with_underscore
=== RUN TestCleanShellArg/with_dot
=== PAUSE TestNormalizeHubBaseURL/no_slash_unchanged
=== PAUSE TestCleanShellArg/with_dot
=== RUN TestCleanShellArg/path_traversal
=== CONT TestFirstNonEmpty
=== RUN TestFirstNonEmpty/first_non-empty
=== CONT TestFetchWithLimitStatusError
--- PASS: TestApplyRollsBackWhenCacheMissing (0.00s)
=== CONT TestUniqueStrings
=== CONT TestFetchIndexCSCLIParseError
=== RUN TestUniqueStrings/empty_slice
=== PAUSE TestUniqueStrings/empty_slice
=== RUN TestUniqueStrings/no_duplicates
=== PAUSE TestUniqueStrings/no_duplicates
=== RUN TestUniqueStrings/with_duplicates
=== PAUSE TestUniqueStrings/with_duplicates
=== RUN TestUniqueStrings/all_duplicates
=== PAUSE TestUniqueStrings/all_duplicates
=== RUN TestUniqueStrings/preserves_order
=== PAUSE TestUniqueStrings/preserves_order
=== CONT TestRunCSCLIRejectsUnsafeSlug
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=1 error="http://hub.example/api/index.json (status 500)" hub_index="http://hub.example/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=2 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json (status 500)" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=3 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json (status 500)" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=4 error="https://hub-data.crowdsec.net/api/index.json (status 500)" hub_index="https://hub-data.crowdsec.net/api/index.json"
=== CONT TestApplyUsesCSCLISuccess
=== CONT TestFetchPreviewRequiresURL
=== CONT TestFetchWithLimitRequiresClient
=== CONT TestPullValidatesSlugAndMissingPreset
=== PAUSE TestCleanShellArg/path_traversal
=== RUN TestCleanShellArg/absolute_path
=== PAUSE TestCleanShellArg/absolute_path
=== RUN TestCleanShellArg/backslash_converted
=== PAUSE TestCleanShellArg/backslash_converted
=== RUN TestCleanShellArg/colon_not_allowed
=== PAUSE TestFirstNonEmpty/first_non-empty
=== PAUSE TestCleanShellArg/colon_not_allowed
=== RUN TestFirstNonEmpty/all_empty
=== RUN TestCleanShellArg/semicolon
=== PAUSE TestFirstNonEmpty/all_empty
=== PAUSE TestCleanShellArg/semicolon
=== RUN TestFirstNonEmpty/first_is_non-empty
=== PAUSE TestFirstNonEmpty/first_is_non-empty
=== RUN TestCleanShellArg/pipe
=== RUN TestFirstNonEmpty/whitespace_treated_as_empty
=== PAUSE TestFirstNonEmpty/whitespace_treated_as_empty
=== PAUSE TestCleanShellArg/pipe
=== RUN TestFirstNonEmpty/whitespace_with_content
=== PAUSE TestFirstNonEmpty/whitespace_with_content
=== RUN TestCleanShellArg/ampersand
=== RUN TestFirstNonEmpty/empty_slice
=== PAUSE TestCleanShellArg/ampersand
--- PASS: TestFetchWithLimitStatusError (0.00s)
=== PAUSE TestFirstNonEmpty/empty_slice
=== RUN TestFirstNonEmpty/tabs_and_newlines
=== RUN TestCleanShellArg/backtick
=== PAUSE TestCleanShellArg/backtick
--- PASS: TestRunCSCLIRejectsUnsafeSlug (0.00s)
=== PAUSE TestFirstNonEmpty/tabs_and_newlines
=== RUN TestCleanShellArg/dollar
--- PASS: TestFetchIndexCSCLIParseError (0.00s)
--- PASS: TestFetchPreviewRequiresURL (0.00s)
--- PASS: TestFetchWithLimitRequiresClient (0.00s)
=== CONT TestFetchIndexHTTPError
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=1 error="https://hub-data.crowdsec.net/api/index.json (status 503)" hub_index="https://hub-data.crowdsec.net/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=2 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json (status 503)" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=3 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json (status 503)" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json"
--- PASS: TestFetchIndexHTTPError (0.00s)
=== PAUSE TestCleanShellArg/dollar
=== CONT TestExtractTarGzRejectsSymlink
=== RUN TestCleanShellArg/parenthesis
=== PAUSE TestCleanShellArg/parenthesis
=== CONT TestExtractTarGzRejectsAbsolutePath
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyUsesCSCLISuccess2135085979/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestApplyUsesCSCLISuccess2135085979/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestApplyUsesCSCLISuccess2135085979/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://hub.example/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestApplyUsesCSCLISuccess2135085979/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 slug=crowdsecurity/demo
--- PASS: TestPullValidatesSlugAndMissingPreset (0.01s)
=== CONT TestPullFallsBackToMirrorArchiveOnForbidden
--- PASS: TestApplyUsesCSCLISuccess (0.01s)
=== CONT TestFetchWithLimitRejectsLargePayload
--- PASS: TestExtractTarGzRejectsSymlink (0.01s)
=== CONT TestHubCacheTTL
=== RUN TestHubCacheTTL/returns_configured_TTL
=== PAUSE TestHubCacheTTL/returns_configured_TTL
=== RUN TestHubCacheTTL/returns_minute_TTL
=== PAUSE TestHubCacheTTL/returns_minute_TTL
--- PASS: TestExtractTarGzRejectsAbsolutePath (0.01s)
=== CONT TestPullReturnsCachedPreviewWithoutNetwork
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="https://primary.example/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub fetch failed, attempting fallback" attempt=1 endpoint="https://primary.example/crowdsecurity/demo.tgz" error="https://primary.example/crowdsecurity/demo.tgz (status 403)"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="https://raw.githubusercontent.com/crowdsecurity/hub/master/crowdsecurity/demo.tgz" fallback_used=true
time="2026-01-10T02:17:19Z" level=warning msg="hub fetch failed, attempting fallback" attempt=1 endpoint="https://primary.example/crowdsecurity/demo.yaml" error="https://primary.example/crowdsecurity/demo.yaml (status 403)"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="https://raw.githubusercontent.com/crowdsecurity/hub/master/crowdsecurity/demo.yaml" fallback_used=true
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=105 etag=etag1 hub_endpoint="https://raw.githubusercontent.com/crowdsecurity/hub/master/crowdsecurity/demo.tgz" preview_size=14 slug=crowdsecurity/demo
=== RUN TestHubCacheTTL/returns_zero_TTL_if_configured
=== PAUSE TestHubCacheTTL/returns_zero_TTL_if_configured
=== CONT TestApplyUsesCacheWhenCscliMissing
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullFallsBackToMirrorArchiveOnForbidden11765555/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestPullFallsBackToMirrorArchiveOnForbidden11765555/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestPullFallsBackToMirrorArchiveOnForbidden11765555/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestPullFallsBackToMirrorArchiveOnForbidden11765555/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 preview_path=/tmp/TestPullFallsBackToMirrorArchiveOnForbidden11765555/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
--- PASS: TestPullFallsBackToMirrorArchiveOnForbidden (0.01s)
=== CONT TestApplyRollsBackOnBadArchive
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullReturnsCachedPreviewWithoutNetwork3052954076/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestPullReturnsCachedPreviewWithoutNetwork3052954076/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestPullReturnsCachedPreviewWithoutNetwork3052954076/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
--- PASS: TestPullReturnsCachedPreviewWithoutNetwork (0.01s)
=== CONT TestPullFallsBackToArchivePreview
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyRollsBackOnBadArchive1855248391/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestApplyRollsBackOnBadArchive1855248391/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestApplyRollsBackOnBadArchive1855248391/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestApplyRollsBackOnBadArchive1855248391/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://example.com/demo.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=warning msg="hub fetch failed, attempting fallback" attempt=1 endpoint="http://example.com/demo.yaml" error="http://example.com/demo.yaml (status 500)"
time="2026-01-10T02:17:19Z" level=warning msg="failed to download preview, falling back to archive inspection" error="preview fetch failed (last endpoint http://example.com/crowdsecurity/demo.yaml): http://example.com/demo.yaml: http://example.com/demo.yaml (status 500)\nhttp://example.com/crowdsecurity/demo.yaml: http://example.com/crowdsecurity/demo.yaml (status 404)" slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyUsesCacheWhenCscliMissing3901280632/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestApplyUsesCacheWhenCscliMissing3901280632/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestApplyUsesCacheWhenCscliMissing3901280632/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestApplyUsesCacheWhenCscliMissing3901280632/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 slug=crowdsecurity/demo
--- PASS: TestApplyRollsBackOnBadArchive (0.02s)
=== CONT TestPullCachesPreview
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=116 etag=etag1 hub_endpoint="http://example.com/demo.tgz" preview_size=11 slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullFallsBackToArchivePreview2937992452/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestPullFallsBackToArchivePreview2937992452/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestPullFallsBackToArchivePreview2937992452/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestPullFallsBackToArchivePreview2937992452/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 preview_path=/tmp/TestPullFallsBackToArchivePreview2937992452/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
--- PASS: TestApplyUsesCacheWhenCscliMissing (0.02s)
--- PASS: TestPullFallsBackToArchivePreview (0.02s)
=== CONT TestApplyUsesCacheWhenCSCLIFails
=== CONT TestFetchIndexFallsBackToMirrorOnForbidden
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=1 error="https://hub-data.crowdsec.net/api/index.json (status 403)" hub_index="https://hub-data.crowdsec.net/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=true hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json"
--- PASS: TestFetchIndexFallsBackToMirrorOnForbidden (0.00s)
=== CONT TestFetchIndexHTTPRejectsHTML
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=1 error="https://hub-data.crowdsec.net/api/index.json (status 200): hub index responded with HTML; install cscli or set HUB_BASE_URL to a JSON hub endpoint" hub_index="https://hub-data.crowdsec.net/api/index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=2 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json (status 200): hub index responded with HTML; install cscli or set HUB_BASE_URL to a JSON hub endpoint" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json"
time="2026-01-10T02:17:19Z" level=warning msg="hub index fetch failed, trying mirror" attempt=3 error="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json (status 200): hub index responded with HTML; install cscli or set HUB_BASE_URL to a JSON hub endpoint" hub_index="https://raw.githubusercontent.com/crowdsecurity/hub/master/api/index.json"
--- PASS: TestFetchIndexHTTPRejectsHTML (0.00s)
=== CONT TestFetchIndexHTTPRejectsRedirect
--- PASS: TestFetchIndexHTTPRejectsRedirect (0.00s)
=== CONT TestFetchIndexHTTPFallsBackToDefaultHub
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="https://hub.crowdsec.net/api/index.json"
--- PASS: TestFetchIndexHTTPFallsBackToDefaultHub (0.00s)
=== CONT TestFetchIndexFallbackHTTP
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://example.com/api/index.json"
--- PASS: TestFetchIndexFallbackHTTP (0.00s)
=== CONT TestSanitizeSlugCases
--- PASS: TestSanitizeSlugCases (0.00s)
=== CONT TestFetchIndexPrefersCSCLI
--- PASS: TestFetchIndexPrefersCSCLI (0.00s)
=== CONT TestHubCacheListContextCanceled
--- PASS: TestHubCacheListContextCanceled (0.00s)
=== CONT TestExtractTarGz_LargeNestedStructure
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestApplyUsesCacheWhenCSCLIFails3365830785/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestApplyUsesCacheWhenCSCLIFails3365830785/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestApplyUsesCacheWhenCSCLIFails3365830785/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://example.com/api/index.json"
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://example.com/demo.tgz" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://example.com/demo.yaml" fallback_used=false
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestApplyUsesCacheWhenCSCLIFails3365830785/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=warning msg="cscli install failed; attempting cache fallback" error="install failed" slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=106 etag=etag1 hub_endpoint="http://example.com/demo.tgz" preview_size=12 slug=crowdsecurity/demo
--- PASS: TestApplyUsesCacheWhenCSCLIFails (0.01s)
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestPullCachesPreview1283738611/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestPullCachesPreview1283738611/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestPullCachesPreview1283738611/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestPullCachesPreview1283738611/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 preview_path=/tmp/TestPullCachesPreview1283738611/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
=== CONT TestFindPresetCaseVariants
=== RUN TestFindPresetCaseVariants/exact_match
=== PAUSE TestFindPresetCaseVariants/exact_match
=== RUN TestFindPresetCaseVariants/another_preset
=== PAUSE TestFindPresetCaseVariants/another_preset
=== RUN TestFindPresetCaseVariants/case_sensitive_miss
=== PAUSE TestFindPresetCaseVariants/case_sensitive_miss
=== RUN TestFindPresetCaseVariants/partial_match_miss
=== PAUSE TestFindPresetCaseVariants/partial_match_miss
=== RUN TestFindPresetCaseVariants/empty_slug
=== PAUSE TestFindPresetCaseVariants/empty_slug
=== CONT TestFindPreset
--- PASS: TestFindPreset (0.00s)
=== CONT TestListCuratedPresetsReturnsCopy
--- PASS: TestListCuratedPresetsReturnsCopy (0.00s)
=== CONT TestFindIndexEntry_EmptySlug
--- PASS: TestFindIndexEntry_EmptySlug (0.00s)
=== CONT TestFindIndexEntry_NotFound
--- PASS: TestPullCachesPreview (0.02s)
--- PASS: TestFindIndexEntry_NotFound (0.00s)
=== CONT TestListCuratedPresetsReturnsDifferentCopy
--- PASS: TestListCuratedPresetsReturnsDifferentCopy (0.00s)
=== CONT TestFindIndexEntry_ShortName
--- PASS: TestFindIndexEntry_ShortName (0.00s)
=== CONT TestFindIndexEntry_AmbiguousShortName
--- PASS: TestFindIndexEntry_AmbiguousShortName (0.00s)
=== CONT TestPeekFirstYAML_InvalidArchive
=== CONT TestPeekFirstYAML_NoYAMLFiles
--- PASS: TestPeekFirstYAML_InvalidArchive (0.00s)
=== CONT TestFindIndexEntry_ExactMatch
--- PASS: TestFindIndexEntry_ExactMatch (0.00s)
=== CONT TestPeekFirstYAML_FindsYAML
--- PASS: TestExtractTarGz_LargeNestedStructure (0.02s)
=== CONT TestIsGzip_NotGzip
--- PASS: TestIsGzip_NotGzip (0.00s)
=== CONT TestIsGzip_ValidGzip
--- PASS: TestPeekFirstYAML_NoYAMLFiles (0.01s)
=== CONT TestFetchIndexHTTPFromURL_InvalidJSON
--- PASS: TestFetchIndexHTTPFromURL_InvalidJSON (0.00s)
=== CONT TestFetchIndexHTTPFromURL_EmptyJSONArray
--- PASS: TestFetchIndexHTTPFromURL_EmptyJSONArray (0.00s)
=== CONT TestFetchIndexHTTPFromURL_ParseRawIndexFallback
--- PASS: TestFetchIndexHTTPFromURL_ParseRawIndexFallback (0.00s)
=== CONT TestAsString_EmptyString
--- PASS: TestAsString_EmptyString (0.00s)
=== CONT TestAsString_Struct
--- PASS: TestAsString_Struct (0.00s)
=== CONT TestAsString_Bool
--- PASS: TestPeekFirstYAML_FindsYAML (0.01s)
=== CONT TestAsString_Float
--- PASS: TestAsString_Float (0.00s)
=== CONT TestIsGzip_TooShort
--- PASS: TestIsGzip_TooShort (0.00s)
=== CONT TestAsString_String
--- PASS: TestAsString_Bool (0.00s)
=== CONT TestAsString_Nil
--- PASS: TestAsString_Nil (0.00s)
=== CONT TestAsString_Int
--- PASS: TestAsString_Int (0.00s)
=== CONT TestExtractTarGz_SkipsSpecialFileTypes
--- PASS: TestIsGzip_ValidGzip (0.01s)
=== CONT TestExtractTarGz_DirectoriesWithoutFiles
--- PASS: TestAsString_String (0.00s)
=== CONT TestRollback
=== RUN TestRollback/rollback_with_backup
=== PAUSE TestRollback/rollback_with_backup
=== RUN TestRollback/rollback_with_empty_backup_path
=== PAUSE TestRollback/rollback_with_empty_backup_path
=== RUN TestRollback/rollback_with_non-existent_backup
=== PAUSE TestRollback/rollback_with_non-existent_backup
=== CONT TestExtractTarGz_SpecialCharactersInFilenames
--- PASS: TestExtractTarGz_DirectoriesWithoutFiles (0.01s)
=== CONT TestExtractTarGz_EmptyArchive
--- PASS: TestExtractTarGz_SkipsSpecialFileTypes (0.01s)
=== CONT TestExtractTarGz_InvalidTarAfterGzip
--- PASS: TestExtractTarGz_SpecialCharactersInFilenames (0.01s)
=== CONT TestExtractTarGz_NestedPathTraversal
--- PASS: TestExtractTarGz_EmptyArchive (0.01s)
=== CONT TestBackupExisting_PreservesPermissions
--- PASS: TestBackupExisting_PreservesPermissions (0.00s)
=== CONT TestExtractTarGz_AbsolutePathWithDots
--- PASS: TestExtractTarGz_NestedPathTraversal (0.01s)
=== CONT TestBackupExisting_EmptyDirectory
--- PASS: TestExtractTarGz_InvalidTarAfterGzip (0.01s)
=== CONT TestBackupExisting_RenameSuccess
--- PASS: TestBackupExisting_RenameSuccess (0.00s)
=== CONT TestHubHTTPErrorUnwrap
=== RUN TestHubHTTPErrorUnwrap/unwrap_returns_inner_error
=== PAUSE TestHubHTTPErrorUnwrap/unwrap_returns_inner_error
=== RUN TestHubHTTPErrorUnwrap/unwrap_returns_nil_when_no_inner
=== PAUSE TestHubHTTPErrorUnwrap/unwrap_returns_nil_when_no_inner
=== RUN TestHubHTTPErrorUnwrap/errors.Is_works_through_Unwrap
=== PAUSE TestHubHTTPErrorUnwrap/errors.Is_works_through_Unwrap
=== CONT TestNewHubService_DefaultTimeouts
--- PASS: TestBackupExisting_EmptyDirectory (0.00s)
=== CONT TestBackupExisting_CopyFallback_Success
--- PASS: TestBackupExisting_CopyFallback_Success (0.00s)
=== CONT TestValidateHubURL_EdgeCases
=== RUN TestValidateHubURL_EdgeCases/Missing_hostname
=== PAUSE TestValidateHubURL_EdgeCases/Missing_hostname
=== RUN TestValidateHubURL_EdgeCases/Invalid_URL_format_-_unsupported_scheme_caught
=== PAUSE TestValidateHubURL_EdgeCases/Invalid_URL_format_-_unsupported_scheme_caught
=== RUN TestValidateHubURL_EdgeCases/FTP_scheme_rejected
=== PAUSE TestValidateHubURL_EdgeCases/FTP_scheme_rejected
=== RUN TestValidateHubURL_EdgeCases/File_scheme_rejected
=== PAUSE TestValidateHubURL_EdgeCases/File_scheme_rejected
=== RUN TestValidateHubURL_EdgeCases/Test_domain_allowed
=== PAUSE TestValidateHubURL_EdgeCases/Test_domain_allowed
=== RUN TestValidateHubURL_EdgeCases/Example.com_allowed_for_testing
=== PAUSE TestValidateHubURL_EdgeCases/Example.com_allowed_for_testing
=== RUN TestValidateHubURL_EdgeCases/.local_domain_allowed
=== PAUSE TestValidateHubURL_EdgeCases/.local_domain_allowed
=== RUN TestValidateHubURL_EdgeCases/Subdomain_of_example.com_allowed
=== PAUSE TestValidateHubURL_EdgeCases/Subdomain_of_example.com_allowed
=== RUN TestValidateHubURL_EdgeCases/IPv6_loopback_allowed
=== PAUSE TestValidateHubURL_EdgeCases/IPv6_loopback_allowed
=== RUN TestValidateHubURL_EdgeCases/Unknown_production_domain_rejected
=== PAUSE TestValidateHubURL_EdgeCases/Unknown_production_domain_rejected
=== CONT TestHubHTTPErrorCanFallback
=== RUN TestHubHTTPErrorCanFallback/returns_true_when_fallback_is_true
=== PAUSE TestHubHTTPErrorCanFallback/returns_true_when_fallback_is_true
=== RUN TestHubHTTPErrorCanFallback/returns_false_when_fallback_is_false
=== PAUSE TestHubHTTPErrorCanFallback/returns_false_when_fallback_is_false
--- PASS: TestNewHubService_DefaultTimeouts (0.00s)
=== CONT TestHubCacheTouchMissing
--- PASS: TestHubCacheTouchMissing (0.00s)
=== CONT TestHubCacheEvictInvalidSlug
--- PASS: TestHubCacheEvictInvalidSlug (0.00s)
=== CONT TestHubCacheListSkipsExpired
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubCacheListSkipsExpired1527189804/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1704110400 meta_path=/tmp/TestHubCacheListSkipsExpired1527189804/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestHubCacheListSkipsExpired1527189804/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
=== CONT TestHubCacheExistsContextCanceled
--- PASS: TestHubCacheExistsContextCanceled (0.00s)
--- PASS: TestHubCacheListSkipsExpired (0.00s)
=== CONT TestHubCacheTouchInvalidSlug
--- PASS: TestExtractTarGz_AbsolutePathWithDots (0.01s)
--- PASS: TestHubCacheTouchInvalidSlug (0.00s)
=== CONT TestHubCacheLoadInvalidSlug
=== CONT TestHubCacheStoreContextCanceled
--- PASS: TestHubCacheStoreContextCanceled (0.00s)
=== CONT TestHubCacheListAndEvict
--- PASS: TestHubCacheLoadInvalidSlug (0.00s)
=== CONT TestHubCachePreviewExistsAndSize
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubCacheListAndEvict1933366209/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestHubCacheListAndEvict1933366209/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestHubCacheListAndEvict1933366209/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubCacheListAndEvict1933366209/001/crowdsecurity/other/bundle.tgz cache_key=crowdsecurity/other-1768011439 meta_path=/tmp/TestHubCacheListAndEvict1933366209/001/crowdsecurity/other/metadata.json preview_path=/tmp/TestHubCacheListAndEvict1933366209/001/crowdsecurity/other/preview.yaml slug=crowdsecurity/other
=== CONT TestHubCacheExistsHonorsTTL
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubCacheExistsHonorsTTL4074854815/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestHubCacheExistsHonorsTTL4074854815/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestHubCacheExistsHonorsTTL4074854815/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
--- PASS: TestHubCacheExistsHonorsTTL (0.00s)
=== CONT TestNewHubCacheRequiresBaseDir
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubCachePreviewExistsAndSize2948237553/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestHubCachePreviewExistsAndSize2948237553/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestHubCachePreviewExistsAndSize2948237553/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
--- PASS: TestNewHubCacheRequiresBaseDir (0.00s)
=== CONT TestHubService_Apply_CacheRefresh
--- PASS: TestHubCachePreviewExistsAndSize (0.01s)
=== CONT TestBackupExisting
=== RUN TestBackupExisting/handles_non-existent_directory
=== PAUSE TestBackupExisting/handles_non-existent_directory
=== RUN TestBackupExisting/creates_backup_of_existing_directory
=== PAUSE TestBackupExisting/creates_backup_of_existing_directory
=== RUN TestBackupExisting/backup_contents_match_original
=== PAUSE TestBackupExisting/backup_contents_match_original
=== CONT TestExtractTarGz
=== RUN TestExtractTarGz/extracts_valid_archive
=== PAUSE TestExtractTarGz/extracts_valid_archive
=== RUN TestExtractTarGz/rejects_path_traversal
=== PAUSE TestExtractTarGz/rejects_path_traversal
=== RUN TestExtractTarGz/rejects_symlinks
=== PAUSE TestExtractTarGz/rejects_symlinks
=== RUN TestExtractTarGz/handles_corrupted_gzip
=== PAUSE TestExtractTarGz/handles_corrupted_gzip
=== RUN TestExtractTarGz/handles_context_cancellation
=== PAUSE TestExtractTarGz/handles_context_cancellation
=== RUN TestExtractTarGz/creates_nested_directories
=== PAUSE TestExtractTarGz/creates_nested_directories
=== CONT TestHubHTTPErrorError
=== RUN TestHubHTTPErrorError/error_with_inner_error
=== PAUSE TestHubHTTPErrorError/error_with_inner_error
=== RUN TestHubHTTPErrorError/error_without_inner_error
=== PAUSE TestHubHTTPErrorError/error_without_inner_error
=== CONT TestEmptyDir
=== RUN TestEmptyDir/empties_directory_with_files
=== PAUSE TestEmptyDir/empties_directory_with_files
=== RUN TestEmptyDir/empties_directory_with_subdirectories
=== PAUSE TestEmptyDir/empties_directory_with_subdirectories
=== RUN TestEmptyDir/handles_non-existent_directory
=== PAUSE TestEmptyDir/handles_non-existent_directory
=== RUN TestEmptyDir/handles_empty_directory
=== PAUSE TestEmptyDir/handles_empty_directory
=== CONT TestCopyDirAndCopyFile
=== RUN TestCopyDirAndCopyFile/copyFile_success
=== CONT TestHubService_Apply_RollbackOnExtractionFailure
--- PASS: TestHubCacheListAndEvict (0.01s)
=== PAUSE TestCopyDirAndCopyFile/copyFile_success
=== RUN TestCopyDirAndCopyFile/copyFile_preserves_permissions
=== PAUSE TestCopyDirAndCopyFile/copyFile_preserves_permissions
=== RUN TestCopyDirAndCopyFile/copyDir_with_nested_structure
=== PAUSE TestCopyDirAndCopyFile/copyDir_with_nested_structure
=== RUN TestCopyDirAndCopyFile/copyDir_fails_on_non-directory_source
=== PAUSE TestCopyDirAndCopyFile/copyDir_fails_on_non-directory_source
=== CONT TestHubCacheRejectsBadSlug
--- PASS: TestHubCacheRejectsBadSlug (0.00s)
=== CONT TestHubCacheTouchUpdatesTTL
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubCacheTouchUpdatesTTL3154057090/001/crowdsecurity/demo/bundle.tgz cache_key=crowdsecurity/demo-1768011439 meta_path=/tmp/TestHubCacheTouchUpdatesTTL3154057090/001/crowdsecurity/demo/metadata.json preview_path=/tmp/TestHubCacheTouchUpdatesTTL3154057090/001/crowdsecurity/demo/preview.yaml slug=crowdsecurity/demo
--- PASS: TestHubCacheTouchUpdatesTTL (0.00s)
=== CONT TestHubService_Apply_ArchiveReadBeforeBackup
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/bundle.tgz cache_key=test/preset-1768011434 meta_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/metadata.json preview_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubService_Apply_ArchiveReadBeforeBackup2498877560/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestHubService_Apply_ArchiveReadBeforeBackup2498877560/001/test/preset/metadata.json preview_path=/tmp/TestHubService_Apply_ArchiveReadBeforeBackup2498877560/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestHubService_Apply_ArchiveReadBeforeBackup2498877560/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 slug=test/preset
--- PASS: TestHubService_Apply_ArchiveReadBeforeBackup (0.01s)
=== CONT TestFetchIndexHTTPFromURL_HTMLDetection
--- PASS: TestFetchIndexHTTPFromURL_HTMLDetection (0.00s)
=== CONT TestParseRawIndex
=== RUN TestParseRawIndex/parses_valid_raw_index
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubService_Apply_RollbackOnExtractionFailure1106849730/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestHubService_Apply_RollbackOnExtractionFailure1106849730/001/test/preset/metadata.json preview_path=/tmp/TestHubService_Apply_RollbackOnExtractionFailure1106849730/001/test/preset/preview.yaml slug=test/preset
=== PAUSE TestParseRawIndex/parses_valid_raw_index
=== RUN TestParseRawIndex/returns_error_on_invalid_JSON
=== PAUSE TestParseRawIndex/returns_error_on_invalid_JSON
=== RUN TestParseRawIndex/returns_error_on_empty_index
=== PAUSE TestParseRawIndex/returns_error_on_empty_index
=== CONT TestValidateHubURL_HTTPRejectedForProduction
=== RUN TestValidateHubURL_HTTPRejectedForProduction/http://hub-data.crowdsec.net/api/index.json
=== PAUSE TestValidateHubURL_HTTPRejectedForProduction/http://hub-data.crowdsec.net/api/index.json
=== RUN TestValidateHubURL_HTTPRejectedForProduction/http://hub.crowdsec.net/api/index.json
=== PAUSE TestValidateHubURL_HTTPRejectedForProduction/http://hub.crowdsec.net/api/index.json
=== RUN TestValidateHubURL_HTTPRejectedForProduction/http://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json
=== PAUSE TestValidateHubURL_HTTPRejectedForProduction/http://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json
=== CONT TestBuildResourceURLs
=== RUN TestBuildResourceURLs/with_explicit_URL
=== PAUSE TestBuildResourceURLs/with_explicit_URL
=== RUN TestBuildResourceURLs/without_explicit_URL
=== PAUSE TestBuildResourceURLs/without_explicit_URL
=== RUN TestBuildResourceURLs/removes_duplicates
=== PAUSE TestBuildResourceURLs/removes_duplicates
=== RUN TestBuildResourceURLs/handles_empty_bases
=== PAUSE TestBuildResourceURLs/handles_empty_bases
=== CONT TestValidateHubURL_LocalhostExceptions
=== RUN TestValidateHubURL_LocalhostExceptions/http://localhost:8080/index.json
=== PAUSE TestValidateHubURL_LocalhostExceptions/http://localhost:8080/index.json
=== RUN TestValidateHubURL_LocalhostExceptions/http://127.0.0.1:8080/index.json
=== PAUSE TestValidateHubURL_LocalhostExceptions/http://127.0.0.1:8080/index.json
=== RUN TestValidateHubURL_LocalhostExceptions/http://[::1]:8080/index.json
=== PAUSE TestValidateHubURL_LocalhostExceptions/http://[::1]:8080/index.json
=== RUN TestValidateHubURL_LocalhostExceptions/http://test.hub/api/index.json
=== PAUSE TestValidateHubURL_LocalhostExceptions/http://test.hub/api/index.json
=== RUN TestValidateHubURL_LocalhostExceptions/http://example.com/api/index.json
=== PAUSE TestValidateHubURL_LocalhostExceptions/http://example.com/api/index.json
=== RUN TestValidateHubURL_LocalhostExceptions/http://test.example.com/api/index.json
=== PAUSE TestValidateHubURL_LocalhostExceptions/http://test.example.com/api/index.json
time="2026-01-10T02:17:19Z" level=warning msg="failed to load cached preset metadata" error="cache expired" slug=test/preset
=== RUN TestValidateHubURL_LocalhostExceptions/http://server.local/api/index.json
=== PAUSE TestValidateHubURL_LocalhostExceptions/http://server.local/api/index.json
=== CONT TestValidateHubURL_InvalidSchemes
=== RUN TestValidateHubURL_InvalidSchemes/ftp://hub.crowdsec.net/index.json
=== PAUSE TestValidateHubURL_InvalidSchemes/ftp://hub.crowdsec.net/index.json
time="2026-01-10T02:17:19Z" level=info msg="attempting to repull preset after cache load failure" error="load cache for test/preset: cache expired" slug=test/preset
=== RUN TestValidateHubURL_InvalidSchemes/file:///etc/passwd
=== PAUSE TestValidateHubURL_InvalidSchemes/file:///etc/passwd
=== RUN TestValidateHubURL_InvalidSchemes/gopher://attacker.com
=== PAUSE TestValidateHubURL_InvalidSchemes/gopher://attacker.com
=== RUN TestValidateHubURL_InvalidSchemes/data:text/html,<script>alert('xss')</script>
=== PAUSE TestValidateHubURL_InvalidSchemes/data:text/html,<script>alert('xss')</script>
=== CONT TestValidateHubURL_UnknownDomainRejection/https://attacker.net/hub/index.json
=== CONT TestValidateHubURL_ValidHTTPSProduction/https://hub.crowdsec.net/api/index.json
=== CONT TestValidateHubURL_ValidHTTPSProduction/https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json
=== CONT TestValidateHubURL_UnknownDomainRejection/https://hub.evil.com/index.json
time="2026-01-10T02:17:19Z" level=info msg="hub index fetched" fallback_used=false hub_index="http://test.hub/api/index.json"
=== CONT TestValidateHubURL_UnknownDomainRejection/https://evil.com/index.json
time="2026-01-10T02:17:19Z" level=info msg="hub fetch succeeded" endpoint="http://test.hub/preset.tgz" fallback_used=false
=== CONT TestValidateHubURL_ValidHTTPSProduction/https://hub-data.crowdsec.net/api/index.json
--- PASS: TestValidateHubURL_ValidHTTPSProduction (0.00s)
--- PASS: TestValidateHubURL_ValidHTTPSProduction/https://hub.crowdsec.net/api/index.json (0.00s)
--- PASS: TestValidateHubURL_ValidHTTPSProduction/https://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json (0.00s)
--- PASS: TestValidateHubURL_ValidHTTPSProduction/https://hub-data.crowdsec.net/api/index.json (0.00s)
--- PASS: TestValidateHubURL_UnknownDomainRejection (0.00s)
--- PASS: TestValidateHubURL_UnknownDomainRejection/https://attacker.net/hub/index.json (0.00s)
--- PASS: TestValidateHubURL_UnknownDomainRejection/https://hub.evil.com/index.json (0.00s)
--- PASS: TestValidateHubURL_UnknownDomainRejection/https://evil.com/index.json (0.00s)
=== CONT TestFindPreviewFileFromArchive/finds_yaml_in_archive
time="2026-01-10T02:17:19Z" level=warning msg="failed to download preview, falling back to archive inspection" error="preview fetch failed (last endpoint http://test.hub/test/preset.yaml): http://test.hub/test/preset.yaml: http://test.hub/test/preset.yaml (status 404)" slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="successfully loaded cached preset metadata" archive_path=/tmp/TestHubService_Apply_RollbackOnExtractionFailure1106849730/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 slug=test/preset
--- PASS: TestHubService_Apply_RollbackOnExtractionFailure (0.02s)
=== CONT TestFindPreviewFileFromArchive/returns_empty_for_no_yaml
time="2026-01-10T02:17:19Z" level=info msg="storing preset in cache" archive_size=102 etag=etag2 hub_endpoint="http://test.hub/preset.tgz" preview_size=3 slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully stored in cache" archive_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 meta_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/metadata.json preview_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/preview.yaml slug=test/preset
time="2026-01-10T02:17:19Z" level=info msg="preset successfully cached" archive_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/bundle.tgz cache_key=test/preset-1768011439 preview_path=/tmp/TestHubService_Apply_CacheRefresh936131160/001/test/preset/preview.yaml slug=test/preset
=== CONT TestFindPreviewFileFromArchive/returns_empty_for_invalid_archive
=== CONT TestHasCSCLI/cscli_available
--- PASS: TestHubService_Apply_CacheRefresh (0.04s)
=== CONT TestBuildIndexURL/empty_base_uses_default
=== CONT TestBuildIndexURL/case_insensitive_json
=== CONT TestBuildIndexURL/direct_json_url_unchanged
=== CONT TestBuildIndexURL/trailing_slash_removed
=== CONT TestHasCSCLI/cscli_not_found
=== CONT TestNormalizeHubBaseURL/empty_uses_default
=== CONT TestBuildIndexURL/standard_base_appends_path
--- PASS: TestBuildIndexURL (0.00s)
--- PASS: TestBuildIndexURL/empty_base_uses_default (0.00s)
--- PASS: TestBuildIndexURL/case_insensitive_json (0.00s)
--- PASS: TestBuildIndexURL/direct_json_url_unchanged (0.00s)
--- PASS: TestBuildIndexURL/trailing_slash_removed (0.00s)
--- PASS: TestBuildIndexURL/standard_base_appends_path (0.00s)
--- PASS: TestHasCSCLI (0.00s)
--- PASS: TestHasCSCLI/cscli_available (0.00s)
--- PASS: TestHasCSCLI/cscli_not_found (0.00s)
=== CONT TestUniqueStrings/preserves_order
=== CONT TestUniqueStrings/all_duplicates
=== CONT TestUniqueStrings/no_duplicates
=== CONT TestUniqueStrings/empty_slice
=== CONT TestUniqueStrings/with_duplicates
=== CONT TestNormalizeHubBaseURL/whitespace_uses_default
=== CONT TestNormalizeHubBaseURL/no_slash_unchanged
=== CONT TestNormalizeHubBaseURL/trims_spaces
=== CONT TestNormalizeHubBaseURL/removes_multiple_trailing_slashes
=== CONT TestFirstNonEmpty/whitespace_with_content
=== CONT TestFirstNonEmpty/tabs_and_newlines
=== CONT TestNormalizeHubBaseURL/removes_trailing_slash
=== CONT TestFirstNonEmpty/empty_slice
--- PASS: TestUniqueStrings (0.00s)
--- PASS: TestUniqueStrings/preserves_order (0.00s)
--- PASS: TestUniqueStrings/all_duplicates (0.00s)
--- PASS: TestUniqueStrings/empty_slice (0.00s)
--- PASS: TestUniqueStrings/with_duplicates (0.00s)
--- PASS: TestUniqueStrings/no_duplicates (0.00s)
--- PASS: TestNormalizeHubBaseURL (0.00s)
--- PASS: TestNormalizeHubBaseURL/empty_uses_default (0.00s)
--- PASS: TestNormalizeHubBaseURL/whitespace_uses_default (0.00s)
--- PASS: TestNormalizeHubBaseURL/no_slash_unchanged (0.00s)
--- PASS: TestNormalizeHubBaseURL/trims_spaces (0.00s)
--- PASS: TestNormalizeHubBaseURL/removes_multiple_trailing_slashes (0.00s)
--- PASS: TestNormalizeHubBaseURL/removes_trailing_slash (0.00s)
=== CONT TestFirstNonEmpty/whitespace_treated_as_empty
=== CONT TestFirstNonEmpty/first_is_non-empty
=== CONT TestFirstNonEmpty/all_empty
=== CONT TestFirstNonEmpty/first_non-empty
--- PASS: TestFirstNonEmpty (0.00s)
--- PASS: TestFirstNonEmpty/whitespace_with_content (0.00s)
--- PASS: TestFirstNonEmpty/tabs_and_newlines (0.00s)
--- PASS: TestFirstNonEmpty/empty_slice (0.00s)
--- PASS: TestFirstNonEmpty/first_is_non-empty (0.00s)
--- PASS: TestFirstNonEmpty/whitespace_treated_as_empty (0.00s)
--- PASS: TestFirstNonEmpty/all_empty (0.00s)
--- PASS: TestFirstNonEmpty/first_non-empty (0.00s)
=== CONT TestCleanShellArg/clean_slug
=== CONT TestCleanShellArg/parenthesis
=== CONT TestCleanShellArg/backslash_converted
=== CONT TestCleanShellArg/dollar
=== CONT TestCleanShellArg/backtick
=== CONT TestCleanShellArg/pipe
=== CONT TestCleanShellArg/ampersand
=== CONT TestCleanShellArg/colon_not_allowed
=== CONT TestCleanShellArg/with_dot
=== CONT TestCleanShellArg/semicolon
=== CONT TestCleanShellArg/absolute_path
=== CONT TestCleanShellArg/with_dash
=== CONT TestCleanShellArg/path_traversal
=== CONT TestHubCacheTTL/returns_zero_TTL_if_configured
=== CONT TestCleanShellArg/with_underscore
=== CONT TestHubCacheTTL/returns_minute_TTL
=== CONT TestHubCacheTTL/returns_configured_TTL
=== CONT TestFindPresetCaseVariants/another_preset
--- PASS: TestCleanShellArg (0.01s)
--- PASS: TestCleanShellArg/parenthesis (0.00s)
--- PASS: TestCleanShellArg/clean_slug (0.00s)
--- PASS: TestCleanShellArg/backslash_converted (0.00s)
--- PASS: TestCleanShellArg/backtick (0.00s)
--- PASS: TestCleanShellArg/dollar (0.00s)
--- PASS: TestCleanShellArg/pipe (0.00s)
--- PASS: TestCleanShellArg/colon_not_allowed (0.00s)
--- PASS: TestCleanShellArg/ampersand (0.00s)
--- PASS: TestCleanShellArg/semicolon (0.00s)
--- PASS: TestCleanShellArg/with_dash (0.00s)
--- PASS: TestCleanShellArg/absolute_path (0.00s)
--- PASS: TestCleanShellArg/with_dot (0.00s)
--- PASS: TestCleanShellArg/with_underscore (0.00s)
--- PASS: TestCleanShellArg/path_traversal (0.00s)
=== CONT TestFindPresetCaseVariants/empty_slug
=== CONT TestFindPresetCaseVariants/case_sensitive_miss
=== CONT TestFindPresetCaseVariants/partial_match_miss
=== CONT TestFindPresetCaseVariants/exact_match
=== CONT TestRollback/rollback_with_backup
=== CONT TestRollback/rollback_with_empty_backup_path
--- PASS: TestFindPresetCaseVariants (0.00s)
--- PASS: TestFindPresetCaseVariants/another_preset (0.00s)
--- PASS: TestFindPresetCaseVariants/empty_slug (0.00s)
--- PASS: TestFindPresetCaseVariants/case_sensitive_miss (0.00s)
--- PASS: TestFindPresetCaseVariants/partial_match_miss (0.00s)
--- PASS: TestFindPresetCaseVariants/exact_match (0.00s)
=== CONT TestValidateHubURL_EdgeCases/Missing_hostname
--- PASS: TestFindPreviewFileFromArchive (0.00s)
--- PASS: TestFindPreviewFileFromArchive/finds_yaml_in_archive (0.01s)
--- PASS: TestFindPreviewFileFromArchive/returns_empty_for_invalid_archive (0.00s)
--- PASS: TestFindPreviewFileFromArchive/returns_empty_for_no_yaml (0.02s)
=== CONT TestHubHTTPErrorUnwrap/unwrap_returns_nil_when_no_inner
=== CONT TestValidateHubURL_EdgeCases/IPv6_loopback_allowed
=== CONT TestValidateHubURL_EdgeCases/Subdomain_of_example.com_allowed
--- PASS: TestHubCacheTTL (0.01s)
--- PASS: TestHubCacheTTL/returns_zero_TTL_if_configured (0.00s)
--- PASS: TestHubCacheTTL/returns_minute_TTL (0.00s)
--- PASS: TestHubCacheTTL/returns_configured_TTL (0.00s)
=== CONT TestRollback/rollback_with_non-existent_backup
=== CONT TestValidateHubURL_EdgeCases/Unknown_production_domain_rejected
=== CONT TestValidateHubURL_EdgeCases/.local_domain_allowed
=== CONT TestValidateHubURL_EdgeCases/Example.com_allowed_for_testing
=== CONT TestValidateHubURL_EdgeCases/File_scheme_rejected
=== CONT TestValidateHubURL_EdgeCases/Test_domain_allowed
=== CONT TestValidateHubURL_EdgeCases/Invalid_URL_format_-_unsupported_scheme_caught
--- PASS: TestRollback (0.00s)
--- PASS: TestRollback/rollback_with_empty_backup_path (0.00s)
--- PASS: TestRollback/rollback_with_backup (0.00s)
--- PASS: TestRollback/rollback_with_non-existent_backup (0.00s)
=== CONT TestValidateHubURL_EdgeCases/FTP_scheme_rejected
=== CONT TestHubHTTPErrorCanFallback/returns_false_when_fallback_is_false
=== CONT TestHubHTTPErrorCanFallback/returns_true_when_fallback_is_true
=== CONT TestHubHTTPErrorUnwrap/errors.Is_works_through_Unwrap
=== CONT TestHubHTTPErrorUnwrap/unwrap_returns_inner_error
--- PASS: TestHubHTTPErrorUnwrap (0.00s)
--- PASS: TestHubHTTPErrorUnwrap/unwrap_returns_nil_when_no_inner (0.00s)
--- PASS: TestHubHTTPErrorUnwrap/errors.Is_works_through_Unwrap (0.00s)
--- PASS: TestHubHTTPErrorUnwrap/unwrap_returns_inner_error (0.00s)
=== CONT TestBackupExisting/backup_contents_match_original
--- PASS: TestHubHTTPErrorCanFallback (0.00s)
--- PASS: TestHubHTTPErrorCanFallback/returns_false_when_fallback_is_false (0.00s)
--- PASS: TestHubHTTPErrorCanFallback/returns_true_when_fallback_is_true (0.00s)
=== CONT TestBackupExisting/creates_backup_of_existing_directory
=== CONT TestBackupExisting/handles_non-existent_directory
=== CONT TestExtractTarGz/extracts_valid_archive
=== CONT TestExtractTarGz/handles_context_cancellation
=== CONT TestExtractTarGz/creates_nested_directories
=== CONT TestExtractTarGz/handles_corrupted_gzip
=== CONT TestExtractTarGz/rejects_symlinks
=== CONT TestExtractTarGz/rejects_path_traversal
--- PASS: TestBackupExisting (0.00s)
--- PASS: TestBackupExisting/backup_contents_match_original (0.00s)
--- PASS: TestBackupExisting/creates_backup_of_existing_directory (0.00s)
--- PASS: TestBackupExisting/handles_non-existent_directory (0.00s)
--- PASS: TestValidateHubURL_EdgeCases (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/IPv6_loopback_allowed (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/Missing_hostname (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/Unknown_production_domain_rejected (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/.local_domain_allowed (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/Example.com_allowed_for_testing (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/File_scheme_rejected (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/Test_domain_allowed (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/Invalid_URL_format_-_unsupported_scheme_caught (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/FTP_scheme_rejected (0.00s)
--- PASS: TestValidateHubURL_EdgeCases/Subdomain_of_example.com_allowed (0.00s)
=== CONT TestHubHTTPErrorError/error_without_inner_error
=== CONT TestHubHTTPErrorError/error_with_inner_error
=== CONT TestEmptyDir/handles_non-existent_directory
--- PASS: TestHubHTTPErrorError (0.00s)
--- PASS: TestHubHTTPErrorError/error_without_inner_error (0.00s)
--- PASS: TestHubHTTPErrorError/error_with_inner_error (0.00s)
=== CONT TestEmptyDir/handles_empty_directory
=== CONT TestEmptyDir/empties_directory_with_subdirectories
=== CONT TestEmptyDir/empties_directory_with_files
=== CONT TestCopyDirAndCopyFile/copyFile_preserves_permissions
--- PASS: TestEmptyDir (0.00s)
--- PASS: TestEmptyDir/handles_non-existent_directory (0.00s)
--- PASS: TestEmptyDir/handles_empty_directory (0.00s)
--- PASS: TestEmptyDir/empties_directory_with_files (0.00s)
--- PASS: TestEmptyDir/empties_directory_with_subdirectories (0.01s)
=== CONT TestCopyDirAndCopyFile/copyDir_fails_on_non-directory_source
=== CONT TestCopyDirAndCopyFile/copyDir_with_nested_structure
=== CONT TestParseRawIndex/parses_valid_raw_index
--- PASS: TestExtractTarGz (0.00s)
--- PASS: TestExtractTarGz/extracts_valid_archive (0.01s)
--- PASS: TestExtractTarGz/handles_corrupted_gzip (0.00s)
--- PASS: TestExtractTarGz/creates_nested_directories (0.01s)
--- PASS: TestExtractTarGz/rejects_symlinks (0.01s)
--- PASS: TestExtractTarGz/handles_context_cancellation (0.03s)
--- PASS: TestExtractTarGz/rejects_path_traversal (0.02s)
=== CONT TestCopyDirAndCopyFile/copyFile_success
=== CONT TestParseRawIndex/returns_error_on_empty_index
=== CONT TestParseRawIndex/returns_error_on_invalid_JSON
=== CONT TestValidateHubURL_HTTPRejectedForProduction/http://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json
--- PASS: TestParseRawIndex (0.00s)
--- PASS: TestParseRawIndex/parses_valid_raw_index (0.00s)
--- PASS: TestParseRawIndex/returns_error_on_empty_index (0.00s)
--- PASS: TestParseRawIndex/returns_error_on_invalid_JSON (0.00s)
=== CONT TestValidateHubURL_HTTPRejectedForProduction/http://hub.crowdsec.net/api/index.json
=== CONT TestValidateHubURL_HTTPRejectedForProduction/http://hub-data.crowdsec.net/api/index.json
--- PASS: TestValidateHubURL_HTTPRejectedForProduction (0.00s)
--- PASS: TestValidateHubURL_HTTPRejectedForProduction/http://raw.githubusercontent.com/crowdsecurity/hub/master/.index.json (0.00s)
--- PASS: TestValidateHubURL_HTTPRejectedForProduction/http://hub.crowdsec.net/api/index.json (0.00s)
--- PASS: TestValidateHubURL_HTTPRejectedForProduction/http://hub-data.crowdsec.net/api/index.json (0.00s)
=== CONT TestBuildResourceURLs/removes_duplicates
=== CONT TestBuildResourceURLs/handles_empty_bases
=== CONT TestBuildResourceURLs/without_explicit_URL
=== CONT TestBuildResourceURLs/with_explicit_URL
=== CONT TestValidateHubURL_LocalhostExceptions/http://127.0.0.1:8080/index.json
=== CONT TestValidateHubURL_LocalhostExceptions/http://server.local/api/index.json
--- PASS: TestBuildResourceURLs (0.00s)
--- PASS: TestBuildResourceURLs/removes_duplicates (0.00s)
--- PASS: TestBuildResourceURLs/handles_empty_bases (0.00s)
--- PASS: TestBuildResourceURLs/without_explicit_URL (0.00s)
--- PASS: TestBuildResourceURLs/with_explicit_URL (0.00s)
=== CONT TestValidateHubURL_LocalhostExceptions/http://test.example.com/api/index.json
=== CONT TestValidateHubURL_LocalhostExceptions/http://example.com/api/index.json
=== CONT TestValidateHubURL_LocalhostExceptions/http://[::1]:8080/index.json
=== CONT TestValidateHubURL_LocalhostExceptions/http://test.hub/api/index.json
=== CONT TestValidateHubURL_LocalhostExceptions/http://localhost:8080/index.json
--- PASS: TestValidateHubURL_LocalhostExceptions (0.00s)
--- PASS: TestValidateHubURL_LocalhostExceptions/http://127.0.0.1:8080/index.json (0.00s)
--- PASS: TestValidateHubURL_LocalhostExceptions/http://server.local/api/index.json (0.00s)
--- PASS: TestValidateHubURL_LocalhostExceptions/http://test.example.com/api/index.json (0.00s)
--- PASS: TestValidateHubURL_LocalhostExceptions/http://example.com/api/index.json (0.00s)
--- PASS: TestValidateHubURL_LocalhostExceptions/http://[::1]:8080/index.json (0.00s)
--- PASS: TestValidateHubURL_LocalhostExceptions/http://test.hub/api/index.json (0.00s)
--- PASS: TestValidateHubURL_LocalhostExceptions/http://localhost:8080/index.json (0.00s)
=== CONT TestValidateHubURL_InvalidSchemes/ftp://hub.crowdsec.net/index.json
=== CONT TestValidateHubURL_InvalidSchemes/gopher://attacker.com
=== CONT TestValidateHubURL_InvalidSchemes/file:///etc/passwd
=== CONT TestValidateHubURL_InvalidSchemes/data:text/html,<script>alert('xss')</script>
--- PASS: TestValidateHubURL_InvalidSchemes (0.00s)
--- PASS: TestValidateHubURL_InvalidSchemes/ftp://hub.crowdsec.net/index.json (0.00s)
--- PASS: TestValidateHubURL_InvalidSchemes/gopher://attacker.com (0.00s)
--- PASS: TestValidateHubURL_InvalidSchemes/file:///etc/passwd (0.00s)
--- PASS: TestValidateHubURL_InvalidSchemes/data:text/html,<script>alert('xss')</script> (0.00s)
--- PASS: TestCopyDirAndCopyFile (0.00s)
--- PASS: TestCopyDirAndCopyFile/copyDir_fails_on_non-directory_source (0.00s)
--- PASS: TestCopyDirAndCopyFile/copyFile_preserves_permissions (0.01s)
--- PASS: TestCopyDirAndCopyFile/copyFile_success (0.01s)
--- PASS: TestCopyDirAndCopyFile/copyDir_with_nested_structure (0.01s)
--- PASS: TestFetchWithLimitRejectsLargePayload (0.77s)
PASS
coverage: 85.8% of statements
ok github.com/Wikid82/charon/backend/internal/crowdsec (cached) coverage: 85.8% of statements
=== RUN TestNewEncryptionService_ValidKey
--- PASS: TestNewEncryptionService_ValidKey (0.00s)
=== RUN TestNewEncryptionService_InvalidBase64
--- PASS: TestNewEncryptionService_InvalidBase64 (0.00s)
=== RUN TestNewEncryptionService_WrongKeyLength
=== RUN TestNewEncryptionService_WrongKeyLength/16_bytes
=== RUN TestNewEncryptionService_WrongKeyLength/24_bytes
=== RUN TestNewEncryptionService_WrongKeyLength/31_bytes
=== RUN TestNewEncryptionService_WrongKeyLength/33_bytes
=== RUN TestNewEncryptionService_WrongKeyLength/0_bytes
--- PASS: TestNewEncryptionService_WrongKeyLength (0.00s)
--- PASS: TestNewEncryptionService_WrongKeyLength/16_bytes (0.00s)
--- PASS: TestNewEncryptionService_WrongKeyLength/24_bytes (0.00s)
--- PASS: TestNewEncryptionService_WrongKeyLength/31_bytes (0.00s)
--- PASS: TestNewEncryptionService_WrongKeyLength/33_bytes (0.00s)
--- PASS: TestNewEncryptionService_WrongKeyLength/0_bytes (0.00s)
=== RUN TestEncryptDecrypt_RoundTrip
=== RUN TestEncryptDecrypt_RoundTrip/simple_text
=== RUN TestEncryptDecrypt_RoundTrip/with_special_chars
=== RUN TestEncryptDecrypt_RoundTrip/json_data
=== RUN TestEncryptDecrypt_RoundTrip/unicode
=== RUN TestEncryptDecrypt_RoundTrip/long_text
--- PASS: TestEncryptDecrypt_RoundTrip (0.00s)
--- PASS: TestEncryptDecrypt_RoundTrip/simple_text (0.00s)
--- PASS: TestEncryptDecrypt_RoundTrip/with_special_chars (0.00s)
--- PASS: TestEncryptDecrypt_RoundTrip/json_data (0.00s)
--- PASS: TestEncryptDecrypt_RoundTrip/unicode (0.00s)
--- PASS: TestEncryptDecrypt_RoundTrip/long_text (0.00s)
=== RUN TestEncrypt_EmptyPlaintext
--- PASS: TestEncrypt_EmptyPlaintext (0.00s)
=== RUN TestDecrypt_InvalidCiphertext
=== RUN TestDecrypt_InvalidCiphertext/invalid_base64
=== RUN TestDecrypt_InvalidCiphertext/too_short
=== RUN TestDecrypt_InvalidCiphertext/empty_string
--- PASS: TestDecrypt_InvalidCiphertext (0.00s)
--- PASS: TestDecrypt_InvalidCiphertext/invalid_base64 (0.00s)
--- PASS: TestDecrypt_InvalidCiphertext/too_short (0.00s)
--- PASS: TestDecrypt_InvalidCiphertext/empty_string (0.00s)
=== RUN TestDecrypt_TamperedCiphertext
--- PASS: TestDecrypt_TamperedCiphertext (0.00s)
=== RUN TestEncrypt_DifferentNonces
--- PASS: TestEncrypt_DifferentNonces (0.00s)
=== RUN TestDecrypt_WrongKey
--- PASS: TestDecrypt_WrongKey (0.00s)
=== RUN TestEncrypt_NilPlaintext
--- PASS: TestEncrypt_NilPlaintext (0.00s)
=== RUN TestDecrypt_ExactNonceSize
--- PASS: TestDecrypt_ExactNonceSize (0.00s)
=== RUN TestDecrypt_OneByteLessThanNonce
--- PASS: TestDecrypt_OneByteLessThanNonce (0.00s)
=== RUN TestEncryptDecrypt_BinaryData
--- PASS: TestEncryptDecrypt_BinaryData (0.00s)
=== RUN TestEncryptDecrypt_LargePlaintext
--- PASS: TestEncryptDecrypt_LargePlaintext (0.13s)
=== RUN TestDecrypt_CorruptedNonce
--- PASS: TestDecrypt_CorruptedNonce (0.00s)
=== RUN TestDecrypt_TruncatedCiphertext
--- PASS: TestDecrypt_TruncatedCiphertext (0.00s)
=== RUN TestDecrypt_AppendedData
--- PASS: TestDecrypt_AppendedData (0.00s)
=== RUN TestEncryptionService_ConcurrentAccess
--- PASS: TestEncryptionService_ConcurrentAccess (0.01s)
=== RUN TestDecrypt_AllZerosCiphertext
--- PASS: TestDecrypt_AllZerosCiphertext (0.00s)
=== RUN TestDecrypt_RandomGarbageCiphertext
--- PASS: TestDecrypt_RandomGarbageCiphertext (0.00s)
=== RUN TestNewEncryptionService_EmptyKey
--- PASS: TestNewEncryptionService_EmptyKey (0.00s)
=== RUN TestNewEncryptionService_WhitespaceKey
--- PASS: TestNewEncryptionService_WhitespaceKey (0.00s)
=== RUN TestEncrypt_CipherCreationError
--- PASS: TestEncrypt_CipherCreationError (0.00s)
=== RUN TestEncrypt_GCMCreationError
--- PASS: TestEncrypt_GCMCreationError (0.00s)
=== RUN TestEncrypt_NonceGenerationError
--- PASS: TestEncrypt_NonceGenerationError (0.00s)
=== RUN TestDecrypt_CipherCreationError
--- PASS: TestDecrypt_CipherCreationError (0.00s)
=== RUN TestDecrypt_GCMCreationError
--- PASS: TestDecrypt_GCMCreationError (0.00s)
=== RUN TestNewRotationService
=== RUN TestNewRotationService/successful_initialization_with_current_key_only
=== RUN TestNewRotationService/successful_initialization_with_next_key
=== RUN TestNewRotationService/successful_initialization_with_legacy_keys
=== RUN TestNewRotationService/fails_without_current_key
=== RUN TestNewRotationService/handles_invalid_next_key_gracefully
--- PASS: TestNewRotationService (0.01s)
--- PASS: TestNewRotationService/successful_initialization_with_current_key_only (0.00s)
--- PASS: TestNewRotationService/successful_initialization_with_next_key (0.00s)
--- PASS: TestNewRotationService/successful_initialization_with_legacy_keys (0.00s)
--- PASS: TestNewRotationService/fails_without_current_key (0.00s)
--- PASS: TestNewRotationService/handles_invalid_next_key_gracefully (0.00s)
=== RUN TestEncryptWithCurrentKey
=== RUN TestEncryptWithCurrentKey/encrypts_with_current_key_when_no_next_key
=== RUN TestEncryptWithCurrentKey/encrypts_with_next_key_when_configured
--- PASS: TestEncryptWithCurrentKey (0.01s)
--- PASS: TestEncryptWithCurrentKey/encrypts_with_current_key_when_no_next_key (0.00s)
--- PASS: TestEncryptWithCurrentKey/encrypts_with_next_key_when_configured (0.00s)
=== RUN TestDecryptWithVersion
=== RUN TestDecryptWithVersion/decrypts_with_correct_version
=== RUN TestDecryptWithVersion/falls_back_to_other_versions_on_failure
rotation_service_test.go:155: Version fallback edge case - functionality verified in integration test
=== RUN TestDecryptWithVersion/fails_when_no_keys_can_decrypt
--- PASS: TestDecryptWithVersion (0.01s)
--- PASS: TestDecryptWithVersion/decrypts_with_correct_version (0.00s)
--- SKIP: TestDecryptWithVersion/falls_back_to_other_versions_on_failure (0.00s)
--- PASS: TestDecryptWithVersion/fails_when_no_keys_can_decrypt (0.00s)
=== RUN TestRotateAllCredentials
=== RUN TestRotateAllCredentials/successfully_rotates_all_providers
=== RUN TestRotateAllCredentials/fails_when_next_key_not_configured
=== RUN TestRotateAllCredentials/handles_partial_failures
Failed to rotate provider 1 (Corrupted): failed to decrypt credentials: failed to decrypt with version 1 or any fallback version
--- PASS: TestRotateAllCredentials (0.02s)
--- PASS: TestRotateAllCredentials/successfully_rotates_all_providers (0.01s)
--- PASS: TestRotateAllCredentials/fails_when_next_key_not_configured (0.00s)
--- PASS: TestRotateAllCredentials/handles_partial_failures (0.01s)
=== RUN TestGetStatus
=== RUN TestGetStatus/returns_correct_status_with_no_providers
=== RUN TestGetStatus/returns_correct_status_with_next_key_configured
=== RUN TestGetStatus/returns_correct_status_with_legacy_keys
=== RUN TestGetStatus/counts_providers_by_version
--- PASS: TestGetStatus (0.00s)
--- PASS: TestGetStatus/returns_correct_status_with_no_providers (0.00s)
--- PASS: TestGetStatus/returns_correct_status_with_next_key_configured (0.00s)
--- PASS: TestGetStatus/returns_correct_status_with_legacy_keys (0.00s)
--- PASS: TestGetStatus/counts_providers_by_version (0.00s)
=== RUN TestValidateKeyConfiguration
=== RUN TestValidateKeyConfiguration/validates_current_key_successfully
=== RUN TestValidateKeyConfiguration/validates_next_key_successfully
=== RUN TestValidateKeyConfiguration/validates_legacy_keys_successfully
--- PASS: TestValidateKeyConfiguration (0.00s)
--- PASS: TestValidateKeyConfiguration/validates_current_key_successfully (0.00s)
--- PASS: TestValidateKeyConfiguration/validates_next_key_successfully (0.00s)
--- PASS: TestValidateKeyConfiguration/validates_legacy_keys_successfully (0.00s)
=== RUN TestGenerateNewKey
=== RUN TestGenerateNewKey/generates_valid_base64_key
=== RUN TestGenerateNewKey/generates_unique_keys
--- PASS: TestGenerateNewKey (0.00s)
--- PASS: TestGenerateNewKey/generates_valid_base64_key (0.00s)
--- PASS: TestGenerateNewKey/generates_unique_keys (0.00s)
=== RUN TestRotationServiceConcurrency
--- PASS: TestRotationServiceConcurrency (0.01s)
=== RUN TestRotationServiceZeroDowntime
=== RUN TestRotationServiceZeroDowntime/step_1:_initial_setup_with_current_key
=== RUN TestRotationServiceZeroDowntime/step_2:_configure_next_key_and_rotate
=== RUN TestRotationServiceZeroDowntime/step_3:_promote_next_to_current
Warning: credential decrypted with version 1 but was tagged as version 2
--- PASS: TestRotationServiceZeroDowntime (0.00s)
--- PASS: TestRotationServiceZeroDowntime/step_1:_initial_setup_with_current_key (0.00s)
--- PASS: TestRotationServiceZeroDowntime/step_2:_configure_next_key_and_rotate (0.00s)
--- PASS: TestRotationServiceZeroDowntime/step_3:_promote_next_to_current (0.00s)
PASS
coverage: 86.9% of statements
ok github.com/Wikid82/charon/backend/internal/crypto (cached) coverage: 86.9% of statements
=== RUN TestConnect
=== PAUSE TestConnect
=== RUN TestConnect_Error
=== PAUSE TestConnect_Error
=== RUN TestConnect_WALMode
=== PAUSE TestConnect_WALMode
=== RUN TestConnect_InvalidDSN
=== PAUSE TestConnect_InvalidDSN
=== RUN TestConnect_IntegrityCheckCorrupted
=== PAUSE TestConnect_IntegrityCheckCorrupted
=== RUN TestConnect_PRAGMAVerification
=== PAUSE TestConnect_PRAGMAVerification
=== RUN TestConnect_CorruptedDatabase_FullIntegrationScenario
=== PAUSE TestConnect_CorruptedDatabase_FullIntegrationScenario
=== RUN TestIsCorruptionError
=== PAUSE TestIsCorruptionError
=== RUN TestLogCorruptionError
=== PAUSE TestLogCorruptionError
=== RUN TestCheckIntegrity
=== PAUSE TestCheckIntegrity
=== RUN TestLogCorruptionError_EmptyContext
=== PAUSE TestLogCorruptionError_EmptyContext
=== RUN TestCheckIntegrity_ActualCorruption
=== PAUSE TestCheckIntegrity_ActualCorruption
=== RUN TestCheckIntegrity_PRAGMAError
=== PAUSE TestCheckIntegrity_PRAGMAError
=== CONT TestConnect
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=memory
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
=== CONT TestIsCorruptionError
=== RUN TestIsCorruptionError/nil_error
=== CONT TestConnect_IntegrityCheckCorrupted
=== RUN TestIsCorruptionError/generic_error
=== RUN TestIsCorruptionError/database_disk_image_is_malformed
=== RUN TestIsCorruptionError/malformed_in_message
=== RUN TestIsCorruptionError/corrupt_database
=== CONT TestCheckIntegrity
=== RUN TestCheckIntegrity/healthy_database_returns_ok
=== RUN TestIsCorruptionError/disk_I/O_error
=== RUN TestIsCorruptionError/file_is_not_a_database
=== RUN TestIsCorruptionError/file_is_encrypted_or_is_not_a_database
=== RUN TestIsCorruptionError/database_or_disk_is_full
=== RUN TestIsCorruptionError/case_insensitive_-_MALFORMED_uppercase
=== RUN TestIsCorruptionError/wrapped_error_with_corruption
=== RUN TestIsCorruptionError/network_error_-_not_corruption
=== RUN TestIsCorruptionError/record_not_found_-_not_corruption
=== RUN TestIsCorruptionError/constraint_violation_-_not_corruption
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=memory
--- PASS: TestIsCorruptionError (0.00s)
--- PASS: TestIsCorruptionError/nil_error (0.00s)
--- PASS: TestIsCorruptionError/generic_error (0.00s)
--- PASS: TestIsCorruptionError/database_disk_image_is_malformed (0.00s)
--- PASS: TestIsCorruptionError/malformed_in_message (0.00s)
--- PASS: TestIsCorruptionError/corrupt_database (0.00s)
--- PASS: TestIsCorruptionError/disk_I/O_error (0.00s)
--- PASS: TestIsCorruptionError/file_is_not_a_database (0.00s)
--- PASS: TestIsCorruptionError/file_is_encrypted_or_is_not_a_database (0.00s)
--- PASS: TestIsCorruptionError/database_or_disk_is_full (0.00s)
--- PASS: TestIsCorruptionError/case_insensitive_-_MALFORMED_uppercase (0.00s)
--- PASS: TestIsCorruptionError/wrapped_error_with_corruption (0.00s)
--- PASS: TestIsCorruptionError/network_error_-_not_corruption (0.00s)
--- PASS: TestIsCorruptionError/record_not_found_-_not_corruption (0.00s)
--- PASS: TestIsCorruptionError/constraint_violation_-_not_corruption (0.00s)
=== CONT TestCheckIntegrity_ActualCorruption
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
=== RUN TestCheckIntegrity/file-based_database_passes_check
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
--- PASS: TestConnect (0.02s)
=== CONT TestLogCorruptionError_EmptyContext
time="2026-01-10T02:17:08Z" level=error msg="SQLite database corruption detected" error="database disk image is malformed" error_type=database_corruption
--- PASS: TestLogCorruptionError_EmptyContext (0.00s)
=== CONT TestLogCorruptionError
=== RUN TestLogCorruptionError/nil_error_does_not_panic
=== RUN TestLogCorruptionError/logs_with_context
time="2026-01-10T02:17:08Z" level=error msg="SQLite database corruption detected" error="database disk image is malformed" error_type=database_corruption monitor_id=test-uuid operation=GetMonitorHistory table=uptime_heartbeats
=== RUN TestLogCorruptionError/logs_without_context
time="2026-01-10T02:17:08Z" level=error msg="SQLite database corruption detected" error="database corrupt" error_type=database_corruption
--- PASS: TestLogCorruptionError (0.00s)
--- PASS: TestLogCorruptionError/nil_error_does_not_panic (0.00s)
--- PASS: TestLogCorruptionError/logs_with_context (0.00s)
--- PASS: TestLogCorruptionError/logs_without_context (0.00s)
=== CONT TestCheckIntegrity_PRAGMAError
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
--- PASS: TestCheckIntegrity (0.02s)
--- PASS: TestCheckIntegrity/healthy_database_returns_ok (0.00s)
--- PASS: TestCheckIntegrity/file-based_database_passes_check (0.02s)
=== CONT TestConnect_InvalidDSN
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
--- PASS: TestConnect_InvalidDSN (0.00s)
=== CONT TestConnect_PRAGMAVerification
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
2026/01/10 02:17:08 /projects/Charon/backend/internal/database/errors.go:63 sql: database is closed
[0.039ms] [rows:-] PRAGMA quick_check
--- PASS: TestCheckIntegrity_PRAGMAError (0.01s)
=== CONT TestConnect_CorruptedDatabase_FullIntegrationScenario
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
2026/01/10 02:17:08 /projects/Charon/backend/internal/database/database.go:57 database disk image is malformed
[0.207ms] [rows:1] PRAGMA quick_check
time="2026-01-10T02:17:08Z" level=warning msg="Failed to run SQLite integrity check on startup" error="database disk image is malformed"
2026/01/10 02:17:08 /projects/Charon/backend/internal/database/database.go:57 database disk image is malformed
[0.224ms] [rows:1] PRAGMA quick_check
time="2026-01-10T02:17:08Z" level=warning msg="Failed to run SQLite integrity check on startup" error="database disk image is malformed"
2026/01/10 02:17:08 /projects/Charon/backend/internal/database/errors.go:63 database disk image is malformed
[0.090ms] [rows:1] PRAGMA quick_check
--- PASS: TestConnect_IntegrityCheckCorrupted (0.03s)
=== CONT TestConnect_Error
--- PASS: TestCheckIntegrity_ActualCorruption (0.03s)
=== CONT TestConnect_WALMode
--- PASS: TestConnect_Error (0.00s)
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
--- PASS: TestConnect_PRAGMAVerification (0.01s)
time="2026-01-10T02:17:08Z" level=info msg="SQLite database integrity check passed"
--- PASS: TestConnect_WALMode (0.01s)
time="2026-01-10T02:17:08Z" level=info msg="SQLite database connected with WAL mode enabled" journal_mode=wal
2026/01/10 02:17:08 /projects/Charon/backend/internal/database/database.go:57 database disk image is malformed
[0.098ms] [rows:1] PRAGMA quick_check
time="2026-01-10T02:17:08Z" level=warning msg="Failed to run SQLite integrity check on startup" error="database disk image is malformed"
2026/01/10 02:17:08 /projects/Charon/backend/internal/database/database_test.go:169 database disk image is malformed
[0.076ms] [rows:0] SELECT COUNT(*) FROM users
--- PASS: TestConnect_CorruptedDatabase_FullIntegrationScenario (0.02s)
PASS
coverage: 91.3% of statements
ok github.com/Wikid82/charon/backend/internal/database (cached) coverage: 91.3% of statements
=== RUN TestNewBroadcastHook
--- PASS: TestNewBroadcastHook (0.00s)
=== RUN TestBroadcastHook_Levels
--- PASS: TestBroadcastHook_Levels (0.00s)
=== RUN TestBroadcastHook_Subscribe
--- PASS: TestBroadcastHook_Subscribe (0.00s)
=== RUN TestBroadcastHook_Unsubscribe
--- PASS: TestBroadcastHook_Unsubscribe (0.00s)
=== RUN TestInit
--- PASS: TestInit (0.00s)
=== RUN TestLog
--- PASS: TestLog (0.00s)
=== RUN TestWithFields
--- PASS: TestWithFields (0.00s)
=== RUN TestBroadcastHook_Fire
--- PASS: TestBroadcastHook_Fire (0.00s)
=== RUN TestGetBroadcastHook
--- PASS: TestGetBroadcastHook (0.00s)
PASS
coverage: 85.7% of statements
ok github.com/Wikid82/charon/backend/internal/logger (cached) coverage: 85.7% of statements
=== RUN TestMetrics_Register
=== PAUSE TestMetrics_Register
=== RUN TestMetrics_Increment
=== PAUSE TestMetrics_Increment
=== RUN TestRecordURLValidation
=== PAUSE TestRecordURLValidation
=== RUN TestRecordSSRFBlock
=== PAUSE TestRecordSSRFBlock
=== RUN TestRecordURLTestDuration
=== PAUSE TestRecordURLTestDuration
=== RUN TestMetricsLabels
=== PAUSE TestMetricsLabels
=== RUN TestMetricsRegistration
=== PAUSE TestMetricsRegistration
=== CONT TestMetrics_Register
=== CONT TestMetricsRegistration
=== CONT TestRecordURLTestDuration
=== CONT TestRecordSSRFBlock
=== RUN TestRecordSSRFBlock/Private_IP_block
=== NAME TestRecordURLTestDuration
security_metrics_test.go:88: Successfully recorded histogram observations
--- PASS: TestRecordURLTestDuration (0.00s)
=== CONT TestMetrics_Increment
=== PAUSE TestRecordSSRFBlock/Private_IP_block
--- PASS: TestMetrics_Increment (0.00s)
=== CONT TestMetricsLabels
=== RUN TestRecordSSRFBlock/Loopback_block
--- PASS: TestMetricsRegistration (0.00s)
=== CONT TestRecordURLValidation
--- PASS: TestMetricsLabels (0.00s)
=== RUN TestRecordURLValidation/Allowed_validation
--- PASS: TestMetrics_Register (0.00s)
=== PAUSE TestRecordURLValidation/Allowed_validation
=== PAUSE TestRecordSSRFBlock/Loopback_block
=== RUN TestRecordURLValidation/Blocked_private_IP
=== PAUSE TestRecordURLValidation/Blocked_private_IP
=== RUN TestRecordSSRFBlock/Link-local_block
=== RUN TestRecordURLValidation/DNS_failure
=== PAUSE TestRecordSSRFBlock/Link-local_block
=== PAUSE TestRecordURLValidation/DNS_failure
=== RUN TestRecordSSRFBlock/Metadata_endpoint_block
=== RUN TestRecordURLValidation/Invalid_format
=== PAUSE TestRecordURLValidation/Invalid_format
=== PAUSE TestRecordSSRFBlock/Metadata_endpoint_block
=== CONT TestRecordURLValidation/DNS_failure
=== CONT TestRecordSSRFBlock/Link-local_block
=== CONT TestRecordSSRFBlock/Loopback_block
=== CONT TestRecordSSRFBlock/Metadata_endpoint_block
=== CONT TestRecordSSRFBlock/Private_IP_block
=== CONT TestRecordURLValidation/Blocked_private_IP
=== CONT TestRecordURLValidation/Invalid_format
=== CONT TestRecordURLValidation/Allowed_validation
--- PASS: TestRecordSSRFBlock (0.00s)
--- PASS: TestRecordSSRFBlock/Metadata_endpoint_block (0.00s)
--- PASS: TestRecordSSRFBlock/Link-local_block (0.00s)
--- PASS: TestRecordSSRFBlock/Loopback_block (0.00s)
--- PASS: TestRecordSSRFBlock/Private_IP_block (0.00s)
--- PASS: TestRecordURLValidation (0.00s)
--- PASS: TestRecordURLValidation/DNS_failure (0.00s)
--- PASS: TestRecordURLValidation/Blocked_private_IP (0.00s)
--- PASS: TestRecordURLValidation/Allowed_validation (0.00s)
--- PASS: TestRecordURLValidation/Invalid_format (0.00s)
PASS
coverage: 100.0% of statements
ok github.com/Wikid82/charon/backend/internal/metrics (cached) coverage: 100.0% of statements
=== RUN TestDNSProvider_TableName
--- PASS: TestDNSProvider_TableName (0.00s)
=== RUN TestDNSProvider_Fields
--- PASS: TestDNSProvider_Fields (0.00s)
=== RUN TestDNSProvider_CredentialsEncrypted_NotSerialized
--- PASS: TestDNSProvider_CredentialsEncrypted_NotSerialized (0.00s)
=== RUN TestDomain_BeforeCreate
--- PASS: TestDomain_BeforeCreate (0.01s)
=== RUN TestNotificationTemplate_BeforeCreate
--- PASS: TestNotificationTemplate_BeforeCreate (0.01s)
=== RUN TestUptimeHost_BeforeCreate
--- PASS: TestUptimeHost_BeforeCreate (0.02s)
=== RUN TestUptimeNotificationEvent_BeforeCreate
--- PASS: TestUptimeNotificationEvent_BeforeCreate (0.01s)
=== RUN TestNotification_BeforeCreate
--- PASS: TestNotification_BeforeCreate (0.00s)
=== RUN TestNotificationConfig_BeforeCreate
--- PASS: TestNotificationConfig_BeforeCreate (0.00s)
=== RUN TestSecurityHeaderProfile_Create
--- PASS: TestSecurityHeaderProfile_Create (0.01s)
=== RUN TestSecurityHeaderProfile_JSONSerialization
--- PASS: TestSecurityHeaderProfile_JSONSerialization (0.00s)
=== RUN TestCSPDirective_JSONSerialization
--- PASS: TestCSPDirective_JSONSerialization (0.00s)
=== RUN TestPermissionsPolicyItem_JSONSerialization
--- PASS: TestPermissionsPolicyItem_JSONSerialization (0.00s)
=== RUN TestSecurityHeaderProfile_Defaults
--- PASS: TestSecurityHeaderProfile_Defaults (0.00s)
=== RUN TestSecurityHeaderProfile_UniqueUUID
2026/01/10 02:17:11 /projects/Charon/backend/internal/models/security_header_profile_test.go:155 UNIQUE constraint failed: security_header_profiles.uuid
[0.409ms] [rows:0] INSERT INTO `security_header_profiles` (`uuid`,`name`,`hsts_enabled`,`hsts_max_age`,`hsts_include_subdomains`,`hsts_preload`,`csp_enabled`,`csp_directives`,`csp_report_only`,`csp_report_uri`,`x_frame_options`,`x_content_type_options`,`referrer_policy`,`permissions_policy`,`cross_origin_opener_policy`,`cross_origin_resource_policy`,`cross_origin_embedder_policy`,`xss_protection`,`cache_control_no_store`,`security_score`,`is_preset`,`preset_type`,`description`,`created_at`,`updated_at`) VALUES ("12b9b39c-6355-4693-9d69-e600f6161ac0","Profile 2",true,31536000,true,false,false,"",false,"","DENY",true,"strict-origin-when-cross-origin","","same-origin","same-origin","",true,false,0,false,"","","2026-01-10 02:17:11.033","2026-01-10 02:17:11.033") RETURNING `id`
--- PASS: TestSecurityHeaderProfile_UniqueUUID (0.00s)
=== RUN TestSecurityHeaderProfile_CSPDirectivesStorage
--- PASS: TestSecurityHeaderProfile_CSPDirectivesStorage (0.01s)
=== RUN TestSecurityHeaderProfile_PermissionsPolicyStorage
--- PASS: TestSecurityHeaderProfile_PermissionsPolicyStorage (0.00s)
=== RUN TestSecurityHeaderProfile_PresetFields
--- PASS: TestSecurityHeaderProfile_PresetFields (0.00s)
=== RUN TestUser_SetPassword
--- PASS: TestUser_SetPassword (3.06s)
=== RUN TestUser_CheckPassword
--- PASS: TestUser_CheckPassword (2.39s)
=== RUN TestUser_HasPendingInvite
=== RUN TestUser_HasPendingInvite/no_invite_token
=== RUN TestUser_HasPendingInvite/expired_invite
=== RUN TestUser_HasPendingInvite/valid_pending_invite
=== RUN TestUser_HasPendingInvite/already_accepted_invite
--- PASS: TestUser_HasPendingInvite (0.00s)
--- PASS: TestUser_HasPendingInvite/no_invite_token (0.00s)
--- PASS: TestUser_HasPendingInvite/expired_invite (0.00s)
--- PASS: TestUser_HasPendingInvite/valid_pending_invite (0.00s)
--- PASS: TestUser_HasPendingInvite/already_accepted_invite (0.00s)
=== RUN TestUser_CanAccessHost_AllowAll
--- PASS: TestUser_CanAccessHost_AllowAll (0.00s)
=== RUN TestUser_CanAccessHost_DenyAll
--- PASS: TestUser_CanAccessHost_DenyAll (0.00s)
=== RUN TestUser_CanAccessHost_AdminBypass
--- PASS: TestUser_CanAccessHost_AdminBypass (0.00s)
=== RUN TestUser_CanAccessHost_DefaultBehavior
--- PASS: TestUser_CanAccessHost_DefaultBehavior (0.00s)
=== RUN TestUser_CanAccessHost_EmptyPermittedHosts
=== RUN TestUser_CanAccessHost_EmptyPermittedHosts/allow_all_with_no_exceptions_allows_all
=== RUN TestUser_CanAccessHost_EmptyPermittedHosts/deny_all_with_no_exceptions_denies_all
--- PASS: TestUser_CanAccessHost_EmptyPermittedHosts (0.00s)
--- PASS: TestUser_CanAccessHost_EmptyPermittedHosts/allow_all_with_no_exceptions_allows_all (0.00s)
--- PASS: TestUser_CanAccessHost_EmptyPermittedHosts/deny_all_with_no_exceptions_denies_all (0.00s)
=== RUN TestPermissionMode_Constants
--- PASS: TestPermissionMode_Constants (0.00s)
=== RUN TestDNSProviderCredential_TableName
--- PASS: TestDNSProviderCredential_TableName (0.00s)
=== RUN TestDNSProviderCredential_Struct
--- PASS: TestDNSProviderCredential_Struct (0.00s)
=== RUN TestNotificationProvider_BeforeCreate
--- PASS: TestNotificationProvider_BeforeCreate (0.00s)
=== RUN TestUptimeMonitor_BeforeCreate
--- PASS: TestUptimeMonitor_BeforeCreate (0.02s)
PASS
coverage: 96.4% of statements
ok github.com/Wikid82/charon/backend/internal/models (cached) coverage: 96.4% of statements
=== RUN TestNewInternalServiceHTTPClient
=== PAUSE TestNewInternalServiceHTTPClient
=== RUN TestNewInternalServiceHTTPClient_TransportConfiguration
=== PAUSE TestNewInternalServiceHTTPClient_TransportConfiguration
=== RUN TestNewInternalServiceHTTPClient_RedirectsDisabled
=== PAUSE TestNewInternalServiceHTTPClient_RedirectsDisabled
=== RUN TestNewInternalServiceHTTPClient_CheckRedirectReturnsErrUseLastResponse
=== PAUSE TestNewInternalServiceHTTPClient_CheckRedirectReturnsErrUseLastResponse
=== RUN TestNewInternalServiceHTTPClient_ActualRequest
=== PAUSE TestNewInternalServiceHTTPClient_ActualRequest
=== RUN TestNewInternalServiceHTTPClient_TimeoutEnforced
=== PAUSE TestNewInternalServiceHTTPClient_TimeoutEnforced
=== RUN TestNewInternalServiceHTTPClient_MultipleClients
=== PAUSE TestNewInternalServiceHTTPClient_MultipleClients
=== RUN TestNewInternalServiceHTTPClient_ProxyIgnored
=== PAUSE TestNewInternalServiceHTTPClient_ProxyIgnored
=== RUN TestNewInternalServiceHTTPClient_PostRequest
=== PAUSE TestNewInternalServiceHTTPClient_PostRequest
=== RUN TestIsPrivateIP
=== PAUSE TestIsPrivateIP
=== RUN TestIsPrivateIP_NilIP
=== PAUSE TestIsPrivateIP_NilIP
=== RUN TestSafeDialer_BlocksPrivateIPs
=== PAUSE TestSafeDialer_BlocksPrivateIPs
=== RUN TestSafeDialer_AllowsLocalhost
=== PAUSE TestSafeDialer_AllowsLocalhost
=== RUN TestSafeDialer_AllowedDomains
=== PAUSE TestSafeDialer_AllowedDomains
=== RUN TestNewSafeHTTPClient_DefaultOptions
=== PAUSE TestNewSafeHTTPClient_DefaultOptions
=== RUN TestNewSafeHTTPClient_WithTimeout
=== PAUSE TestNewSafeHTTPClient_WithTimeout
=== RUN TestNewSafeHTTPClient_WithAllowLocalhost
=== PAUSE TestNewSafeHTTPClient_WithAllowLocalhost
=== RUN TestNewSafeHTTPClient_BlocksSSRF
=== PAUSE TestNewSafeHTTPClient_BlocksSSRF
=== RUN TestNewSafeHTTPClient_WithMaxRedirects
=== PAUSE TestNewSafeHTTPClient_WithMaxRedirects
=== RUN TestNewSafeHTTPClient_WithAllowedDomains
=== PAUSE TestNewSafeHTTPClient_WithAllowedDomains
=== RUN TestClientOptions_Defaults
=== PAUSE TestClientOptions_Defaults
=== RUN TestWithDialTimeout
=== PAUSE TestWithDialTimeout
=== RUN TestSafeDialer_InvalidAddress
=== PAUSE TestSafeDialer_InvalidAddress
=== RUN TestSafeDialer_LoopbackIPv6
=== PAUSE TestSafeDialer_LoopbackIPv6
=== RUN TestValidateRedirectTarget_EmptyHostname
=== PAUSE TestValidateRedirectTarget_EmptyHostname
=== RUN TestValidateRedirectTarget_Localhost
=== PAUSE TestValidateRedirectTarget_Localhost
=== RUN TestValidateRedirectTarget_127
=== PAUSE TestValidateRedirectTarget_127
=== RUN TestValidateRedirectTarget_IPv6Loopback
=== PAUSE TestValidateRedirectTarget_IPv6Loopback
=== RUN TestNewSafeHTTPClient_NoRedirectsByDefault
=== PAUSE TestNewSafeHTTPClient_NoRedirectsByDefault
=== RUN TestIsPrivateIP_IPv4MappedIPv6
=== PAUSE TestIsPrivateIP_IPv4MappedIPv6
=== RUN TestIsPrivateIP_Multicast
=== PAUSE TestIsPrivateIP_Multicast
=== RUN TestIsPrivateIP_Unspecified
=== PAUSE TestIsPrivateIP_Unspecified
=== RUN TestValidateRedirectTarget_DNSFailure
=== PAUSE TestValidateRedirectTarget_DNSFailure
=== RUN TestValidateRedirectTarget_PrivateIPInRedirect
=== PAUSE TestValidateRedirectTarget_PrivateIPInRedirect
=== RUN TestSafeDialer_AllIPsPrivate
=== PAUSE TestSafeDialer_AllIPsPrivate
=== RUN TestNewSafeHTTPClient_RedirectToPrivateIP
=== PAUSE TestNewSafeHTTPClient_RedirectToPrivateIP
=== RUN TestSafeDialer_DNSResolutionFailure
=== PAUSE TestSafeDialer_DNSResolutionFailure
=== RUN TestSafeDialer_NoIPsReturned
=== PAUSE TestSafeDialer_NoIPsReturned
=== RUN TestNewSafeHTTPClient_TooManyRedirects
=== PAUSE TestNewSafeHTTPClient_TooManyRedirects
=== RUN TestValidateRedirectTarget_AllowedLocalhost
=== PAUSE TestValidateRedirectTarget_AllowedLocalhost
=== RUN TestNewSafeHTTPClient_MetadataEndpoint
=== PAUSE TestNewSafeHTTPClient_MetadataEndpoint
=== RUN TestSafeDialer_IPv4MappedIPv6
=== PAUSE TestSafeDialer_IPv4MappedIPv6
=== RUN TestClientOptions_AllFunctionalOptions
=== PAUSE TestClientOptions_AllFunctionalOptions
=== RUN TestSafeDialer_ContextCancelled
=== PAUSE TestSafeDialer_ContextCancelled
=== RUN TestNewSafeHTTPClient_RedirectValidation
=== PAUSE TestNewSafeHTTPClient_RedirectValidation
=== CONT TestNewInternalServiceHTTPClient_RedirectsDisabled
=== CONT TestSafeDialer_LoopbackIPv6
=== CONT TestSafeDialer_NoIPsReturned
=== CONT TestSafeDialer_BlocksPrivateIPs
=== RUN TestSafeDialer_BlocksPrivateIPs/blocks_10.x.x.x
=== PAUSE TestSafeDialer_BlocksPrivateIPs/blocks_10.x.x.x
=== RUN TestSafeDialer_BlocksPrivateIPs/blocks_172.16.x.x
=== PAUSE TestSafeDialer_BlocksPrivateIPs/blocks_172.16.x.x
=== RUN TestSafeDialer_BlocksPrivateIPs/blocks_192.168.x.x
=== PAUSE TestSafeDialer_BlocksPrivateIPs/blocks_192.168.x.x
=== RUN TestSafeDialer_BlocksPrivateIPs/blocks_127.0.0.1
=== PAUSE TestSafeDialer_BlocksPrivateIPs/blocks_127.0.0.1
=== RUN TestSafeDialer_BlocksPrivateIPs/blocks_localhost
=== PAUSE TestSafeDialer_BlocksPrivateIPs/blocks_localhost
=== CONT TestNewSafeHTTPClient_RedirectValidation
--- PASS: TestSafeDialer_LoopbackIPv6 (0.00s)
=== CONT TestClientOptions_AllFunctionalOptions
--- PASS: TestNewInternalServiceHTTPClient_RedirectsDisabled (0.00s)
--- PASS: TestClientOptions_AllFunctionalOptions (0.00s)
=== CONT TestSafeDialer_IPv4MappedIPv6
--- PASS: TestSafeDialer_IPv4MappedIPv6 (0.00s)
=== CONT TestNewSafeHTTPClient_MetadataEndpoint
=== CONT TestSafeDialer_ContextCancelled
--- PASS: TestSafeDialer_ContextCancelled (0.00s)
=== CONT TestNewSafeHTTPClient_TooManyRedirects
--- PASS: TestNewSafeHTTPClient_MetadataEndpoint (0.00s)
=== CONT TestValidateRedirectTarget_AllowedLocalhost
=== RUN TestValidateRedirectTarget_AllowedLocalhost/http://localhost/path
=== PAUSE TestValidateRedirectTarget_AllowedLocalhost/http://localhost/path
=== RUN TestValidateRedirectTarget_AllowedLocalhost/http://127.0.0.1/path
=== PAUSE TestValidateRedirectTarget_AllowedLocalhost/http://127.0.0.1/path
=== RUN TestValidateRedirectTarget_AllowedLocalhost/http://[::1]/path
=== PAUSE TestValidateRedirectTarget_AllowedLocalhost/http://[::1]/path
=== CONT TestSafeDialer_DNSResolutionFailure
--- PASS: TestSafeDialer_NoIPsReturned (0.00s)
=== CONT TestNewSafeHTTPClient_RedirectToPrivateIP
--- PASS: TestSafeDialer_DNSResolutionFailure (0.00s)
=== CONT TestSafeDialer_AllIPsPrivate
=== RUN TestSafeDialer_AllIPsPrivate/10.0.0.1:80
=== PAUSE TestSafeDialer_AllIPsPrivate/10.0.0.1:80
=== RUN TestSafeDialer_AllIPsPrivate/172.16.0.1:443
=== PAUSE TestSafeDialer_AllIPsPrivate/172.16.0.1:443
=== RUN TestSafeDialer_AllIPsPrivate/192.168.0.1:8080
=== PAUSE TestSafeDialer_AllIPsPrivate/192.168.0.1:8080
=== RUN TestSafeDialer_AllIPsPrivate/169.254.169.254:80
=== PAUSE TestSafeDialer_AllIPsPrivate/169.254.169.254:80
=== CONT TestWithDialTimeout
--- PASS: TestWithDialTimeout (0.00s)
=== CONT TestClientOptions_Defaults
--- PASS: TestClientOptions_Defaults (0.00s)
=== CONT TestSafeDialer_InvalidAddress
--- PASS: TestSafeDialer_InvalidAddress (0.00s)
=== CONT TestNewSafeHTTPClient_WithMaxRedirects
--- PASS: TestNewSafeHTTPClient_RedirectToPrivateIP (0.00s)
=== CONT TestNewSafeHTTPClient_WithAllowedDomains
--- PASS: TestNewSafeHTTPClient_WithAllowedDomains (0.00s)
=== CONT TestNewSafeHTTPClient_WithAllowLocalhost
--- PASS: TestNewSafeHTTPClient_RedirectValidation (0.01s)
=== CONT TestNewSafeHTTPClient_BlocksSSRF
=== RUN TestNewSafeHTTPClient_BlocksSSRF/http://127.0.0.1/
=== PAUSE TestNewSafeHTTPClient_BlocksSSRF/http://127.0.0.1/
=== RUN TestNewSafeHTTPClient_BlocksSSRF/http://10.0.0.1/
=== PAUSE TestNewSafeHTTPClient_BlocksSSRF/http://10.0.0.1/
=== RUN TestNewSafeHTTPClient_BlocksSSRF/http://172.16.0.1/
=== PAUSE TestNewSafeHTTPClient_BlocksSSRF/http://172.16.0.1/
=== RUN TestNewSafeHTTPClient_BlocksSSRF/http://192.168.1.1/
--- PASS: TestNewSafeHTTPClient_WithAllowLocalhost (0.00s)
--- PASS: TestNewSafeHTTPClient_WithMaxRedirects (0.00s)
=== PAUSE TestNewSafeHTTPClient_BlocksSSRF/http://192.168.1.1/
--- PASS: TestNewSafeHTTPClient_TooManyRedirects (0.01s)
=== CONT TestSafeDialer_AllowedDomains
=== CONT TestNewSafeHTTPClient_WithTimeout
=== CONT TestSafeDialer_AllowsLocalhost
--- PASS: TestNewSafeHTTPClient_WithTimeout (0.00s)
=== CONT TestSafeDialer_BlocksPrivateIPs/blocks_172.16.x.x
=== CONT TestSafeDialer_BlocksPrivateIPs/blocks_localhost
=== RUN TestNewSafeHTTPClient_BlocksSSRF/http://localhost/
=== PAUSE TestNewSafeHTTPClient_BlocksSSRF/http://localhost/
--- PASS: TestSafeDialer_AllowsLocalhost (0.00s)
=== CONT TestSafeDialer_BlocksPrivateIPs/blocks_127.0.0.1
=== CONT TestIsPrivateIP_NilIP
--- PASS: TestIsPrivateIP_NilIP (0.00s)
=== CONT TestSafeDialer_BlocksPrivateIPs/blocks_10.x.x.x
=== CONT TestSafeDialer_BlocksPrivateIPs/blocks_192.168.x.x
=== CONT TestNewInternalServiceHTTPClient_PostRequest
=== CONT TestNewInternalServiceHTTPClient_ProxyIgnored
=== CONT TestNewSafeHTTPClient_DefaultOptions
--- PASS: TestNewSafeHTTPClient_DefaultOptions (0.00s)
=== CONT TestIsPrivateIP
=== RUN TestIsPrivateIP/10.0.0.0/8_start
=== PAUSE TestIsPrivateIP/10.0.0.0/8_start
--- PASS: TestSafeDialer_BlocksPrivateIPs (0.00s)
--- PASS: TestSafeDialer_BlocksPrivateIPs/blocks_172.16.x.x (0.00s)
--- PASS: TestSafeDialer_BlocksPrivateIPs/blocks_localhost (0.00s)
--- PASS: TestSafeDialer_BlocksPrivateIPs/blocks_127.0.0.1 (0.00s)
--- PASS: TestSafeDialer_BlocksPrivateIPs/blocks_10.x.x.x (0.00s)
--- PASS: TestSafeDialer_BlocksPrivateIPs/blocks_192.168.x.x (0.00s)
=== RUN TestIsPrivateIP/10.0.0.0/8_middle
=== PAUSE TestIsPrivateIP/10.0.0.0/8_middle
=== RUN TestIsPrivateIP/172.16.0.0/12_start
=== PAUSE TestIsPrivateIP/172.16.0.0/12_start
=== RUN TestIsPrivateIP/172.16.0.0/12_end
=== PAUSE TestIsPrivateIP/172.16.0.0/12_end
=== RUN TestIsPrivateIP/192.168.0.0/16_start
=== PAUSE TestIsPrivateIP/192.168.0.0/16_start
=== RUN TestIsPrivateIP/192.168.0.0/16_end
=== PAUSE TestIsPrivateIP/192.168.0.0/16_end
=== RUN TestIsPrivateIP/169.254.0.0/16_start
=== PAUSE TestIsPrivateIP/169.254.0.0/16_start
=== RUN TestIsPrivateIP/169.254.0.0/16_end
=== PAUSE TestIsPrivateIP/169.254.0.0/16_end
=== RUN TestIsPrivateIP/127.0.0.0/8_localhost
=== PAUSE TestIsPrivateIP/127.0.0.0/8_localhost
--- PASS: TestNewInternalServiceHTTPClient_ProxyIgnored (0.00s)
=== RUN TestIsPrivateIP/127.0.0.0/8_other
=== CONT TestNewInternalServiceHTTPClient_TimeoutEnforced
=== PAUSE TestIsPrivateIP/127.0.0.0/8_other
=== RUN TestIsPrivateIP/127.0.0.0/8_end
=== PAUSE TestIsPrivateIP/127.0.0.0/8_end
=== RUN TestIsPrivateIP/0.0.0.0/8
=== PAUSE TestIsPrivateIP/0.0.0.0/8
=== RUN TestIsPrivateIP/240.0.0.0/4_reserved
=== PAUSE TestIsPrivateIP/240.0.0.0/4_reserved
=== RUN TestIsPrivateIP/255.255.255.255_broadcast
=== PAUSE TestIsPrivateIP/255.255.255.255_broadcast
=== RUN TestIsPrivateIP/IPv6_loopback
=== PAUSE TestIsPrivateIP/IPv6_loopback
=== RUN TestIsPrivateIP/fc00::/7_unique_local
=== PAUSE TestIsPrivateIP/fc00::/7_unique_local
=== RUN TestIsPrivateIP/fd00::/8_unique_local
=== PAUSE TestIsPrivateIP/fd00::/8_unique_local
=== RUN TestIsPrivateIP/fe80::/10_link-local
=== PAUSE TestIsPrivateIP/fe80::/10_link-local
=== RUN TestIsPrivateIP/Public_IPv4_1
=== PAUSE TestIsPrivateIP/Public_IPv4_1
=== RUN TestIsPrivateIP/Public_IPv4_2
=== PAUSE TestIsPrivateIP/Public_IPv4_2
=== RUN TestIsPrivateIP/Public_IPv4_3
=== PAUSE TestIsPrivateIP/Public_IPv4_3
=== RUN TestIsPrivateIP/Public_IPv6
=== PAUSE TestIsPrivateIP/Public_IPv6
=== RUN TestIsPrivateIP/Just_outside_172.16
=== PAUSE TestIsPrivateIP/Just_outside_172.16
=== RUN TestIsPrivateIP/Just_outside_172.31
=== PAUSE TestIsPrivateIP/Just_outside_172.31
=== RUN TestIsPrivateIP/Just_outside_192.168
=== PAUSE TestIsPrivateIP/Just_outside_192.168
=== CONT TestNewInternalServiceHTTPClient_ActualRequest
--- PASS: TestNewInternalServiceHTTPClient_PostRequest (0.00s)
=== CONT TestNewInternalServiceHTTPClient_CheckRedirectReturnsErrUseLastResponse
=== CONT TestNewInternalServiceHTTPClient_MultipleClients
--- PASS: TestNewInternalServiceHTTPClient_CheckRedirectReturnsErrUseLastResponse (0.00s)
=== CONT TestNewInternalServiceHTTPClient
--- PASS: TestNewInternalServiceHTTPClient_MultipleClients (0.00s)
--- PASS: TestNewInternalServiceHTTPClient_ActualRequest (0.00s)
=== RUN TestNewInternalServiceHTTPClient/with_1_second_timeout
=== CONT TestNewInternalServiceHTTPClient_TransportConfiguration
=== PAUSE TestNewInternalServiceHTTPClient/with_1_second_timeout
--- PASS: TestNewInternalServiceHTTPClient_TransportConfiguration (0.00s)
=== RUN TestNewInternalServiceHTTPClient/with_5_second_timeout
=== CONT TestIsPrivateIP_IPv4MappedIPv6
=== PAUSE TestNewInternalServiceHTTPClient/with_5_second_timeout
=== RUN TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_private
=== RUN TestNewInternalServiceHTTPClient/with_30_second_timeout
=== PAUSE TestNewInternalServiceHTTPClient/with_30_second_timeout
=== PAUSE TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_private
=== RUN TestNewInternalServiceHTTPClient/with_100ms_timeout
=== PAUSE TestNewInternalServiceHTTPClient/with_100ms_timeout
=== RUN TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_public
=== PAUSE TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_public
=== RUN TestNewInternalServiceHTTPClient/with_zero_timeout
=== RUN TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_loopback
=== PAUSE TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_loopback
=== CONT TestValidateRedirectTarget_DNSFailure
=== PAUSE TestNewInternalServiceHTTPClient/with_zero_timeout
=== CONT TestValidateRedirectTarget_PrivateIPInRedirect
=== RUN TestValidateRedirectTarget_PrivateIPInRedirect/http://10.0.0.1/path
=== PAUSE TestValidateRedirectTarget_PrivateIPInRedirect/http://10.0.0.1/path
=== RUN TestValidateRedirectTarget_PrivateIPInRedirect/http://172.16.0.1/path
=== PAUSE TestValidateRedirectTarget_PrivateIPInRedirect/http://172.16.0.1/path
=== RUN TestValidateRedirectTarget_PrivateIPInRedirect/http://192.168.1.1/path
=== PAUSE TestValidateRedirectTarget_PrivateIPInRedirect/http://192.168.1.1/path
=== RUN TestValidateRedirectTarget_PrivateIPInRedirect/http://169.254.169.254/latest/meta-data/
=== PAUSE TestValidateRedirectTarget_PrivateIPInRedirect/http://169.254.169.254/latest/meta-data/
=== CONT TestIsPrivateIP_Unspecified
=== RUN TestIsPrivateIP_Unspecified/IPv4_unspecified
=== PAUSE TestIsPrivateIP_Unspecified/IPv4_unspecified
=== RUN TestIsPrivateIP_Unspecified/IPv6_unspecified
=== PAUSE TestIsPrivateIP_Unspecified/IPv6_unspecified
=== CONT TestIsPrivateIP_Multicast
=== RUN TestIsPrivateIP_Multicast/IPv4_multicast
=== PAUSE TestIsPrivateIP_Multicast/IPv4_multicast
=== RUN TestIsPrivateIP_Multicast/IPv6_multicast
=== PAUSE TestIsPrivateIP_Multicast/IPv6_multicast
=== CONT TestNewSafeHTTPClient_NoRedirectsByDefault
--- PASS: TestValidateRedirectTarget_DNSFailure (0.00s)
=== CONT TestValidateRedirectTarget_IPv6Loopback
--- PASS: TestValidateRedirectTarget_IPv6Loopback (0.00s)
=== CONT TestValidateRedirectTarget_127
--- PASS: TestValidateRedirectTarget_127 (0.00s)
=== CONT TestValidateRedirectTarget_EmptyHostname
--- PASS: TestValidateRedirectTarget_EmptyHostname (0.00s)
=== CONT TestValidateRedirectTarget_Localhost
--- PASS: TestValidateRedirectTarget_Localhost (0.00s)
=== CONT TestValidateRedirectTarget_AllowedLocalhost/http://127.0.0.1/path
=== CONT TestValidateRedirectTarget_AllowedLocalhost/http://[::1]/path
=== CONT TestValidateRedirectTarget_AllowedLocalhost/http://localhost/path
--- PASS: TestValidateRedirectTarget_AllowedLocalhost (0.00s)
--- PASS: TestValidateRedirectTarget_AllowedLocalhost/http://127.0.0.1/path (0.00s)
--- PASS: TestValidateRedirectTarget_AllowedLocalhost/http://[::1]/path (0.00s)
--- PASS: TestValidateRedirectTarget_AllowedLocalhost/http://localhost/path (0.00s)
=== CONT TestSafeDialer_AllIPsPrivate/10.0.0.1:80
=== CONT TestSafeDialer_AllIPsPrivate/169.254.169.254:80
--- PASS: TestNewSafeHTTPClient_NoRedirectsByDefault (0.00s)
=== CONT TestSafeDialer_AllIPsPrivate/192.168.0.1:8080
=== CONT TestSafeDialer_AllIPsPrivate/172.16.0.1:443
=== CONT TestNewSafeHTTPClient_BlocksSSRF/http://192.168.1.1/
=== CONT TestNewSafeHTTPClient_BlocksSSRF/http://127.0.0.1/
--- PASS: TestSafeDialer_AllIPsPrivate (0.00s)
--- PASS: TestSafeDialer_AllIPsPrivate/10.0.0.1:80 (0.00s)
--- PASS: TestSafeDialer_AllIPsPrivate/169.254.169.254:80 (0.00s)
--- PASS: TestSafeDialer_AllIPsPrivate/192.168.0.1:8080 (0.00s)
--- PASS: TestSafeDialer_AllIPsPrivate/172.16.0.1:443 (0.00s)
=== CONT TestNewSafeHTTPClient_BlocksSSRF/http://10.0.0.1/
=== CONT TestNewSafeHTTPClient_BlocksSSRF/http://localhost/
=== CONT TestNewSafeHTTPClient_BlocksSSRF/http://172.16.0.1/
=== CONT TestIsPrivateIP/10.0.0.0/8_start
=== CONT TestIsPrivateIP/Just_outside_192.168
=== CONT TestIsPrivateIP/Just_outside_172.16
=== CONT TestIsPrivateIP/240.0.0.0/4_reserved
--- PASS: TestNewSafeHTTPClient_BlocksSSRF (0.00s)
--- PASS: TestNewSafeHTTPClient_BlocksSSRF/http://127.0.0.1/ (0.00s)
--- PASS: TestNewSafeHTTPClient_BlocksSSRF/http://192.168.1.1/ (0.00s)
--- PASS: TestNewSafeHTTPClient_BlocksSSRF/http://10.0.0.1/ (0.00s)
--- PASS: TestNewSafeHTTPClient_BlocksSSRF/http://localhost/ (0.00s)
--- PASS: TestNewSafeHTTPClient_BlocksSSRF/http://172.16.0.1/ (0.00s)
=== CONT TestIsPrivateIP/Just_outside_172.31
=== CONT TestIsPrivateIP/Public_IPv6
=== CONT TestIsPrivateIP/Public_IPv4_2
=== CONT TestIsPrivateIP/Public_IPv4_3
=== CONT TestIsPrivateIP/fe80::/10_link-local
=== CONT TestIsPrivateIP/fd00::/8_unique_local
=== CONT TestIsPrivateIP/fc00::/7_unique_local
=== CONT TestIsPrivateIP/Public_IPv4_1
=== CONT TestIsPrivateIP/IPv6_loopback
=== CONT TestIsPrivateIP/255.255.255.255_broadcast
=== CONT TestIsPrivateIP/169.254.0.0/16_start
=== CONT TestIsPrivateIP/127.0.0.0/8_end
=== CONT TestIsPrivateIP/127.0.0.0/8_localhost
=== CONT TestIsPrivateIP/0.0.0.0/8
=== CONT TestIsPrivateIP/169.254.0.0/16_end
=== CONT TestIsPrivateIP/127.0.0.0/8_other
=== CONT TestIsPrivateIP/192.168.0.0/16_end
=== CONT TestIsPrivateIP/172.16.0.0/12_start
=== CONT TestIsPrivateIP/192.168.0.0/16_start
=== CONT TestIsPrivateIP/172.16.0.0/12_end
=== CONT TestIsPrivateIP/10.0.0.0/8_middle
=== CONT TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_loopback
=== CONT TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_public
=== CONT TestNewInternalServiceHTTPClient/with_1_second_timeout
=== CONT TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_private
=== CONT TestNewInternalServiceHTTPClient/with_zero_timeout
=== CONT TestNewInternalServiceHTTPClient/with_100ms_timeout
=== CONT TestNewInternalServiceHTTPClient/with_30_second_timeout
--- PASS: TestIsPrivateIP (0.00s)
--- PASS: TestIsPrivateIP/10.0.0.0/8_start (0.00s)
--- PASS: TestIsPrivateIP/Just_outside_172.16 (0.00s)
--- PASS: TestIsPrivateIP/240.0.0.0/4_reserved (0.00s)
--- PASS: TestIsPrivateIP/Just_outside_172.31 (0.00s)
--- PASS: TestIsPrivateIP/Just_outside_192.168 (0.00s)
--- PASS: TestIsPrivateIP/Public_IPv6 (0.00s)
--- PASS: TestIsPrivateIP/Public_IPv4_2 (0.00s)
--- PASS: TestIsPrivateIP/Public_IPv4_3 (0.00s)
--- PASS: TestIsPrivateIP/fe80::/10_link-local (0.00s)
--- PASS: TestIsPrivateIP/fd00::/8_unique_local (0.00s)
--- PASS: TestIsPrivateIP/fc00::/7_unique_local (0.00s)
--- PASS: TestIsPrivateIP/IPv6_loopback (0.00s)
--- PASS: TestIsPrivateIP/255.255.255.255_broadcast (0.00s)
--- PASS: TestIsPrivateIP/Public_IPv4_1 (0.00s)
--- PASS: TestIsPrivateIP/169.254.0.0/16_start (0.00s)
--- PASS: TestIsPrivateIP/127.0.0.0/8_localhost (0.00s)
--- PASS: TestIsPrivateIP/169.254.0.0/16_end (0.00s)
--- PASS: TestIsPrivateIP/0.0.0.0/8 (0.00s)
--- PASS: TestIsPrivateIP/192.168.0.0/16_start (0.00s)
--- PASS: TestIsPrivateIP/192.168.0.0/16_end (0.00s)
--- PASS: TestIsPrivateIP/127.0.0.0/8_end (0.00s)
--- PASS: TestIsPrivateIP/172.16.0.0/12_start (0.00s)
--- PASS: TestIsPrivateIP/10.0.0.0/8_middle (0.00s)
--- PASS: TestIsPrivateIP/172.16.0.0/12_end (0.00s)
--- PASS: TestIsPrivateIP/127.0.0.0/8_other (0.00s)
=== CONT TestValidateRedirectTarget_PrivateIPInRedirect/http://192.168.1.1/path
--- PASS: TestIsPrivateIP_IPv4MappedIPv6 (0.00s)
--- PASS: TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_loopback (0.00s)
--- PASS: TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_public (0.00s)
--- PASS: TestIsPrivateIP_IPv4MappedIPv6/IPv4-mapped_private (0.00s)
=== CONT TestNewInternalServiceHTTPClient/with_5_second_timeout
--- PASS: TestNewInternalServiceHTTPClient (0.00s)
--- PASS: TestNewInternalServiceHTTPClient/with_1_second_timeout (0.00s)
--- PASS: TestNewInternalServiceHTTPClient/with_zero_timeout (0.00s)
--- PASS: TestNewInternalServiceHTTPClient/with_30_second_timeout (0.00s)
--- PASS: TestNewInternalServiceHTTPClient/with_100ms_timeout (0.00s)
--- PASS: TestNewInternalServiceHTTPClient/with_5_second_timeout (0.00s)
=== CONT TestValidateRedirectTarget_PrivateIPInRedirect/http://10.0.0.1/path
=== CONT TestIsPrivateIP_Unspecified/IPv4_unspecified
=== CONT TestIsPrivateIP_Unspecified/IPv6_unspecified
=== CONT TestIsPrivateIP_Multicast/IPv6_multicast
=== CONT TestValidateRedirectTarget_PrivateIPInRedirect/http://172.16.0.1/path
--- PASS: TestIsPrivateIP_Unspecified (0.00s)
--- PASS: TestIsPrivateIP_Unspecified/IPv4_unspecified (0.00s)
--- PASS: TestIsPrivateIP_Unspecified/IPv6_unspecified (0.00s)
=== CONT TestIsPrivateIP_Multicast/IPv4_multicast
=== CONT TestValidateRedirectTarget_PrivateIPInRedirect/http://169.254.169.254/latest/meta-data/
--- PASS: TestValidateRedirectTarget_PrivateIPInRedirect (0.00s)
--- PASS: TestValidateRedirectTarget_PrivateIPInRedirect/http://192.168.1.1/path (0.00s)
--- PASS: TestValidateRedirectTarget_PrivateIPInRedirect/http://10.0.0.1/path (0.00s)
--- PASS: TestValidateRedirectTarget_PrivateIPInRedirect/http://172.16.0.1/path (0.00s)
--- PASS: TestValidateRedirectTarget_PrivateIPInRedirect/http://169.254.169.254/latest/meta-data/ (0.00s)
--- PASS: TestIsPrivateIP_Multicast (0.00s)
--- PASS: TestIsPrivateIP_Multicast/IPv6_multicast (0.00s)
--- PASS: TestIsPrivateIP_Multicast/IPv4_multicast (0.00s)
=== NAME TestSafeDialer_AllowedDomains
safeclient_test.go:171: Got expected error type for allowed domain: *fmt.wrapError: DNS resolution failed for app.crowdsec.net: lookup app.crowdsec.net: i/o timeout
--- PASS: TestSafeDialer_AllowedDomains (0.10s)
--- PASS: TestNewInternalServiceHTTPClient_TimeoutEnforced (0.50s)
PASS
coverage: 81.3% of statements
ok github.com/Wikid82/charon/backend/internal/network (cached) coverage: 81.3% of statements
=== RUN TestAuditEvent_JSONSerialization
=== PAUSE TestAuditEvent_JSONSerialization
=== RUN TestAuditLogger_LogURLValidation
=== PAUSE TestAuditLogger_LogURLValidation
=== RUN TestAuditLogger_LogURLTest
=== PAUSE TestAuditLogger_LogURLTest
=== RUN TestAuditLogger_LogSSRFBlock
=== PAUSE TestAuditLogger_LogSSRFBlock
=== RUN TestGlobalAuditLogger
=== PAUSE TestGlobalAuditLogger
=== RUN TestAuditEvent_RequiredFields
=== PAUSE TestAuditEvent_RequiredFields
=== RUN TestAuditLogger_TimestampFormat
=== PAUSE TestAuditLogger_TimestampFormat
=== RUN TestParseExactHostnameAllowlist
--- PASS: TestParseExactHostnameAllowlist (0.00s)
=== RUN TestValidateInternalServiceBaseURL
=== RUN TestValidateInternalServiceBaseURL/OK_http_localhost_explicit_port
=== RUN TestValidateInternalServiceBaseURL/OK_http_localhost_path_normalized
=== RUN TestValidateInternalServiceBaseURL/OK_https_localhost_default_port
=== RUN TestValidateInternalServiceBaseURL/OK_ipv6_loopback_explicit_port
=== RUN TestValidateInternalServiceBaseURL/Reject_userinfo
=== RUN TestValidateInternalServiceBaseURL/Reject_unsupported_scheme
=== RUN TestValidateInternalServiceBaseURL/Reject_missing_hostname
=== RUN TestValidateInternalServiceBaseURL/Reject_hostname_not_allowed
=== RUN TestValidateInternalServiceBaseURL/Reject_unexpected_port_when_omitted
=== RUN TestValidateInternalServiceBaseURL/Reject_invalid_port
=== RUN TestValidateInternalServiceBaseURL/Reject_out-of-range_port
--- PASS: TestValidateInternalServiceBaseURL (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/OK_http_localhost_explicit_port (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/OK_http_localhost_path_normalized (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/OK_https_localhost_default_port (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/OK_ipv6_loopback_explicit_port (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/Reject_userinfo (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/Reject_unsupported_scheme (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/Reject_missing_hostname (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/Reject_hostname_not_allowed (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/Reject_unexpected_port_when_omitted (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/Reject_invalid_port (0.00s)
--- PASS: TestValidateInternalServiceBaseURL/Reject_out-of-range_port (0.00s)
=== RUN TestInternalServiceHostAllowlist
=== RUN TestInternalServiceHostAllowlist/DefaultLocalhostOnly
=== RUN TestInternalServiceHostAllowlist/WithAdditionalHosts
=== RUN TestInternalServiceHostAllowlist/WithEmptyAndWhitespaceEntries
=== RUN TestInternalServiceHostAllowlist/WithInvalidEntries
--- PASS: TestInternalServiceHostAllowlist (0.00s)
--- PASS: TestInternalServiceHostAllowlist/DefaultLocalhostOnly (0.00s)
--- PASS: TestInternalServiceHostAllowlist/WithAdditionalHosts (0.00s)
--- PASS: TestInternalServiceHostAllowlist/WithEmptyAndWhitespaceEntries (0.00s)
--- PASS: TestInternalServiceHostAllowlist/WithInvalidEntries (0.00s)
=== RUN TestWithMaxRedirects
=== RUN TestWithMaxRedirects/Zero_redirects
=== RUN TestWithMaxRedirects/Five_redirects
=== RUN TestWithMaxRedirects/Ten_redirects
--- PASS: TestWithMaxRedirects (0.00s)
--- PASS: TestWithMaxRedirects/Zero_redirects (0.00s)
--- PASS: TestWithMaxRedirects/Five_redirects (0.00s)
--- PASS: TestWithMaxRedirects/Ten_redirects (0.00s)
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/HTTPSWithDefaultPort
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/HTTPWithDefaultPort
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/PortMismatchWithDefaultHTTPS
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/PortMismatchWithDefaultHTTP
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/InvalidPortNumber
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/NegativePort
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/HostNotInAllowlist
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/EmptyAllowlist
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/CaseInsensitiveHostMatching
=== RUN TestValidateInternalServiceBaseURL_AdditionalCases/AllowedHostDifferentCase
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/HTTPSWithDefaultPort (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/HTTPWithDefaultPort (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/PortMismatchWithDefaultHTTPS (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/PortMismatchWithDefaultHTTP (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/InvalidPortNumber (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/NegativePort (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/HostNotInAllowlist (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/EmptyAllowlist (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/CaseInsensitiveHostMatching (0.00s)
--- PASS: TestValidateInternalServiceBaseURL_AdditionalCases/AllowedHostDifferentCase (0.00s)
=== RUN TestSanitizeIPForError_AdditionalCases
=== RUN TestSanitizeIPForError_AdditionalCases/InvalidIPString
=== RUN TestSanitizeIPForError_AdditionalCases/EmptyString
=== RUN TestSanitizeIPForError_AdditionalCases/IPv4Malformed
=== RUN TestSanitizeIPForError_AdditionalCases/IPv6SingleSegment
=== RUN TestSanitizeIPForError_AdditionalCases/IPv6MultipleSegments
=== RUN TestSanitizeIPForError_AdditionalCases/IPv6Compressed
=== RUN TestSanitizeIPForError_AdditionalCases/IPv4ThreeOctets
=== RUN TestSanitizeIPForError_AdditionalCases/IPv4FiveOctets
--- PASS: TestSanitizeIPForError_AdditionalCases (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/InvalidIPString (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/EmptyString (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/IPv4Malformed (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/IPv6SingleSegment (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/IPv6MultipleSegments (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/IPv6Compressed (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/IPv4ThreeOctets (0.00s)
--- PASS: TestSanitizeIPForError_AdditionalCases/IPv4FiveOctets (0.00s)
=== RUN TestValidateExternalURL_BasicValidation
=== PAUSE TestValidateExternalURL_BasicValidation
=== RUN TestValidateExternalURL_LocalhostHandling
=== PAUSE TestValidateExternalURL_LocalhostHandling
=== RUN TestValidateExternalURL_PrivateIPBlocking
=== PAUSE TestValidateExternalURL_PrivateIPBlocking
=== RUN TestValidateExternalURL_Options
=== PAUSE TestValidateExternalURL_Options
=== RUN TestIsPrivateIP
=== PAUSE TestIsPrivateIP
=== RUN TestValidateExternalURL_RealWorldURLs
=== PAUSE TestValidateExternalURL_RealWorldURLs
=== RUN TestValidateExternalURL_MultipleOptions
=== PAUSE TestValidateExternalURL_MultipleOptions
=== RUN TestValidateExternalURL_CustomTimeout
=== PAUSE TestValidateExternalURL_CustomTimeout
=== RUN TestValidateExternalURL_DNSTimeout
=== PAUSE TestValidateExternalURL_DNSTimeout
=== RUN TestValidateExternalURL_MultipleIPsAllPrivate
=== PAUSE TestValidateExternalURL_MultipleIPsAllPrivate
=== RUN TestValidateExternalURL_CloudMetadataDetection
=== PAUSE TestValidateExternalURL_CloudMetadataDetection
=== RUN TestIsPrivateIP_IPv6Comprehensive
=== PAUSE TestIsPrivateIP_IPv6Comprehensive
=== RUN TestIPv4MappedIPv6Detection
=== PAUSE TestIPv4MappedIPv6Detection
=== RUN TestValidateExternalURL_IPv4MappedIPv6Blocking
=== PAUSE TestValidateExternalURL_IPv4MappedIPv6Blocking
=== RUN TestValidateExternalURL_HostnameValidation
=== PAUSE TestValidateExternalURL_HostnameValidation
=== RUN TestValidateExternalURL_PortValidation
=== PAUSE TestValidateExternalURL_PortValidation
=== RUN TestSanitizeIPForError
=== PAUSE TestSanitizeIPForError
=== RUN TestParsePort
=== PAUSE TestParsePort
=== RUN TestValidateExternalURL_EdgeCases
=== PAUSE TestValidateExternalURL_EdgeCases
=== RUN TestIsIPv4MappedIPv6_EdgeCases
=== PAUSE TestIsIPv4MappedIPv6_EdgeCases
=== CONT TestAuditEvent_JSONSerialization
=== CONT TestValidateExternalURL_EdgeCases
=== RUN TestValidateExternalURL_EdgeCases/Port_with_non-numeric_characters
=== CONT TestIsIPv4MappedIPv6_EdgeCases
=== RUN TestIsIPv4MappedIPv6_EdgeCases/Standard_mapped
=== PAUSE TestIsIPv4MappedIPv6_EdgeCases/Standard_mapped
=== RUN TestIsIPv4MappedIPv6_EdgeCases/Mapped_public_IP
=== PAUSE TestValidateExternalURL_EdgeCases/Port_with_non-numeric_characters
=== RUN TestValidateExternalURL_EdgeCases/Maximum_valid_port
=== PAUSE TestIsIPv4MappedIPv6_EdgeCases/Mapped_public_IP
=== PAUSE TestValidateExternalURL_EdgeCases/Maximum_valid_port
=== RUN TestIsIPv4MappedIPv6_EdgeCases/Pure_IPv6_2001:db8
=== PAUSE TestIsIPv4MappedIPv6_EdgeCases/Pure_IPv6_2001:db8
=== RUN TestIsIPv4MappedIPv6_EdgeCases/IPv6_loopback
--- PASS: TestAuditEvent_JSONSerialization (0.00s)
=== RUN TestValidateExternalURL_EdgeCases/Port_1_(privileged_but_not_blocked_with_AllowLocalhost)
=== CONT TestParsePort
=== CONT TestValidateExternalURL_Options
=== PAUSE TestValidateExternalURL_EdgeCases/Port_1_(privileged_but_not_blocked_with_AllowLocalhost)
=== RUN TestValidateExternalURL_Options/WithTimeout
=== RUN TestValidateExternalURL_EdgeCases/Port_1023_(edge_of_privileged_range)
=== PAUSE TestValidateExternalURL_Options/WithTimeout
=== PAUSE TestValidateExternalURL_EdgeCases/Port_1023_(edge_of_privileged_range)
=== RUN TestValidateExternalURL_EdgeCases/Port_1024_(first_non-privileged)
=== RUN TestParsePort/Valid_port_80
=== RUN TestValidateExternalURL_Options/Multiple_options
=== PAUSE TestParsePort/Valid_port_80
=== PAUSE TestIsIPv4MappedIPv6_EdgeCases/IPv6_loopback
=== PAUSE TestValidateExternalURL_EdgeCases/Port_1024_(first_non-privileged)
=== RUN TestIsIPv4MappedIPv6_EdgeCases/All_zeros_except_prefix
=== RUN TestValidateExternalURL_EdgeCases/URL_with_username_only
=== PAUSE TestIsIPv4MappedIPv6_EdgeCases/All_zeros_except_prefix
=== PAUSE TestValidateExternalURL_Options/Multiple_options
=== RUN TestIsIPv4MappedIPv6_EdgeCases/All_ones
=== PAUSE TestValidateExternalURL_EdgeCases/URL_with_username_only
=== RUN TestParsePort/Valid_port_443
=== PAUSE TestIsIPv4MappedIPv6_EdgeCases/All_ones
=== CONT TestSanitizeIPForError
=== RUN TestSanitizeIPForError/Private_IPv4_192.168
=== PAUSE TestParsePort/Valid_port_443
=== RUN TestValidateExternalURL_EdgeCases/Hostname_with_single_dot
=== CONT TestValidateExternalURL_HostnameValidation
=== PAUSE TestValidateExternalURL_EdgeCases/Hostname_with_single_dot
=== PAUSE TestSanitizeIPForError/Private_IPv4_192.168
=== RUN TestParsePort/Valid_port_8080
=== RUN TestValidateExternalURL_HostnameValidation/Extremely_long_hostname_(254_chars)
=== RUN TestValidateExternalURL_EdgeCases/Triple_dots_in_hostname
=== RUN TestSanitizeIPForError/Private_IPv4_10.x
=== PAUSE TestParsePort/Valid_port_8080
=== PAUSE TestValidateExternalURL_EdgeCases/Triple_dots_in_hostname
=== RUN TestParsePort/Valid_port_65535
=== PAUSE TestSanitizeIPForError/Private_IPv4_10.x
=== PAUSE TestValidateExternalURL_HostnameValidation/Extremely_long_hostname_(254_chars)
=== RUN TestValidateExternalURL_EdgeCases/Hostname_at_252_chars_(just_under_limit)
=== RUN TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots
=== RUN TestSanitizeIPForError/Private_IPv4_172.16
=== PAUSE TestValidateExternalURL_EdgeCases/Hostname_at_252_chars_(just_under_limit)
=== PAUSE TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots
=== CONT TestValidateExternalURL_IPv4MappedIPv6Blocking
url_validator_test.go:707: DNS resolution of IPv4-mapped IPv6 not testable without custom DNS server
=== PAUSE TestSanitizeIPForError/Private_IPv4_172.16
=== PAUSE TestParsePort/Valid_port_65535
=== RUN TestParsePort/Empty_port
=== RUN TestSanitizeIPForError/Loopback_IPv4
=== PAUSE TestParsePort/Empty_port
=== RUN TestParsePort/Non-numeric_port
=== PAUSE TestSanitizeIPForError/Loopback_IPv4
=== PAUSE TestParsePort/Non-numeric_port
--- SKIP: TestValidateExternalURL_IPv4MappedIPv6Blocking (0.00s)
=== CONT TestIPv4MappedIPv6Detection
=== RUN TestIPv4MappedIPv6Detection/IPv4-mapped_loopback
=== RUN TestParsePort/Negative_port
=== PAUSE TestIPv4MappedIPv6Detection/IPv4-mapped_loopback
=== RUN TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots_mid
=== PAUSE TestParsePort/Negative_port
=== RUN TestSanitizeIPForError/Metadata_IPv4
=== PAUSE TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots_mid
=== PAUSE TestSanitizeIPForError/Metadata_IPv4
=== CONT TestValidateExternalURL_PortValidation
=== RUN TestValidateExternalURL_PortValidation/Port_80_(standard_HTTP)_-_should_allow
=== RUN TestIPv4MappedIPv6Detection/IPv4-mapped_private_10.x
=== RUN TestParsePort/Port_zero
=== PAUSE TestValidateExternalURL_PortValidation/Port_80_(standard_HTTP)_-_should_allow
=== RUN TestSanitizeIPForError/IPv6_link-local
=== PAUSE TestParsePort/Port_zero
=== RUN TestValidateExternalURL_PortValidation/Port_443_(standard_HTTPS)_-_should_allow
=== CONT TestValidateExternalURL_CloudMetadataDetection
=== PAUSE TestValidateExternalURL_PortValidation/Port_443_(standard_HTTPS)_-_should_allow
=== RUN TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_service
=== PAUSE TestSanitizeIPForError/IPv6_link-local
=== PAUSE TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_service
=== RUN TestSanitizeIPForError/IPv6_unique_local
=== PAUSE TestSanitizeIPForError/IPv6_unique_local
=== RUN TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_IPv6
=== RUN TestValidateExternalURL_PortValidation/Port_22_(SSH)_-_should_block
=== PAUSE TestValidateExternalURL_PortValidation/Port_22_(SSH)_-_should_block
=== PAUSE TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_IPv6
=== RUN TestValidateExternalURL_PortValidation/Port_25_(SMTP)_-_should_block
=== RUN TestValidateExternalURL_CloudMetadataDetection/GCP_metadata_service
=== RUN TestSanitizeIPForError/Invalid_IP
=== PAUSE TestValidateExternalURL_CloudMetadataDetection/GCP_metadata_service
=== RUN TestValidateExternalURL_CloudMetadataDetection/Azure_metadata_service
=== PAUSE TestValidateExternalURL_PortValidation/Port_25_(SMTP)_-_should_block
=== RUN TestValidateExternalURL_PortValidation/Port_3306_(MySQL)_-_should_block_if_<_1024
=== PAUSE TestValidateExternalURL_CloudMetadataDetection/Azure_metadata_service
=== CONT TestValidateExternalURL_MultipleIPsAllPrivate
=== PAUSE TestSanitizeIPForError/Invalid_IP
=== PAUSE TestValidateExternalURL_PortValidation/Port_3306_(MySQL)_-_should_block_if_<_1024
=== RUN TestValidateExternalURL_MultipleIPsAllPrivate/IP_10.0.0.1
=== RUN TestValidateExternalURL_PortValidation/Port_8080_(non-privileged)_-_should_allow
=== CONT TestValidateExternalURL_DNSTimeout
=== PAUSE TestValidateExternalURL_PortValidation/Port_8080_(non-privileged)_-_should_allow
=== RUN TestValidateExternalURL_PortValidation/Port_22_with_AllowLocalhost_-_should_allow
=== PAUSE TestValidateExternalURL_PortValidation/Port_22_with_AllowLocalhost_-_should_allow
=== RUN TestValidateExternalURL_PortValidation/Port_0_-_should_block
=== PAUSE TestValidateExternalURL_PortValidation/Port_0_-_should_block
=== RUN TestValidateExternalURL_PortValidation/Port_65536_-_should_block
=== PAUSE TestValidateExternalURL_PortValidation/Port_65536_-_should_block
=== CONT TestIsPrivateIP_IPv6Comprehensive
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback_expanded
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback_expanded
=== NAME TestValidateExternalURL_DNSTimeout
url_validator_test.go:527: Got acceptable error: connection to private ip addresses is blocked for security (detected IPv4-mapped IPv6: 10.255.255.1)
--- PASS: TestValidateExternalURL_DNSTimeout (0.00s)
=== PAUSE TestValidateExternalURL_MultipleIPsAllPrivate/IP_10.0.0.1
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_start
=== RUN TestValidateExternalURL_MultipleIPsAllPrivate/IP_172.16.0.1
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_start
=== CONT TestValidateExternalURL_MultipleOptions
=== PAUSE TestValidateExternalURL_MultipleIPsAllPrivate/IP_172.16.0.1
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_mid
=== RUN TestValidateExternalURL_MultipleIPsAllPrivate/IP_192.168.1.1
=== PAUSE TestValidateExternalURL_MultipleIPsAllPrivate/IP_192.168.1.1
=== RUN TestValidateExternalURL_MultipleOptions/All_options_enabled
=== CONT TestValidateExternalURL_CustomTimeout
=== PAUSE TestValidateExternalURL_MultipleOptions/All_options_enabled
=== RUN TestValidateExternalURL_MultipleOptions/Custom_timeout_with_HTTPS
=== PAUSE TestValidateExternalURL_MultipleOptions/Custom_timeout_with_HTTPS
=== RUN TestValidateExternalURL_CustomTimeout/Very_short_timeout
=== PAUSE TestValidateExternalURL_CustomTimeout/Very_short_timeout
=== RUN TestValidateExternalURL_CustomTimeout/Standard_timeout
=== RUN TestValidateExternalURL_MultipleOptions/HTTP_without_AllowHTTP_fails
=== PAUSE TestIPv4MappedIPv6Detection/IPv4-mapped_private_10.x
=== PAUSE TestValidateExternalURL_CustomTimeout/Standard_timeout
=== RUN TestValidateExternalURL_CustomTimeout/Long_timeout
=== RUN TestIPv4MappedIPv6Detection/IPv4-mapped_private_192.168
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_mid
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_end
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_end
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fc00
=== PAUSE TestValidateExternalURL_MultipleOptions/HTTP_without_AllowHTTP_fails
=== PAUSE TestValidateExternalURL_CustomTimeout/Long_timeout
=== PAUSE TestIPv4MappedIPv6Detection/IPv4-mapped_private_192.168
=== RUN TestValidateExternalURL_MultipleOptions/Localhost_without_AllowLocalhost_fails
=== RUN TestIPv4MappedIPv6Detection/IPv4-mapped_metadata
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fc00
=== PAUSE TestValidateExternalURL_MultipleOptions/Localhost_without_AllowLocalhost_fails
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd00
=== CONT TestValidateExternalURL_RealWorldURLs
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd00
=== CONT TestValidateExternalURL_PrivateIPBlocking
=== PAUSE TestIPv4MappedIPv6Detection/IPv4-mapped_metadata
=== RUN TestIPv4MappedIPv6Detection/IPv4-mapped_public
=== RUN TestValidateExternalURL_PrivateIPBlocking/Private_IP_10.x.x.x
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd12
=== PAUSE TestIPv4MappedIPv6Detection/IPv4-mapped_public
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd12
=== RUN TestIPv4MappedIPv6Detection/Regular_IPv6_loopback
=== RUN TestValidateExternalURL_RealWorldURLs/Slack_webhook_format
=== PAUSE TestIPv4MappedIPv6Detection/Regular_IPv6_loopback
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fdff
=== RUN TestIPv4MappedIPv6Detection/Regular_IPv6_link-local
=== PAUSE TestValidateExternalURL_RealWorldURLs/Slack_webhook_format
=== RUN TestValidateExternalURL_RealWorldURLs/Discord_webhook_format
=== PAUSE TestIPv4MappedIPv6Detection/Regular_IPv6_link-local
=== PAUSE TestValidateExternalURL_PrivateIPBlocking/Private_IP_10.x.x.x
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fdff
=== PAUSE TestValidateExternalURL_RealWorldURLs/Discord_webhook_format
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_Google_DNS
=== RUN TestValidateExternalURL_RealWorldURLs/Generic_API_endpoint
=== RUN TestValidateExternalURL_PrivateIPBlocking/Private_IP_192.168.x.x
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_Google_DNS
=== PAUSE TestValidateExternalURL_RealWorldURLs/Generic_API_endpoint
=== PAUSE TestValidateExternalURL_PrivateIPBlocking/Private_IP_192.168.x.x
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_Cloudflare_DNS
=== RUN TestIPv4MappedIPv6Detection/Regular_IPv6_public
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_Cloudflare_DNS
=== RUN TestValidateExternalURL_RealWorldURLs/Localhost_for_testing
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_documentation_range
=== PAUSE TestIPv4MappedIPv6Detection/Regular_IPv6_public
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_documentation_range
=== CONT TestValidateExternalURL_LocalhostHandling
=== PAUSE TestValidateExternalURL_RealWorldURLs/Localhost_for_testing
=== RUN TestValidateExternalURL_LocalhostHandling/Localhost_without_AllowLocalhost
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_public
=== CONT TestIsPrivateIP
=== PAUSE TestValidateExternalURL_LocalhostHandling/Localhost_without_AllowLocalhost
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_public
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_loopback
=== RUN TestIsPrivateIP/10.0.0.0
=== RUN TestValidateExternalURL_LocalhostHandling/Localhost_with_AllowLocalhost
=== PAUSE TestValidateExternalURL_LocalhostHandling/Localhost_with_AllowLocalhost
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_loopback
=== PAUSE TestIsPrivateIP/10.0.0.0
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_private
=== RUN TestValidateExternalURL_LocalhostHandling/127.0.0.1_with_AllowLocalhost_and_AllowHTTP
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_private
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unspecified
=== PAUSE TestValidateExternalURL_LocalhostHandling/127.0.0.1_with_AllowLocalhost_and_AllowHTTP
=== RUN TestIsPrivateIP/10.255.255.255
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_unspecified
=== RUN TestValidateExternalURL_PrivateIPBlocking/Private_IP_172.16.x.x
=== PAUSE TestValidateExternalURL_PrivateIPBlocking/Private_IP_172.16.x.x
=== PAUSE TestIsPrivateIP/10.255.255.255
=== RUN TestValidateExternalURL_LocalhostHandling/IPv6_loopback_with_AllowLocalhost
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_multicast
=== PAUSE TestIsPrivateIP_IPv6Comprehensive/IPv6_multicast
=== PAUSE TestValidateExternalURL_LocalhostHandling/IPv6_loopback_with_AllowLocalhost
=== RUN TestValidateExternalURL_PrivateIPBlocking/AWS_Metadata_IP
=== RUN TestIsPrivateIP/172.16.0.0
=== PAUSE TestIsPrivateIP/172.16.0.0
=== CONT TestValidateExternalURL_BasicValidation
=== RUN TestValidateExternalURL_BasicValidation/Valid_HTTPS_URL
=== CONT TestAuditEvent_RequiredFields
--- PASS: TestAuditEvent_RequiredFields (0.00s)
=== CONT TestAuditLogger_TimestampFormat
2026/01/10 02:17:13 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:13Z","action":"test","host":"test.com","request_id":"","result":"","resolved_ips":null,"blocked_reason":"","user_id":"","source_ip":""}
--- PASS: TestAuditLogger_TimestampFormat (0.00s)
=== CONT TestGlobalAuditLogger
2026/01/10 02:17:13 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:13Z","action":"url_connectivity_test","host":"test.com","request_id":"req-global","result":"allowed","resolved_ips":null,"blocked_reason":"","user_id":"user-global","source_ip":"192.0.2.10"}
2026/01/10 02:17:13 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:13Z","action":"ssrf_block","host":"blocked.local","request_id":"","result":"blocked","resolved_ips":["127.0.0.1"],"blocked_reason":"loopback","user_id":"user-global","source_ip":"198.51.100.10"}
--- PASS: TestGlobalAuditLogger (0.00s)
=== PAUSE TestValidateExternalURL_PrivateIPBlocking/AWS_Metadata_IP
=== RUN TestIsPrivateIP/172.31.255.255
=== PAUSE TestIsPrivateIP/172.31.255.255
=== PAUSE TestValidateExternalURL_BasicValidation/Valid_HTTPS_URL
=== CONT TestAuditLogger_LogURLTest
2026/01/10 02:17:13 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:13Z","action":"url_connectivity_test","host":"example.com","request_id":"req-789","result":"allowed","resolved_ips":null,"blocked_reason":"","user_id":"user456","source_ip":"192.0.2.1"}
--- PASS: TestAuditLogger_LogURLTest (0.00s)
=== RUN TestValidateExternalURL_PrivateIPBlocking/Loopback_without_AllowLocalhost
=== RUN TestIsPrivateIP/192.168.0.0
=== RUN TestValidateExternalURL_BasicValidation/HTTP_without_AllowHTTP_option
=== PAUSE TestValidateExternalURL_BasicValidation/HTTP_without_AllowHTTP_option
=== CONT TestAuditLogger_LogURLValidation
2026/01/10 02:17:13 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:13Z","action":"url_test","host":"malicious.com","request_id":"req-456","result":"blocked","resolved_ips":["169.254.169.254"],"blocked_reason":"metadata_endpoint","user_id":"attacker","source_ip":"198.51.100.1"}
2026/01/10 02:17:13 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:13Z","action":"test","host":"test.com","request_id":"","result":"","resolved_ips":null,"blocked_reason":"","user_id":"","source_ip":""}
--- PASS: TestAuditLogger_LogURLValidation (0.00s)
=== PAUSE TestValidateExternalURL_PrivateIPBlocking/Loopback_without_AllowLocalhost
=== PAUSE TestIsPrivateIP/192.168.0.0
=== RUN TestIsPrivateIP/192.168.255.255
=== PAUSE TestIsPrivateIP/192.168.255.255
=== RUN TestValidateExternalURL_BasicValidation/HTTP_with_AllowHTTP_option
=== CONT TestAuditLogger_LogSSRFBlock
2026/01/10 02:17:13 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:13Z","action":"ssrf_block","host":"internal.local","request_id":"","result":"blocked","resolved_ips":["10.0.0.1","192.168.1.1"],"blocked_reason":"private_ip","user_id":"user123","source_ip":"203.0.113.5"}
--- PASS: TestAuditLogger_LogSSRFBlock (0.00s)
=== CONT TestValidateExternalURL_Options/WithTimeout
=== CONT TestIsIPv4MappedIPv6_EdgeCases/Mapped_public_IP
=== CONT TestValidateExternalURL_Options/Multiple_options
=== CONT TestIsIPv4MappedIPv6_EdgeCases/All_zeros_except_prefix
=== RUN TestIsPrivateIP/127.0.0.1
=== PAUSE TestIsPrivateIP/127.0.0.1
=== PAUSE TestValidateExternalURL_BasicValidation/HTTP_with_AllowHTTP_option
=== RUN TestValidateExternalURL_BasicValidation/Empty_URL
--- PASS: TestValidateExternalURL_Options (0.00s)
--- PASS: TestValidateExternalURL_Options/WithTimeout (0.00s)
--- PASS: TestValidateExternalURL_Options/Multiple_options (0.00s)
=== CONT TestIsIPv4MappedIPv6_EdgeCases/All_ones
=== CONT TestIsIPv4MappedIPv6_EdgeCases/Pure_IPv6_2001:db8
=== RUN TestIsPrivateIP/127.0.0.2
=== PAUSE TestValidateExternalURL_BasicValidation/Empty_URL
=== CONT TestIsIPv4MappedIPv6_EdgeCases/Standard_mapped
=== PAUSE TestIsPrivateIP/127.0.0.2
=== RUN TestValidateExternalURL_BasicValidation/Missing_scheme
=== RUN TestIsPrivateIP/IPv6_loopback
=== CONT TestValidateExternalURL_EdgeCases/Port_with_non-numeric_characters
=== PAUSE TestValidateExternalURL_BasicValidation/Missing_scheme
=== RUN TestValidateExternalURL_BasicValidation/Just_scheme
=== PAUSE TestIsPrivateIP/IPv6_loopback
=== PAUSE TestValidateExternalURL_BasicValidation/Just_scheme
=== CONT TestIsIPv4MappedIPv6_EdgeCases/IPv6_loopback
=== RUN TestIsPrivateIP/169.254.1.1
=== PAUSE TestIsPrivateIP/169.254.1.1
=== CONT TestValidateExternalURL_EdgeCases/Hostname_at_252_chars_(just_under_limit)
=== RUN TestIsPrivateIP/AWS_metadata
=== PAUSE TestIsPrivateIP/AWS_metadata
=== RUN TestValidateExternalURL_BasicValidation/FTP_protocol
=== RUN TestIsPrivateIP/0.0.0.0
=== PAUSE TestValidateExternalURL_BasicValidation/FTP_protocol
--- PASS: TestIsIPv4MappedIPv6_EdgeCases (0.00s)
--- PASS: TestIsIPv4MappedIPv6_EdgeCases/Mapped_public_IP (0.00s)
--- PASS: TestIsIPv4MappedIPv6_EdgeCases/All_zeros_except_prefix (0.00s)
--- PASS: TestIsIPv4MappedIPv6_EdgeCases/All_ones (0.00s)
--- PASS: TestIsIPv4MappedIPv6_EdgeCases/Pure_IPv6_2001:db8 (0.00s)
--- PASS: TestIsIPv4MappedIPv6_EdgeCases/Standard_mapped (0.00s)
--- PASS: TestIsIPv4MappedIPv6_EdgeCases/IPv6_loopback (0.00s)
=== RUN TestValidateExternalURL_BasicValidation/File_protocol
=== PAUSE TestValidateExternalURL_BasicValidation/File_protocol
=== PAUSE TestIsPrivateIP/0.0.0.0
=== RUN TestValidateExternalURL_BasicValidation/Gopher_protocol
=== CONT TestValidateExternalURL_EdgeCases/Hostname_with_single_dot
=== PAUSE TestValidateExternalURL_BasicValidation/Gopher_protocol
=== RUN TestIsPrivateIP/255.255.255.255
=== RUN TestValidateExternalURL_BasicValidation/Data_URL
=== PAUSE TestIsPrivateIP/255.255.255.255
=== PAUSE TestValidateExternalURL_BasicValidation/Data_URL
=== RUN TestValidateExternalURL_BasicValidation/URL_with_credentials
=== RUN TestIsPrivateIP/240.0.0.1
=== PAUSE TestValidateExternalURL_BasicValidation/URL_with_credentials
=== PAUSE TestIsPrivateIP/240.0.0.1
=== RUN TestValidateExternalURL_BasicValidation/Valid_with_port
=== RUN TestIsPrivateIP/IPv6_unique_local
=== PAUSE TestValidateExternalURL_BasicValidation/Valid_with_port
=== PAUSE TestIsPrivateIP/IPv6_unique_local
=== RUN TestValidateExternalURL_BasicValidation/Valid_with_path
=== RUN TestIsPrivateIP/IPv6_link-local
=== PAUSE TestValidateExternalURL_BasicValidation/Valid_with_path
=== RUN TestValidateExternalURL_BasicValidation/Valid_with_query
=== PAUSE TestIsPrivateIP/IPv6_link-local
=== RUN TestIsPrivateIP/Google_DNS
=== PAUSE TestValidateExternalURL_BasicValidation/Valid_with_query
=== CONT TestValidateExternalURL_EdgeCases/URL_with_username_only
=== PAUSE TestIsPrivateIP/Google_DNS
=== RUN TestIsPrivateIP/Cloudflare_DNS
=== CONT TestValidateExternalURL_EdgeCases/Port_1024_(first_non-privileged)
=== PAUSE TestIsPrivateIP/Cloudflare_DNS
=== RUN TestIsPrivateIP/Public_IPv6
=== PAUSE TestIsPrivateIP/Public_IPv6
=== CONT TestValidateExternalURL_EdgeCases/Triple_dots_in_hostname
=== CONT TestValidateExternalURL_EdgeCases/Port_1_(privileged_but_not_blocked_with_AllowLocalhost)
=== CONT TestValidateExternalURL_EdgeCases/Maximum_valid_port
=== CONT TestValidateExternalURL_EdgeCases/Port_1023_(edge_of_privileged_range)
=== CONT TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots_mid
=== CONT TestValidateExternalURL_HostnameValidation/Extremely_long_hostname_(254_chars)
=== CONT TestParsePort/Valid_port_80
=== CONT TestParsePort/Negative_port
=== CONT TestParsePort/Port_zero
=== CONT TestParsePort/Non-numeric_port
=== CONT TestParsePort/Empty_port
=== CONT TestParsePort/Valid_port_8080
=== CONT TestParsePort/Valid_port_65535
=== CONT TestParsePort/Valid_port_443
=== CONT TestValidateExternalURL_CloudMetadataDetection/Azure_metadata_service
url_validator_test.go:600: Correctly blocked http://169.254.169.254/metadata/instance with error: connection to private ip addresses is blocked for security (detected IPv4-mapped IPv6: 169.254.169.254)
=== CONT TestValidateExternalURL_CloudMetadataDetection/GCP_metadata_service
=== CONT TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_IPv6
--- PASS: TestParsePort (0.00s)
--- PASS: TestParsePort/Valid_port_80 (0.00s)
--- PASS: TestParsePort/Negative_port (0.00s)
--- PASS: TestParsePort/Port_zero (0.00s)
--- PASS: TestParsePort/Non-numeric_port (0.00s)
--- PASS: TestParsePort/Valid_port_8080 (0.00s)
--- PASS: TestParsePort/Valid_port_65535 (0.00s)
--- PASS: TestParsePort/Valid_port_443 (0.00s)
--- PASS: TestParsePort/Empty_port (0.00s)
=== NAME TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_IPv6
url_validator_test.go:600: Correctly blocked http://[fd00:ec2::254]/latest/meta-data/ with error: connection to private ip addresses is blocked for security (detected: fd00::)
=== CONT TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_service
url_validator_test.go:600: Correctly blocked http://169.254.169.254/latest/meta-data/ with error: connection to private ip addresses is blocked for security (detected IPv4-mapped IPv6: 169.254.169.254)
=== CONT TestSanitizeIPForError/Private_IPv4_192.168
=== CONT TestValidateExternalURL_PortValidation/Port_80_(standard_HTTP)_-_should_allow
=== NAME TestValidateExternalURL_CloudMetadataDetection/GCP_metadata_service
url_validator_test.go:600: Correctly blocked http://metadata.google.internal/computeMetadata/v1/ with error: dns resolution failed for metadata.google.internal: lookup metadata.google.internal on 127.0.0.53:53: no such host
=== CONT TestValidateExternalURL_PortValidation/Port_0_-_should_block
=== CONT TestValidateExternalURL_PortValidation/Port_22_with_AllowLocalhost_-_should_allow
=== CONT TestValidateExternalURL_PortValidation/Port_65536_-_should_block
--- PASS: TestValidateExternalURL_CloudMetadataDetection (0.00s)
--- PASS: TestValidateExternalURL_CloudMetadataDetection/Azure_metadata_service (0.00s)
--- PASS: TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_IPv6 (0.00s)
--- PASS: TestValidateExternalURL_CloudMetadataDetection/AWS_metadata_service (0.00s)
--- PASS: TestValidateExternalURL_CloudMetadataDetection/GCP_metadata_service (0.00s)
=== CONT TestValidateExternalURL_PortValidation/Port_8080_(non-privileged)_-_should_allow
=== CONT TestValidateExternalURL_PortValidation/Port_3306_(MySQL)_-_should_block_if_<_1024
=== CONT TestValidateExternalURL_PortValidation/Port_22_(SSH)_-_should_block
=== CONT TestValidateExternalURL_PortValidation/Port_443_(standard_HTTPS)_-_should_allow
=== CONT TestSanitizeIPForError/Loopback_IPv4
--- PASS: TestValidateExternalURL_EdgeCases (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/Port_with_non-numeric_characters (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/URL_with_username_only (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/Hostname_at_252_chars_(just_under_limit) (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/Triple_dots_in_hostname (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/Port_1_(privileged_but_not_blocked_with_AllowLocalhost) (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/Port_1023_(edge_of_privileged_range) (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/Hostname_with_single_dot (0.00s)
--- PASS: TestValidateExternalURL_EdgeCases/Maximum_valid_port (0.01s)
--- PASS: TestValidateExternalURL_EdgeCases/Port_1024_(first_non-privileged) (0.01s)
=== CONT TestValidateExternalURL_PortValidation/Port_25_(SMTP)_-_should_block
=== CONT TestSanitizeIPForError/Invalid_IP
=== CONT TestSanitizeIPForError/IPv6_unique_local
=== CONT TestSanitizeIPForError/IPv6_link-local
=== CONT TestSanitizeIPForError/Private_IPv4_172.16
=== CONT TestSanitizeIPForError/Private_IPv4_10.x
=== CONT TestSanitizeIPForError/Metadata_IPv4
=== CONT TestValidateExternalURL_MultipleIPsAllPrivate/IP_192.168.1.1
=== CONT TestValidateExternalURL_MultipleIPsAllPrivate/IP_172.16.0.1
=== CONT TestValidateExternalURL_MultipleIPsAllPrivate/IP_10.0.0.1
=== CONT TestValidateExternalURL_CustomTimeout/Very_short_timeout
--- PASS: TestSanitizeIPForError (0.00s)
--- PASS: TestSanitizeIPForError/Private_IPv4_192.168 (0.00s)
--- PASS: TestSanitizeIPForError/Loopback_IPv4 (0.00s)
--- PASS: TestSanitizeIPForError/IPv6_unique_local (0.00s)
--- PASS: TestSanitizeIPForError/IPv6_link-local (0.00s)
--- PASS: TestSanitizeIPForError/Invalid_IP (0.00s)
--- PASS: TestSanitizeIPForError/Private_IPv4_172.16 (0.00s)
--- PASS: TestSanitizeIPForError/Metadata_IPv4 (0.00s)
--- PASS: TestSanitizeIPForError/Private_IPv4_10.x (0.00s)
=== NAME TestValidateExternalURL_CustomTimeout/Very_short_timeout
url_validator_test.go:499: Warning: timeout may not be strictly enforced (elapsed: 91.891µs, timeout: 1ns)
url_validator_test.go:504: URL: https://example.com, Timeout: 1ns, Elapsed: 91.891µs, Error: dns resolution failed for example.com: lookup example.com: i/o timeout
=== CONT TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots
--- PASS: TestValidateExternalURL_HostnameValidation (0.00s)
--- PASS: TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots_mid (0.00s)
--- PASS: TestValidateExternalURL_HostnameValidation/Extremely_long_hostname_(254_chars) (0.00s)
--- PASS: TestValidateExternalURL_HostnameValidation/Hostname_with_double_dots (0.00s)
--- PASS: TestValidateExternalURL_MultipleIPsAllPrivate (0.00s)
--- PASS: TestValidateExternalURL_MultipleIPsAllPrivate/IP_192.168.1.1 (0.00s)
--- PASS: TestValidateExternalURL_MultipleIPsAllPrivate/IP_172.16.0.1 (0.00s)
--- PASS: TestValidateExternalURL_MultipleIPsAllPrivate/IP_10.0.0.1 (0.00s)
=== CONT TestValidateExternalURL_CustomTimeout/Long_timeout
=== CONT TestValidateExternalURL_CustomTimeout/Standard_timeout
=== CONT TestValidateExternalURL_MultipleOptions/All_options_enabled
=== CONT TestValidateExternalURL_MultipleOptions/Localhost_without_AllowLocalhost_fails
=== CONT TestValidateExternalURL_MultipleOptions/HTTP_without_AllowHTTP_fails
=== CONT TestValidateExternalURL_MultipleOptions/Custom_timeout_with_HTTPS
=== CONT TestIPv4MappedIPv6Detection/IPv4-mapped_loopback
=== CONT TestIPv4MappedIPv6Detection/Regular_IPv6_link-local
=== CONT TestIPv4MappedIPv6Detection/Regular_IPv6_public
=== CONT TestIPv4MappedIPv6Detection/Regular_IPv6_loopback
--- PASS: TestValidateExternalURL_PortValidation (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_0_-_should_block (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_22_with_AllowLocalhost_-_should_allow (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_65536_-_should_block (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_80_(standard_HTTP)_-_should_allow (0.01s)
--- PASS: TestValidateExternalURL_PortValidation/Port_22_(SSH)_-_should_block (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_8080_(non-privileged)_-_should_allow (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_25_(SMTP)_-_should_block (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_3306_(MySQL)_-_should_block_if_<_1024 (0.00s)
--- PASS: TestValidateExternalURL_PortValidation/Port_443_(standard_HTTPS)_-_should_allow (0.00s)
=== CONT TestIPv4MappedIPv6Detection/IPv4-mapped_public
=== CONT TestIPv4MappedIPv6Detection/IPv4-mapped_private_10.x
=== CONT TestIPv4MappedIPv6Detection/IPv4-mapped_private_192.168
--- PASS: TestValidateExternalURL_MultipleOptions (0.00s)
--- PASS: TestValidateExternalURL_MultipleOptions/All_options_enabled (0.00s)
--- PASS: TestValidateExternalURL_MultipleOptions/Localhost_without_AllowLocalhost_fails (0.00s)
--- PASS: TestValidateExternalURL_MultipleOptions/HTTP_without_AllowHTTP_fails (0.00s)
--- PASS: TestValidateExternalURL_MultipleOptions/Custom_timeout_with_HTTPS (0.00s)
=== CONT TestIPv4MappedIPv6Detection/IPv4-mapped_metadata
=== CONT TestValidateExternalURL_RealWorldURLs/Discord_webhook_format
=== CONT TestValidateExternalURL_RealWorldURLs/Generic_API_endpoint
--- PASS: TestIPv4MappedIPv6Detection (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/IPv4-mapped_loopback (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/Regular_IPv6_link-local (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/Regular_IPv6_public (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/Regular_IPv6_loopback (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/IPv4-mapped_public (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/IPv4-mapped_private_10.x (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/IPv4-mapped_private_192.168 (0.00s)
--- PASS: TestIPv4MappedIPv6Detection/IPv4-mapped_metadata (0.00s)
=== CONT TestValidateExternalURL_RealWorldURLs/Localhost_for_testing
=== CONT TestValidateExternalURL_RealWorldURLs/Slack_webhook_format
=== NAME TestValidateExternalURL_CustomTimeout/Standard_timeout
url_validator_test.go:504: URL: https://api.github.com, Timeout: 3s, Elapsed: 11.316478ms, Error: <nil>
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback
=== CONT TestValidateExternalURL_LocalhostHandling/Localhost_without_AllowLocalhost
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_multicast
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_unspecified
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_private
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_loopback
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_public
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_Cloudflare_DNS
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fdff
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_Google_DNS
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd12
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd00
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_documentation_range
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fc00
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_mid
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_start
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback_expanded
=== CONT TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_end
=== CONT TestValidateExternalURL_LocalhostHandling/IPv6_loopback_with_AllowLocalhost
=== CONT TestValidateExternalURL_LocalhostHandling/Localhost_with_AllowLocalhost
=== CONT TestValidateExternalURL_LocalhostHandling/127.0.0.1_with_AllowLocalhost_and_AllowHTTP
--- PASS: TestIsPrivateIP_IPv6Comprehensive (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_multicast (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unspecified (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_loopback (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_private (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_Cloudflare_DNS (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fdff (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv4-mapped_public (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_Google_DNS (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd12 (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd00 (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_documentation_range (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fc00 (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_mid (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_start (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback_expanded (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_end (0.00s)
=== CONT TestValidateExternalURL_PrivateIPBlocking/Private_IP_192.168.x.x
=== CONT TestValidateExternalURL_PrivateIPBlocking/AWS_Metadata_IP
=== CONT TestValidateExternalURL_PrivateIPBlocking/Private_IP_10.x.x.x
=== CONT TestValidateExternalURL_PrivateIPBlocking/Loopback_without_AllowLocalhost
=== CONT TestValidateExternalURL_PrivateIPBlocking/Private_IP_172.16.x.x
=== CONT TestValidateExternalURL_BasicValidation/HTTP_without_AllowHTTP_option
=== CONT TestValidateExternalURL_BasicValidation/Valid_with_query
=== CONT TestValidateExternalURL_BasicValidation/Valid_with_port
--- PASS: TestValidateExternalURL_LocalhostHandling (0.00s)
--- PASS: TestValidateExternalURL_LocalhostHandling/Localhost_without_AllowLocalhost (0.00s)
--- PASS: TestValidateExternalURL_LocalhostHandling/IPv6_loopback_with_AllowLocalhost (0.00s)
--- PASS: TestValidateExternalURL_LocalhostHandling/Localhost_with_AllowLocalhost (0.00s)
--- PASS: TestValidateExternalURL_LocalhostHandling/127.0.0.1_with_AllowLocalhost_and_AllowHTTP (0.00s)
--- PASS: TestValidateExternalURL_PrivateIPBlocking (0.00s)
--- PASS: TestValidateExternalURL_PrivateIPBlocking/Private_IP_192.168.x.x (0.00s)
--- PASS: TestValidateExternalURL_PrivateIPBlocking/AWS_Metadata_IP (0.00s)
--- PASS: TestValidateExternalURL_PrivateIPBlocking/Private_IP_10.x.x.x (0.00s)
--- PASS: TestValidateExternalURL_PrivateIPBlocking/Private_IP_172.16.x.x (0.00s)
--- PASS: TestValidateExternalURL_PrivateIPBlocking/Loopback_without_AllowLocalhost (0.00s)
=== CONT TestValidateExternalURL_BasicValidation/URL_with_credentials
=== CONT TestValidateExternalURL_BasicValidation/Valid_with_path
--- PASS: TestValidateExternalURL_RealWorldURLs (0.00s)
--- PASS: TestValidateExternalURL_RealWorldURLs/Generic_API_endpoint (0.01s)
--- PASS: TestValidateExternalURL_RealWorldURLs/Localhost_for_testing (0.00s)
--- PASS: TestValidateExternalURL_RealWorldURLs/Discord_webhook_format (0.01s)
--- PASS: TestValidateExternalURL_RealWorldURLs/Slack_webhook_format (0.01s)
=== NAME TestValidateExternalURL_BasicValidation/Valid_with_query
url_validator_test.go:133: Note: DNS resolution failed for https://api.example.com/webhook?token=abc123 (expected in test environment)
=== NAME TestValidateExternalURL_BasicValidation/Valid_with_path
url_validator_test.go:133: Note: DNS resolution failed for https://api.example.com/path/to/webhook (expected in test environment)
=== CONT TestValidateExternalURL_BasicValidation/File_protocol
=== NAME TestValidateExternalURL_BasicValidation/Valid_with_port
url_validator_test.go:133: Note: DNS resolution failed for https://api.example.com:8080/webhook (expected in test environment)
=== CONT TestValidateExternalURL_BasicValidation/FTP_protocol
=== CONT TestValidateExternalURL_BasicValidation/Just_scheme
=== CONT TestValidateExternalURL_BasicValidation/Missing_scheme
=== CONT TestValidateExternalURL_BasicValidation/Empty_URL
=== CONT TestValidateExternalURL_BasicValidation/HTTP_with_AllowHTTP_option
=== CONT TestValidateExternalURL_BasicValidation/Gopher_protocol
=== CONT TestValidateExternalURL_BasicValidation/Valid_HTTPS_URL
=== CONT TestValidateExternalURL_BasicValidation/Data_URL
=== CONT TestIsPrivateIP/10.0.0.0
=== CONT TestIsPrivateIP/Public_IPv6
=== CONT TestIsPrivateIP/Cloudflare_DNS
=== CONT TestIsPrivateIP/Google_DNS
=== CONT TestIsPrivateIP/IPv6_link-local
=== CONT TestIsPrivateIP/IPv6_unique_local
=== CONT TestIsPrivateIP/240.0.0.1
=== CONT TestIsPrivateIP/255.255.255.255
=== CONT TestIsPrivateIP/0.0.0.0
=== CONT TestIsPrivateIP/169.254.1.1
=== CONT TestIsPrivateIP/AWS_metadata
=== CONT TestIsPrivateIP/127.0.0.2
=== CONT TestIsPrivateIP/127.0.0.1
=== CONT TestIsPrivateIP/IPv6_loopback
=== CONT TestIsPrivateIP/192.168.0.0
=== CONT TestIsPrivateIP/172.31.255.255
=== CONT TestIsPrivateIP/192.168.255.255
=== CONT TestIsPrivateIP/10.255.255.255
=== CONT TestIsPrivateIP/172.16.0.0
--- PASS: TestIsPrivateIP (0.01s)
--- PASS: TestIsPrivateIP/10.0.0.0 (0.00s)
--- PASS: TestIsPrivateIP/Public_IPv6 (0.00s)
--- PASS: TestIsPrivateIP/Cloudflare_DNS (0.00s)
--- PASS: TestIsPrivateIP/Google_DNS (0.00s)
--- PASS: TestIsPrivateIP/IPv6_link-local (0.00s)
--- PASS: TestIsPrivateIP/IPv6_unique_local (0.00s)
--- PASS: TestIsPrivateIP/240.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP/255.255.255.255 (0.00s)
--- PASS: TestIsPrivateIP/0.0.0.0 (0.00s)
--- PASS: TestIsPrivateIP/169.254.1.1 (0.00s)
--- PASS: TestIsPrivateIP/AWS_metadata (0.00s)
--- PASS: TestIsPrivateIP/127.0.0.2 (0.00s)
--- PASS: TestIsPrivateIP/127.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP/IPv6_loopback (0.00s)
--- PASS: TestIsPrivateIP/192.168.0.0 (0.00s)
--- PASS: TestIsPrivateIP/172.31.255.255 (0.00s)
--- PASS: TestIsPrivateIP/192.168.255.255 (0.00s)
--- PASS: TestIsPrivateIP/10.255.255.255 (0.00s)
--- PASS: TestIsPrivateIP/172.16.0.0 (0.00s)
=== NAME TestValidateExternalURL_BasicValidation/Valid_HTTPS_URL
url_validator_test.go:133: Note: DNS resolution failed for https://api.example.com/webhook (expected in test environment)
=== NAME TestValidateExternalURL_BasicValidation/HTTP_with_AllowHTTP_option
url_validator_test.go:133: Note: DNS resolution failed for http://api.example.com/webhook (expected in test environment)
--- PASS: TestValidateExternalURL_BasicValidation (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/HTTP_without_AllowHTTP_option (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/URL_with_credentials (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Valid_with_query (0.03s)
--- PASS: TestValidateExternalURL_BasicValidation/Valid_with_path (0.02s)
--- PASS: TestValidateExternalURL_BasicValidation/File_protocol (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Valid_with_port (0.03s)
--- PASS: TestValidateExternalURL_BasicValidation/FTP_protocol (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Just_scheme (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Missing_scheme (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Empty_URL (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Gopher_protocol (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Data_URL (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/Valid_HTTPS_URL (0.00s)
--- PASS: TestValidateExternalURL_BasicValidation/HTTP_with_AllowHTTP_option (0.00s)
=== NAME TestValidateExternalURL_CustomTimeout/Long_timeout
url_validator_test.go:504: URL: https://slow-dns-server.example, Timeout: 30s, Elapsed: 98.181784ms, Error: dns resolution failed for slow-dns-server.example: lookup slow-dns-server.example on 127.0.0.53:53: no such host
--- PASS: TestValidateExternalURL_CustomTimeout (0.00s)
--- PASS: TestValidateExternalURL_CustomTimeout/Very_short_timeout (0.00s)
--- PASS: TestValidateExternalURL_CustomTimeout/Standard_timeout (0.01s)
--- PASS: TestValidateExternalURL_CustomTimeout/Long_timeout (0.10s)
PASS
coverage: 95.7% of statements
ok github.com/Wikid82/charon/backend/internal/security (cached) coverage: 95.7% of statements
=== RUN TestNewRouter
[GIN] 2026/01/10 - 02:17:15 | 200 | 16.260065ms | | GET "/"
[GIN] 2026/01/10 - 02:17:15 | 404 | 168.03µs | | GET "/api/this-route-does-not-exist"
--- PASS: TestNewRouter (0.02s)
PASS
coverage: 93.3% of statements
ok github.com/Wikid82/charon/backend/internal/server (cached) coverage: 93.3% of statements
=== RUN TestAccessListService_Create
=== RUN TestAccessListService_Create/create_whitelist_with_valid_IP_rules
=== RUN TestAccessListService_Create/create_geo_whitelist_with_valid_country_codes
=== RUN TestAccessListService_Create/create_local_network_only_ACL
=== RUN TestAccessListService_Create/fail_with_empty_name
=== RUN TestAccessListService_Create/fail_with_invalid_type
=== RUN TestAccessListService_Create/fail_with_invalid_IP_address
=== RUN TestAccessListService_Create/fail_geo-blocking_without_country_codes
=== RUN TestAccessListService_Create/fail_with_invalid_country_code
--- PASS: TestAccessListService_Create (0.03s)
--- PASS: TestAccessListService_Create/create_whitelist_with_valid_IP_rules (0.00s)
--- PASS: TestAccessListService_Create/create_geo_whitelist_with_valid_country_codes (0.00s)
--- PASS: TestAccessListService_Create/create_local_network_only_ACL (0.00s)
--- PASS: TestAccessListService_Create/fail_with_empty_name (0.00s)
--- PASS: TestAccessListService_Create/fail_with_invalid_type (0.00s)
--- PASS: TestAccessListService_Create/fail_with_invalid_IP_address (0.00s)
--- PASS: TestAccessListService_Create/fail_geo-blocking_without_country_codes (0.00s)
--- PASS: TestAccessListService_Create/fail_with_invalid_country_code (0.00s)
=== RUN TestAccessListService_GetByID
=== RUN TestAccessListService_GetByID/get_existing_ACL
=== RUN TestAccessListService_GetByID/get_non-existent_ACL
2026/01/10 02:17:38 /projects/Charon/backend/internal/services/access_list_service.go:105 record not found
[0.089ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 99999 ORDER BY `access_lists`.`id` LIMIT 1
--- PASS: TestAccessListService_GetByID (0.02s)
--- PASS: TestAccessListService_GetByID/get_existing_ACL (0.00s)
--- PASS: TestAccessListService_GetByID/get_non-existent_ACL (0.00s)
=== RUN TestAccessListService_GetByUUID
=== RUN TestAccessListService_GetByUUID/get_existing_ACL_by_UUID
=== RUN TestAccessListService_GetByUUID/get_non-existent_ACL_by_UUID
2026/01/10 02:17:38 /projects/Charon/backend/internal/services/access_list_service.go:117 record not found
[0.099ms] [rows:0] SELECT * FROM `access_lists` WHERE uuid = "non-existent-uuid" ORDER BY `access_lists`.`id` LIMIT 1
--- PASS: TestAccessListService_GetByUUID (0.02s)
--- PASS: TestAccessListService_GetByUUID/get_existing_ACL_by_UUID (0.00s)
--- PASS: TestAccessListService_GetByUUID/get_non-existent_ACL_by_UUID (0.00s)
=== RUN TestAccessListService_List
=== RUN TestAccessListService_List/list_all_ACLs
--- PASS: TestAccessListService_List (0.02s)
--- PASS: TestAccessListService_List/list_all_ACLs (0.00s)
=== RUN TestAccessListService_Update
=== RUN TestAccessListService_Update/update_successfully
=== RUN TestAccessListService_Update/fail_update_on_non-existent_ACL
2026/01/10 02:17:38 /projects/Charon/backend/internal/services/access_list_service.go:105 record not found
[0.093ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 99999 ORDER BY `access_lists`.`id` LIMIT 1
=== RUN TestAccessListService_Update/fail_update_with_invalid_data
--- PASS: TestAccessListService_Update (0.03s)
--- PASS: TestAccessListService_Update/update_successfully (0.00s)
--- PASS: TestAccessListService_Update/fail_update_on_non-existent_ACL (0.00s)
--- PASS: TestAccessListService_Update/fail_update_with_invalid_data (0.00s)
=== RUN TestAccessListService_Delete
=== RUN TestAccessListService_Delete/delete_successfully
2026/01/10 02:17:38 /projects/Charon/backend/internal/services/access_list_service.go:105 record not found
[0.226ms] [rows:0] SELECT * FROM `access_lists` WHERE `access_lists`.`id` = 1 ORDER BY `access_lists`.`id` LIMIT 1
=== RUN TestAccessListService_Delete/fail_delete_non-existent_ACL
=== RUN TestAccessListService_Delete/fail_delete_ACL_in_use
--- PASS: TestAccessListService_Delete (0.03s)
--- PASS: TestAccessListService_Delete/delete_successfully (0.00s)
--- PASS: TestAccessListService_Delete/fail_delete_non-existent_ACL (0.00s)
--- PASS: TestAccessListService_Delete/fail_delete_ACL_in_use (0.00s)
=== RUN TestAccessListService_TestIP
=== RUN TestAccessListService_TestIP/whitelist_allows_matching_IP
=== RUN TestAccessListService_TestIP/whitelist_blocks_non-matching_IP
=== RUN TestAccessListService_TestIP/blacklist_blocks_matching_IP
=== RUN TestAccessListService_TestIP/blacklist_allows_non-matching_IP
=== RUN TestAccessListService_TestIP/local_network_only_allows_RFC1918
=== RUN TestAccessListService_TestIP/disabled_ACL_allows_all
=== RUN TestAccessListService_TestIP/fail_with_invalid_IP
--- PASS: TestAccessListService_TestIP (0.03s)
--- PASS: TestAccessListService_TestIP/whitelist_allows_matching_IP (0.00s)
--- PASS: TestAccessListService_TestIP/whitelist_blocks_non-matching_IP (0.00s)
--- PASS: TestAccessListService_TestIP/blacklist_blocks_matching_IP (0.00s)
--- PASS: TestAccessListService_TestIP/blacklist_allows_non-matching_IP (0.00s)
--- PASS: TestAccessListService_TestIP/local_network_only_allows_RFC1918 (0.00s)
--- PASS: TestAccessListService_TestIP/disabled_ACL_allows_all (0.00s)
--- PASS: TestAccessListService_TestIP/fail_with_invalid_IP (0.00s)
=== RUN TestAccessListService_GetTemplates
--- PASS: TestAccessListService_GetTemplates (0.02s)
=== RUN TestAccessListService_Validation
=== RUN TestAccessListService_Validation/validate_CIDR_formats
=== RUN TestAccessListService_Validation/validate_country_codes
=== RUN TestAccessListService_Validation/validate_types
--- PASS: TestAccessListService_Validation (0.02s)
--- PASS: TestAccessListService_Validation/validate_CIDR_formats (0.00s)
--- PASS: TestAccessListService_Validation/validate_country_codes (0.00s)
--- PASS: TestAccessListService_Validation/validate_types (0.00s)
=== RUN TestIPMatchesCIDR_Helper
=== RUN TestIPMatchesCIDR_Helper/IPv4_in_subnet
=== RUN TestIPMatchesCIDR_Helper/IPv4_not_in_subnet
=== RUN TestIPMatchesCIDR_Helper/IPv4_single_IP_match
=== RUN TestIPMatchesCIDR_Helper/IPv4_single_IP_no_match
=== RUN TestIPMatchesCIDR_Helper/IPv6_in_subnet
=== RUN TestIPMatchesCIDR_Helper/IPv6_not_in_subnet
=== RUN TestIPMatchesCIDR_Helper/Invalid_CIDR
--- PASS: TestIPMatchesCIDR_Helper (0.02s)
--- PASS: TestIPMatchesCIDR_Helper/IPv4_in_subnet (0.00s)
--- PASS: TestIPMatchesCIDR_Helper/IPv4_not_in_subnet (0.00s)
--- PASS: TestIPMatchesCIDR_Helper/IPv4_single_IP_match (0.00s)
--- PASS: TestIPMatchesCIDR_Helper/IPv4_single_IP_no_match (0.00s)
--- PASS: TestIPMatchesCIDR_Helper/IPv6_in_subnet (0.00s)
--- PASS: TestIPMatchesCIDR_Helper/IPv6_not_in_subnet (0.00s)
--- PASS: TestIPMatchesCIDR_Helper/Invalid_CIDR (0.00s)
=== RUN TestIsPrivateIP_Helper
=== RUN TestIsPrivateIP_Helper/Private_10.x.x.x
=== RUN TestIsPrivateIP_Helper/Private_172.16.x.x
=== RUN TestIsPrivateIP_Helper/Private_192.168.x.x
=== RUN TestIsPrivateIP_Helper/Private_127.0.0.1
=== RUN TestIsPrivateIP_Helper/Private_::1
=== RUN TestIsPrivateIP_Helper/Private_fc00::/7
=== RUN TestIsPrivateIP_Helper/Public_8.8.8.8
=== RUN TestIsPrivateIP_Helper/Public_1.1.1.1
=== RUN TestIsPrivateIP_Helper/Public_IPv6
--- PASS: TestIsPrivateIP_Helper (0.02s)
--- PASS: TestIsPrivateIP_Helper/Private_10.x.x.x (0.00s)
--- PASS: TestIsPrivateIP_Helper/Private_172.16.x.x (0.00s)
--- PASS: TestIsPrivateIP_Helper/Private_192.168.x.x (0.00s)
--- PASS: TestIsPrivateIP_Helper/Private_127.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP_Helper/Private_::1 (0.00s)
--- PASS: TestIsPrivateIP_Helper/Private_fc00::/7 (0.00s)
--- PASS: TestIsPrivateIP_Helper/Public_8.8.8.8 (0.00s)
--- PASS: TestIsPrivateIP_Helper/Public_1.1.1.1 (0.00s)
--- PASS: TestIsPrivateIP_Helper/Public_IPv6 (0.00s)
=== RUN TestAccessListService_ListFunction
--- PASS: TestAccessListService_ListFunction (0.02s)
=== RUN TestAccessListService_SetGeoIPService
--- PASS: TestAccessListService_SetGeoIPService (0.01s)
=== RUN TestAccessListService_GeoACL_NoGeoIPService
=== RUN TestAccessListService_GeoACL_NoGeoIPService/geo_whitelist_without_GeoIP_service_allows_traffic
=== RUN TestAccessListService_GeoACL_NoGeoIPService/geo_blacklist_without_GeoIP_service_allows_traffic
--- PASS: TestAccessListService_GeoACL_NoGeoIPService (0.02s)
--- PASS: TestAccessListService_GeoACL_NoGeoIPService/geo_whitelist_without_GeoIP_service_allows_traffic (0.00s)
--- PASS: TestAccessListService_GeoACL_NoGeoIPService/geo_blacklist_without_GeoIP_service_allows_traffic (0.00s)
=== RUN TestAccessListService_ParseCountryCodes
=== RUN TestAccessListService_ParseCountryCodes/parse_single_code
=== RUN TestAccessListService_ParseCountryCodes/parse_multiple_codes
=== RUN TestAccessListService_ParseCountryCodes/parse_with_spaces
=== RUN TestAccessListService_ParseCountryCodes/parse_with_lowercase
=== RUN TestAccessListService_ParseCountryCodes/parse_empty_string
=== RUN TestAccessListService_ParseCountryCodes/parse_with_empty_entries
--- PASS: TestAccessListService_ParseCountryCodes (0.02s)
--- PASS: TestAccessListService_ParseCountryCodes/parse_single_code (0.00s)
--- PASS: TestAccessListService_ParseCountryCodes/parse_multiple_codes (0.00s)
--- PASS: TestAccessListService_ParseCountryCodes/parse_with_spaces (0.00s)
--- PASS: TestAccessListService_ParseCountryCodes/parse_with_lowercase (0.00s)
--- PASS: TestAccessListService_ParseCountryCodes/parse_empty_string (0.00s)
--- PASS: TestAccessListService_ParseCountryCodes/parse_with_empty_entries (0.00s)
=== RUN TestAuthService_Register
--- PASS: TestAuthService_Register (1.62s)
=== RUN TestAuthService_Login
--- PASS: TestAuthService_Login (5.20s)
=== RUN TestAuthService_ChangePassword
2026/01/10 02:17:49 /projects/Charon/backend/internal/services/auth_service.go:113 record not found
[0.178ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestAuthService_ChangePassword (4.53s)
=== RUN TestAuthService_ValidateToken
--- PASS: TestAuthService_ValidateToken (1.59s)
=== RUN TestAuthService_GetUserByID
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/auth_service.go:147 record not found
[0.064ms] [rows:0] SELECT * FROM `users` WHERE `users`.`id` = 999 ORDER BY `users`.`id` LIMIT 1
--- PASS: TestAuthService_GetUserByID (0.81s)
=== RUN TestBackupService_GetAvailableSpace
=== PAUSE TestBackupService_GetAvailableSpace
=== RUN TestBackupService_CreateAndList
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupService_CreateAndList (0.00s)
=== RUN TestBackupService_Restore_ZipSlip
--- PASS: TestBackupService_Restore_ZipSlip (0.00s)
=== RUN TestBackupService_PathTraversal
--- PASS: TestBackupService_PathTraversal (0.00s)
=== RUN TestBackupService_RunScheduledBackup
time="2026-01-10T02:17:52Z" level=info msg="Starting scheduled backup"
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestBackupService_RunScheduledBackup1537072281/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Scheduled backup created" backup=backup_2026-01-10_02-17-52.zip
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupService_RunScheduledBackup (0.00s)
=== RUN TestBackupService_CreateBackup_Errors
=== RUN TestBackupService_CreateBackup_Errors/missing_database_file
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
=== RUN TestBackupService_CreateBackup_Errors/cannot_create_backup_directory
--- PASS: TestBackupService_CreateBackup_Errors (0.00s)
--- PASS: TestBackupService_CreateBackup_Errors/missing_database_file (0.00s)
--- PASS: TestBackupService_CreateBackup_Errors/cannot_create_backup_directory (0.00s)
=== RUN TestBackupService_RestoreBackup_Errors
=== RUN TestBackupService_RestoreBackup_Errors/non-existent_backup
=== RUN TestBackupService_RestoreBackup_Errors/invalid_zip_file
--- PASS: TestBackupService_RestoreBackup_Errors (0.00s)
--- PASS: TestBackupService_RestoreBackup_Errors/non-existent_backup (0.00s)
--- PASS: TestBackupService_RestoreBackup_Errors/invalid_zip_file (0.00s)
=== RUN TestBackupService_ListBackups_EmptyDir
--- PASS: TestBackupService_ListBackups_EmptyDir (0.00s)
=== RUN TestBackupService_ListBackups_MissingDir
--- PASS: TestBackupService_ListBackups_MissingDir (0.00s)
=== RUN TestBackupService_CleanupOldBackups
=== RUN TestBackupService_CleanupOldBackups/deletes_backups_exceeding_retention
=== RUN TestBackupService_CleanupOldBackups/keeps_all_when_under_retention
=== RUN TestBackupService_CleanupOldBackups/minimum_retention_of_1
=== RUN TestBackupService_CleanupOldBackups/empty_backup_directory
--- PASS: TestBackupService_CleanupOldBackups (0.00s)
--- PASS: TestBackupService_CleanupOldBackups/deletes_backups_exceeding_retention (0.00s)
--- PASS: TestBackupService_CleanupOldBackups/keeps_all_when_under_retention (0.00s)
--- PASS: TestBackupService_CleanupOldBackups/minimum_retention_of_1 (0.00s)
--- PASS: TestBackupService_CleanupOldBackups/empty_backup_directory (0.00s)
=== RUN TestBackupService_GetLastBackupTime
=== RUN TestBackupService_GetLastBackupTime/returns_latest_backup_time
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestBackupService_GetLastBackupTimereturns_latest_backup_time1266614275/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
=== RUN TestBackupService_GetLastBackupTime/returns_zero_time_when_no_backups
--- PASS: TestBackupService_GetLastBackupTime (0.00s)
--- PASS: TestBackupService_GetLastBackupTime/returns_latest_backup_time (0.00s)
--- PASS: TestBackupService_GetLastBackupTime/returns_zero_time_when_no_backups (0.00s)
=== RUN TestDefaultBackupRetention
--- PASS: TestDefaultBackupRetention (0.00s)
=== RUN TestNewBackupService_BackupDirCreationError
time="2026-01-10T02:17:52Z" level=error msg="Failed to create backup directory" error="mkdir /tmp/TestNewBackupService_BackupDirCreationError2121673763/001/data/backups: not a directory"
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestNewBackupService_BackupDirCreationError (0.00s)
=== RUN TestNewBackupService_CronScheduleError
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestNewBackupService_CronScheduleError (0.00s)
=== RUN TestRunScheduledBackup_CreateBackupFails
time="2026-01-10T02:17:52Z" level=info msg="Starting scheduled backup"
time="2026-01-10T02:17:52Z" level=error msg="Scheduled backup failed" error="database file not found: /tmp/TestRunScheduledBackup_CreateBackupFails1566695776/001/data/charon.db"
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestRunScheduledBackup_CreateBackupFails (0.00s)
=== RUN TestRunScheduledBackup_CleanupFails
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestRunScheduledBackup_CleanupFails1518931621/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Starting scheduled backup"
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestRunScheduledBackup_CleanupFails1518931621/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Scheduled backup created" backup=backup_2026-01-10_02-17-52.zip
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestRunScheduledBackup_CleanupFails (0.01s)
=== RUN TestGetLastBackupTime_ListBackupsError
--- PASS: TestGetLastBackupTime_ListBackupsError (0.00s)
=== RUN TestRunScheduledBackup_CleanupDeletesZero
time="2026-01-10T02:17:52Z" level=info msg="Starting scheduled backup"
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestRunScheduledBackup_CleanupDeletesZero3348750762/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Scheduled backup created" backup=backup_2026-01-10_02-17-52.zip
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestRunScheduledBackup_CleanupDeletesZero (0.00s)
=== RUN TestCleanupOldBackups_PartialFailure
--- PASS: TestCleanupOldBackups_PartialFailure (0.00s)
=== RUN TestCreateBackup_CaddyDirMissing
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestCreateBackup_CaddyDirMissing2609396373/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestCreateBackup_CaddyDirMissing (0.00s)
=== RUN TestCreateBackup_CaddyDirUnreadable
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestCreateBackup_CaddyDirUnreadable (0.01s)
=== RUN TestBackupService_addToZip_FileNotFound
--- PASS: TestBackupService_addToZip_FileNotFound (0.00s)
=== RUN TestBackupService_addToZip_FileOpenError
backup_service_test.go:619: Skipping test that requires non-root user for permission testing
--- SKIP: TestBackupService_addToZip_FileOpenError (0.00s)
=== RUN TestBackupService_Start
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler started"
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupService_Start (0.00s)
=== RUN TestRunScheduledBackup_CleanupSucceedsWithDeletions
time="2026-01-10T02:17:52Z" level=info msg="Starting scheduled backup"
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestRunScheduledBackup_CleanupSucceedsWithDeletions438938866/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Scheduled backup created" backup=backup_2026-01-10_02-17-52.zip
time="2026-01-10T02:17:52Z" level=info msg="Cleaned up old backups" deleted_count=4
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestRunScheduledBackup_CleanupSucceedsWithDeletions (0.00s)
=== RUN TestCleanupOldBackups_ListBackupsError
--- PASS: TestCleanupOldBackups_ListBackupsError (0.00s)
=== RUN TestListBackups_EntryInfoError
--- PASS: TestListBackups_EntryInfoError (0.00s)
=== RUN TestRestoreBackup_PathTraversal_FirstCheck
--- PASS: TestRestoreBackup_PathTraversal_FirstCheck (0.00s)
=== RUN TestRestoreBackup_PathTraversal_SecondCheck
--- PASS: TestRestoreBackup_PathTraversal_SecondCheck (0.00s)
=== RUN TestDeleteBackup_PathTraversal_SecondCheck
--- PASS: TestDeleteBackup_PathTraversal_SecondCheck (0.00s)
=== RUN TestGetBackupPath_PathTraversal_SecondCheck
--- PASS: TestGetBackupPath_PathTraversal_SecondCheck (0.00s)
=== RUN TestUnzip_DirectoryCreation
--- PASS: TestUnzip_DirectoryCreation (0.00s)
=== RUN TestUnzip_OpenFileError
backup_service_test.go:847: Skipping test that requires non-root user
--- SKIP: TestUnzip_OpenFileError (0.00s)
=== RUN TestUnzip_FileOpenInZipError
--- PASS: TestUnzip_FileOpenInZipError (0.00s)
=== RUN TestAddDirToZip_WalkError
--- PASS: TestAddDirToZip_WalkError (0.00s)
=== RUN TestAddDirToZip_SkipsDirectories
--- PASS: TestAddDirToZip_SkipsDirectories (0.00s)
=== RUN TestGetAvailableSpace_Success
--- PASS: TestGetAvailableSpace_Success (0.00s)
=== RUN TestGetAvailableSpace_NonExistentDir
--- PASS: TestGetAvailableSpace_NonExistentDir (0.00s)
=== RUN TestUnzip_CopyError
backup_service_test.go:991: Skipping test that requires non-root user
--- SKIP: TestUnzip_CopyError (0.00s)
=== RUN TestCreateBackup_ZipWriterCloseError
time="2026-01-10T02:17:52Z" level=warning msg="Warning: could not backup caddy dir" error="lstat /tmp/TestCreateBackup_ZipWriterCloseError1638110052/001/data/caddy: no such file or directory"
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestCreateBackup_ZipWriterCloseError (0.00s)
=== RUN TestAddToZip_CreateError
--- PASS: TestAddToZip_CreateError (0.00s)
=== RUN TestListBackups_IgnoresNonZipFiles
--- PASS: TestListBackups_IgnoresNonZipFiles (0.00s)
=== RUN TestRestoreBackup_CreatesNestedDirectories
--- PASS: TestRestoreBackup_CreatesNestedDirectories (0.00s)
=== RUN TestBackupService_FullCycle
time="2026-01-10T02:17:52Z" level=info msg="Backup service cron scheduler stopped"
--- PASS: TestBackupService_FullCycle (0.00s)
=== RUN TestNewCertificateService
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestNewCertificateService3827131621/001/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestNewCertificateService (0.12s)
=== RUN TestCertificateService_GetCertificateInfo
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/cert-test2326179515/certificates
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.183ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.836ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=1
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/cert-test2326179515/certificates
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.086ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "expired.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[0.045ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=2
--- PASS: TestCertificateService_GetCertificateInfo (0.22s)
=== RUN TestCertificateService_UploadAndDelete
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_UploadAndDelete2793602283/001/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_UploadAndDelete2793602283/001/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=1
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_UploadAndDelete2793602283/001/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_UploadAndDelete2793602283/001/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestCertificateService_UploadAndDelete (0.13s)
=== RUN TestCertificateService_Persistence
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_Persistence2684953317/001/certificates
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.182ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "persist.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=1
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: deleting ACME cert file" path=/tmp/TestCertificateService_Persistence2684953317/001/certificates/acme-v02.api.letsencrypt.org-directory/persist.example.com/persist.example.com.crt
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_Persistence2684953317/001/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=0
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service_test.go:289 record not found
[0.101ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE (domains = "persist.example.com" AND provider = "letsencrypt") AND `ssl_certificates`.`id` = 1 ORDER BY `ssl_certificates`.`id` LIMIT 1
--- PASS: TestCertificateService_Persistence (0.11s)
=== RUN TestCertificateService_UploadCertificate_Errors
=== RUN TestCertificateService_UploadCertificate_Errors/invalid_PEM_format
=== RUN TestCertificateService_UploadCertificate_Errors/empty_certificate
=== RUN TestCertificateService_UploadCertificate_Errors/certificate_without_key_allowed
=== RUN TestCertificateService_UploadCertificate_Errors/valid_certificate_with_name
=== RUN TestCertificateService_UploadCertificate_Errors/expired_certificate_can_be_uploaded
--- PASS: TestCertificateService_UploadCertificate_Errors (0.28s)
--- PASS: TestCertificateService_UploadCertificate_Errors/invalid_PEM_format (0.00s)
--- PASS: TestCertificateService_UploadCertificate_Errors/empty_certificate (0.00s)
--- PASS: TestCertificateService_UploadCertificate_Errors/certificate_without_key_allowed (0.03s)
--- PASS: TestCertificateService_UploadCertificate_Errors/valid_certificate_with_name (0.10s)
--- PASS: TestCertificateService_UploadCertificate_Errors/expired_certificate_can_be_uploaded (0.13s)
=== RUN TestCertificateService_ListCertificates_EdgeCases
=== RUN TestCertificateService_ListCertificates_EdgeCases/empty_certificates_directory
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_ListCertificates_EdgeCasesempty_certific1470065107/001/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_ListCertificates_EdgeCasesempty_certific1470065107/001/certificates
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[4.390ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=0
=== RUN TestCertificateService_ListCertificates_EdgeCases/certificates_directory_does_not_exist
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_ListCertificates_EdgeCasescertificates_d2286856882/001/does-not-exist/certificates
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_ListCertificates_EdgeCasescertificates_d2286856882/001/does-not-exist/certificates
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.546ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=0
=== RUN TestCertificateService_ListCertificates_EdgeCases/invalid_certificate_files_are_skipped
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_ListCertificates_EdgeCasesinvalid_certif3126530968/001/certificates
2026/01/10 02:17:52 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.902ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:52Z" level=info msg="CertificateService: disk sync complete" count=0
=== RUN TestCertificateService_ListCertificates_EdgeCases/multiple_certificates_from_different_providers
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_ListCertificates_EdgeCasesmultiple_certi1140893787/001/certificates
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.147ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "le.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.423ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: disk sync complete" count=2
--- PASS: TestCertificateService_ListCertificates_EdgeCases (0.24s)
--- PASS: TestCertificateService_ListCertificates_EdgeCases/empty_certificates_directory (0.01s)
--- PASS: TestCertificateService_ListCertificates_EdgeCases/certificates_directory_does_not_exist (0.01s)
--- PASS: TestCertificateService_ListCertificates_EdgeCases/invalid_certificate_files_are_skipped (0.01s)
--- PASS: TestCertificateService_ListCertificates_EdgeCases/multiple_certificates_from_different_providers (0.22s)
=== RUN TestCertificateService_DeleteCertificate_Errors
=== RUN TestCertificateService_DeleteCertificate_Errors/delete_non-existent_certificate
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:410 record not found
[0.098ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE `ssl_certificates`.`id` = 99999 ORDER BY `ssl_certificates`.`id` LIMIT 1
=== RUN TestCertificateService_DeleteCertificate_Errors/delete_certificate_in_use_returns_ErrCertInUse
=== RUN TestCertificateService_DeleteCertificate_Errors/delete_certificate_when_file_already_removed
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service_test.go:513 record not found
[0.091ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE id = 2 ORDER BY `ssl_certificates`.`id` LIMIT 1
--- PASS: TestCertificateService_DeleteCertificate_Errors (0.24s)
--- PASS: TestCertificateService_DeleteCertificate_Errors/delete_non-existent_certificate (0.00s)
--- PASS: TestCertificateService_DeleteCertificate_Errors/delete_certificate_in_use_returns_ErrCertInUse (0.05s)
--- PASS: TestCertificateService_DeleteCertificate_Errors/delete_certificate_when_file_already_removed (0.17s)
=== RUN TestCertificateService_StagingCertificates
=== RUN TestCertificateService_StagingCertificates/staging_certificate_detected_by_path
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_StagingCertificatesstaging_certificate_d1544785683/001/certificates
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.212ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "staging.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.219ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: disk sync complete" count=1
=== RUN TestCertificateService_StagingCertificates/production_cert_preferred_over_staging
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_StagingCertificatesproduction_cert_prefe1619917906/001/certificates
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.232ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "both.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.727ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: disk sync complete" count=1
=== RUN TestCertificateService_StagingCertificates/upgrade_from_staging_to_production
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_StagingCertificatesupgrade_from_staging_3224756401/001/certificates
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.162ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "upgrade.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.372ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: disk sync complete" count=1
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_StagingCertificatesupgrade_from_staging_3224756401/001/certificates
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[0.018ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: disk sync complete" count=1
--- PASS: TestCertificateService_StagingCertificates (0.33s)
--- PASS: TestCertificateService_StagingCertificates/staging_certificate_detected_by_path (0.06s)
--- PASS: TestCertificateService_StagingCertificates/production_cert_preferred_over_staging (0.06s)
--- PASS: TestCertificateService_StagingCertificates/upgrade_from_staging_to_production (0.21s)
=== RUN TestCertificateService_ExpiringStatus
=== RUN TestCertificateService_ExpiringStatus/certificate_expiring_within_30_days
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_ExpiringStatuscertificate_expiring_withi2710914074/001/certificates
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.202ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "expiring.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:53 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[4.068ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:53Z" level=info msg="CertificateService: disk sync complete" count=1
=== RUN TestCertificateService_ExpiringStatus/certificate_valid_for_more_than_30_days
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_ExpiringStatuscertificate_valid_for_more2839624725/001/certificates
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.220ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "valid-long.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[6.358ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: disk sync complete" count=1
=== RUN TestCertificateService_ExpiringStatus/staging_cert_always_untrusted_even_if_expiring
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_ExpiringStatusstaging_cert_always_untrus4054643254/001/certificates
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.169ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "staging-expiring.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[4.582ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: disk sync complete" count=1
--- PASS: TestCertificateService_ExpiringStatus (0.33s)
--- PASS: TestCertificateService_ExpiringStatus/certificate_expiring_within_30_days (0.03s)
--- PASS: TestCertificateService_ExpiringStatus/certificate_valid_for_more_than_30_days (0.25s)
--- PASS: TestCertificateService_ExpiringStatus/staging_cert_always_untrusted_even_if_expiring (0.05s)
=== RUN TestCertificateService_StaleCertCleanup
=== RUN TestCertificateService_StaleCertCleanup/stale_DB_entries_removed_when_file_deleted
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_StaleCertCleanupstale_DB_entries_removed2164192469/001/certificates
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:123 record not found
[0.158ms] [rows:0] SELECT * FROM `ssl_certificates` WHERE domains = "stale.example.com" ORDER BY `ssl_certificates`.`id` LIMIT 1
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.359ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: disk sync complete" count=1
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_StaleCertCleanupstale_DB_entries_removed2164192469/001/certificates
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: removed stale DB cert" domain=stale.example.com
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[0.028ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: disk sync complete" count=0
--- PASS: TestCertificateService_StaleCertCleanup (0.10s)
--- PASS: TestCertificateService_StaleCertCleanup/stale_DB_entries_removed_when_file_deleted (0.10s)
=== RUN TestCertificateService_CertificateWithSANs
=== RUN TestCertificateService_CertificateWithSANs/certificate_with_SANs_uses_joined_domains
--- PASS: TestCertificateService_CertificateWithSANs (0.05s)
--- PASS: TestCertificateService_CertificateWithSANs/certificate_with_SANs_uses_joined_domains (0.05s)
=== RUN TestCertificateService_IsCertificateInUse
=== RUN TestCertificateService_IsCertificateInUse/certificate_not_in_use
=== RUN TestCertificateService_IsCertificateInUse/certificate_used_by_one_proxy_host
=== RUN TestCertificateService_IsCertificateInUse/certificate_used_by_multiple_proxy_hosts
=== RUN TestCertificateService_IsCertificateInUse/non-existent_certificate
=== RUN TestCertificateService_IsCertificateInUse/certificate_freed_after_proxy_host_deletion
--- PASS: TestCertificateService_IsCertificateInUse (0.57s)
--- PASS: TestCertificateService_IsCertificateInUse/certificate_not_in_use (0.07s)
--- PASS: TestCertificateService_IsCertificateInUse/certificate_used_by_one_proxy_host (0.15s)
--- PASS: TestCertificateService_IsCertificateInUse/certificate_used_by_multiple_proxy_hosts (0.18s)
--- PASS: TestCertificateService_IsCertificateInUse/non-existent_certificate (0.00s)
--- PASS: TestCertificateService_IsCertificateInUse/certificate_freed_after_proxy_host_deletion (0.16s)
=== RUN TestCertificateService_CacheBehavior
=== RUN TestCertificateService_CacheBehavior/cache_returns_consistent_results
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_CacheBehaviorcache_returns_consistent_re3010371691/001/certificates
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_CacheBehaviorcache_returns_consistent_re3010371691/001/certificates
2026/01/10 02:17:54 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[5.504ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:54Z" level=info msg="CertificateService: disk sync complete" count=1
=== RUN TestCertificateService_CacheBehavior/invalidate_cache_forces_resync
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_CacheBehaviorinvalidate_cache_forces_res1082538232/001/certificates
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_CacheBehaviorinvalidate_cache_forces_res1082538232/001/certificates
2026/01/10 02:17:55 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[4.735ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: disk sync complete" count=1
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_CacheBehaviorinvalidate_cache_forces_res1082538232/001/certificates
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_CacheBehaviorinvalidate_cache_forces_res1082538232/001/certificates
2026/01/10 02:17:55 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[0.021ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: disk sync complete" count=2
=== RUN TestCertificateService_CacheBehavior/refreshCacheFromDB_used_when_directory_nonexistent
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: scanning cert directory" certRoot=/tmp/TestCertificateService_CacheBehaviorrefreshCacheFromDB_used_whe4116796523/001/nonexistent/certificates
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: cert directory does not exist" certRoot=/tmp/TestCertificateService_CacheBehaviorrefreshCacheFromDB_used_whe4116796523/001/nonexistent/certificates
2026/01/10 02:17:55 /projects/Charon/backend/internal/services/certificate_service.go:232 no such table: proxy_hosts
[4.656ms] [rows:0] SELECT * FROM `proxy_hosts`
time="2026-01-10T02:17:55Z" level=info msg="CertificateService: disk sync complete" count=1
--- PASS: TestCertificateService_CacheBehavior (0.32s)
--- PASS: TestCertificateService_CacheBehavior/cache_returns_consistent_results (0.14s)
--- PASS: TestCertificateService_CacheBehavior/invalidate_cache_forces_resync (0.18s)
--- PASS: TestCertificateService_CacheBehavior/refreshCacheFromDB_used_when_directory_nonexistent (0.01s)
=== RUN TestCoverageBoost_ErrorPaths
=== RUN TestCoverageBoost_ErrorPaths/ProxyHostService_GetByUUID_Error
=== RUN TestCoverageBoost_ErrorPaths/ProxyHostService_List_WithValidDB
=== RUN TestCoverageBoost_ErrorPaths/RemoteServerService_GetByUUID_Error
=== RUN TestCoverageBoost_ErrorPaths/RemoteServerService_List_WithValidDB
=== RUN TestCoverageBoost_ErrorPaths/SecurityService_Get_NotFound
=== RUN TestCoverageBoost_ErrorPaths/SecurityService_ListRuleSets_EmptyDB
=== RUN TestCoverageBoost_ErrorPaths/SecurityService_DeleteRuleSet_NotFound
=== RUN TestCoverageBoost_ErrorPaths/SecurityService_VerifyBreakGlass_MissingConfig
=== RUN TestCoverageBoost_ErrorPaths/SecurityService_GenerateBreakGlassToken_Success
=== RUN TestCoverageBoost_ErrorPaths/NotificationService_ListTemplates_EmptyDB
=== RUN TestCoverageBoost_ErrorPaths/NotificationService_GetTemplate_NotFound
--- PASS: TestCoverageBoost_ErrorPaths (0.74s)
--- PASS: TestCoverageBoost_ErrorPaths/ProxyHostService_GetByUUID_Error (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/ProxyHostService_List_WithValidDB (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/RemoteServerService_GetByUUID_Error (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/RemoteServerService_List_WithValidDB (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/SecurityService_Get_NotFound (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/SecurityService_ListRuleSets_EmptyDB (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/SecurityService_DeleteRuleSet_NotFound (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/SecurityService_VerifyBreakGlass_MissingConfig (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/SecurityService_GenerateBreakGlassToken_Success (0.72s)
--- PASS: TestCoverageBoost_ErrorPaths/NotificationService_ListTemplates_EmptyDB (0.00s)
--- PASS: TestCoverageBoost_ErrorPaths/NotificationService_GetTemplate_NotFound (0.00s)
=== RUN TestCoverageBoost_SecurityService_AdditionalPaths
=== RUN TestCoverageBoost_SecurityService_AdditionalPaths/Upsert_Create
=== RUN TestCoverageBoost_SecurityService_AdditionalPaths/UpsertRuleSet_Create
--- PASS: TestCoverageBoost_SecurityService_AdditionalPaths (0.01s)
--- PASS: TestCoverageBoost_SecurityService_AdditionalPaths/Upsert_Create (0.00s)
--- PASS: TestCoverageBoost_SecurityService_AdditionalPaths/UpsertRuleSet_Create (0.00s)
=== RUN TestCoverageBoost_MinInt
=== RUN TestCoverageBoost_MinInt/minInt_FirstSmaller
=== RUN TestCoverageBoost_MinInt/minInt_SecondSmaller
=== RUN TestCoverageBoost_MinInt/minInt_Equal
--- PASS: TestCoverageBoost_MinInt (0.00s)
--- PASS: TestCoverageBoost_MinInt/minInt_FirstSmaller (0.00s)
--- PASS: TestCoverageBoost_MinInt/minInt_SecondSmaller (0.00s)
--- PASS: TestCoverageBoost_MinInt/minInt_Equal (0.00s)
=== RUN TestCoverageBoost_MailService_ErrorPaths
=== RUN TestCoverageBoost_MailService_ErrorPaths/GetSMTPConfig_EmptyDB
=== RUN TestCoverageBoost_MailService_ErrorPaths/IsConfigured_NoConfig
=== RUN TestCoverageBoost_MailService_ErrorPaths/TestConnection_NoConfig
=== RUN TestCoverageBoost_MailService_ErrorPaths/SendEmail_NoConfig
--- PASS: TestCoverageBoost_MailService_ErrorPaths (0.00s)
--- PASS: TestCoverageBoost_MailService_ErrorPaths/GetSMTPConfig_EmptyDB (0.00s)
--- PASS: TestCoverageBoost_MailService_ErrorPaths/IsConfigured_NoConfig (0.00s)
--- PASS: TestCoverageBoost_MailService_ErrorPaths/TestConnection_NoConfig (0.00s)
--- PASS: TestCoverageBoost_MailService_ErrorPaths/SendEmail_NoConfig (0.00s)
=== RUN TestCoverageBoost_AccessListService_Paths
=== RUN TestCoverageBoost_AccessListService_Paths/GetByID_NotFound
=== RUN TestCoverageBoost_AccessListService_Paths/GetByUUID_NotFound
=== RUN TestCoverageBoost_AccessListService_Paths/List_EmptyDB
--- PASS: TestCoverageBoost_AccessListService_Paths (0.00s)
--- PASS: TestCoverageBoost_AccessListService_Paths/GetByID_NotFound (0.00s)
--- PASS: TestCoverageBoost_AccessListService_Paths/GetByUUID_NotFound (0.00s)
--- PASS: TestCoverageBoost_AccessListService_Paths/List_EmptyDB (0.00s)
=== RUN TestCoverageBoost_HelperFunctions
=== RUN TestCoverageBoost_HelperFunctions/extractPort_HTTP
=== RUN TestCoverageBoost_HelperFunctions/extractPort_HTTPS
=== RUN TestCoverageBoost_HelperFunctions/extractPort_Invalid
=== RUN TestCoverageBoost_HelperFunctions/hasHeader_Found
=== RUN TestCoverageBoost_HelperFunctions/hasHeader_NotFound
=== RUN TestCoverageBoost_HelperFunctions/hasHeader_EmptyMap
=== RUN TestCoverageBoost_HelperFunctions/isPrivateIP_PrivateRanges
=== RUN TestCoverageBoost_HelperFunctions/isPrivateIP_PublicIP
--- PASS: TestCoverageBoost_HelperFunctions (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/extractPort_HTTP (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/extractPort_HTTPS (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/extractPort_Invalid (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/hasHeader_Found (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/hasHeader_NotFound (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/hasHeader_EmptyMap (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/isPrivateIP_PrivateRanges (0.00s)
--- PASS: TestCoverageBoost_HelperFunctions/isPrivateIP_PublicIP (0.00s)
=== RUN TestCoverageBoost_ProxyHostService_DB
=== RUN TestCoverageBoost_ProxyHostService_DB/DB_ReturnsValidDB
--- PASS: TestCoverageBoost_ProxyHostService_DB (0.00s)
--- PASS: TestCoverageBoost_ProxyHostService_DB/DB_ReturnsValidDB (0.00s)
=== RUN TestCoverageBoost_DNSProviderService_SupportedTypes
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
=== RUN TestCoverageBoost_DNSProviderService_SupportedTypes/GetSupportedProviderTypes
=== RUN TestCoverageBoost_DNSProviderService_SupportedTypes/GetProviderCredentialFields_ValidProvider
=== RUN TestCoverageBoost_DNSProviderService_SupportedTypes/GetProviderCredentialFields_InvalidProvider
--- PASS: TestCoverageBoost_DNSProviderService_SupportedTypes (0.00s)
--- PASS: TestCoverageBoost_DNSProviderService_SupportedTypes/GetSupportedProviderTypes (0.00s)
--- PASS: TestCoverageBoost_DNSProviderService_SupportedTypes/GetProviderCredentialFields_ValidProvider (0.00s)
--- PASS: TestCoverageBoost_DNSProviderService_SupportedTypes/GetProviderCredentialFields_InvalidProvider (0.00s)
=== RUN TestCoverageBoost_SecurityService_Close
=== RUN TestCoverageBoost_SecurityService_Close/Close_Success
=== RUN TestCoverageBoost_SecurityService_Close/Flush_Success
--- PASS: TestCoverageBoost_SecurityService_Close (0.01s)
--- PASS: TestCoverageBoost_SecurityService_Close/Close_Success (0.00s)
--- PASS: TestCoverageBoost_SecurityService_Close/Flush_Success (0.01s)
=== RUN TestCoverageBoost_BackupService_GetAvailableSpace
coverage_boost_test.go:387: BackupService requires full config.Config, tested elsewhere
--- SKIP: TestCoverageBoost_BackupService_GetAvailableSpace (0.00s)
=== RUN TestCoverageBoost_CertificateService_ListCertificates
coverage_boost_test.go:393: Certificate models tested in certificate_service_test.go
--- SKIP: TestCoverageBoost_CertificateService_ListCertificates (0.00s)
=== RUN TestCoverageBoost_MailService_SendSSL
=== RUN TestCoverageBoost_MailService_SendSSL/SendEmail_SSL_InvalidHost
=== RUN TestCoverageBoost_MailService_SendSSL/SendEmail_STARTTLS_InvalidHost
--- PASS: TestCoverageBoost_MailService_SendSSL (0.01s)
--- PASS: TestCoverageBoost_MailService_SendSSL/SendEmail_SSL_InvalidHost (0.01s)
--- PASS: TestCoverageBoost_MailService_SendSSL/SendEmail_STARTTLS_InvalidHost (0.00s)
=== RUN TestCoverageBoost_CredentialService_ErrorPaths
coverage_boost_test.go:456: CredentialService requires crypto.EncryptionService, tested elsewhere
--- SKIP: TestCoverageBoost_CredentialService_ErrorPaths (0.00s)
=== RUN TestCoverageBoost_GeoIPService_ErrorPaths
=== RUN TestCoverageBoost_GeoIPService_ErrorPaths/NewGeoIPService_InvalidPath
--- PASS: TestCoverageBoost_GeoIPService_ErrorPaths (0.00s)
--- PASS: TestCoverageBoost_GeoIPService_ErrorPaths/NewGeoIPService_InvalidPath (0.00s)
=== RUN TestCoverageBoost_DockerService_ErrorPaths
coverage_boost_test.go:470: Docker service tests require specific setup, tested in docker_service_test.go
--- SKIP: TestCoverageBoost_DockerService_ErrorPaths (0.00s)
=== RUN TestCoverageBoost_UptimeService_FlushNotifications
=== RUN TestCoverageBoost_UptimeService_FlushNotifications/FlushPendingNotifications
--- PASS: TestCoverageBoost_UptimeService_FlushNotifications (0.02s)
--- PASS: TestCoverageBoost_UptimeService_FlushNotifications/FlushPendingNotifications (0.00s)
=== RUN TestCoverageBoost_LogService_NewLogService
coverage_boost_test.go:493: LogService requires full config, tested in log_service_test.go
--- SKIP: TestCoverageBoost_LogService_NewLogService (0.00s)
=== RUN TestCoverageBoost_UpdateService_ClearCache
=== RUN TestCoverageBoost_UpdateService_ClearCache/ClearCache
=== RUN TestCoverageBoost_UpdateService_ClearCache/SetCurrentVersion
--- PASS: TestCoverageBoost_UpdateService_ClearCache (0.00s)
--- PASS: TestCoverageBoost_UpdateService_ClearCache/ClearCache (0.00s)
--- PASS: TestCoverageBoost_UpdateService_ClearCache/SetCurrentVersion (0.00s)
=== RUN TestCoverageBoost_NotificationService_Providers
=== RUN TestCoverageBoost_NotificationService_Providers/ListProviders_EmptyDB
=== RUN TestCoverageBoost_NotificationService_Providers/CreateProvider
=== RUN TestCoverageBoost_NotificationService_Providers/UpdateProvider
=== RUN TestCoverageBoost_NotificationService_Providers/DeleteProvider
--- PASS: TestCoverageBoost_NotificationService_Providers (0.01s)
--- PASS: TestCoverageBoost_NotificationService_Providers/ListProviders_EmptyDB (0.00s)
--- PASS: TestCoverageBoost_NotificationService_Providers/CreateProvider (0.00s)
--- PASS: TestCoverageBoost_NotificationService_Providers/UpdateProvider (0.00s)
--- PASS: TestCoverageBoost_NotificationService_Providers/DeleteProvider (0.00s)
=== RUN TestCoverageBoost_NotificationService_CRUD
=== RUN TestCoverageBoost_NotificationService_CRUD/List_EmptyDB
=== RUN TestCoverageBoost_NotificationService_CRUD/MarkAllAsRead_Success
--- PASS: TestCoverageBoost_NotificationService_CRUD (0.00s)
--- PASS: TestCoverageBoost_NotificationService_CRUD/List_EmptyDB (0.00s)
--- PASS: TestCoverageBoost_NotificationService_CRUD/MarkAllAsRead_Success (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_NilDB
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=crowdsec data_dir=/tmp/crowdsec
--- PASS: TestReconcileCrowdSecOnStartup_NilDB (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_NilExecutor
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=crowdsec data_dir=/tmp/crowdsec
--- PASS: TestReconcileCrowdSecOnStartup_NilExecutor (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_NoSecurityConfig_NoSettings
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-3422589158/crowdsec data_dir=/tmp/crowdsec-test-3422589158/data
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: no SecurityConfig found, checking Settings table for user preference"
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: default SecurityConfig created from Settings preference" crowdsec_mode=disabled enabled=false source=settings_table
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation skipped: both SecurityConfig and Settings indicate disabled" db_mode=disabled setting_enabled=false
--- PASS: TestReconcileCrowdSecOnStartup_NoSecurityConfig_NoSettings (0.01s)
=== RUN TestReconcileCrowdSecOnStartup_NoSecurityConfig_SettingsEnabled
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-1248194343/crowdsec data_dir=/tmp/crowdsec-test-1248194343/data
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: no SecurityConfig found, checking Settings table for user preference"
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: found existing Settings table preference" enabled=true setting_value=true
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: default SecurityConfig created from Settings preference" crowdsec_mode=local enabled=true source=settings_table
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:17:55Z" level=info msg="CrowdSec reconciliation: starting CrowdSec (mode=local, not currently running)" bin_path=/tmp/crowdsec-test-1248194343/crowdsec data_dir=/tmp/crowdsec-test-1248194343/data
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: successfully started and verified CrowdSec" pid=12345 verified=true
--- PASS: TestReconcileCrowdSecOnStartup_NoSecurityConfig_SettingsEnabled (2.01s)
=== RUN TestReconcileCrowdSecOnStartup_NoSecurityConfig_SettingsDisabled
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-552327634/crowdsec data_dir=/tmp/crowdsec-test-552327634/data
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: no SecurityConfig found, checking Settings table for user preference"
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: found existing Settings table preference" enabled=false setting_value=false
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: default SecurityConfig created from Settings preference" crowdsec_mode=disabled enabled=false source=settings_table
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation skipped: both SecurityConfig and Settings indicate disabled" db_mode=disabled setting_enabled=false
--- PASS: TestReconcileCrowdSecOnStartup_NoSecurityConfig_SettingsDisabled (0.01s)
=== RUN TestReconcileCrowdSecOnStartup_ModeDisabled
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=crowdsec data_dir=/tmp/crowdsec
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation skipped: both SecurityConfig and Settings indicate disabled" db_mode=disabled setting_enabled=false
--- PASS: TestReconcileCrowdSecOnStartup_ModeDisabled (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_ModeLocal_AlreadyRunning
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-3437819381/crowdsec data_dir=/tmp/crowdsec-test-3437819381/data
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:17:57Z" level=info msg="CrowdSec reconciliation: already running" pid=12345
--- PASS: TestReconcileCrowdSecOnStartup_ModeLocal_AlreadyRunning (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_ModeLocal_NotRunning_Starts
time="2026-01-10T02:17:58Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-3905439510/crowdsec data_dir=/tmp/crowdsec-test-3905439510/data
time="2026-01-10T02:17:58Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:17:58Z" level=info msg="CrowdSec reconciliation: starting CrowdSec (mode=local, not currently running)" bin_path=/tmp/crowdsec-test-3905439510/crowdsec data_dir=/tmp/crowdsec-test-3905439510/data
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: successfully started and verified CrowdSec" pid=99999 verified=true
--- PASS: TestReconcileCrowdSecOnStartup_ModeLocal_NotRunning_Starts (2.01s)
=== RUN TestReconcileCrowdSecOnStartup_ModeLocal_StartError
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-2846461424/crowdsec data_dir=/tmp/crowdsec-test-2846461424/data
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting CrowdSec (mode=local, not currently running)" bin_path=/tmp/crowdsec-test-2846461424/crowdsec data_dir=/tmp/crowdsec-test-2846461424/data
time="2026-01-10T02:18:00Z" level=error msg="CrowdSec reconciliation: FAILED to start CrowdSec - check binary and config" bin_path=/tmp/crowdsec-test-2846461424/crowdsec data_dir=/tmp/crowdsec-test-2846461424/data error="assert.AnError general error for testing"
--- PASS: TestReconcileCrowdSecOnStartup_ModeLocal_StartError (0.01s)
=== RUN TestReconcileCrowdSecOnStartup_StatusError
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-2368966688/crowdsec data_dir=/tmp/crowdsec-test-2368966688/data
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:18:00Z" level=warning msg="CrowdSec reconciliation: failed to check status" error="assert.AnError general error for testing"
--- PASS: TestReconcileCrowdSecOnStartup_StatusError (0.01s)
=== RUN TestReconcileCrowdSecOnStartup_BinaryNotFound
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-1992083819/data/nonexistent_binary data_dir=/tmp/crowdsec-test-1992083819/data
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:18:00Z" level=error msg="CrowdSec reconciliation: binary not found, cannot start" path=/tmp/crowdsec-test-1992083819/data/nonexistent_binary
--- PASS: TestReconcileCrowdSecOnStartup_BinaryNotFound (0.01s)
=== RUN TestReconcileCrowdSecOnStartup_ConfigDirNotFound
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-1748862425/crowdsec data_dir=/tmp/crowdsec-test-1748862425/data
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:18:00Z" level=error msg="CrowdSec reconciliation: config directory not found, cannot start" path=/tmp/crowdsec-test-1748862425/data/config
--- PASS: TestReconcileCrowdSecOnStartup_ConfigDirNotFound (0.01s)
=== RUN TestReconcileCrowdSecOnStartup_SettingsOverrideEnabled
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-3010292195/crowdsec data_dir=/tmp/crowdsec-test-3010292195/data
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting based on Settings table override" setting=true
time="2026-01-10T02:18:00Z" level=info msg="CrowdSec reconciliation: starting CrowdSec (mode=local, not currently running)" bin_path=/tmp/crowdsec-test-3010292195/crowdsec data_dir=/tmp/crowdsec-test-3010292195/data
time="2026-01-10T02:18:02Z" level=info msg="CrowdSec reconciliation: successfully started and verified CrowdSec" pid=12345 verified=true
--- PASS: TestReconcileCrowdSecOnStartup_SettingsOverrideEnabled (2.01s)
=== RUN TestReconcileCrowdSecOnStartup_VerificationFails
time="2026-01-10T02:18:02Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-903539656/crowdsec data_dir=/tmp/crowdsec-test-903539656/data
time="2026-01-10T02:18:02Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:18:02Z" level=info msg="CrowdSec reconciliation: starting CrowdSec (mode=local, not currently running)" bin_path=/tmp/crowdsec-test-903539656/crowdsec data_dir=/tmp/crowdsec-test-903539656/data
time="2026-01-10T02:18:04Z" level=error msg="CrowdSec reconciliation: process started but is no longer running - may have crashed" actual_pid=0 expected_pid=12345 running=false
--- PASS: TestReconcileCrowdSecOnStartup_VerificationFails (2.01s)
=== RUN TestReconcileCrowdSecOnStartup_VerificationError
time="2026-01-10T02:18:04Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-265968278/crowdsec data_dir=/tmp/crowdsec-test-265968278/data
time="2026-01-10T02:18:04Z" level=info msg="CrowdSec reconciliation: starting based on SecurityConfig mode='local'" mode=local
time="2026-01-10T02:18:04Z" level=info msg="CrowdSec reconciliation: starting CrowdSec (mode=local, not currently running)" bin_path=/tmp/crowdsec-test-265968278/crowdsec data_dir=/tmp/crowdsec-test-265968278/data
time="2026-01-10T02:18:06Z" level=warning msg="CrowdSec reconciliation: started but failed to verify status" error="assert.AnError general error for testing" expected_pid=12345
--- PASS: TestReconcileCrowdSecOnStartup_VerificationError (2.01s)
=== RUN TestReconcileCrowdSecOnStartup_DBError
time="2026-01-10T02:18:06Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-3340642405/crowdsec data_dir=/tmp/crowdsec-test-3340642405/data
time="2026-01-10T02:18:06Z" level=warning msg="CrowdSec reconciliation skipped: SecurityConfig table not found - run 'charon migrate' to fix"
--- PASS: TestReconcileCrowdSecOnStartup_DBError (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_CreateConfigDBError
time="2026-01-10T02:18:06Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-3639284342/crowdsec data_dir=/tmp/crowdsec-test-3639284342/data
time="2026-01-10T02:18:06Z" level=warning msg="CrowdSec reconciliation skipped: SecurityConfig table not found - run 'charon migrate' to fix"
--- PASS: TestReconcileCrowdSecOnStartup_CreateConfigDBError (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_SettingsTableQueryError
time="2026-01-10T02:18:06Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-3773669688/crowdsec data_dir=/tmp/crowdsec-test-3773669688/data
time="2026-01-10T02:18:06Z" level=info msg="CrowdSec reconciliation skipped: both SecurityConfig and Settings indicate disabled" db_mode=remote setting_enabled=false
--- PASS: TestReconcileCrowdSecOnStartup_SettingsTableQueryError (0.00s)
=== RUN TestReconcileCrowdSecOnStartup_SettingsOverrideNonLocalMode
time="2026-01-10T02:18:06Z" level=info msg="CrowdSec reconciliation: starting startup check" bin_path=/tmp/crowdsec-test-1355592154/crowdsec data_dir=/tmp/crowdsec-test-1355592154/data
time="2026-01-10T02:18:06Z" level=info msg="CrowdSec reconciliation: starting based on Settings table override" setting=true
time="2026-01-10T02:18:06Z" level=info msg="CrowdSec reconciliation: starting CrowdSec (mode=local, not currently running)" bin_path=/tmp/crowdsec-test-1355592154/crowdsec data_dir=/tmp/crowdsec-test-1355592154/data
time="2026-01-10T02:18:08Z" level=info msg="CrowdSec reconciliation: successfully started and verified CrowdSec" pid=12345 verified=true
--- PASS: TestReconcileCrowdSecOnStartup_SettingsOverrideNonLocalMode (2.01s)
=== RUN TestNewDNSDetectionService
--- PASS: TestNewDNSDetectionService (0.00s)
=== RUN TestGetNameserverPatterns
--- PASS: TestGetNameserverPatterns (0.00s)
=== RUN TestMatchNameservers
=== RUN TestMatchNameservers/Cloudflare_-_high_confidence
=== RUN TestMatchNameservers/Route53_-_high_confidence
=== RUN TestMatchNameservers/DigitalOcean_-_high_confidence
=== RUN TestMatchNameservers/Hetzner_-_high_confidence
=== RUN TestMatchNameservers/Mixed_nameservers_-_medium_confidence
=== RUN TestMatchNameservers/Single_match_-_low_confidence
=== RUN TestMatchNameservers/No_match
=== RUN TestMatchNameservers/Empty_nameservers
--- PASS: TestMatchNameservers (0.00s)
--- PASS: TestMatchNameservers/Cloudflare_-_high_confidence (0.00s)
--- PASS: TestMatchNameservers/Route53_-_high_confidence (0.00s)
--- PASS: TestMatchNameservers/DigitalOcean_-_high_confidence (0.00s)
--- PASS: TestMatchNameservers/Hetzner_-_high_confidence (0.00s)
--- PASS: TestMatchNameservers/Mixed_nameservers_-_medium_confidence (0.00s)
--- PASS: TestMatchNameservers/Single_match_-_low_confidence (0.00s)
--- PASS: TestMatchNameservers/No_match (0.00s)
--- PASS: TestMatchNameservers/Empty_nameservers (0.00s)
=== RUN TestDetectProvider_WithMockedDNS
=== RUN TestDetectProvider_WithMockedDNS/handles_wildcard_domain
=== RUN TestDetectProvider_WithMockedDNS/handles_empty_domain
=== RUN TestDetectProvider_WithMockedDNS/normalizes_domain
--- PASS: TestDetectProvider_WithMockedDNS (0.00s)
--- PASS: TestDetectProvider_WithMockedDNS/handles_wildcard_domain (0.00s)
--- PASS: TestDetectProvider_WithMockedDNS/handles_empty_domain (0.00s)
--- PASS: TestDetectProvider_WithMockedDNS/normalizes_domain (0.00s)
=== RUN TestCaching
=== RUN TestCaching/retrieves_cached_result
=== RUN TestCaching/returns_nil_for_non-existent_cache
=== RUN TestCaching/expires_old_cache_entries
--- PASS: TestCaching (0.01s)
--- PASS: TestCaching/retrieves_cached_result (0.00s)
--- PASS: TestCaching/returns_nil_for_non-existent_cache (0.00s)
--- PASS: TestCaching/expires_old_cache_entries (0.01s)
=== RUN TestSuggestConfiguredProvider
=== RUN TestSuggestConfiguredProvider/suggests_default_cloudflare_provider
=== RUN TestSuggestConfiguredProvider/suggests_route53_provider
=== RUN TestSuggestConfiguredProvider/returns_nil_for_disabled_provider
=== RUN TestSuggestConfiguredProvider/returns_nil_for_unknown_provider
--- PASS: TestSuggestConfiguredProvider (0.01s)
--- PASS: TestSuggestConfiguredProvider/suggests_default_cloudflare_provider (0.00s)
--- PASS: TestSuggestConfiguredProvider/suggests_route53_provider (0.00s)
--- PASS: TestSuggestConfiguredProvider/returns_nil_for_disabled_provider (0.00s)
--- PASS: TestSuggestConfiguredProvider/returns_nil_for_unknown_provider (0.00s)
=== RUN TestDetectionResult_Validation
=== RUN TestDetectionResult_Validation/result_with_all_fields
=== RUN TestDetectionResult_Validation/result_with_error
--- PASS: TestDetectionResult_Validation (0.00s)
--- PASS: TestDetectionResult_Validation/result_with_all_fields (0.00s)
--- PASS: TestDetectionResult_Validation/result_with_error (0.00s)
=== RUN TestBuiltInNameserversCompleteness
--- PASS: TestBuiltInNameserversCompleteness (0.00s)
=== RUN TestCaseInsensitiveMatching
=== RUN TestCaseInsensitiveMatching/lowercase
=== RUN TestCaseInsensitiveMatching/uppercase
=== RUN TestCaseInsensitiveMatching/mixed_case
--- PASS: TestCaseInsensitiveMatching (0.00s)
--- PASS: TestCaseInsensitiveMatching/lowercase (0.00s)
--- PASS: TestCaseInsensitiveMatching/uppercase (0.00s)
--- PASS: TestCaseInsensitiveMatching/mixed_case (0.00s)
=== RUN TestConcurrentCacheAccess
--- PASS: TestConcurrentCacheAccess (0.00s)
=== RUN TestDatabaseError
2026/01/10 02:18:08 /projects/Charon/backend/internal/services/dns_detection_service.go:182 sql: database is closed
[0.358ms] [rows:0] SELECT * FROM `dns_providers` WHERE provider_type = "cloudflare" AND enabled = true ORDER BY is_default DESC, name ASC
--- PASS: TestDatabaseError (0.00s)
=== RUN TestDNSProviderService_Create
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
=== RUN TestDNSProviderService_Create/valid_cloudflare_provider
=== RUN TestDNSProviderService_Create/valid_route53_provider_with_defaults
=== RUN TestDNSProviderService_Create/invalid_provider_type
=== RUN TestDNSProviderService_Create/missing_required_credentials
--- PASS: TestDNSProviderService_Create (0.01s)
--- PASS: TestDNSProviderService_Create/valid_cloudflare_provider (0.00s)
--- PASS: TestDNSProviderService_Create/valid_route53_provider_with_defaults (0.00s)
--- PASS: TestDNSProviderService_Create/invalid_provider_type (0.00s)
--- PASS: TestDNSProviderService_Create/missing_required_credentials (0.00s)
=== RUN TestDNSProviderService_DefaultProviderLogic
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_DefaultProviderLogic (0.01s)
=== RUN TestDNSProviderService_List
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_List (0.01s)
=== RUN TestDNSProviderService_Get
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Get (0.01s)
=== RUN TestDNSProviderService_Update
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
=== RUN TestDNSProviderService_Update/update_name_only
=== RUN TestDNSProviderService_Update/update_credentials
=== RUN TestDNSProviderService_Update/update_enabled_status
=== RUN TestDNSProviderService_Update/update_non-existent_provider
=== RUN TestDNSProviderService_Update/update_to_set_default
--- PASS: TestDNSProviderService_Update (0.01s)
--- PASS: TestDNSProviderService_Update/update_name_only (0.00s)
--- PASS: TestDNSProviderService_Update/update_credentials (0.00s)
--- PASS: TestDNSProviderService_Update/update_enabled_status (0.00s)
--- PASS: TestDNSProviderService_Update/update_non-existent_provider (0.00s)
--- PASS: TestDNSProviderService_Update/update_to_set_default (0.00s)
=== RUN TestDNSProviderService_Delete
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Delete (0.01s)
=== RUN TestDNSProviderService_GetDecryptedCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_GetDecryptedCredentials (0.01s)
=== RUN TestDNSProviderService_TestCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
=== RUN TestDNSProviderService_TestCredentials/valid_credentials
=== RUN TestDNSProviderService_TestCredentials/invalid_provider_type
=== RUN TestDNSProviderService_TestCredentials/missing_credentials
--- PASS: TestDNSProviderService_TestCredentials (0.00s)
--- PASS: TestDNSProviderService_TestCredentials/valid_credentials (0.00s)
--- PASS: TestDNSProviderService_TestCredentials/invalid_provider_type (0.00s)
--- PASS: TestDNSProviderService_TestCredentials/missing_credentials (0.00s)
=== RUN TestDNSProviderService_Test
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Test (0.01s)
=== RUN TestValidateCredentials
=== RUN TestValidateCredentials/valid_cloudflare
=== RUN TestValidateCredentials/valid_route53
=== RUN TestValidateCredentials/missing_field
=== RUN TestValidateCredentials/empty_field_value
=== RUN TestValidateCredentials/invalid_provider_type
--- PASS: TestValidateCredentials (0.00s)
--- PASS: TestValidateCredentials/valid_cloudflare (0.00s)
--- PASS: TestValidateCredentials/valid_route53 (0.00s)
--- PASS: TestValidateCredentials/missing_field (0.00s)
--- PASS: TestValidateCredentials/empty_field_value (0.00s)
--- PASS: TestValidateCredentials/invalid_provider_type (0.00s)
=== RUN TestIsValidProviderType
=== RUN TestIsValidProviderType/cloudflare
=== RUN TestIsValidProviderType/route53
=== RUN TestIsValidProviderType/digitalocean
=== RUN TestIsValidProviderType/invalid
=== RUN TestIsValidProviderType/empty
--- PASS: TestIsValidProviderType (0.00s)
--- PASS: TestIsValidProviderType/cloudflare (0.00s)
--- PASS: TestIsValidProviderType/route53 (0.00s)
--- PASS: TestIsValidProviderType/digitalocean (0.00s)
--- PASS: TestIsValidProviderType/invalid (0.00s)
--- PASS: TestIsValidProviderType/empty (0.00s)
=== RUN TestCredentialEncryptionRoundtrip
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialEncryptionRoundtrip (0.01s)
=== RUN TestUpdatePreservesCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestUpdatePreservesCredentials (0.01s)
=== RUN TestEncryptionServiceIntegration
--- PASS: TestEncryptionServiceIntegration (0.01s)
=== RUN TestDNSProviderService_TestFailure
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_TestFailure (0.00s)
=== RUN TestDNSProviderService_GetDecryptedCredentialsError
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_GetDecryptedCredentialsError (0.01s)
=== RUN TestDNSProviderService_GetDecryptedCredentials_InvalidJSON_ReturnsErrDecryptionFailed
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_GetDecryptedCredentials_InvalidJSON_ReturnsErrDecryptionFailed (0.00s)
=== RUN TestDNSProviderService_UpdateDefaultLogic
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_UpdateDefaultLogic (0.01s)
=== RUN TestAllProviderTypes
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
=== RUN TestAllProviderTypes/route53
=== RUN TestAllProviderTypes/digitalocean
=== RUN TestAllProviderTypes/googleclouddns
=== RUN TestAllProviderTypes/vultr
=== RUN TestAllProviderTypes/cloudflare
=== RUN TestAllProviderTypes/namecheap
=== RUN TestAllProviderTypes/godaddy
=== RUN TestAllProviderTypes/azure
=== RUN TestAllProviderTypes/hetzner
=== RUN TestAllProviderTypes/dnsimple
--- PASS: TestAllProviderTypes (0.03s)
--- PASS: TestAllProviderTypes/route53 (0.00s)
--- PASS: TestAllProviderTypes/digitalocean (0.00s)
--- PASS: TestAllProviderTypes/googleclouddns (0.00s)
--- PASS: TestAllProviderTypes/vultr (0.00s)
--- PASS: TestAllProviderTypes/cloudflare (0.00s)
--- PASS: TestAllProviderTypes/namecheap (0.00s)
--- PASS: TestAllProviderTypes/godaddy (0.00s)
--- PASS: TestAllProviderTypes/azure (0.00s)
--- PASS: TestAllProviderTypes/hetzner (0.00s)
--- PASS: TestAllProviderTypes/dnsimple (0.00s)
=== RUN TestDNSProviderService_UpdateInvalidCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_UpdateInvalidCredentials (0.01s)
=== RUN TestDNSProviderService_CreateEncryptionError
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_CreateEncryptionError (0.00s)
=== RUN TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
=== RUN TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval/update_propagation_timeout
=== RUN TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval/update_polling_interval
=== RUN TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval/update_both_timeout_and_interval
--- PASS: TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval (0.01s)
--- PASS: TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval/update_propagation_timeout (0.00s)
--- PASS: TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval/update_polling_interval (0.00s)
--- PASS: TestDNSProviderService_Update_PropagationTimeoutAndPollingInterval/update_both_timeout_and_interval (0.00s)
=== RUN TestDNSProviderService_Test_NonExistentProvider
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Test_NonExistentProvider (0.00s)
=== RUN TestDNSProviderService_GetDecryptedCredentials_NonExistentProvider
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_GetDecryptedCredentials_NonExistentProvider (0.01s)
=== RUN TestDNSProviderService_TestWithFailedCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_TestWithFailedCredentials (0.01s)
=== RUN TestDNSProviderService_CreateWithEmptyCredentialValue
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_CreateWithEmptyCredentialValue (0.01s)
=== RUN TestDNSProviderService_Update_EmptyCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Update_EmptyCredentials (0.01s)
=== RUN TestDNSProviderService_Update_NilCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Update_NilCredentials (0.00s)
=== RUN TestDNSProviderService_Create_WithExistingDefault
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Create_WithExistingDefault (0.01s)
=== RUN TestDNSProviderService_Delete_AlreadyDeleted
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Delete_AlreadyDeleted (0.01s)
=== RUN TestTestDNSProviderCredentials_Validation
=== RUN TestTestDNSProviderCredentials_Validation/valid_cloudflare_credentials
=== RUN TestTestDNSProviderCredentials_Validation/missing_required_field
=== RUN TestTestDNSProviderCredentials_Validation/empty_required_field
--- PASS: TestTestDNSProviderCredentials_Validation (0.00s)
--- PASS: TestTestDNSProviderCredentials_Validation/valid_cloudflare_credentials (0.00s)
--- PASS: TestTestDNSProviderCredentials_Validation/missing_required_field (0.00s)
--- PASS: TestTestDNSProviderCredentials_Validation/empty_required_field (0.00s)
=== RUN TestDNSProviderService_Update_CredentialValidationError
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Update_CredentialValidationError (0.01s)
=== RUN TestDNSProviderService_TestCredentials_AllProviders
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
=== RUN TestDNSProviderService_TestCredentials_AllProviders/dnsimple
=== RUN TestDNSProviderService_TestCredentials_AllProviders/route53
=== RUN TestDNSProviderService_TestCredentials_AllProviders/digitalocean
=== RUN TestDNSProviderService_TestCredentials_AllProviders/googleclouddns
=== RUN TestDNSProviderService_TestCredentials_AllProviders/azure
=== RUN TestDNSProviderService_TestCredentials_AllProviders/hetzner
=== RUN TestDNSProviderService_TestCredentials_AllProviders/vultr
=== RUN TestDNSProviderService_TestCredentials_AllProviders/cloudflare
=== RUN TestDNSProviderService_TestCredentials_AllProviders/namecheap
=== RUN TestDNSProviderService_TestCredentials_AllProviders/godaddy
--- PASS: TestDNSProviderService_TestCredentials_AllProviders (0.01s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/dnsimple (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/route53 (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/digitalocean (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/googleclouddns (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/azure (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/hetzner (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/vultr (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/cloudflare (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/namecheap (0.00s)
--- PASS: TestDNSProviderService_TestCredentials_AllProviders/godaddy (0.00s)
=== RUN TestDNSProviderService_List_Empty
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_List_Empty (0.01s)
=== RUN TestDNSProviderService_Create_DefaultsApplied
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Create_DefaultsApplied (0.01s)
=== RUN TestDNSProviderService_Create_CustomTimeouts
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Create_CustomTimeouts (0.00s)
=== RUN TestDNSProviderService_List_OrderByDefault
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_List_OrderByDefault (0.01s)
=== RUN TestDNSProviderService_Update_MultipleFields
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Update_MultipleFields (0.01s)
=== RUN TestDNSProviderService_GetDecryptedCredentials_UpdatesLastUsed
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_GetDecryptedCredentials_UpdatesLastUsed (0.01s)
=== RUN TestDNSProviderService_Test_UpdatesStatistics
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Test_UpdatesStatistics (0.01s)
=== RUN TestDNSProviderService_Test_FailureUpdatesStatistics
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Test_FailureUpdatesStatistics (0.01s)
=== RUN TestDNSProviderService_List_DBError
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_List_DBError (0.00s)
=== RUN TestDNSProviderService_Get_DBError
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Get_DBError (0.00s)
=== RUN TestDNSProviderService_Create_DBErrorOnDefaultUnset
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Create_DBErrorOnDefaultUnset (0.01s)
=== RUN TestDNSProviderService_Create_DBErrorOnCreate
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Create_DBErrorOnCreate (0.00s)
=== RUN TestDNSProviderService_Update_DBErrorOnSave
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Update_DBErrorOnSave (0.01s)
=== RUN TestDNSProviderService_Update_DBErrorOnDefaultUnset
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Update_DBErrorOnDefaultUnset (0.01s)
=== RUN TestDNSProviderService_Delete_DBError
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_Delete_DBError (0.01s)
=== RUN TestDNSProviderService_AuditLogging_Create
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_AuditLogging_Create (0.11s)
=== RUN TestDNSProviderService_AuditLogging_Update
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_AuditLogging_Update (0.31s)
=== RUN TestDNSProviderService_AuditLogging_Delete
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_AuditLogging_Delete (0.31s)
=== RUN TestDNSProviderService_AuditLogging_Test
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_AuditLogging_Test (0.31s)
=== RUN TestDNSProviderService_AuditLogging_GetDecryptedCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestDNSProviderService_AuditLogging_GetDecryptedCredentials (0.31s)
=== RUN TestDNSProviderService_AuditLogging_ContextHelpers
--- PASS: TestDNSProviderService_AuditLogging_ContextHelpers (0.00s)
=== RUN TestDockerService_New
--- PASS: TestDockerService_New (0.00s)
=== RUN TestDockerService_ListContainers
--- PASS: TestDockerService_ListContainers (0.01s)
=== RUN TestDockerUnavailableError_ErrorMethods
--- PASS: TestDockerUnavailableError_ErrorMethods (0.00s)
=== RUN TestIsDockerConnectivityError
=== RUN TestIsDockerConnectivityError/nil_error
=== RUN TestIsDockerConnectivityError/daemon_not_running
=== RUN TestIsDockerConnectivityError/daemon_running_check
=== RUN TestIsDockerConnectivityError/error_during_connect
=== RUN TestIsDockerConnectivityError/connection_refused
=== RUN TestIsDockerConnectivityError/no_such_file
=== RUN TestIsDockerConnectivityError/context_timeout
=== RUN TestIsDockerConnectivityError/permission_denied_-_EACCES
=== RUN TestIsDockerConnectivityError/permission_denied_-_EPERM
=== RUN TestIsDockerConnectivityError/no_entry_-_ENOENT
=== RUN TestIsDockerConnectivityError/random_error
=== RUN TestIsDockerConnectivityError/empty_error
--- PASS: TestIsDockerConnectivityError (0.00s)
--- PASS: TestIsDockerConnectivityError/nil_error (0.00s)
--- PASS: TestIsDockerConnectivityError/daemon_not_running (0.00s)
--- PASS: TestIsDockerConnectivityError/daemon_running_check (0.00s)
--- PASS: TestIsDockerConnectivityError/error_during_connect (0.00s)
--- PASS: TestIsDockerConnectivityError/connection_refused (0.00s)
--- PASS: TestIsDockerConnectivityError/no_such_file (0.00s)
--- PASS: TestIsDockerConnectivityError/context_timeout (0.00s)
--- PASS: TestIsDockerConnectivityError/permission_denied_-_EACCES (0.00s)
--- PASS: TestIsDockerConnectivityError/permission_denied_-_EPERM (0.00s)
--- PASS: TestIsDockerConnectivityError/no_entry_-_ENOENT (0.00s)
--- PASS: TestIsDockerConnectivityError/random_error (0.00s)
--- PASS: TestIsDockerConnectivityError/empty_error (0.00s)
=== RUN TestIsDockerConnectivityError_URLError
--- PASS: TestIsDockerConnectivityError_URLError (0.00s)
=== RUN TestIsDockerConnectivityError_OpError
--- PASS: TestIsDockerConnectivityError_OpError (0.00s)
=== RUN TestIsDockerConnectivityError_SyscallError
--- PASS: TestIsDockerConnectivityError_SyscallError (0.00s)
=== RUN TestIsDockerConnectivityError_NetErrorTimeout
--- PASS: TestIsDockerConnectivityError_NetErrorTimeout (0.00s)
=== RUN TestNewGeoIPService_InvalidPath
--- PASS: TestNewGeoIPService_InvalidPath (0.00s)
=== RUN TestGeoIPService_NotLoaded
--- PASS: TestGeoIPService_NotLoaded (0.00s)
=== RUN TestGeoIPService_InvalidIP
--- PASS: TestGeoIPService_InvalidIP (0.00s)
=== RUN TestGeoIPService_LookupCountry_CountryNotFound
--- PASS: TestGeoIPService_LookupCountry_CountryNotFound (0.00s)
=== RUN TestGeoIPService_LookupCountry_Success
--- PASS: TestGeoIPService_LookupCountry_Success (0.00s)
=== RUN TestGeoIPService_LookupCountry_ReaderError
--- PASS: TestGeoIPService_LookupCountry_ReaderError (0.00s)
=== RUN TestGeoIPService_Close
--- PASS: TestGeoIPService_Close (0.00s)
=== RUN TestGeoIPService_GetDatabasePath
--- PASS: TestGeoIPService_GetDatabasePath (0.00s)
=== RUN TestGeoIPService_ConcurrentAccess
--- PASS: TestGeoIPService_ConcurrentAccess (0.00s)
=== RUN TestGeoIPService_Integration
geoip_service_test.go:134: GeoIP database not found, skipping integration test
--- SKIP: TestGeoIPService_Integration (0.00s)
=== RUN TestGeoIPService_ErrorTypes
--- PASS: TestGeoIPService_ErrorTypes (0.00s)
=== RUN TestLogService
--- PASS: TestLogService (0.00s)
=== RUN TestNewLogWatcher
=== PAUSE TestNewLogWatcher
=== RUN TestLogWatcherStartStop
=== PAUSE TestLogWatcherStartStop
=== RUN TestLogWatcherSubscribeUnsubscribe
=== PAUSE TestLogWatcherSubscribeUnsubscribe
=== RUN TestLogWatcherBroadcast
=== PAUSE TestLogWatcherBroadcast
=== RUN TestLogWatcherBroadcastNonBlocking
=== PAUSE TestLogWatcherBroadcastNonBlocking
=== RUN TestParseLogEntryValidJSON
=== PAUSE TestParseLogEntryValidJSON
=== RUN TestParseLogEntryInvalidJSON
=== PAUSE TestParseLogEntryInvalidJSON
=== RUN TestParseLogEntryBlockedByWAF
=== PAUSE TestParseLogEntryBlockedByWAF
=== RUN TestParseLogEntryBlockedByRateLimit
=== PAUSE TestParseLogEntryBlockedByRateLimit
=== RUN TestParseLogEntry403CrowdSec
=== PAUSE TestParseLogEntry403CrowdSec
=== RUN TestParseLogEntry401Auth
=== PAUSE TestParseLogEntry401Auth
=== RUN TestParseLogEntry500Error
=== PAUSE TestParseLogEntry500Error
=== RUN TestHasHeader
=== PAUSE TestHasHeader
=== RUN TestLogWatcherIntegration
=== PAUSE TestLogWatcherIntegration
=== RUN TestLogWatcherConcurrentSubscribers
=== PAUSE TestLogWatcherConcurrentSubscribers
=== RUN TestLogWatcherMissingFile
=== PAUSE TestLogWatcherMissingFile
=== RUN TestMin
=== PAUSE TestMin
=== RUN TestLogWatcher_ReadLoop_EOFRetry
=== PAUSE TestLogWatcher_ReadLoop_EOFRetry
=== RUN TestDetectSecurityEvent_WAFWithCorazaId
=== PAUSE TestDetectSecurityEvent_WAFWithCorazaId
=== RUN TestDetectSecurityEvent_WAFWithCorazaRuleId
=== PAUSE TestDetectSecurityEvent_WAFWithCorazaRuleId
=== RUN TestDetectSecurityEvent_CrowdSecWithDecisionHeader
=== PAUSE TestDetectSecurityEvent_CrowdSecWithDecisionHeader
=== RUN TestDetectSecurityEvent_CrowdSecWithOriginHeader
=== PAUSE TestDetectSecurityEvent_CrowdSecWithOriginHeader
=== RUN TestDetectSecurityEvent_ACLDeniedHeader
=== PAUSE TestDetectSecurityEvent_ACLDeniedHeader
=== RUN TestDetectSecurityEvent_ACLBlockedHeader
=== PAUSE TestDetectSecurityEvent_ACLBlockedHeader
=== RUN TestDetectSecurityEvent_RateLimitAllHeaders
=== PAUSE TestDetectSecurityEvent_RateLimitAllHeaders
=== RUN TestDetectSecurityEvent_RateLimitPartialHeaders
=== PAUSE TestDetectSecurityEvent_RateLimitPartialHeaders
=== RUN TestDetectSecurityEvent_403WithoutHeaders
=== PAUSE TestDetectSecurityEvent_403WithoutHeaders
=== RUN TestMailService_SaveAndGetSMTPConfig
--- PASS: TestMailService_SaveAndGetSMTPConfig (0.00s)
=== RUN TestMailService_UpdateSMTPConfig
--- PASS: TestMailService_UpdateSMTPConfig (0.01s)
=== RUN TestMailService_IsConfigured
=== RUN TestMailService_IsConfigured/configured_with_all_fields
=== RUN TestMailService_IsConfigured/not_configured_-_missing_host
=== RUN TestMailService_IsConfigured/not_configured_-_missing_from_address
--- PASS: TestMailService_IsConfigured (0.02s)
--- PASS: TestMailService_IsConfigured/configured_with_all_fields (0.00s)
--- PASS: TestMailService_IsConfigured/not_configured_-_missing_host (0.01s)
--- PASS: TestMailService_IsConfigured/not_configured_-_missing_from_address (0.00s)
=== RUN TestMailService_GetSMTPConfig_Defaults
--- PASS: TestMailService_GetSMTPConfig_Defaults (0.00s)
=== RUN TestMailService_BuildEmail
--- PASS: TestMailService_BuildEmail (0.00s)
=== RUN TestParseEmailAddressForHeader
=== RUN TestParseEmailAddressForHeader/valid_email
=== RUN TestParseEmailAddressForHeader/valid_email_with_name
=== RUN TestParseEmailAddressForHeader/empty_email
=== RUN TestParseEmailAddressForHeader/invalid_format
=== RUN TestParseEmailAddressForHeader/missing_domain
=== RUN TestParseEmailAddressForHeader/injection_attempt
--- PASS: TestParseEmailAddressForHeader (0.00s)
--- PASS: TestParseEmailAddressForHeader/valid_email (0.00s)
--- PASS: TestParseEmailAddressForHeader/valid_email_with_name (0.00s)
--- PASS: TestParseEmailAddressForHeader/empty_email (0.00s)
--- PASS: TestParseEmailAddressForHeader/invalid_format (0.00s)
--- PASS: TestParseEmailAddressForHeader/missing_domain (0.00s)
--- PASS: TestParseEmailAddressForHeader/injection_attempt (0.00s)
=== RUN TestMailService_BuildEmail_RejectsCRLFInSubject
--- PASS: TestMailService_BuildEmail_RejectsCRLFInSubject (0.00s)
=== RUN TestMailService_BuildEmail_RejectsCRLFInReplyTo
--- PASS: TestMailService_BuildEmail_RejectsCRLFInReplyTo (0.00s)
=== RUN TestMailService_SMTPDotStuffing
=== RUN TestMailService_SMTPDotStuffing/body_with_leading_period_on_line
=== RUN TestMailService_SMTPDotStuffing/body_with_SMTP_terminator_sequence
=== RUN TestMailService_SMTPDotStuffing/body_with_multiple_leading_periods
=== RUN TestMailService_SMTPDotStuffing/body_without_leading_periods
--- PASS: TestMailService_SMTPDotStuffing (0.00s)
--- PASS: TestMailService_SMTPDotStuffing/body_with_leading_period_on_line (0.00s)
--- PASS: TestMailService_SMTPDotStuffing/body_with_SMTP_terminator_sequence (0.00s)
--- PASS: TestMailService_SMTPDotStuffing/body_with_multiple_leading_periods (0.00s)
--- PASS: TestMailService_SMTPDotStuffing/body_without_leading_periods (0.00s)
=== RUN TestSanitizeEmailBody
=== RUN TestSanitizeEmailBody/single_leading_period
=== RUN TestSanitizeEmailBody/period_in_middle
=== RUN TestSanitizeEmailBody/multiple_lines_with_periods
=== RUN TestSanitizeEmailBody/SMTP_terminator
=== RUN TestSanitizeEmailBody/no_periods
=== RUN TestSanitizeEmailBody/empty_string
--- PASS: TestSanitizeEmailBody (0.00s)
--- PASS: TestSanitizeEmailBody/single_leading_period (0.00s)
--- PASS: TestSanitizeEmailBody/period_in_middle (0.00s)
--- PASS: TestSanitizeEmailBody/multiple_lines_with_periods (0.00s)
--- PASS: TestSanitizeEmailBody/SMTP_terminator (0.00s)
--- PASS: TestSanitizeEmailBody/no_periods (0.00s)
--- PASS: TestSanitizeEmailBody/empty_string (0.00s)
=== RUN TestMailService_TestConnection_NotConfigured
--- PASS: TestMailService_TestConnection_NotConfigured (0.00s)
=== RUN TestMailService_SendEmail_NotConfigured
--- PASS: TestMailService_SendEmail_NotConfigured (0.00s)
=== RUN TestMailService_SendEmail_RejectsCRLFInSubject
--- PASS: TestMailService_SendEmail_RejectsCRLFInSubject (0.00s)
=== RUN TestSMTPConfigSerialization
--- PASS: TestSMTPConfigSerialization (0.01s)
=== RUN TestMailService_SendInvite_Template
time="2026-01-10T02:18:09Z" level=info msg="Sending invite email" email=test@example.com
--- PASS: TestMailService_SendInvite_Template (0.00s)
=== RUN TestMailService_SendInvite_InvalidBaseURL_CRLF
--- PASS: TestMailService_SendInvite_InvalidBaseURL_CRLF (0.00s)
=== RUN TestMailService_SendInvite_InvalidBaseURL_Path
--- PASS: TestMailService_SendInvite_InvalidBaseURL_Path (0.00s)
=== RUN TestMailService_Integration
mail_service_test.go:422: Integration test requires SMTP server
--- SKIP: TestMailService_Integration (0.00s)
=== RUN TestMailService_SendInvite_TokenFormat
time="2026-01-10T02:18:09Z" level=info msg="Sending invite email" email=test@example.com
time="2026-01-10T02:18:09Z" level=info msg="Sending invite email" email=test@example.com
--- PASS: TestMailService_SendInvite_TokenFormat (0.01s)
=== RUN TestMailService_SaveSMTPConfig_Concurrent
mail_service_test.go:444: In-memory SQLite doesn't support concurrent writes - test real DB in integration
--- SKIP: TestMailService_SaveSMTPConfig_Concurrent (0.00s)
=== RUN TestMailService_SendEmail_InvalidRecipient
--- PASS: TestMailService_SendEmail_InvalidRecipient (0.00s)
=== RUN TestMailService_SendEmail_InvalidFromAddress
--- PASS: TestMailService_SendEmail_InvalidFromAddress (0.00s)
=== RUN TestMailService_SendEmail_EncryptionModes
=== RUN TestMailService_SendEmail_EncryptionModes/ssl
=== RUN TestMailService_SendEmail_EncryptionModes/starttls
=== RUN TestMailService_SendEmail_EncryptionModes/none
=== RUN TestMailService_SendEmail_EncryptionModes/empty
--- PASS: TestMailService_SendEmail_EncryptionModes (0.02s)
--- PASS: TestMailService_SendEmail_EncryptionModes/ssl (0.01s)
--- PASS: TestMailService_SendEmail_EncryptionModes/starttls (0.00s)
--- PASS: TestMailService_SendEmail_EncryptionModes/none (0.00s)
--- PASS: TestMailService_SendEmail_EncryptionModes/empty (0.00s)
=== RUN TestMailService_SendEmail_CRLFInjection_Comprehensive
=== RUN TestMailService_SendEmail_CRLFInjection_Comprehensive/CRLF_in_recipient_address
=== RUN TestMailService_SendEmail_CRLFInjection_Comprehensive/CRLF_in_subject_line
=== RUN TestMailService_SendEmail_CRLFInjection_Comprehensive/LF_only_in_recipient
=== RUN TestMailService_SendEmail_CRLFInjection_Comprehensive/LF_only_in_subject
=== RUN TestMailService_SendEmail_CRLFInjection_Comprehensive/CR_only_in_recipient
=== RUN TestMailService_SendEmail_CRLFInjection_Comprehensive/multiple_CRLF_sequences
--- PASS: TestMailService_SendEmail_CRLFInjection_Comprehensive (0.01s)
--- PASS: TestMailService_SendEmail_CRLFInjection_Comprehensive/CRLF_in_recipient_address (0.00s)
--- PASS: TestMailService_SendEmail_CRLFInjection_Comprehensive/CRLF_in_subject_line (0.00s)
--- PASS: TestMailService_SendEmail_CRLFInjection_Comprehensive/LF_only_in_recipient (0.00s)
--- PASS: TestMailService_SendEmail_CRLFInjection_Comprehensive/LF_only_in_subject (0.00s)
--- PASS: TestMailService_SendEmail_CRLFInjection_Comprehensive/CR_only_in_recipient (0.00s)
--- PASS: TestMailService_SendEmail_CRLFInjection_Comprehensive/multiple_CRLF_sequences (0.00s)
=== RUN TestMailService_SendInvite_CRLFInjection
=== RUN TestMailService_SendInvite_CRLFInjection/CRLF_in_email_address
=== RUN TestMailService_SendInvite_CRLFInjection/CRLF_in_baseURL
=== RUN TestMailService_SendInvite_CRLFInjection/CRLF_in_app_name_(subject)
--- PASS: TestMailService_SendInvite_CRLFInjection (0.01s)
--- PASS: TestMailService_SendInvite_CRLFInjection/CRLF_in_email_address (0.00s)
--- PASS: TestMailService_SendInvite_CRLFInjection/CRLF_in_baseURL (0.00s)
--- PASS: TestMailService_SendInvite_CRLFInjection/CRLF_in_app_name_(subject) (0.00s)
=== RUN TestSupportsJSONTemplates
=== RUN TestSupportsJSONTemplates/webhook
=== RUN TestSupportsJSONTemplates/discord
=== RUN TestSupportsJSONTemplates/slack
=== RUN TestSupportsJSONTemplates/gotify
=== RUN TestSupportsJSONTemplates/generic
=== RUN TestSupportsJSONTemplates/telegram
=== RUN TestSupportsJSONTemplates/unknown
=== RUN TestSupportsJSONTemplates/WEBHOOK_uppercase
=== RUN TestSupportsJSONTemplates/Discord_mixed_case
--- PASS: TestSupportsJSONTemplates (0.00s)
--- PASS: TestSupportsJSONTemplates/webhook (0.00s)
--- PASS: TestSupportsJSONTemplates/discord (0.00s)
--- PASS: TestSupportsJSONTemplates/slack (0.00s)
--- PASS: TestSupportsJSONTemplates/gotify (0.00s)
--- PASS: TestSupportsJSONTemplates/generic (0.00s)
--- PASS: TestSupportsJSONTemplates/telegram (0.00s)
--- PASS: TestSupportsJSONTemplates/unknown (0.00s)
--- PASS: TestSupportsJSONTemplates/WEBHOOK_uppercase (0.00s)
--- PASS: TestSupportsJSONTemplates/Discord_mixed_case (0.00s)
=== RUN TestSendJSONPayload_Discord
--- PASS: TestSendJSONPayload_Discord (0.00s)
=== RUN TestSendJSONPayload_Slack
--- PASS: TestSendJSONPayload_Slack (0.00s)
=== RUN TestSendJSONPayload_Gotify
--- PASS: TestSendJSONPayload_Gotify (0.00s)
=== RUN TestSendJSONPayload_TemplateTimeout
--- PASS: TestSendJSONPayload_TemplateTimeout (0.00s)
=== RUN TestSendJSONPayload_TemplateSizeLimit
--- PASS: TestSendJSONPayload_TemplateSizeLimit (0.00s)
=== RUN TestSendJSONPayload_DiscordValidation
--- PASS: TestSendJSONPayload_DiscordValidation (0.00s)
=== RUN TestSendJSONPayload_SlackValidation
--- PASS: TestSendJSONPayload_SlackValidation (0.00s)
=== RUN TestSendJSONPayload_GotifyValidation
--- PASS: TestSendJSONPayload_GotifyValidation (0.00s)
=== RUN TestSendJSONPayload_InvalidJSON
--- PASS: TestSendJSONPayload_InvalidJSON (0.00s)
=== RUN TestNormalizeURL_DiscordWebhook_ConvertsToDiscordScheme
--- PASS: TestNormalizeURL_DiscordWebhook_ConvertsToDiscordScheme (0.00s)
=== RUN TestSendExternal_SkipsInvalidHTTPDestination
time="2026-01-10T02:18:09Z" level=warning msg="Skipping notification for provider due to invalid destination" provider=bad
--- PASS: TestSendExternal_SkipsInvalidHTTPDestination (0.16s)
=== RUN TestSendExternal_UsesJSONForSupportedServices
--- PASS: TestSendExternal_UsesJSONForSupportedServices (0.10s)
=== RUN TestTestProvider_UsesJSONForSupportedServices
--- PASS: TestTestProvider_UsesJSONForSupportedServices (0.00s)
=== RUN TestNotificationService_TemplateCRUD
=== PAUSE TestNotificationService_TemplateCRUD
=== RUN TestNotificationService_Create
--- PASS: TestNotificationService_Create (0.00s)
=== RUN TestNotificationService_List
--- PASS: TestNotificationService_List (0.00s)
=== RUN TestNotificationService_MarkAsRead
--- PASS: TestNotificationService_MarkAsRead (0.01s)
=== RUN TestNotificationService_MarkAllAsRead
--- PASS: TestNotificationService_MarkAllAsRead (0.00s)
=== RUN TestNotificationService_Providers
--- PASS: TestNotificationService_Providers (0.01s)
=== RUN TestNotificationService_TestProvider_Webhook
--- PASS: TestNotificationService_TestProvider_Webhook (0.01s)
=== RUN TestNotificationService_SendExternal
--- PASS: TestNotificationService_SendExternal (0.01s)
=== RUN TestNotificationService_SendExternal_MinimalVsDetailedTemplates
--- PASS: TestNotificationService_SendExternal_MinimalVsDetailedTemplates (0.01s)
=== RUN TestNotificationService_SendExternal_Filtered
--- PASS: TestNotificationService_SendExternal_Filtered (0.11s)
=== RUN TestNotificationService_SendExternal_Shoutrrr
time="2026-01-10T02:18:10Z" level=error msg="Failed to send JSON notification" error="invalid webhook url" provider="Test Discord"
--- PASS: TestNotificationService_SendExternal_Shoutrrr (0.10s)
=== RUN TestNormalizeURL
=== RUN TestNormalizeURL/Discord_HTTPS
=== RUN TestNormalizeURL/Discord_HTTPS_with_app
=== RUN TestNormalizeURL/Discord_Shoutrrr
=== RUN TestNormalizeURL/Other_Service
--- PASS: TestNormalizeURL (0.00s)
--- PASS: TestNormalizeURL/Discord_HTTPS (0.00s)
--- PASS: TestNormalizeURL/Discord_HTTPS_with_app (0.00s)
--- PASS: TestNormalizeURL/Discord_Shoutrrr (0.00s)
--- PASS: TestNormalizeURL/Other_Service (0.00s)
=== RUN TestNotificationService_SendCustomWebhook_Errors
=== RUN TestNotificationService_SendCustomWebhook_Errors/invalid_URL
=== RUN TestNotificationService_SendCustomWebhook_Errors/unreachable_host
=== RUN TestNotificationService_SendCustomWebhook_Errors/server_returns_error
=== RUN TestNotificationService_SendCustomWebhook_Errors/valid_custom_payload_template
=== RUN TestNotificationService_SendCustomWebhook_Errors/default_payload_without_template
--- PASS: TestNotificationService_SendCustomWebhook_Errors (0.01s)
--- PASS: TestNotificationService_SendCustomWebhook_Errors/invalid_URL (0.00s)
--- PASS: TestNotificationService_SendCustomWebhook_Errors/unreachable_host (0.00s)
--- PASS: TestNotificationService_SendCustomWebhook_Errors/server_returns_error (0.00s)
--- PASS: TestNotificationService_SendCustomWebhook_Errors/valid_custom_payload_template (0.00s)
--- PASS: TestNotificationService_SendCustomWebhook_Errors/default_payload_without_template (0.00s)
=== RUN TestNotificationService_SendCustomWebhook_PropagatesRequestID
--- PASS: TestNotificationService_SendCustomWebhook_PropagatesRequestID (0.01s)
=== RUN TestNotificationService_TestProvider_Errors
=== RUN TestNotificationService_TestProvider_Errors/unsupported_provider_type
=== RUN TestNotificationService_TestProvider_Errors/webhook_with_invalid_URL
=== RUN TestNotificationService_TestProvider_Errors/discord_with_invalid_URL_format
=== RUN TestNotificationService_TestProvider_Errors/slack_with_unreachable_webhook
=== RUN TestNotificationService_TestProvider_Errors/webhook_success
--- PASS: TestNotificationService_TestProvider_Errors (0.01s)
--- PASS: TestNotificationService_TestProvider_Errors/unsupported_provider_type (0.00s)
--- PASS: TestNotificationService_TestProvider_Errors/webhook_with_invalid_URL (0.00s)
--- PASS: TestNotificationService_TestProvider_Errors/discord_with_invalid_URL_format (0.00s)
--- PASS: TestNotificationService_TestProvider_Errors/slack_with_unreachable_webhook (0.00s)
--- PASS: TestNotificationService_TestProvider_Errors/webhook_success (0.00s)
=== RUN TestSSRF_URLValidation_PrivateIP
--- PASS: TestSSRF_URLValidation_PrivateIP (0.00s)
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/10.0.0.0/8
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/10.255.255.254
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/172.16.0.0/12
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/172.31.255.254
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/192.168.0.0/16
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/172.15.x_(not_private)
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/172.32.x_(not_private)
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/169.254.169.254
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/localhost
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/127.0.0.1
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/::1
=== RUN TestSSRF_URLValidation_ComprehensiveBlocking/google.com
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/10.0.0.0/8 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/10.255.255.254 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/172.16.0.0/12 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/172.31.255.254 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/192.168.0.0/16 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/172.15.x_(not_private) (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/172.32.x_(not_private) (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/169.254.169.254 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/localhost (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/127.0.0.1 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/::1 (0.00s)
--- PASS: TestSSRF_URLValidation_ComprehensiveBlocking/google.com (0.00s)
=== RUN TestSSRF_WebhookIntegration
=== RUN TestSSRF_WebhookIntegration/blocks_private_IP_webhook
=== RUN TestSSRF_WebhookIntegration/blocks_cloud_metadata_endpoint
=== RUN TestSSRF_WebhookIntegration/allows_localhost_for_testing
--- PASS: TestSSRF_WebhookIntegration (0.01s)
--- PASS: TestSSRF_WebhookIntegration/blocks_private_IP_webhook (0.00s)
--- PASS: TestSSRF_WebhookIntegration/blocks_cloud_metadata_endpoint (0.00s)
--- PASS: TestSSRF_WebhookIntegration/allows_localhost_for_testing (0.00s)
=== RUN TestNotificationService_SendExternal_EdgeCases
=== RUN TestNotificationService_SendExternal_EdgeCases/no_enabled_providers
=== RUN TestNotificationService_SendExternal_EdgeCases/provider_filtered_by_category
=== RUN TestNotificationService_SendExternal_EdgeCases/custom_data_passed_to_webhook
--- PASS: TestNotificationService_SendExternal_EdgeCases (0.22s)
--- PASS: TestNotificationService_SendExternal_EdgeCases/no_enabled_providers (0.05s)
--- PASS: TestNotificationService_SendExternal_EdgeCases/provider_filtered_by_category (0.06s)
--- PASS: TestNotificationService_SendExternal_EdgeCases/custom_data_passed_to_webhook (0.11s)
=== RUN TestNotificationService_RenderTemplate
--- PASS: TestNotificationService_RenderTemplate (0.00s)
=== RUN TestNotificationService_CreateProvider_Validation
=== RUN TestNotificationService_CreateProvider_Validation/creates_provider_with_defaults
=== RUN TestNotificationService_CreateProvider_Validation/updates_existing_provider
=== RUN TestNotificationService_CreateProvider_Validation/deletes_non-existent_provider
--- PASS: TestNotificationService_CreateProvider_Validation (0.01s)
--- PASS: TestNotificationService_CreateProvider_Validation/creates_provider_with_defaults (0.00s)
--- PASS: TestNotificationService_CreateProvider_Validation/updates_existing_provider (0.00s)
--- PASS: TestNotificationService_CreateProvider_Validation/deletes_non-existent_provider (0.00s)
=== RUN TestNotificationService_IsPrivateIP
=== RUN TestNotificationService_IsPrivateIP/loopback_ipv4
=== RUN TestNotificationService_IsPrivateIP/loopback_ipv6
=== RUN TestNotificationService_IsPrivateIP/private_10.x
=== RUN TestNotificationService_IsPrivateIP/private_10.x_high
=== RUN TestNotificationService_IsPrivateIP/private_172.16-31
=== RUN TestNotificationService_IsPrivateIP/private_172.31
=== RUN TestNotificationService_IsPrivateIP/private_192.168
=== RUN TestNotificationService_IsPrivateIP/public_172.32
=== RUN TestNotificationService_IsPrivateIP/public_172.15
=== RUN TestNotificationService_IsPrivateIP/public_ip
=== RUN TestNotificationService_IsPrivateIP/public_ipv6
=== RUN TestNotificationService_IsPrivateIP/link_local_ipv4
=== RUN TestNotificationService_IsPrivateIP/link_local_ipv6
=== RUN TestNotificationService_IsPrivateIP/unique_local_ipv6_fc
=== RUN TestNotificationService_IsPrivateIP/unique_local_ipv6_fc_high
=== RUN TestNotificationService_IsPrivateIP/unique_local_ipv6_fd
--- PASS: TestNotificationService_IsPrivateIP (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/loopback_ipv4 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/loopback_ipv6 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/private_10.x (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/private_10.x_high (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/private_172.16-31 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/private_172.31 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/private_192.168 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/public_172.32 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/public_172.15 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/public_ip (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/public_ipv6 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/link_local_ipv4 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/link_local_ipv6 (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/unique_local_ipv6_fc (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/unique_local_ipv6_fc_high (0.00s)
--- PASS: TestNotificationService_IsPrivateIP/unique_local_ipv6_fd (0.00s)
=== RUN TestNotificationService_CreateProvider_InvalidCustomTemplate
=== RUN TestNotificationService_CreateProvider_InvalidCustomTemplate/invalid_custom_template_on_create
=== RUN TestNotificationService_CreateProvider_InvalidCustomTemplate/invalid_custom_template_on_update
--- PASS: TestNotificationService_CreateProvider_InvalidCustomTemplate (0.00s)
--- PASS: TestNotificationService_CreateProvider_InvalidCustomTemplate/invalid_custom_template_on_create (0.00s)
--- PASS: TestNotificationService_CreateProvider_InvalidCustomTemplate/invalid_custom_template_on_update (0.00s)
=== RUN TestRenderTemplate_TemplateParseError
--- PASS: TestRenderTemplate_TemplateParseError (0.00s)
=== RUN TestRenderTemplate_TemplateExecutionError
--- PASS: TestRenderTemplate_TemplateExecutionError (0.00s)
=== RUN TestRenderTemplate_InvalidJSONOutput
--- PASS: TestRenderTemplate_InvalidJSONOutput (0.00s)
=== RUN TestSendCustomWebhook_HTTPStatusCodeErrors
=== RUN TestSendCustomWebhook_HTTPStatusCodeErrors/status_400
=== RUN TestSendCustomWebhook_HTTPStatusCodeErrors/status_404
=== RUN TestSendCustomWebhook_HTTPStatusCodeErrors/status_500
=== RUN TestSendCustomWebhook_HTTPStatusCodeErrors/status_502
=== RUN TestSendCustomWebhook_HTTPStatusCodeErrors/status_503
--- PASS: TestSendCustomWebhook_HTTPStatusCodeErrors (0.01s)
--- PASS: TestSendCustomWebhook_HTTPStatusCodeErrors/status_400 (0.00s)
--- PASS: TestSendCustomWebhook_HTTPStatusCodeErrors/status_404 (0.00s)
--- PASS: TestSendCustomWebhook_HTTPStatusCodeErrors/status_500 (0.00s)
--- PASS: TestSendCustomWebhook_HTTPStatusCodeErrors/status_502 (0.00s)
--- PASS: TestSendCustomWebhook_HTTPStatusCodeErrors/status_503 (0.00s)
=== RUN TestSendCustomWebhook_TemplateSelection
=== RUN TestSendCustomWebhook_TemplateSelection/minimal_template
=== RUN TestSendCustomWebhook_TemplateSelection/detailed_template
=== RUN TestSendCustomWebhook_TemplateSelection/custom_template
=== RUN TestSendCustomWebhook_TemplateSelection/empty_template_defaults_to_minimal
=== RUN TestSendCustomWebhook_TemplateSelection/unknown_template_defaults_to_minimal
--- PASS: TestSendCustomWebhook_TemplateSelection (0.01s)
--- PASS: TestSendCustomWebhook_TemplateSelection/minimal_template (0.00s)
--- PASS: TestSendCustomWebhook_TemplateSelection/detailed_template (0.00s)
--- PASS: TestSendCustomWebhook_TemplateSelection/custom_template (0.00s)
--- PASS: TestSendCustomWebhook_TemplateSelection/empty_template_defaults_to_minimal (0.00s)
--- PASS: TestSendCustomWebhook_TemplateSelection/unknown_template_defaults_to_minimal (0.00s)
=== RUN TestSendCustomWebhook_EmptyCustomTemplateDefaultsToMinimal
--- PASS: TestSendCustomWebhook_EmptyCustomTemplateDefaultsToMinimal (0.00s)
=== RUN TestCreateProvider_EmptyCustomTemplateAllowed
--- PASS: TestCreateProvider_EmptyCustomTemplateAllowed (0.00s)
=== RUN TestUpdateProvider_NonCustomTemplateSkipsValidation
--- PASS: TestUpdateProvider_NonCustomTemplateSkipsValidation (0.01s)
=== RUN TestIsPrivateIP_EdgeCases
=== RUN TestIsPrivateIP_EdgeCases/172.15.255.255_(just_before_private)
=== RUN TestIsPrivateIP_EdgeCases/172.16.0.0_(start_of_private)
=== RUN TestIsPrivateIP_EdgeCases/172.31.255.255_(end_of_private)
=== RUN TestIsPrivateIP_EdgeCases/172.32.0.0_(just_after_private)
=== RUN TestIsPrivateIP_EdgeCases/fbff:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(before_ULA)
=== RUN TestIsPrivateIP_EdgeCases/fc00::0_(start_of_ULA)
=== RUN TestIsPrivateIP_EdgeCases/fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(end_of_ULA)
=== RUN TestIsPrivateIP_EdgeCases/fe00::0_(after_ULA)
=== RUN TestIsPrivateIP_EdgeCases/fe7f:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(before_link-local)
=== RUN TestIsPrivateIP_EdgeCases/fe80::0_(start_of_link-local)
=== RUN TestIsPrivateIP_EdgeCases/febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(end_of_link-local)
=== RUN TestIsPrivateIP_EdgeCases/fec0::0_(after_link-local)
--- PASS: TestIsPrivateIP_EdgeCases (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/172.15.255.255_(just_before_private) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/172.16.0.0_(start_of_private) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/172.31.255.255_(end_of_private) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/172.32.0.0_(just_after_private) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/fbff:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(before_ULA) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/fc00::0_(start_of_ULA) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(end_of_ULA) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/fe00::0_(after_ULA) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/fe7f:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(before_link-local) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/fe80::0_(start_of_link-local) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff_(end_of_link-local) (0.00s)
--- PASS: TestIsPrivateIP_EdgeCases/fec0::0_(after_link-local) (0.00s)
=== RUN TestSendCustomWebhook_ContextCancellation
--- PASS: TestSendCustomWebhook_ContextCancellation (0.00s)
=== RUN TestSendExternal_UnknownEventTypeSendsToAll
--- PASS: TestSendExternal_UnknownEventTypeSendsToAll (0.11s)
=== RUN TestCreateProvider_ValidCustomTemplate
--- PASS: TestCreateProvider_ValidCustomTemplate (0.01s)
=== RUN TestUpdateProvider_ValidCustomTemplate
--- PASS: TestUpdateProvider_ValidCustomTemplate (0.01s)
=== RUN TestRenderTemplate_MinimalAndDetailedTemplates
=== RUN TestRenderTemplate_MinimalAndDetailedTemplates/minimal_template
=== RUN TestRenderTemplate_MinimalAndDetailedTemplates/detailed_template
--- PASS: TestRenderTemplate_MinimalAndDetailedTemplates (0.01s)
--- PASS: TestRenderTemplate_MinimalAndDetailedTemplates/minimal_template (0.00s)
--- PASS: TestRenderTemplate_MinimalAndDetailedTemplates/detailed_template (0.00s)
=== RUN TestSendJSONPayload_ServiceSpecificValidation
=== RUN TestSendJSONPayload_ServiceSpecificValidation/discord_requires_content_or_embeds
=== RUN TestSendJSONPayload_ServiceSpecificValidation/discord_with_content_succeeds
=== RUN TestSendJSONPayload_ServiceSpecificValidation/discord_with_embeds_succeeds
=== RUN TestSendJSONPayload_ServiceSpecificValidation/slack_requires_text_or_blocks
=== RUN TestSendJSONPayload_ServiceSpecificValidation/slack_with_text_succeeds
=== RUN TestSendJSONPayload_ServiceSpecificValidation/slack_with_blocks_succeeds
=== RUN TestSendJSONPayload_ServiceSpecificValidation/gotify_requires_message
=== RUN TestSendJSONPayload_ServiceSpecificValidation/gotify_with_message_succeeds
--- PASS: TestSendJSONPayload_ServiceSpecificValidation (0.01s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/discord_requires_content_or_embeds (0.00s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/discord_with_content_succeeds (0.00s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/discord_with_embeds_succeeds (0.00s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/slack_requires_text_or_blocks (0.00s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/slack_with_text_succeeds (0.00s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/slack_with_blocks_succeeds (0.00s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/gotify_requires_message (0.00s)
--- PASS: TestSendJSONPayload_ServiceSpecificValidation/gotify_with_message_succeeds (0.00s)
=== RUN TestSendExternal_AllEventTypes
=== RUN TestSendExternal_AllEventTypes/proxy_host
=== RUN TestSendExternal_AllEventTypes/remote_server
=== RUN TestSendExternal_AllEventTypes/domain
=== RUN TestSendExternal_AllEventTypes/cert
=== RUN TestSendExternal_AllEventTypes/uptime
=== RUN TestSendExternal_AllEventTypes/test
=== RUN TestSendExternal_AllEventTypes/unknown
--- PASS: TestSendExternal_AllEventTypes (0.75s)
--- PASS: TestSendExternal_AllEventTypes/proxy_host (0.11s)
--- PASS: TestSendExternal_AllEventTypes/remote_server (0.11s)
--- PASS: TestSendExternal_AllEventTypes/domain (0.11s)
--- PASS: TestSendExternal_AllEventTypes/cert (0.11s)
--- PASS: TestSendExternal_AllEventTypes/uptime (0.11s)
--- PASS: TestSendExternal_AllEventTypes/test (0.11s)
--- PASS: TestSendExternal_AllEventTypes/unknown (0.11s)
=== RUN TestIsValidRedirectURL
=== RUN TestIsValidRedirectURL/valid_http
=== RUN TestIsValidRedirectURL/valid_https
=== RUN TestIsValidRedirectURL/invalid_scheme_ftp
=== RUN TestIsValidRedirectURL/invalid_scheme_file
=== RUN TestIsValidRedirectURL/no_scheme
=== RUN TestIsValidRedirectURL/empty_hostname
=== RUN TestIsValidRedirectURL/invalid_url
=== RUN TestIsValidRedirectURL/javascript_scheme
=== RUN TestIsValidRedirectURL/data_scheme
--- PASS: TestIsValidRedirectURL (0.00s)
--- PASS: TestIsValidRedirectURL/valid_http (0.00s)
--- PASS: TestIsValidRedirectURL/valid_https (0.00s)
--- PASS: TestIsValidRedirectURL/invalid_scheme_ftp (0.00s)
--- PASS: TestIsValidRedirectURL/invalid_scheme_file (0.00s)
--- PASS: TestIsValidRedirectURL/no_scheme (0.00s)
--- PASS: TestIsValidRedirectURL/empty_hostname (0.00s)
--- PASS: TestIsValidRedirectURL/invalid_url (0.00s)
--- PASS: TestIsValidRedirectURL/javascript_scheme (0.00s)
--- PASS: TestIsValidRedirectURL/data_scheme (0.00s)
=== RUN TestSendExternal_ShoutrrrPath
--- PASS: TestSendExternal_ShoutrrrPath (0.10s)
=== RUN TestSendExternal_ShoutrrrPathWithHTTPValidation
--- PASS: TestSendExternal_ShoutrrrPathWithHTTPValidation (0.11s)
=== RUN TestSendExternal_ShoutrrrPathBlocksPrivateIP
time="2026-01-10T02:18:11Z" level=warning msg="Skipping notification for provider due to invalid destination" provider=private-ip
--- PASS: TestSendExternal_ShoutrrrPathBlocksPrivateIP (0.10s)
=== RUN TestSendExternal_ShoutrrrError
time="2026-01-10T02:18:12Z" level=error msg="Failed to send notification" error="shoutrrr error: connection failed" provider=error-test
--- PASS: TestSendExternal_ShoutrrrError (0.01s)
=== RUN TestTestProvider_ShoutrrrPath
--- PASS: TestTestProvider_ShoutrrrPath (0.01s)
=== RUN TestTestProvider_HTTPURLValidation
=== RUN TestTestProvider_HTTPURLValidation/blocks_private_IP
=== RUN TestTestProvider_HTTPURLValidation/allows_localhost
--- PASS: TestTestProvider_HTTPURLValidation (0.00s)
--- PASS: TestTestProvider_HTTPURLValidation/blocks_private_IP (0.00s)
--- PASS: TestTestProvider_HTTPURLValidation/allows_localhost (0.00s)
=== RUN TestSendJSONPayload_TemplateExecutionError
--- PASS: TestSendJSONPayload_TemplateExecutionError (0.00s)
=== RUN TestSendJSONPayload_InvalidJSONFromTemplate
--- PASS: TestSendJSONPayload_InvalidJSONFromTemplate (0.01s)
=== RUN TestSendJSONPayload_RequestCreationError
--- PASS: TestSendJSONPayload_RequestCreationError (0.00s)
=== RUN TestRenderTemplate_CustomTemplateWithWhitespace
=== RUN TestRenderTemplate_CustomTemplateWithWhitespace/detailed_with_spaces
=== RUN TestRenderTemplate_CustomTemplateWithWhitespace/minimal_with_tabs
=== RUN TestRenderTemplate_CustomTemplateWithWhitespace/custom_with_newlines
=== RUN TestRenderTemplate_CustomTemplateWithWhitespace/DETAILED_uppercase
=== RUN TestRenderTemplate_CustomTemplateWithWhitespace/MiNiMaL_mixed_case
--- PASS: TestRenderTemplate_CustomTemplateWithWhitespace (0.01s)
--- PASS: TestRenderTemplate_CustomTemplateWithWhitespace/detailed_with_spaces (0.00s)
--- PASS: TestRenderTemplate_CustomTemplateWithWhitespace/minimal_with_tabs (0.00s)
--- PASS: TestRenderTemplate_CustomTemplateWithWhitespace/custom_with_newlines (0.00s)
--- PASS: TestRenderTemplate_CustomTemplateWithWhitespace/DETAILED_uppercase (0.00s)
--- PASS: TestRenderTemplate_CustomTemplateWithWhitespace/MiNiMaL_mixed_case (0.00s)
=== RUN TestListTemplates_DBError
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/notification_service.go:449 sql: database is closed
[0.028ms] [rows:0] SELECT * FROM `notification_templates` ORDER BY created_at desc
--- PASS: TestListTemplates_DBError (0.00s)
=== RUN TestSendExternal_DBFetchError
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/notification_service.go:96 sql: database is closed
[0.028ms] [rows:0] SELECT * FROM `notification_providers` WHERE enabled = true
time="2026-01-10T02:18:12Z" level=error msg="Failed to fetch notification providers" error="sql: database is closed"
--- PASS: TestSendExternal_DBFetchError (0.00s)
=== RUN TestSendExternal_JSONPayloadError
time="2026-01-10T02:18:12Z" level=error msg="Failed to send JSON notification" error="discord payload requires 'content' or 'embeds' field" provider=json-error
--- PASS: TestSendExternal_JSONPayloadError (0.10s)
=== RUN TestSendJSONPayload_HTTPScheme
=== RUN TestSendJSONPayload_HTTPScheme/http
=== RUN TestSendJSONPayload_HTTPScheme/https
--- PASS: TestSendJSONPayload_HTTPScheme (0.01s)
--- PASS: TestSendJSONPayload_HTTPScheme/http (0.00s)
--- PASS: TestSendJSONPayload_HTTPScheme/https (0.00s)
=== RUN TestProxyHostService_ValidateUniqueDomain
=== RUN TestProxyHostService_ValidateUniqueDomain/New_unique_domain
=== RUN TestProxyHostService_ValidateUniqueDomain/Duplicate_domain
=== RUN TestProxyHostService_ValidateUniqueDomain/Same_domain_but_excluded_ID_(update_self)
--- PASS: TestProxyHostService_ValidateUniqueDomain (0.02s)
--- PASS: TestProxyHostService_ValidateUniqueDomain/New_unique_domain (0.00s)
--- PASS: TestProxyHostService_ValidateUniqueDomain/Duplicate_domain (0.00s)
--- PASS: TestProxyHostService_ValidateUniqueDomain/Same_domain_but_excluded_ID_(update_self) (0.00s)
=== RUN TestProxyHostService_CRUD
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/proxyhost_service.go:108 record not found
[0.066ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE `proxy_hosts`.`id` = 1 ORDER BY `proxy_hosts`.`id` LIMIT 1
--- PASS: TestProxyHostService_CRUD (0.02s)
=== RUN TestProxyHostService_TestConnection
--- PASS: TestProxyHostService_TestConnection (0.02s)
=== RUN TestProxyHostService_AdvancedConfig
=== RUN TestProxyHostService_AdvancedConfig/Empty_advanced_config
=== RUN TestProxyHostService_AdvancedConfig/Valid_JSON_object
=== RUN TestProxyHostService_AdvancedConfig/Valid_JSON_array
=== RUN TestProxyHostService_AdvancedConfig/Invalid_JSON
=== RUN TestProxyHostService_AdvancedConfig/Valid_nested_config
--- PASS: TestProxyHostService_AdvancedConfig (0.02s)
--- PASS: TestProxyHostService_AdvancedConfig/Empty_advanced_config (0.00s)
--- PASS: TestProxyHostService_AdvancedConfig/Valid_JSON_object (0.00s)
--- PASS: TestProxyHostService_AdvancedConfig/Valid_JSON_array (0.00s)
--- PASS: TestProxyHostService_AdvancedConfig/Invalid_JSON (0.00s)
--- PASS: TestProxyHostService_AdvancedConfig/Valid_nested_config (0.00s)
=== RUN TestProxyHostService_UpdateAdvancedConfig
--- PASS: TestProxyHostService_UpdateAdvancedConfig (0.01s)
=== RUN TestProxyHostService_EmptyDomain
--- PASS: TestProxyHostService_EmptyDomain (0.01s)
=== RUN TestRemoteServerService_ValidateUniqueServer
--- PASS: TestRemoteServerService_ValidateUniqueServer (0.00s)
=== RUN TestRemoteServerService_CRUD
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/remoteserver_service.go:68 record not found
[0.084ms] [rows:0] SELECT * FROM `remote_servers` WHERE `remote_servers`.`id` = 2 ORDER BY `remote_servers`.`id` LIMIT 1
--- PASS: TestRemoteServerService_CRUD (0.01s)
=== RUN TestGetPresets
--- PASS: TestGetPresets (0.00s)
=== RUN TestEnsurePresetsExist_Creates
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.092ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-basic" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.077ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-api-friendly" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.075ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-strict" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.091ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-paranoid" ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestEnsurePresetsExist_Creates (0.00s)
=== RUN TestEnsurePresetsExist_NoOp
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.080ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-basic" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.073ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-api-friendly" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.092ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-strict" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.071ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-paranoid" ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestEnsurePresetsExist_NoOp (0.01s)
=== RUN TestEnsurePresetsExist_Updates
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.093ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-api-friendly" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.148ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-strict" ORDER BY `security_header_profiles`.`id` LIMIT 1
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_headers_service.go:116 record not found
[0.107ms] [rows:0] SELECT * FROM `security_header_profiles` WHERE uuid = "preset-paranoid" ORDER BY `security_header_profiles`.`id` LIMIT 1
--- PASS: TestEnsurePresetsExist_Updates (0.01s)
=== RUN TestApplyPreset_Success
--- PASS: TestApplyPreset_Success (0.00s)
=== RUN TestApplyPreset_StrictPreset
--- PASS: TestApplyPreset_StrictPreset (0.00s)
=== RUN TestApplyPreset_ParanoidPreset
--- PASS: TestApplyPreset_ParanoidPreset (0.00s)
=== RUN TestApplyPreset_APIFriendlyPreset
--- PASS: TestApplyPreset_APIFriendlyPreset (0.00s)
=== RUN TestGetPresets_IncludesAPIFriendly
--- PASS: TestGetPresets_IncludesAPIFriendly (0.00s)
=== RUN TestGetPresets_OrderByScore
--- PASS: TestGetPresets_OrderByScore (0.00s)
=== RUN TestApplyPreset_InvalidPreset
--- PASS: TestApplyPreset_InvalidPreset (0.00s)
=== RUN TestApplyPreset_MultipleProfiles
--- PASS: TestApplyPreset_MultipleProfiles (0.01s)
=== RUN TestNewSecurityNotificationService
--- PASS: TestNewSecurityNotificationService (0.00s)
=== RUN TestSecurityNotificationService_GetSettings_Default
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:32 record not found
[0.101ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_GetSettings_Default (0.00s)
=== RUN TestSecurityNotificationService_UpdateSettings
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.066ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_UpdateSettings (0.00s)
=== RUN TestSecurityNotificationService_UpdateSettings_Existing
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.096ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_UpdateSettings_Existing (0.00s)
=== RUN TestSecurityNotificationService_Send_Disabled
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:32 record not found
[0.086ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_Disabled (0.00s)
=== RUN TestSecurityNotificationService_Send_FilteredByEventType
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.069ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_FilteredByEventType (0.00s)
=== RUN TestSecurityNotificationService_Send_FilteredBySeverity
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.060ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_FilteredBySeverity (0.00s)
=== RUN TestSecurityNotificationService_Send_WebhookFailure
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.078ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
time="2026-01-10T02:18:12Z" level=error msg="Failed to send webhook notification" error="webhook returned status 500"
--- PASS: TestSecurityNotificationService_Send_WebhookFailure (0.00s)
=== RUN TestShouldNotify
=== RUN TestShouldNotify/error_>=_error
=== RUN TestShouldNotify/warn_<_error
=== RUN TestShouldNotify/error_>=_warn
=== RUN TestShouldNotify/info_>=_info
=== RUN TestShouldNotify/debug_<_info
=== RUN TestShouldNotify/error_>=_debug
--- PASS: TestShouldNotify (0.00s)
--- PASS: TestShouldNotify/error_>=_error (0.00s)
--- PASS: TestShouldNotify/warn_<_error (0.00s)
--- PASS: TestShouldNotify/error_>=_warn (0.00s)
--- PASS: TestShouldNotify/info_>=_info (0.00s)
--- PASS: TestShouldNotify/debug_<_info (0.00s)
--- PASS: TestShouldNotify/error_>=_debug (0.00s)
=== RUN TestSecurityNotificationService_Send_ACLDeny
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.075ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_ACLDeny (0.00s)
=== RUN TestSecurityNotificationService_Send_ContextTimeout
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.102ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
time="2026-01-10T02:18:12Z" level=error msg="Failed to send webhook notification" error="execute request: Post \"http://127.0.0.1:41325\": context deadline exceeded"
--- PASS: TestSecurityNotificationService_Send_ContextTimeout (0.10s)
=== RUN TestSecurityNotificationService_Send_EventTypeFiltering_WAFDisabled
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.088ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_EventTypeFiltering_WAFDisabled (0.00s)
=== RUN TestSecurityNotificationService_Send_EventTypeFiltering_ACLDisabled
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.107ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_EventTypeFiltering_ACLDisabled (0.00s)
=== RUN TestSecurityNotificationService_Send_SeverityBelowThreshold
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.120ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_SeverityBelowThreshold (0.00s)
=== RUN TestSecurityNotificationService_Send_WebhookSuccess
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.095ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
--- PASS: TestSecurityNotificationService_Send_WebhookSuccess (0.00s)
=== RUN TestSecurityNotificationService_sendWebhook_SSRFBlocked
=== RUN TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://169.254.169.254/latest/meta-data/
time="2026-01-10T02:18:12Z" level=warning msg="Blocked SSRF attempt in security notification webhook" error="connection to private ip addresses is blocked for security (detected IPv4-mapped IPv6: 169.254.169.254)" event_type=ssrf_blocked severity=HIGH url="http://169.254.169.254/latest/meta-data/"
=== RUN TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://10.0.0.1/admin
time="2026-01-10T02:18:12Z" level=warning msg="Blocked SSRF attempt in security notification webhook" error="connection to private ip addresses is blocked for security (detected IPv4-mapped IPv6: 10.0.0.1)" event_type=ssrf_blocked severity=HIGH url="http://10.0.0.1/admin"
=== RUN TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://172.16.0.1/config
time="2026-01-10T02:18:12Z" level=warning msg="Blocked SSRF attempt in security notification webhook" error="connection to private ip addresses is blocked for security (detected IPv4-mapped IPv6: 172.16.0.1)" event_type=ssrf_blocked severity=HIGH url="http://172.16.0.1/config"
=== RUN TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://192.168.1.1/api
time="2026-01-10T02:18:12Z" level=warning msg="Blocked SSRF attempt in security notification webhook" error="connection to private ip addresses is blocked for security (detected IPv4-mapped IPv6: 192.168.1.1)" event_type=ssrf_blocked severity=HIGH url="http://192.168.1.1/api"
--- PASS: TestSecurityNotificationService_sendWebhook_SSRFBlocked (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://169.254.169.254/latest/meta-data/ (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://10.0.0.1/admin (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://172.16.0.1/config (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_SSRFBlocked/http://192.168.1.1/api (0.00s)
=== RUN TestSecurityNotificationService_sendWebhook_MarshalError
security_notification_service_test.go:448: JSON marshal error cannot be easily triggered with current SecurityEvent structure
--- SKIP: TestSecurityNotificationService_sendWebhook_MarshalError (0.00s)
=== RUN TestSecurityNotificationService_sendWebhook_RequestCreationError
--- PASS: TestSecurityNotificationService_sendWebhook_RequestCreationError (0.00s)
=== RUN TestSecurityNotificationService_sendWebhook_RequestExecutionError
time="2026-01-10T02:18:12Z" level=warning msg="Blocked SSRF attempt in security notification webhook" error="dns resolution failed for invalid-nonexistent-domain-12345.test: lookup invalid-nonexistent-domain-12345.test on 127.0.0.53:53: no such host" event_type=ssrf_blocked severity=HIGH url="https://invalid-nonexistent-domain-12345.test/hook"
--- PASS: TestSecurityNotificationService_sendWebhook_RequestExecutionError (0.00s)
=== RUN TestSecurityNotificationService_sendWebhook_Non200Status
=== RUN TestSecurityNotificationService_sendWebhook_Non200Status/Bad_Request
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_notification_service.go:48 record not found
[0.130ms] [rows:0] SELECT * FROM `notification_configs` ORDER BY `notification_configs`.`id` LIMIT 1
time="2026-01-10T02:18:12Z" level=error msg="Failed to send webhook notification" error="webhook returned status 400"
=== RUN TestSecurityNotificationService_sendWebhook_Non200Status/Not_Found
time="2026-01-10T02:18:12Z" level=error msg="Failed to send webhook notification" error="webhook returned status 404"
=== RUN TestSecurityNotificationService_sendWebhook_Non200Status/Internal_Server_Error
time="2026-01-10T02:18:12Z" level=error msg="Failed to send webhook notification" error="webhook returned status 500"
=== RUN TestSecurityNotificationService_sendWebhook_Non200Status/Bad_Gateway
time="2026-01-10T02:18:12Z" level=error msg="Failed to send webhook notification" error="webhook returned status 502"
=== RUN TestSecurityNotificationService_sendWebhook_Non200Status/Service_Unavailable
time="2026-01-10T02:18:12Z" level=error msg="Failed to send webhook notification" error="webhook returned status 503"
--- PASS: TestSecurityNotificationService_sendWebhook_Non200Status (0.01s)
--- PASS: TestSecurityNotificationService_sendWebhook_Non200Status/Bad_Request (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_Non200Status/Not_Found (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_Non200Status/Internal_Server_Error (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_Non200Status/Bad_Gateway (0.00s)
--- PASS: TestSecurityNotificationService_sendWebhook_Non200Status/Service_Unavailable (0.00s)
=== RUN TestShouldNotify_AllSeverityCombinations
=== RUN TestShouldNotify_AllSeverityCombinations/debug_>=_debug
=== RUN TestShouldNotify_AllSeverityCombinations/debug_<_info
=== RUN TestShouldNotify_AllSeverityCombinations/debug_<_warn
=== RUN TestShouldNotify_AllSeverityCombinations/debug_<_error
=== RUN TestShouldNotify_AllSeverityCombinations/info_>=_debug
=== RUN TestShouldNotify_AllSeverityCombinations/info_>=_info
=== RUN TestShouldNotify_AllSeverityCombinations/info_<_warn
=== RUN TestShouldNotify_AllSeverityCombinations/info_<_error
=== RUN TestShouldNotify_AllSeverityCombinations/warn_>=_debug
=== RUN TestShouldNotify_AllSeverityCombinations/warn_>=_info
=== RUN TestShouldNotify_AllSeverityCombinations/warn_>=_warn
=== RUN TestShouldNotify_AllSeverityCombinations/warn_<_error
=== RUN TestShouldNotify_AllSeverityCombinations/error_>=_debug
=== RUN TestShouldNotify_AllSeverityCombinations/error_>=_info
=== RUN TestShouldNotify_AllSeverityCombinations/error_>=_warn
=== RUN TestShouldNotify_AllSeverityCombinations/error_>=_error
--- PASS: TestShouldNotify_AllSeverityCombinations (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/debug_>=_debug (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/debug_<_info (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/debug_<_warn (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/debug_<_error (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/info_>=_debug (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/info_>=_info (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/info_<_warn (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/info_<_error (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/warn_>=_debug (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/warn_>=_info (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/warn_>=_warn (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/warn_<_error (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/error_>=_debug (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/error_>=_info (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/error_>=_warn (0.00s)
--- PASS: TestShouldNotify_AllSeverityCombinations/error_>=_error (0.00s)
=== RUN TestCalculateSecurityScore_AllEnabled
--- PASS: TestCalculateSecurityScore_AllEnabled (0.00s)
=== RUN TestCalculateSecurityScore_HSTSOnly
--- PASS: TestCalculateSecurityScore_HSTSOnly (0.00s)
=== RUN TestCalculateSecurityScore_NoHeaders
--- PASS: TestCalculateSecurityScore_NoHeaders (0.00s)
=== RUN TestCalculateSecurityScore_UnsafeCSP
--- PASS: TestCalculateSecurityScore_UnsafeCSP (0.00s)
=== RUN TestCalculateSecurityScore_PartialCrossOrigin
--- PASS: TestCalculateSecurityScore_PartialCrossOrigin (0.00s)
=== RUN TestCalculateSecurityScore_WeakReferrerPolicy
--- PASS: TestCalculateSecurityScore_WeakReferrerPolicy (0.00s)
=== RUN TestCalculateSecurityScore_UnknownReferrerPolicy
--- PASS: TestCalculateSecurityScore_UnknownReferrerPolicy (0.00s)
=== RUN TestCalculateSecurityScore_ShortHSTSMaxAge
--- PASS: TestCalculateSecurityScore_ShortHSTSMaxAge (0.00s)
=== RUN TestSecurityService_Upsert_ValidateAdminWhitelist
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.097ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_Upsert_ValidateAdminWhitelist (0.01s)
=== RUN TestSecurityService_BreakGlassTokenLifecycle
2026/01/10 02:18:12 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.120ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_BreakGlassTokenLifecycle (2.19s)
=== RUN TestSecurityService_LogDecisionAndList
--- PASS: TestSecurityService_LogDecisionAndList (0.01s)
=== RUN TestSecurityService_UpsertRuleSet
2026/01/10 02:18:14 /projects/Charon/backend/internal/services/security_service.go:366 record not found
[0.082ms] [rows:0] SELECT * FROM `security_rule_sets` WHERE name = "owasp-crs" ORDER BY `security_rule_sets`.`id` LIMIT 1
--- PASS: TestSecurityService_UpsertRuleSet (0.01s)
=== RUN TestSecurityService_UpsertRuleSet_ContentTooLarge
--- PASS: TestSecurityService_UpsertRuleSet_ContentTooLarge (0.02s)
=== RUN TestSecurityService_DeleteRuleSet
2026/01/10 02:18:14 /projects/Charon/backend/internal/services/security_service.go:366 record not found
[0.093ms] [rows:0] SELECT * FROM `security_rule_sets` WHERE name = "owasp-crs" ORDER BY `security_rule_sets`.`id` LIMIT 1
--- PASS: TestSecurityService_DeleteRuleSet (0.01s)
=== RUN TestSecurityService_Upsert_RejectExternalMode
2026/01/10 02:18:14 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.100ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_Upsert_RejectExternalMode (0.01s)
=== RUN TestSecurityService_GenerateBreakGlassToken_NewConfig
2026/01/10 02:18:15 /projects/Charon/backend/internal/services/security_service.go:154 record not found
[0.245ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "newconfig" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_GenerateBreakGlassToken_NewConfig (1.54s)
=== RUN TestSecurityService_GenerateBreakGlassToken_UpdateExisting
2026/01/10 02:18:16 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.118ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_GenerateBreakGlassToken_UpdateExisting (2.98s)
=== RUN TestSecurityService_VerifyBreakGlassToken_NoConfig
2026/01/10 02:18:19 /projects/Charon/backend/internal/services/security_service.go:175 record not found
[0.125ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "nonexistent" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_VerifyBreakGlassToken_NoConfig (0.01s)
=== RUN TestSecurityService_VerifyBreakGlassToken_NoHash
2026/01/10 02:18:19 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.103ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_VerifyBreakGlassToken_NoHash (0.01s)
=== RUN TestSecurityService_VerifyBreakGlassToken_WrongToken
2026/01/10 02:18:20 /projects/Charon/backend/internal/services/security_service.go:154 record not found
[0.274ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_VerifyBreakGlassToken_WrongToken (4.42s)
=== RUN TestSecurityService_Get_NotFound
2026/01/10 02:18:23 /projects/Charon/backend/internal/services/security_service.go:70 record not found
[0.109ms] [rows:0] SELECT * FROM `security_configs` ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_Get_NotFound (0.01s)
=== RUN TestSecurityService_Upsert_PreserveBreakGlassHash
2026/01/10 02:18:24 /projects/Charon/backend/internal/services/security_service.go:154 record not found
[0.259ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_Upsert_PreserveBreakGlassHash (1.43s)
=== RUN TestSecurityService_Upsert_RateLimitFieldsPersist
2026/01/10 02:18:25 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.101ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_Upsert_RateLimitFieldsPersist (0.01s)
=== RUN TestSecurityService_LogAudit
--- PASS: TestSecurityService_LogAudit (0.16s)
=== RUN TestSecurityService_DeleteRuleSet_NotFound
2026/01/10 02:18:25 /projects/Charon/backend/internal/services/security_service.go:388 record not found
[0.070ms] [rows:0] SELECT * FROM `security_rule_sets` WHERE `security_rule_sets`.`id` = 9999 ORDER BY `security_rule_sets`.`id` LIMIT 1
--- PASS: TestSecurityService_DeleteRuleSet_NotFound (0.01s)
=== RUN TestSecurityService_ListDecisions_UnlimitedAndLimited
--- PASS: TestSecurityService_ListDecisions_UnlimitedAndLimited (0.01s)
=== RUN TestSecurityService_LogDecision_Nil
--- PASS: TestSecurityService_LogDecision_Nil (0.01s)
=== RUN TestSecurityService_LogDecision_PrefilledUUID
--- PASS: TestSecurityService_LogDecision_PrefilledUUID (0.01s)
=== RUN TestSecurityService_ListRuleSets_Empty
--- PASS: TestSecurityService_ListRuleSets_Empty (0.01s)
=== RUN TestSecurityService_Upsert_InvalidCrowdSecMode
2026/01/10 02:18:25 /projects/Charon/backend/internal/services/security_service.go:106 record not found
[0.097ms] [rows:0] SELECT * FROM `security_configs` WHERE name = "default" ORDER BY `security_configs`.`id` LIMIT 1
--- PASS: TestSecurityService_Upsert_InvalidCrowdSecMode (0.01s)
=== RUN TestSecurityService_ListAuditLogs
--- PASS: TestSecurityService_ListAuditLogs (0.01s)
=== RUN TestSecurityService_GetAuditLogByUUID
2026/01/10 02:18:25 /projects/Charon/backend/internal/services/security_service.go:321 record not found
[0.049ms] [rows:0] SELECT * FROM `security_audits` WHERE uuid = "non-existent-uuid" ORDER BY `security_audits`.`id` LIMIT 1
--- PASS: TestSecurityService_GetAuditLogByUUID (0.01s)
=== RUN TestSecurityService_ListAuditLogsByProvider
--- PASS: TestSecurityService_ListAuditLogsByProvider (0.01s)
=== RUN TestSecurityService_AsyncAuditLogging
--- PASS: TestSecurityService_AsyncAuditLogging (0.11s)
=== RUN TestUpdateService_CheckForUpdates
--- PASS: TestUpdateService_CheckForUpdates (0.00s)
=== RUN TestUpdateService_SetAPIURL_GitHubValidation
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/valid_GitHub_API_HTTPS
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/GitHub_with_HTTP_scheme
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/non-GitHub_domain
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/localhost_allowed
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/127.0.0.1_allowed
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/::1_IPv6_localhost_allowed
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/invalid_URL
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/ftp_scheme_not_allowed
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/github.com_domain_allowed_with_HTTPS
=== RUN TestUpdateService_SetAPIURL_GitHubValidation/github.com_domain_with_HTTP_rejected
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/valid_GitHub_API_HTTPS (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/GitHub_with_HTTP_scheme (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/non-GitHub_domain (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/localhost_allowed (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/127.0.0.1_allowed (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/::1_IPv6_localhost_allowed (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/invalid_URL (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/ftp_scheme_not_allowed (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/github.com_domain_allowed_with_HTTPS (0.00s)
--- PASS: TestUpdateService_SetAPIURL_GitHubValidation/github.com_domain_with_HTTP_rejected (0.00s)
=== RUN TestUptimeService_sendRecoveryNotification
=== PAUSE TestUptimeService_sendRecoveryNotification
=== RUN TestCheckHost_RetryLogic
time="2026-01-10T02:18:25Z" level=info msg="Retrying TCP check" host_name="Test Host" max=2 retry=1
time="2026-01-10T02:18:27Z" level=info msg="Retrying TCP check" host_name="Test Host" max=2 retry=2
time="2026-01-10T02:18:29Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Test Host" last_error="dial tcp 127.0.0.1:9: connect: connection refused" threshold=2
--- PASS: TestCheckHost_RetryLogic (4.03s)
=== RUN TestCheckHost_Debouncing
time="2026-01-10T02:18:30Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Test Host" last_error="dial tcp 192.0.2.1:9999: i/o timeout" threshold=2
2026/01/10 02:18:30 /projects/Charon/backend/internal/services/uptime_service_race_test.go:100 unrecognized token: "176d"
[0.064ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE d5b1c420-176d-4157-b59e-c1f70a24303b AND `uptime_hosts`.`id` = "d5b1c420-176d-4157-b59e-c1f70a24303b" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:31Z" level=info msg="Host status changed" host_ip=192.0.2.1 host_name="Test Host" message="TCP check failed: dial tcp 192.0.2.1:9999: i/o timeout" new=down old=up
2026/01/10 02:18:31 /projects/Charon/backend/internal/services/uptime_service_race_test.go:106 unrecognized token: "176d"
[0.083ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE d5b1c420-176d-4157-b59e-c1f70a24303b AND `uptime_hosts`.`id` = "d5b1c420-176d-4157-b59e-c1f70a24303b" ORDER BY `uptime_hosts`.`id` LIMIT 1
--- PASS: TestCheckHost_Debouncing (2.03s)
=== RUN TestCheckHost_FailureCountReset
time="2026-01-10T02:18:31Z" level=info msg="Host status changed" host_ip=127.0.0.1 host_name="Test Host" message="TCP connection to 127.0.0.1:40061 successful (retry 0)" new=up old=down
2026/01/10 02:18:31 /projects/Charon/backend/internal/services/uptime_service_race_test.go:152 unrecognized token: "0251331e-0aa2"
[0.046ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE 0251331e-0aa2-485c-acee-3427ee4c31d5 AND `uptime_hosts`.`id` = "0251331e-0aa2-485c-acee-3427ee4c31d5" ORDER BY `uptime_hosts`.`id` LIMIT 1
--- PASS: TestCheckHost_FailureCountReset (0.03s)
=== RUN TestCheckAllHosts_Synchronization
time="2026-01-10T02:18:31Z" level=info msg="Starting host checks" host_count=5
time="2026-01-10T02:18:32Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 1" last_error="dial tcp 192.0.2.1:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:32Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 2" last_error="dial tcp 192.0.2.2:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:32Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 3" last_error="dial tcp 192.0.2.3:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:32Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 4" last_error="dial tcp 192.0.2.4:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:32Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 5" last_error="dial tcp 192.0.2.5:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:32Z" level=info msg="All host checks completed" host_count=5
--- PASS: TestCheckAllHosts_Synchronization (0.93s)
=== RUN TestCheckHost_ConcurrentChecks
--- PASS: TestCheckHost_ConcurrentChecks (0.03s)
=== RUN TestCheckHost_ContextCancellation
time="2026-01-10T02:18:32Z" level=warning msg="TCP check cancelled" host_name="Test Host"
--- PASS: TestCheckHost_ContextCancellation (0.03s)
=== RUN TestCheckAllHosts_StaggeredStartup
time="2026-01-10T02:18:32Z" level=info msg="Starting host checks" host_count=3
time="2026-01-10T02:18:33Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 1" last_error="dial tcp 192.0.2.1:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:33Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 2" last_error="dial tcp 192.0.2.2:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:33Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="Host 3" last_error="dial tcp 192.0.2.3:9999: i/o timeout" threshold=2
time="2026-01-10T02:18:33Z" level=info msg="All host checks completed" host_count=3
--- PASS: TestCheckAllHosts_StaggeredStartup (0.62s)
=== RUN TestUptimeConfig_Defaults
--- PASS: TestUptimeConfig_Defaults (0.02s)
=== RUN TestCheckHost_HostMutexPreventsRaceCondition
--- PASS: TestCheckHost_HostMutexPreventsRaceCondition (0.03s)
=== RUN TestUptimeService_CheckAll
2026/01/10 02:18:33 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.125ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:33 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.089ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "127.0.0.1" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:33Z" level=info msg="Created UptimeHost" host=127.0.0.1 host_id=e6915ec0-389e-4416-90d5-a31a824969f1
2026/01/10 02:18:33 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.088ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 2 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:33 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.087ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "127.0.0.2" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:33Z" level=info msg="Created UptimeHost" host=127.0.0.2 host_id=b8fb24fb-381f-4d60-9e94-9fde1d7981f3
time="2026-01-10T02:18:33Z" level=info msg="Starting host checks" host_count=2
time="2026-01-10T02:18:33Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="127.0.0.2:42303" last_error="dial tcp 127.0.0.2:42303: connect: connection refused" threshold=2
time="2026-01-10T02:18:33Z" level=info msg="All host checks completed" host_count=2
time="2026-01-10T02:18:33Z" level=info msg="Starting host checks" host_count=2
time="2026-01-10T02:18:33Z" level=info msg="All host checks completed" host_count=2
time="2026-01-10T02:18:33Z" level=info msg="Starting host checks" host_count=2
time="2026-01-10T02:18:33Z" level=info msg="All host checks completed" host_count=2
time="2026-01-10T02:18:34Z" level=info msg="Starting host checks" host_count=2
time="2026-01-10T02:18:34Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="127.0.0.1:35477" last_error="dial tcp 127.0.0.1:35477: connect: connection refused" threshold=2
time="2026-01-10T02:18:34Z" level=info msg="All host checks completed" host_count=2
time="2026-01-10T02:18:34Z" level=info msg="Starting host checks" host_count=2
time="2026-01-10T02:18:34Z" level=info msg="Host status changed" host_ip=127.0.0.1 host_name="127.0.0.1:35477" message="TCP check failed: dial tcp 127.0.0.1:35477: connect: connection refused" new=down old=up
time="2026-01-10T02:18:34Z" level=info msg="All host checks completed" host_count=2
time="2026-01-10T02:18:34Z" level=info msg="Sent consolidated DOWN notification" host_name="127.0.0.1:35477" service_count=1
time="2026-01-10T02:18:34Z" level=info msg="Starting host checks" host_count=2
time="2026-01-10T02:18:34Z" level=info msg="All host checks completed" host_count=2
--- PASS: TestUptimeService_CheckAll (1.78s)
=== RUN TestUptimeService_ListMonitors
--- PASS: TestUptimeService_ListMonitors (0.04s)
=== RUN TestUptimeService_GetMonitorByID
=== RUN TestUptimeService_GetMonitorByID/get_existing_monitor
=== RUN TestUptimeService_GetMonitorByID/get_non-existent_monitor
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:1045 record not found
[0.138ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "non-existent" ORDER BY `uptime_monitors`.`id` LIMIT 1
--- PASS: TestUptimeService_GetMonitorByID (0.04s)
--- PASS: TestUptimeService_GetMonitorByID/get_existing_monitor (0.00s)
--- PASS: TestUptimeService_GetMonitorByID/get_non-existent_monitor (0.00s)
=== RUN TestUptimeService_GetMonitorHistory
--- PASS: TestUptimeService_GetMonitorHistory (0.03s)
=== RUN TestUptimeService_SyncMonitors_Errors
=== RUN TestUptimeService_SyncMonitors_Errors/database_error_during_proxy_host_fetch
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:129 sql: database is closed
[0.025ms] [rows:0] SELECT * FROM `proxy_hosts`
=== RUN TestUptimeService_SyncMonitors_Errors/creates_monitors_for_new_hosts
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.116ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.067ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host= host_id=2137c317-4661-4772-9158-45d5e83005c5
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.105ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 2 ORDER BY `uptime_monitors`.`id` LIMIT 1
=== RUN TestUptimeService_SyncMonitors_Errors/orphaned_monitors_persist_after_host_deletion
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.128ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.084ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host= host_id=3dca6b43-458c-4d6e-bfa4-4a50d4891384
--- PASS: TestUptimeService_SyncMonitors_Errors (0.10s)
--- PASS: TestUptimeService_SyncMonitors_Errors/database_error_during_proxy_host_fetch (0.03s)
--- PASS: TestUptimeService_SyncMonitors_Errors/creates_monitors_for_new_hosts (0.03s)
--- PASS: TestUptimeService_SyncMonitors_Errors/orphaned_monitors_persist_after_host_deletion (0.03s)
=== RUN TestUptimeService_SyncMonitors_NameSync
=== RUN TestUptimeService_SyncMonitors_NameSync/syncs_name_from_proxy_host_when_changed
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.105ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.076ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host= host_id=c69fc6e8-989f-4b3d-92c2-d3f689aba3da
=== RUN TestUptimeService_SyncMonitors_NameSync/uses_domain_name_when_proxy_host_name_is_empty
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.102ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.093ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host= host_id=78f116c2-01a9-4e44-bbe6-caf207ae87d9
=== RUN TestUptimeService_SyncMonitors_NameSync/updates_monitor_name_when_host_name_becomes_empty
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.102ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.098ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host= host_id=3e6136a3-8060-4333-8f49-68e669908345
--- PASS: TestUptimeService_SyncMonitors_NameSync (0.11s)
--- PASS: TestUptimeService_SyncMonitors_NameSync/syncs_name_from_proxy_host_when_changed (0.04s)
--- PASS: TestUptimeService_SyncMonitors_NameSync/uses_domain_name_when_proxy_host_name_is_empty (0.04s)
--- PASS: TestUptimeService_SyncMonitors_NameSync/updates_monitor_name_when_host_name_becomes_empty (0.04s)
=== RUN TestUptimeService_SyncMonitors_TCPMigration
=== RUN TestUptimeService_SyncMonitors_TCPMigration/migrates_TCP_monitor_to_HTTP_for_public_URL
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.093ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "backend.local" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=backend.local host_id=d67854eb-c642-4b7f-bf4b-d53da0f93214
time="2026-01-10T02:18:35Z" level=info msg="Migrated monitor for host 1 to check public URL: http://public.com" host_id=1
=== RUN TestUptimeService_SyncMonitors_TCPMigration/does_not_migrate_TCP_monitor_with_custom_URL
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.103ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "backend.local" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=backend.local host_id=7dba5d0e-a022-48c5-8d9f-0c5b672c8f07
--- PASS: TestUptimeService_SyncMonitors_TCPMigration (0.08s)
--- PASS: TestUptimeService_SyncMonitors_TCPMigration/migrates_TCP_monitor_to_HTTP_for_public_URL (0.04s)
--- PASS: TestUptimeService_SyncMonitors_TCPMigration/does_not_migrate_TCP_monitor_with_custom_URL (0.04s)
=== RUN TestUptimeService_SyncMonitors_HTTPSUpgrade
=== RUN TestUptimeService_SyncMonitors_HTTPSUpgrade/upgrades_HTTP_to_HTTPS_when_SSL_forced
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.106ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host= host_id=94b82ed6-4790-4bc8-9c7d-fa9b355e903c
time="2026-01-10T02:18:35Z" level=info msg="Upgraded monitor for host 1 to HTTPS: https://secure.com" host_id=1
=== RUN TestUptimeService_SyncMonitors_HTTPSUpgrade/does_not_downgrade_HTTPS_when_SSL_not_forced
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.067ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host= host_id=091224d1-161c-4a6a-9196-c8e23b6f7d58
--- PASS: TestUptimeService_SyncMonitors_HTTPSUpgrade (0.07s)
--- PASS: TestUptimeService_SyncMonitors_HTTPSUpgrade/upgrades_HTTP_to_HTTPS_when_SSL_forced (0.04s)
--- PASS: TestUptimeService_SyncMonitors_HTTPSUpgrade/does_not_downgrade_HTTPS_when_SSL_not_forced (0.03s)
=== RUN TestUptimeService_SyncMonitors_RemoteServers
=== RUN TestUptimeService_SyncMonitors_RemoteServers/creates_monitor_for_new_remote_server
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:234 record not found
[0.103ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE remote_server_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.062ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "backend.local" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=backend.local host_id=24a184ca-2b50-45a3-a068-c90e570460eb
=== RUN TestUptimeService_SyncMonitors_RemoteServers/creates_TCP_monitor_for_remote_server_without_scheme
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:234 record not found
[0.085ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE remote_server_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.068ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "tcp.backend" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=tcp.backend host_id=a2fded70-8b8b-433c-b7e1-8642785d0587
=== RUN TestUptimeService_SyncMonitors_RemoteServers/syncs_remote_server_name_changes
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:234 record not found
[0.090ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE remote_server_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.097ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "server.local" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=server.local host_id=fc5ca180-6106-495e-98ce-9495a0f4b4fb
=== RUN TestUptimeService_SyncMonitors_RemoteServers/syncs_remote_server_URL_changes
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:234 record not found
[0.145ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE remote_server_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.089ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "old.host" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=old.host host_id=c6102d5c-f657-4c2d-ab13-fe52c54d1e06
=== RUN TestUptimeService_SyncMonitors_RemoteServers/syncs_remote_server_enabled_status
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:234 record not found
[0.099ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE remote_server_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.092ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "server.local" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=server.local host_id=bfc3d116-534e-4086-92f8-37f311fae8c4
=== RUN TestUptimeService_SyncMonitors_RemoteServers/syncs_scheme_change_from_TCP_to_HTTPS
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:234 record not found
[0.087ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE remote_server_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.068ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "server.local" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=server.local host_id=d5af8ec7-caa3-43fb-8804-d6f606f0e25d
--- PASS: TestUptimeService_SyncMonitors_RemoteServers (0.23s)
--- PASS: TestUptimeService_SyncMonitors_RemoteServers/creates_monitor_for_new_remote_server (0.04s)
--- PASS: TestUptimeService_SyncMonitors_RemoteServers/creates_TCP_monitor_for_remote_server_without_scheme (0.03s)
--- PASS: TestUptimeService_SyncMonitors_RemoteServers/syncs_remote_server_name_changes (0.05s)
--- PASS: TestUptimeService_SyncMonitors_RemoteServers/syncs_remote_server_URL_changes (0.03s)
--- PASS: TestUptimeService_SyncMonitors_RemoteServers/syncs_remote_server_enabled_status (0.04s)
--- PASS: TestUptimeService_SyncMonitors_RemoteServers/syncs_scheme_change_from_TCP_to_HTTPS (0.03s)
=== RUN TestUptimeService_CheckAll_Errors
=== RUN TestUptimeService_CheckAll_Errors/handles_empty_monitor_list
=== RUN TestUptimeService_CheckAll_Errors/orphan_monitors_don't_prevent_check_execution
=== RUN TestUptimeService_CheckAll_Errors/handles_timeout_for_slow_hosts
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.125ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:18:35 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.109ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "192.0.2.1" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:18:35Z" level=info msg="Created UptimeHost" host=192.0.2.1 host_id=213383a2-0a2c-4133-8296-591fd0750afa
time="2026-01-10T02:18:35Z" level=info msg="Starting host checks" host_count=1
time="2026-01-10T02:18:45Z" level=info msg="Retrying TCP check" host_name="192.0.2.1:9999" max=2 retry=1
time="2026-01-10T02:18:57Z" level=info msg="Retrying TCP check" host_name="192.0.2.1:9999" max=2 retry=2
time="2026-01-10T02:19:09Z" level=warning msg="Host check failed, waiting for threshold" failure_count=1 host_name="192.0.2.1:9999" last_error="dial tcp 192.0.2.1:9999: i/o timeout" threshold=2
time="2026-01-10T02:19:09Z" level=info msg="All host checks completed" host_count=1
--- PASS: TestUptimeService_CheckAll_Errors (37.28s)
--- PASS: TestUptimeService_CheckAll_Errors/handles_empty_monitor_list (0.09s)
--- PASS: TestUptimeService_CheckAll_Errors/orphan_monitors_don't_prevent_check_execution (0.14s)
--- PASS: TestUptimeService_CheckAll_Errors/handles_timeout_for_slow_hosts (37.06s)
=== RUN TestUptimeService_CheckMonitor_EdgeCases
=== RUN TestUptimeService_CheckMonitor_EdgeCases/invalid_URL_format
=== RUN TestUptimeService_CheckMonitor_EdgeCases/http_404_response_treated_as_down
2026/01/10 02:19:13 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.148ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:19:13 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.101ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "127.0.0.1" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:19:13Z" level=info msg="Created UptimeHost" host=127.0.0.1 host_id=b82fccf5-3b66-41d1-9418-58cd622ff533
time="2026-01-10T02:19:13Z" level=info msg="Starting host checks" host_count=1
time="2026-01-10T02:19:13Z" level=info msg="All host checks completed" host_count=1
time="2026-01-10T02:19:13Z" level=info msg="Starting host checks" host_count=1
time="2026-01-10T02:19:13Z" level=info msg="All host checks completed" host_count=1
time="2026-01-10T02:19:13Z" level=info msg="Starting host checks" host_count=1
time="2026-01-10T02:19:13Z" level=info msg="All host checks completed" host_count=1
=== RUN TestUptimeService_CheckMonitor_EdgeCases/https_URL_without_valid_certificate
--- PASS: TestUptimeService_CheckMonitor_EdgeCases (3.98s)
--- PASS: TestUptimeService_CheckMonitor_EdgeCases/invalid_URL_format (0.54s)
--- PASS: TestUptimeService_CheckMonitor_EdgeCases/http_404_response_treated_as_down (0.40s)
--- PASS: TestUptimeService_CheckMonitor_EdgeCases/https_URL_without_valid_certificate (3.04s)
=== RUN TestUptimeService_GetMonitorHistory_EdgeCases
=== RUN TestUptimeService_GetMonitorHistory_EdgeCases/non-existent_monitor
=== RUN TestUptimeService_GetMonitorHistory_EdgeCases/limit_parameter_respected
--- PASS: TestUptimeService_GetMonitorHistory_EdgeCases (0.09s)
--- PASS: TestUptimeService_GetMonitorHistory_EdgeCases/non-existent_monitor (0.04s)
--- PASS: TestUptimeService_GetMonitorHistory_EdgeCases/limit_parameter_respected (0.05s)
=== RUN TestUptimeService_ListMonitors_EdgeCases
=== RUN TestUptimeService_ListMonitors_EdgeCases/empty_database
=== RUN TestUptimeService_ListMonitors_EdgeCases/monitors_with_associated_proxy_hosts
--- PASS: TestUptimeService_ListMonitors_EdgeCases (0.08s)
--- PASS: TestUptimeService_ListMonitors_EdgeCases/empty_database (0.04s)
--- PASS: TestUptimeService_ListMonitors_EdgeCases/monitors_with_associated_proxy_hosts (0.04s)
=== RUN TestUptimeService_UpdateMonitor
=== RUN TestUptimeService_UpdateMonitor/update_max_retries
=== RUN TestUptimeService_UpdateMonitor/update_interval
=== RUN TestUptimeService_UpdateMonitor/update_non-existent_monitor
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:1059 record not found
[0.113ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "non-existent" ORDER BY `uptime_monitors`.`id` LIMIT 1
=== RUN TestUptimeService_UpdateMonitor/update_multiple_fields
--- PASS: TestUptimeService_UpdateMonitor (0.14s)
--- PASS: TestUptimeService_UpdateMonitor/update_max_retries (0.04s)
--- PASS: TestUptimeService_UpdateMonitor/update_interval (0.03s)
--- PASS: TestUptimeService_UpdateMonitor/update_non-existent_monitor (0.03s)
--- PASS: TestUptimeService_UpdateMonitor/update_multiple_fields (0.03s)
=== RUN TestUptimeService_NotificationBatching
=== RUN TestUptimeService_NotificationBatching/batches_multiple_service_failures_on_same_host
time="2026-01-10T02:19:17Z" level=info msg="Created pending notification batch" host="Test Server" monitor="Service A"
time="2026-01-10T02:19:17Z" level=info msg="Added to pending notification batch" count=2 host="Test Server" monitor="Service B"
time="2026-01-10T02:19:17Z" level=info msg="Added to pending notification batch" count=3 host="Test Server" monitor="Service C"
time="2026-01-10T02:19:17Z" level=info msg="Sent batched DOWN notification" count=3 host="Test Server"
=== RUN TestUptimeService_NotificationBatching/single_service_down_gets_individual_notification
time="2026-01-10T02:19:17Z" level=info msg="Created pending notification batch" host="Single Service Host" monitor="Lonely Service"
time="2026-01-10T02:19:17Z" level=info msg="Sent batched DOWN notification" count=1 host="Single Service Host"
--- PASS: TestUptimeService_NotificationBatching (0.07s)
--- PASS: TestUptimeService_NotificationBatching/batches_multiple_service_failures_on_same_host (0.03s)
--- PASS: TestUptimeService_NotificationBatching/single_service_down_gets_individual_notification (0.03s)
=== RUN TestUptimeService_HostLevelCheck
=== RUN TestUptimeService_HostLevelCheck/creates_uptime_host_during_sync
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.147ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.093ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "10.0.0.50" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:19:17Z" level=info msg="Created UptimeHost" host=10.0.0.50 host_id=87948aad-f1f9-4a9f-a940-d5e1729e1d0a
=== RUN TestUptimeService_HostLevelCheck/groups_multiple_services_on_same_host
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.116ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.119ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "10.0.0.100" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:19:17Z" level=info msg="Created UptimeHost" host=10.0.0.100 host_id=ee3c3763-ed2c-4f91-9d9e-470f2f6cc6da
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.104ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 2 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.078ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 3 ORDER BY `uptime_monitors`.`id` LIMIT 1
--- PASS: TestUptimeService_HostLevelCheck (0.08s)
--- PASS: TestUptimeService_HostLevelCheck/creates_uptime_host_during_sync (0.03s)
--- PASS: TestUptimeService_HostLevelCheck/groups_multiple_services_on_same_host (0.04s)
=== RUN TestFormatDuration
--- PASS: TestFormatDuration (0.00s)
=== RUN TestUptimeService_SyncMonitorForHost
=== RUN TestUptimeService_SyncMonitorForHost/updates_monitor_when_proxy_host_is_edited
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.142ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.105ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "10.0.0.1" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:19:17Z" level=info msg="Created UptimeHost" host=10.0.0.1 host_id=ec41d123-8daf-499f-84da-d1991ab2db39
=== RUN TestUptimeService_SyncMonitorForHost/returns_nil_when_no_monitor_exists
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:1004 record not found
[0.139ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
=== RUN TestUptimeService_SyncMonitorForHost/returns_error_when_host_does_not_exist
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:999 record not found
[0.131ms] [rows:0] SELECT * FROM `proxy_hosts` WHERE `proxy_hosts`.`id` = 99999 ORDER BY `proxy_hosts`.`id` LIMIT 1
=== RUN TestUptimeService_SyncMonitorForHost/uses_domain_name_when_proxy_host_name_is_empty
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.139ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.091ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "10.0.0.4" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:19:17Z" level=info msg="Created UptimeHost" host=10.0.0.4 host_id=a829a6d4-3a36-4c53-b23d-d77baba6f48b
=== RUN TestUptimeService_SyncMonitorForHost/handles_multiple_domains_correctly
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:135 record not found
[0.162ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE proxy_host_id = 1 ORDER BY `uptime_monitors`.`id` LIMIT 1
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:309 record not found
[0.126ms] [rows:0] SELECT * FROM `uptime_hosts` WHERE host = "10.0.0.5" ORDER BY `uptime_hosts`.`id` LIMIT 1
time="2026-01-10T02:19:17Z" level=info msg="Created UptimeHost" host=10.0.0.5 host_id=0ff2ee7f-55d2-4b95-9e5a-21d3039dc2e4
--- PASS: TestUptimeService_SyncMonitorForHost (0.18s)
--- PASS: TestUptimeService_SyncMonitorForHost/updates_monitor_when_proxy_host_is_edited (0.04s)
--- PASS: TestUptimeService_SyncMonitorForHost/returns_nil_when_no_monitor_exists (0.04s)
--- PASS: TestUptimeService_SyncMonitorForHost/returns_error_when_host_does_not_exist (0.04s)
--- PASS: TestUptimeService_SyncMonitorForHost/uses_domain_name_when_proxy_host_name_is_empty (0.04s)
--- PASS: TestUptimeService_SyncMonitorForHost/handles_multiple_domains_correctly (0.04s)
=== RUN TestUptimeService_DeleteMonitor
=== RUN TestUptimeService_DeleteMonitor/deletes_monitor_and_heartbeats
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service_test.go:1416 record not found
[0.082ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "delete-test-1" ORDER BY `uptime_monitors`.`id` LIMIT 1
=== RUN TestUptimeService_DeleteMonitor/returns_error_for_non-existent_monitor
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service.go:1087 record not found
[0.081ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "non-existent-id" ORDER BY `uptime_monitors`.`id` LIMIT 1
=== RUN TestUptimeService_DeleteMonitor/deletes_monitor_without_heartbeats
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service_test.go:1456 record not found
[0.080ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "delete-no-hb" ORDER BY `uptime_monitors`.`id` LIMIT 1
--- PASS: TestUptimeService_DeleteMonitor (0.10s)
--- PASS: TestUptimeService_DeleteMonitor/deletes_monitor_and_heartbeats (0.04s)
--- PASS: TestUptimeService_DeleteMonitor/returns_error_for_non-existent_monitor (0.03s)
--- PASS: TestUptimeService_DeleteMonitor/deletes_monitor_without_heartbeats (0.03s)
=== RUN TestUptimeService_UpdateMonitor_EnabledField
--- PASS: TestUptimeService_UpdateMonitor_EnabledField (0.03s)
=== RUN TestExtractPort
=== RUN TestExtractPort/http_url_default
=== RUN TestExtractPort/https_url_default
=== RUN TestExtractPort/http_with_port
=== RUN TestExtractPort/https_with_port
=== RUN TestExtractPort/host:port
=== RUN TestExtractPort/plain_host
=== RUN TestExtractPort/localhost_with_port
=== RUN TestExtractPort/ip_with_port
=== RUN TestExtractPort/ipv6_with_port
--- PASS: TestExtractPort (0.00s)
--- PASS: TestExtractPort/http_url_default (0.00s)
--- PASS: TestExtractPort/https_url_default (0.00s)
--- PASS: TestExtractPort/http_with_port (0.00s)
--- PASS: TestExtractPort/https_with_port (0.00s)
--- PASS: TestExtractPort/host:port (0.00s)
--- PASS: TestExtractPort/plain_host (0.00s)
--- PASS: TestExtractPort/localhost_with_port (0.00s)
--- PASS: TestExtractPort/ip_with_port (0.00s)
--- PASS: TestExtractPort/ipv6_with_port (0.00s)
=== RUN TestUpdateMonitorEnabled_Unit
--- PASS: TestUpdateMonitorEnabled_Unit (0.02s)
=== RUN TestDeleteMonitorDeletesHeartbeats_Unit
2026/01/10 02:19:17 /projects/Charon/backend/internal/services/uptime_service_unit_test.go:77 record not found
[0.070ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "c57faec9-44b0-4ec7-a50e-7acefc4aeba6" ORDER BY `uptime_monitors`.`id` LIMIT 1
--- PASS: TestDeleteMonitorDeletesHeartbeats_Unit (0.06s)
=== RUN TestCheckMonitor_PublicAPI
--- PASS: TestCheckMonitor_PublicAPI (0.23s)
=== RUN TestCheckMonitor_InvalidURL
--- PASS: TestCheckMonitor_InvalidURL (0.08s)
=== RUN TestCheckMonitor_TCPSuccess
--- PASS: TestCheckMonitor_TCPSuccess (0.08s)
=== RUN TestCheckMonitor_TCPFailure
--- PASS: TestCheckMonitor_TCPFailure (10.07s)
=== RUN TestCheckMonitor_UnknownType
--- PASS: TestCheckMonitor_UnknownType (0.06s)
=== RUN TestDeleteMonitor_NonExistent
2026/01/10 02:19:28 /projects/Charon/backend/internal/services/uptime_service.go:1087 record not found
[0.101ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "non-existent-id" ORDER BY `uptime_monitors`.`id` LIMIT 1
--- PASS: TestDeleteMonitor_NonExistent (0.06s)
=== RUN TestUpdateMonitor_NonExistent
2026/01/10 02:19:28 /projects/Charon/backend/internal/services/uptime_service.go:1059 record not found
[0.111ms] [rows:0] SELECT * FROM `uptime_monitors` WHERE id = "non-existent-id" ORDER BY `uptime_monitors`.`id` LIMIT 1
--- PASS: TestUpdateMonitor_NonExistent (0.08s)
=== RUN TestNewWebSocketTracker
--- PASS: TestNewWebSocketTracker (0.00s)
=== RUN TestWebSocketTracker_Register
--- PASS: TestWebSocketTracker_Register (0.00s)
=== RUN TestWebSocketTracker_Unregister
--- PASS: TestWebSocketTracker_Unregister (0.00s)
=== RUN TestWebSocketTracker_UnregisterNonExistent
--- PASS: TestWebSocketTracker_UnregisterNonExistent (0.00s)
=== RUN TestWebSocketTracker_UpdateActivity
--- PASS: TestWebSocketTracker_UpdateActivity (0.01s)
=== RUN TestWebSocketTracker_UpdateActivityNonExistent
--- PASS: TestWebSocketTracker_UpdateActivityNonExistent (0.00s)
=== RUN TestWebSocketTracker_GetAllConnections
--- PASS: TestWebSocketTracker_GetAllConnections (0.00s)
=== RUN TestWebSocketTracker_GetStats
--- PASS: TestWebSocketTracker_GetStats (0.00s)
=== RUN TestWebSocketTracker_GetStatsEmpty
--- PASS: TestWebSocketTracker_GetStatsEmpty (0.00s)
=== RUN TestWebSocketTracker_ConcurrentAccess
--- PASS: TestWebSocketTracker_ConcurrentAccess (0.00s)
=== RUN TestCredentialService_Create
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_Create (0.01s)
=== RUN TestCredentialService_Create_MultiCredentialNotEnabled
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_Create_MultiCredentialNotEnabled (0.01s)
=== RUN TestCredentialService_Create_InvalidCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_Create_InvalidCredentials (0.01s)
=== RUN TestCredentialService_List
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
2026/01/10 02:19:28 /projects/Charon/backend/internal/services/credential_service.go:196 database table is locked
[0.253ms] [rows:0] INSERT INTO `dns_provider_credentials` (`uuid`,`dns_provider_id`,`label`,`zone_filter`,`enabled`,`credentials_encrypted`,`key_version`,`propagation_timeout`,`polling_interval`,`last_used_at`,`success_count`,`failure_count`,`last_error`,`created_at`,`updated_at`) VALUES ("a60759d1-40a0-4022-8e9f-5a06705b0176",1,"Credential B","",true,"BYNMQRrcsf8KNGUlXIMrgWbXW0atvE1fizPtKfyYxLLKfiXTu4RhMoSIQGwL9baDAA==",1,120,5,NULL,0,0,"","2026-01-10 02:19:28.539","2026-01-10 02:19:28.539") RETURNING `id`
credential_service_test.go:149:
Error Trace: /projects/Charon/backend/internal/services/credential_service_test.go:149
Error: Received unexpected error:
database table is locked
Test: TestCredentialService_List
--- FAIL: TestCredentialService_List (0.01s)
=== RUN TestCredentialService_Get
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_Get (0.01s)
=== RUN TestCredentialService_Get_NotFound
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
2026/01/10 02:19:28 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.308ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 9999 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialService_Get_NotFound (0.01s)
=== RUN TestCredentialService_Update
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_Update (0.01s)
=== RUN TestCredentialService_Delete
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
2026/01/10 02:19:28 /projects/Charon/backend/internal/services/credential_service.go:111 record not found
[0.069ms] [rows:0] SELECT * FROM `dns_provider_credentials` WHERE id = 1 AND dns_provider_id = 1 ORDER BY `dns_provider_credentials`.`id` LIMIT 1
--- PASS: TestCredentialService_Delete (0.01s)
=== RUN TestCredentialService_Test
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_Test (0.01s)
=== RUN TestCredentialService_GetCredentialForDomain_ExactMatch
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
2026/01/10 02:19:28 /projects/Charon/backend/internal/services/credential_service.go:196 database table is locked
[0.286ms] [rows:0] INSERT INTO `dns_provider_credentials` (`uuid`,`dns_provider_id`,`label`,`zone_filter`,`enabled`,`credentials_encrypted`,`key_version`,`propagation_timeout`,`polling_interval`,`last_used_at`,`success_count`,`failure_count`,`last_error`,`created_at`,`updated_at`) VALUES ("86f40fa1-bee2-4664-b3d1-d7bd1544248c",1,"Catch All","",true,"l3KUYfElVhFaDhUFgA45u5QLw4A067zoEoWT3yvrmgFeja/XfgPXsa+lgKh33p/YsmgSbR8ZRZA7Hw==",1,120,5,NULL,0,0,"","2026-01-10 02:19:28.578","2026-01-10 02:19:28.578") RETURNING `id`
credential_service_test.go:283:
Error Trace: /projects/Charon/backend/internal/services/credential_service_test.go:283
Error: Received unexpected error:
database table is locked
Test: TestCredentialService_GetCredentialForDomain_ExactMatch
--- FAIL: TestCredentialService_GetCredentialForDomain_ExactMatch (0.01s)
=== RUN TestCredentialService_GetCredentialForDomain_WildcardMatch
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_GetCredentialForDomain_WildcardMatch (0.01s)
=== RUN TestCredentialService_GetCredentialForDomain_CatchAll
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_GetCredentialForDomain_CatchAll (0.01s)
=== RUN TestCredentialService_GetCredentialForDomain_NoMatch
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_GetCredentialForDomain_NoMatch (0.01s)
=== RUN TestCredentialService_GetCredentialForDomain_MultiCredNotEnabled
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_GetCredentialForDomain_MultiCredNotEnabled (0.01s)
=== RUN TestCredentialService_GetCredentialForDomain_MultipleZones
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_GetCredentialForDomain_MultipleZones (0.01s)
=== RUN TestCredentialService_EnableMultiCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_EnableMultiCredentials (0.01s)
=== RUN TestCredentialService_EnableMultiCredentials_AlreadyEnabled
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_EnableMultiCredentials_AlreadyEnabled (0.01s)
=== RUN TestCredentialService_EnableMultiCredentials_NoCredentials
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_EnableMultiCredentials_NoCredentials (0.01s)
=== RUN TestCredentialService_GetCredentialForDomain_IDN
Warning: RotationService initialization failed, using basic encryption: CHARON_ENCRYPTION_KEY is required
--- PASS: TestCredentialService_GetCredentialForDomain_IDN (0.01s)
=== CONT TestBackupService_GetAvailableSpace
=== CONT TestLogWatcherConcurrentSubscribers
=== RUN TestBackupService_GetAvailableSpace/returns_space_for_existing_directory
=== PAUSE TestBackupService_GetAvailableSpace/returns_space_for_existing_directory
=== CONT TestLogWatcherIntegration
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher started" path=/tmp/TestLogWatcherIntegration833592932/001/access.log
=== CONT TestHasHeader
--- PASS: TestHasHeader (0.00s)
=== RUN TestBackupService_GetAvailableSpace/errors_for_missing_directory
=== CONT TestParseLogEntryValidJSON
--- PASS: TestParseLogEntryValidJSON (0.00s)
=== CONT TestParseLogEntry401Auth
--- PASS: TestParseLogEntry401Auth (0.00s)
=== PAUSE TestBackupService_GetAvailableSpace/errors_for_missing_directory
=== CONT TestParseLogEntry403CrowdSec
--- PASS: TestParseLogEntry403CrowdSec (0.00s)
=== CONT TestParseLogEntry500Error
--- PASS: TestParseLogEntry500Error (0.00s)
=== CONT TestParseLogEntryBlockedByRateLimit
--- PASS: TestParseLogEntryBlockedByRateLimit (0.00s)
=== CONT TestParseLogEntryBlockedByWAF
--- PASS: TestParseLogEntryBlockedByWAF (0.00s)
=== CONT TestParseLogEntryInvalidJSON
=== RUN TestParseLogEntryInvalidJSON/empty
=== CONT TestUptimeService_sendRecoveryNotification
=== RUN TestParseLogEntryInvalidJSON/not_json
=== RUN TestParseLogEntryInvalidJSON/incomplete_json
=== RUN TestParseLogEntryInvalidJSON/array_instead_of_object
--- PASS: TestParseLogEntryInvalidJSON (0.01s)
--- PASS: TestParseLogEntryInvalidJSON/empty (0.00s)
--- PASS: TestParseLogEntryInvalidJSON/not_json (0.00s)
--- PASS: TestParseLogEntryInvalidJSON/incomplete_json (0.00s)
--- PASS: TestParseLogEntryInvalidJSON/array_instead_of_object (0.00s)
=== CONT TestDetectSecurityEvent_403WithoutHeaders
--- PASS: TestDetectSecurityEvent_403WithoutHeaders (0.00s)
=== CONT TestNotificationService_TemplateCRUD
--- PASS: TestUptimeService_sendRecoveryNotification (0.01s)
=== CONT TestDetectSecurityEvent_RateLimitPartialHeaders
--- PASS: TestDetectSecurityEvent_RateLimitPartialHeaders (0.00s)
=== CONT TestDetectSecurityEvent_RateLimitAllHeaders
--- PASS: TestDetectSecurityEvent_RateLimitAllHeaders (0.00s)
=== CONT TestDetectSecurityEvent_ACLBlockedHeader
--- PASS: TestDetectSecurityEvent_ACLBlockedHeader (0.00s)
=== CONT TestDetectSecurityEvent_CrowdSecWithOriginHeader
--- PASS: TestDetectSecurityEvent_CrowdSecWithOriginHeader (0.00s)
=== CONT TestDetectSecurityEvent_CrowdSecWithDecisionHeader
--- PASS: TestDetectSecurityEvent_CrowdSecWithDecisionHeader (0.00s)
=== CONT TestDetectSecurityEvent_ACLDeniedHeader
--- PASS: TestDetectSecurityEvent_ACLDeniedHeader (0.00s)
=== CONT TestDetectSecurityEvent_WAFWithCorazaRuleId
--- PASS: TestDetectSecurityEvent_WAFWithCorazaRuleId (0.00s)
=== CONT TestLogWatcher_ReadLoop_EOFRetry
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher started" path=/tmp/TestLogWatcher_ReadLoop_EOFRetry3222960328/001/access.log
--- PASS: TestNotificationService_TemplateCRUD (0.01s)
=== CONT TestMin
--- PASS: TestMin (0.00s)
=== CONT TestDetectSecurityEvent_WAFWithCorazaId
--- PASS: TestDetectSecurityEvent_WAFWithCorazaId (0.00s)
=== CONT TestLogWatcherMissingFile
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher started" path=/tmp/TestLogWatcherMissingFile4258081303/001/nonexistent/access.log
--- PASS: TestLogWatcherConcurrentSubscribers (0.02s)
=== CONT TestLogWatcherBroadcastNonBlocking
--- PASS: TestLogWatcherBroadcastNonBlocking (0.00s)
=== CONT TestLogWatcherSubscribeUnsubscribe
--- PASS: TestLogWatcherSubscribeUnsubscribe (0.00s)
=== CONT TestLogWatcherBroadcast
--- PASS: TestLogWatcherBroadcast (0.00s)
=== CONT TestLogWatcherStartStop
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher started" path=/tmp/TestLogWatcherStartStop1684556410/001/access.log
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher stopped"
--- PASS: TestLogWatcherStartStop (0.00s)
=== CONT TestNewLogWatcher
--- PASS: TestNewLogWatcher (0.00s)
=== CONT TestBackupService_GetAvailableSpace/returns_space_for_existing_directory
=== CONT TestBackupService_GetAvailableSpace/errors_for_missing_directory
--- PASS: TestBackupService_GetAvailableSpace (0.00s)
--- PASS: TestBackupService_GetAvailableSpace/returns_space_for_existing_directory (0.00s)
--- PASS: TestBackupService_GetAvailableSpace/errors_for_missing_directory (0.00s)
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher stopped"
--- PASS: TestLogWatcherIntegration (0.20s)
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher stopped"
--- PASS: TestLogWatcherMissingFile (0.20s)
time="2026-01-10T02:19:28Z" level=info msg="LogWatcher stopped"
--- PASS: TestLogWatcher_ReadLoop_EOFRetry (0.20s)
FAIL
coverage: 80.8% of statements
FAIL github.com/Wikid82/charon/backend/internal/services 111.017s
=== RUN TestWithTx_Success
--- PASS: TestWithTx_Success (0.00s)
=== RUN TestWithTx_Panic
--- PASS: TestWithTx_Panic (0.00s)
=== RUN TestWithTx_MultipleOperations
--- PASS: TestWithTx_MultipleOperations (0.00s)
=== RUN TestGetTestTx_Cleanup
=== RUN TestGetTestTx_Cleanup/Subtest
--- PASS: TestGetTestTx_Cleanup (0.01s)
--- PASS: TestGetTestTx_Cleanup/Subtest (0.00s)
=== RUN TestGetTestTx_MultipleTransactions
=== RUN TestGetTestTx_MultipleTransactions/Transaction1
=== RUN TestGetTestTx_MultipleTransactions/Transaction2
--- PASS: TestGetTestTx_MultipleTransactions (0.00s)
--- PASS: TestGetTestTx_MultipleTransactions/Transaction1 (0.00s)
--- PASS: TestGetTestTx_MultipleTransactions/Transaction2 (0.00s)
=== RUN TestGetTestTx_UsageInMultipleFunctions
=== RUN TestGetTestTx_UsageInMultipleFunctions/MultiFunction
--- PASS: TestGetTestTx_UsageInMultipleFunctions (0.00s)
--- PASS: TestGetTestTx_UsageInMultipleFunctions/MultiFunction (0.00s)
=== RUN TestGetTestTx_Parallel
=== RUN TestGetTestTx_Parallel/Isolation1
=== RUN TestGetTestTx_Parallel/Isolation2
--- PASS: TestGetTestTx_Parallel (0.00s)
--- PASS: TestGetTestTx_Parallel/Isolation1 (0.00s)
--- PASS: TestGetTestTx_Parallel/Isolation2 (0.00s)
=== RUN TestGetTestTx_WithActualTestFailure
=== RUN TestGetTestTx_WithActualTestFailure/FailingSubtest
--- PASS: TestGetTestTx_WithActualTestFailure (0.00s)
--- PASS: TestGetTestTx_WithActualTestFailure/FailingSubtest (0.00s)
PASS
coverage: 100.0% of statements
ok github.com/Wikid82/charon/backend/internal/testutil (cached) coverage: 100.0% of statements
? github.com/Wikid82/charon/backend/internal/trace [no test files]
=== RUN TestConstantTimeCompare
=== PAUSE TestConstantTimeCompare
=== RUN TestConstantTimeCompareBytes
=== PAUSE TestConstantTimeCompareBytes
=== RUN TestSanitizeForLog
=== PAUSE TestSanitizeForLog
=== CONT TestSanitizeForLog
=== RUN TestSanitizeForLog/empty_string
=== CONT TestConstantTimeCompareBytes
=== RUN TestConstantTimeCompareBytes/equal_bytes
=== CONT TestConstantTimeCompare
=== RUN TestConstantTimeCompare/equal_strings
=== RUN TestSanitizeForLog/clean_string
=== RUN TestConstantTimeCompare/different_strings
=== RUN TestConstantTimeCompareBytes/different_bytes
=== RUN TestConstantTimeCompare/different_lengths
=== RUN TestConstantTimeCompareBytes/different_lengths
=== RUN TestSanitizeForLog/string_with_newline
=== RUN TestConstantTimeCompareBytes/empty_slices
=== RUN TestSanitizeForLog/string_with_carriage_return_and_newline
=== RUN TestConstantTimeCompare/empty_strings
=== RUN TestConstantTimeCompareBytes/nil_slices
--- PASS: TestConstantTimeCompareBytes (0.00s)
--- PASS: TestConstantTimeCompareBytes/equal_bytes (0.00s)
--- PASS: TestConstantTimeCompareBytes/different_bytes (0.00s)
--- PASS: TestConstantTimeCompareBytes/different_lengths (0.00s)
--- PASS: TestConstantTimeCompareBytes/empty_slices (0.00s)
--- PASS: TestConstantTimeCompareBytes/nil_slices (0.00s)
=== RUN TestSanitizeForLog/string_with_multiple_newlines
=== RUN TestConstantTimeCompare/one_empty
=== RUN TestConstantTimeCompare/unicode_equal
=== RUN TestSanitizeForLog/string_with_control_characters
=== RUN TestConstantTimeCompare/unicode_different
=== RUN TestSanitizeForLog/string_with_DEL_character_(0x7F)
=== RUN TestConstantTimeCompare/special_chars_equal
=== RUN TestSanitizeForLog/complex_string_with_mixed_control_chars
=== RUN TestConstantTimeCompare/whitespace_matters
--- PASS: TestConstantTimeCompare (0.00s)
--- PASS: TestConstantTimeCompare/equal_strings (0.00s)
--- PASS: TestConstantTimeCompare/different_strings (0.00s)
--- PASS: TestConstantTimeCompare/different_lengths (0.00s)
--- PASS: TestConstantTimeCompare/empty_strings (0.00s)
--- PASS: TestConstantTimeCompare/one_empty (0.00s)
--- PASS: TestConstantTimeCompare/unicode_equal (0.00s)
--- PASS: TestConstantTimeCompare/unicode_different (0.00s)
--- PASS: TestConstantTimeCompare/special_chars_equal (0.00s)
--- PASS: TestConstantTimeCompare/whitespace_matters (0.00s)
=== RUN TestSanitizeForLog/string_with_tabs_(0x09_is_control_char)
=== RUN TestSanitizeForLog/string_with_only_control_chars
--- PASS: TestSanitizeForLog (0.01s)
--- PASS: TestSanitizeForLog/empty_string (0.00s)
--- PASS: TestSanitizeForLog/clean_string (0.00s)
--- PASS: TestSanitizeForLog/string_with_newline (0.00s)
--- PASS: TestSanitizeForLog/string_with_carriage_return_and_newline (0.00s)
--- PASS: TestSanitizeForLog/string_with_multiple_newlines (0.00s)
--- PASS: TestSanitizeForLog/string_with_control_characters (0.00s)
--- PASS: TestSanitizeForLog/string_with_DEL_character_(0x7F) (0.00s)
--- PASS: TestSanitizeForLog/complex_string_with_mixed_control_chars (0.00s)
--- PASS: TestSanitizeForLog/string_with_tabs_(0x09_is_control_char) (0.00s)
--- PASS: TestSanitizeForLog/string_with_only_control_chars (0.00s)
PASS
coverage: 100.0% of statements
ok github.com/Wikid82/charon/backend/internal/util (cached) coverage: 100.0% of statements
=== RUN TestIsPrivateIP
=== RUN TestIsPrivateIP/10.0.0.1_is_private
=== RUN TestIsPrivateIP/10.255.255.255_is_private
=== RUN TestIsPrivateIP/10.10.10.10_is_private
=== RUN TestIsPrivateIP/172.16.0.1_is_private
=== RUN TestIsPrivateIP/172.31.255.255_is_private
=== RUN TestIsPrivateIP/172.20.0.1_is_private
=== RUN TestIsPrivateIP/192.168.1.1_is_private
=== RUN TestIsPrivateIP/192.168.0.1_is_private
=== RUN TestIsPrivateIP/192.168.255.255_is_private
=== RUN TestIsPrivateIP/172.17.0.2_is_private
=== RUN TestIsPrivateIP/172.18.0.5_is_private
=== RUN TestIsPrivateIP/8.8.8.8_is_public
=== RUN TestIsPrivateIP/1.1.1.1_is_public
=== RUN TestIsPrivateIP/142.250.80.14_is_public
=== RUN TestIsPrivateIP/203.0.113.50_is_public
=== RUN TestIsPrivateIP/172.15.0.1_is_public
=== RUN TestIsPrivateIP/172.32.0.1_is_public
=== RUN TestIsPrivateIP/nginx_hostname
=== RUN TestIsPrivateIP/my-app_hostname
=== RUN TestIsPrivateIP/app.local_hostname
=== RUN TestIsPrivateIP/example.com_hostname
=== RUN TestIsPrivateIP/my-container.internal_hostname
=== RUN TestIsPrivateIP/empty_string
=== RUN TestIsPrivateIP/malformed_IP
=== RUN TestIsPrivateIP/too_many_octets
=== RUN TestIsPrivateIP/negative_octet
=== RUN TestIsPrivateIP/octet_out_of_range
=== RUN TestIsPrivateIP/letters_in_IP
=== RUN TestIsPrivateIP/IPv6_address
=== RUN TestIsPrivateIP/IPv6_full_address
=== RUN TestIsPrivateIP/localhost_127.0.0.1
=== RUN TestIsPrivateIP/0.0.0.0
--- PASS: TestIsPrivateIP (0.00s)
--- PASS: TestIsPrivateIP/10.0.0.1_is_private (0.00s)
--- PASS: TestIsPrivateIP/10.255.255.255_is_private (0.00s)
--- PASS: TestIsPrivateIP/10.10.10.10_is_private (0.00s)
--- PASS: TestIsPrivateIP/172.16.0.1_is_private (0.00s)
--- PASS: TestIsPrivateIP/172.31.255.255_is_private (0.00s)
--- PASS: TestIsPrivateIP/172.20.0.1_is_private (0.00s)
--- PASS: TestIsPrivateIP/192.168.1.1_is_private (0.00s)
--- PASS: TestIsPrivateIP/192.168.0.1_is_private (0.00s)
--- PASS: TestIsPrivateIP/192.168.255.255_is_private (0.00s)
--- PASS: TestIsPrivateIP/172.17.0.2_is_private (0.00s)
--- PASS: TestIsPrivateIP/172.18.0.5_is_private (0.00s)
--- PASS: TestIsPrivateIP/8.8.8.8_is_public (0.00s)
--- PASS: TestIsPrivateIP/1.1.1.1_is_public (0.00s)
--- PASS: TestIsPrivateIP/142.250.80.14_is_public (0.00s)
--- PASS: TestIsPrivateIP/203.0.113.50_is_public (0.00s)
--- PASS: TestIsPrivateIP/172.15.0.1_is_public (0.00s)
--- PASS: TestIsPrivateIP/172.32.0.1_is_public (0.00s)
--- PASS: TestIsPrivateIP/nginx_hostname (0.00s)
--- PASS: TestIsPrivateIP/my-app_hostname (0.00s)
--- PASS: TestIsPrivateIP/app.local_hostname (0.00s)
--- PASS: TestIsPrivateIP/example.com_hostname (0.00s)
--- PASS: TestIsPrivateIP/my-container.internal_hostname (0.00s)
--- PASS: TestIsPrivateIP/empty_string (0.00s)
--- PASS: TestIsPrivateIP/malformed_IP (0.00s)
--- PASS: TestIsPrivateIP/too_many_octets (0.00s)
--- PASS: TestIsPrivateIP/negative_octet (0.00s)
--- PASS: TestIsPrivateIP/octet_out_of_range (0.00s)
--- PASS: TestIsPrivateIP/letters_in_IP (0.00s)
--- PASS: TestIsPrivateIP/IPv6_address (0.00s)
--- PASS: TestIsPrivateIP/IPv6_full_address (0.00s)
--- PASS: TestIsPrivateIP/localhost_127.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP/0.0.0.0 (0.00s)
=== RUN TestIsDockerBridgeIP
=== RUN TestIsDockerBridgeIP/172.17.0.1_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.17.0.2_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.17.255.255_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.18.0.1_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.18.0.5_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.20.0.1_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.31.0.1_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.31.255.255_is_Docker_bridge
=== RUN TestIsDockerBridgeIP/172.16.0.1_is_in_Docker_range
=== RUN TestIsDockerBridgeIP/10.0.0.1_is_not_Docker_bridge
=== RUN TestIsDockerBridgeIP/192.168.1.1_is_not_Docker_bridge
=== RUN TestIsDockerBridgeIP/8.8.8.8_is_public
=== RUN TestIsDockerBridgeIP/1.1.1.1_is_public
=== RUN TestIsDockerBridgeIP/172.15.0.1_is_outside_Docker_range
=== RUN TestIsDockerBridgeIP/172.32.0.1_is_outside_Docker_range
=== RUN TestIsDockerBridgeIP/nginx_hostname
=== RUN TestIsDockerBridgeIP/my-app_hostname
=== RUN TestIsDockerBridgeIP/container-name_hostname
=== RUN TestIsDockerBridgeIP/empty_string
=== RUN TestIsDockerBridgeIP/malformed_IP
=== RUN TestIsDockerBridgeIP/too_many_octets
=== RUN TestIsDockerBridgeIP/letters_in_IP
=== RUN TestIsDockerBridgeIP/IPv6_address
=== RUN TestIsDockerBridgeIP/localhost_127.0.0.1
=== RUN TestIsDockerBridgeIP/0.0.0.0
--- PASS: TestIsDockerBridgeIP (0.00s)
--- PASS: TestIsDockerBridgeIP/172.17.0.1_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.17.0.2_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.17.255.255_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.18.0.1_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.18.0.5_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.20.0.1_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.31.0.1_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.31.255.255_is_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/172.16.0.1_is_in_Docker_range (0.00s)
--- PASS: TestIsDockerBridgeIP/10.0.0.1_is_not_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/192.168.1.1_is_not_Docker_bridge (0.00s)
--- PASS: TestIsDockerBridgeIP/8.8.8.8_is_public (0.00s)
--- PASS: TestIsDockerBridgeIP/1.1.1.1_is_public (0.00s)
--- PASS: TestIsDockerBridgeIP/172.15.0.1_is_outside_Docker_range (0.00s)
--- PASS: TestIsDockerBridgeIP/172.32.0.1_is_outside_Docker_range (0.00s)
--- PASS: TestIsDockerBridgeIP/nginx_hostname (0.00s)
--- PASS: TestIsDockerBridgeIP/my-app_hostname (0.00s)
--- PASS: TestIsDockerBridgeIP/container-name_hostname (0.00s)
--- PASS: TestIsDockerBridgeIP/empty_string (0.00s)
--- PASS: TestIsDockerBridgeIP/malformed_IP (0.00s)
--- PASS: TestIsDockerBridgeIP/too_many_octets (0.00s)
--- PASS: TestIsDockerBridgeIP/letters_in_IP (0.00s)
--- PASS: TestIsDockerBridgeIP/IPv6_address (0.00s)
--- PASS: TestIsDockerBridgeIP/localhost_127.0.0.1 (0.00s)
--- PASS: TestIsDockerBridgeIP/0.0.0.0 (0.00s)
=== RUN TestIsPrivateIP_IPv4Mapped
=== RUN TestIsPrivateIP_IPv4Mapped/::ffff:10.0.0.1_mapped
=== RUN TestIsPrivateIP_IPv4Mapped/::ffff:192.168.1.1_mapped
=== RUN TestIsPrivateIP_IPv4Mapped/::ffff:8.8.8.8_mapped
--- PASS: TestIsPrivateIP_IPv4Mapped (0.00s)
--- PASS: TestIsPrivateIP_IPv4Mapped/::ffff:10.0.0.1_mapped (0.00s)
--- PASS: TestIsPrivateIP_IPv4Mapped/::ffff:192.168.1.1_mapped (0.00s)
--- PASS: TestIsPrivateIP_IPv4Mapped/::ffff:8.8.8.8_mapped (0.00s)
=== RUN TestIsPrivateIP_CIDRParseError
=== RUN TestIsPrivateIP_CIDRParseError/10.0.0.1/8
=== RUN TestIsPrivateIP_CIDRParseError/10.0.0.256
=== RUN TestIsPrivateIP_CIDRParseError/999.999.999.999
=== RUN TestIsPrivateIP_CIDRParseError/10.0.0
=== RUN TestIsPrivateIP_CIDRParseError/not-an-ip
=== RUN TestIsPrivateIP_CIDRParseError/#00
=== RUN TestIsPrivateIP_CIDRParseError/10.0.0.1.1
--- PASS: TestIsPrivateIP_CIDRParseError (0.00s)
--- PASS: TestIsPrivateIP_CIDRParseError/10.0.0.1/8 (0.00s)
--- PASS: TestIsPrivateIP_CIDRParseError/10.0.0.256 (0.00s)
--- PASS: TestIsPrivateIP_CIDRParseError/999.999.999.999 (0.00s)
--- PASS: TestIsPrivateIP_CIDRParseError/10.0.0 (0.00s)
--- PASS: TestIsPrivateIP_CIDRParseError/not-an-ip (0.00s)
--- PASS: TestIsPrivateIP_CIDRParseError/#00 (0.00s)
--- PASS: TestIsPrivateIP_CIDRParseError/10.0.0.1.1 (0.00s)
=== RUN TestIsDockerBridgeIP_CIDRParseError
=== RUN TestIsDockerBridgeIP_CIDRParseError/172.17.0.1/16
=== RUN TestIsDockerBridgeIP_CIDRParseError/172.17.0.256
=== RUN TestIsDockerBridgeIP_CIDRParseError/999.999.999.999
=== RUN TestIsDockerBridgeIP_CIDRParseError/172.17
=== RUN TestIsDockerBridgeIP_CIDRParseError/not-an-ip
=== RUN TestIsDockerBridgeIP_CIDRParseError/#00
--- PASS: TestIsDockerBridgeIP_CIDRParseError (0.00s)
--- PASS: TestIsDockerBridgeIP_CIDRParseError/172.17.0.1/16 (0.00s)
--- PASS: TestIsDockerBridgeIP_CIDRParseError/172.17.0.256 (0.00s)
--- PASS: TestIsDockerBridgeIP_CIDRParseError/999.999.999.999 (0.00s)
--- PASS: TestIsDockerBridgeIP_CIDRParseError/172.17 (0.00s)
--- PASS: TestIsDockerBridgeIP_CIDRParseError/not-an-ip (0.00s)
--- PASS: TestIsDockerBridgeIP_CIDRParseError/#00 (0.00s)
=== RUN TestIsPrivateIP_IPv6Comprehensive
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback_expanded
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_2
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fc00
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd00
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fdff
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_public_Google_DNS
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_public_Cloudflare
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_mapped_private
=== RUN TestIsPrivateIP_IPv6Comprehensive/IPv6_mapped_public
=== RUN TestIsPrivateIP_IPv6Comprehensive/Invalid_IPv6
=== RUN TestIsPrivateIP_IPv6Comprehensive/Incomplete_IPv6
--- PASS: TestIsPrivateIP_IPv6Comprehensive (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_loopback_expanded (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_link-local_2 (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fc00 (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fd00 (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_unique_local_fdff (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_public_Google_DNS (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_public_Cloudflare (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_mapped_private (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/IPv6_mapped_public (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/Invalid_IPv6 (0.00s)
--- PASS: TestIsPrivateIP_IPv6Comprehensive/Incomplete_IPv6 (0.00s)
=== RUN TestIsDockerBridgeIP_EdgeCases
=== RUN TestIsDockerBridgeIP_EdgeCases/Lower_boundary_-_1
=== RUN TestIsDockerBridgeIP_EdgeCases/Lower_boundary
=== RUN TestIsDockerBridgeIP_EdgeCases/Lower_boundary_+_1
=== RUN TestIsDockerBridgeIP_EdgeCases/Upper_boundary_-_1
=== RUN TestIsDockerBridgeIP_EdgeCases/Upper_boundary
=== RUN TestIsDockerBridgeIP_EdgeCases/Upper_boundary_+_1
=== RUN TestIsDockerBridgeIP_EdgeCases/Upper_boundary_+_2
=== RUN TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_start
=== RUN TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_gateway
=== RUN TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_host
=== RUN TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_end
=== RUN TestIsDockerBridgeIP_EdgeCases/User_network_1
=== RUN TestIsDockerBridgeIP_EdgeCases/User_network_2
=== RUN TestIsDockerBridgeIP_EdgeCases/User_network_30
=== RUN TestIsDockerBridgeIP_EdgeCases/User_network_31
=== RUN TestIsDockerBridgeIP_EdgeCases/172.0.0.1
=== RUN TestIsDockerBridgeIP_EdgeCases/172.15.0.1
=== RUN TestIsDockerBridgeIP_EdgeCases/172.32.0.1
=== RUN TestIsDockerBridgeIP_EdgeCases/172.255.255.255
--- PASS: TestIsDockerBridgeIP_EdgeCases (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Lower_boundary_-_1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Lower_boundary (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Lower_boundary_+_1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Upper_boundary_-_1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Upper_boundary (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Upper_boundary_+_1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Upper_boundary_+_2 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_start (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_gateway (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_host (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/Docker_default_bridge_end (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/User_network_1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/User_network_2 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/User_network_30 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/User_network_31 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/172.0.0.1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/172.15.0.1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/172.32.0.1 (0.00s)
--- PASS: TestIsDockerBridgeIP_EdgeCases/172.255.255.255 (0.00s)
=== RUN TestTestURLConnectivity_Success
--- PASS: TestTestURLConnectivity_Success (0.00s)
=== RUN TestTestURLConnectivity_Redirect
--- PASS: TestTestURLConnectivity_Redirect (0.00s)
=== RUN TestTestURLConnectivity_TooManyRedirects
--- PASS: TestTestURLConnectivity_TooManyRedirects (0.00s)
=== RUN TestTestURLConnectivity_StatusCodes
=== RUN TestTestURLConnectivity_StatusCodes/200_OK
=== RUN TestTestURLConnectivity_StatusCodes/201_Created
=== RUN TestTestURLConnectivity_StatusCodes/204_No_Content
=== RUN TestTestURLConnectivity_StatusCodes/301_Moved_Permanently
=== RUN TestTestURLConnectivity_StatusCodes/302_Found
=== RUN TestTestURLConnectivity_StatusCodes/400_Bad_Request
=== RUN TestTestURLConnectivity_StatusCodes/401_Unauthorized
=== RUN TestTestURLConnectivity_StatusCodes/403_Forbidden
=== RUN TestTestURLConnectivity_StatusCodes/404_Not_Found
=== RUN TestTestURLConnectivity_StatusCodes/500_Internal_Server_Error
=== RUN TestTestURLConnectivity_StatusCodes/503_Service_Unavailable
--- PASS: TestTestURLConnectivity_StatusCodes (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/200_OK (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/201_Created (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/204_No_Content (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/301_Moved_Permanently (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/302_Found (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/400_Bad_Request (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/401_Unauthorized (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/403_Forbidden (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/404_Not_Found (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/500_Internal_Server_Error (0.00s)
--- PASS: TestTestURLConnectivity_StatusCodes/503_Service_Unavailable (0.00s)
=== RUN TestTestURLConnectivity_InvalidURL
=== RUN TestTestURLConnectivity_InvalidURL/Empty_URL
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"","request_id":"test-1768011443906317603","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_InvalidURL/Invalid_scheme
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443906663215","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_InvalidURL/Malformed_URL
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"http://[invalid","request_id":"test-1768011443906774805","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_InvalidURL/No_scheme
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"","request_id":"test-1768011443906885665","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_InvalidURL (0.00s)
--- PASS: TestTestURLConnectivity_InvalidURL/Empty_URL (0.00s)
--- PASS: TestTestURLConnectivity_InvalidURL/Invalid_scheme (0.00s)
--- PASS: TestTestURLConnectivity_InvalidURL/Malformed_URL (0.00s)
--- PASS: TestTestURLConnectivity_InvalidURL/No_scheme (0.00s)
=== RUN TestTestURLConnectivity_DNSFailure
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"nonexistent-domain-12345.invalid","request_id":"test-1768011443907026076","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_DNSFailure (0.00s)
=== RUN TestTestURLConnectivity_Timeout
--- PASS: TestTestURLConnectivity_Timeout (0.00s)
=== RUN TestIsPrivateIP_PrivateIPv4Ranges
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/10.0.0.0/8_start
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/10.0.0.0/8_mid
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/10.0.0.0/8_end
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/172.16.0.0/12_start
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/172.16.0.0/12_mid
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/172.16.0.0/12_end
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/192.168.0.0/16_start
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/192.168.0.0/16_end
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/127.0.0.1_localhost
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/127.0.0.0/8_start
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/127.0.0.0/8_end
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/169.254.0.0/16_start
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/169.254.169.254_AWS_metadata
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/169.254.0.0/16_end
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/0.0.0.0/8
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/240.0.0.0/4
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/255.255.255.255_broadcast
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/8.8.8.8_Google_DNS
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/1.1.1.1_Cloudflare_DNS
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/93.184.216.34_example.com
=== RUN TestIsPrivateIP_PrivateIPv4Ranges/151.101.1.140_GitHub
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/10.0.0.0/8_start (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/10.0.0.0/8_mid (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/10.0.0.0/8_end (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/172.16.0.0/12_start (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/172.16.0.0/12_mid (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/172.16.0.0/12_end (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/192.168.0.0/16_start (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/192.168.0.0/16_end (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/127.0.0.1_localhost (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/127.0.0.0/8_start (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/127.0.0.0/8_end (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/169.254.0.0/16_start (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/169.254.169.254_AWS_metadata (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/169.254.0.0/16_end (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/0.0.0.0/8 (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/240.0.0.0/4 (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/255.255.255.255_broadcast (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/8.8.8.8_Google_DNS (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/1.1.1.1_Cloudflare_DNS (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/93.184.216.34_example.com (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv4Ranges/151.101.1.140_GitHub (0.00s)
=== RUN TestIsPrivateIP_PrivateIPv6Ranges
=== RUN TestIsPrivateIP_PrivateIPv6Ranges/::1_loopback
=== RUN TestIsPrivateIP_PrivateIPv6Ranges/fe80::/10_start
=== RUN TestIsPrivateIP_PrivateIPv6Ranges/fe80::/10_mid
=== RUN TestIsPrivateIP_PrivateIPv6Ranges/fc00::/7_start
=== RUN TestIsPrivateIP_PrivateIPv6Ranges/fc00::/7_mid
=== RUN TestIsPrivateIP_PrivateIPv6Ranges/2001:4860:4860::8888_Google_DNS
=== RUN TestIsPrivateIP_PrivateIPv6Ranges/2606:4700:4700::1111_Cloudflare_DNS
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges/::1_loopback (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges/fe80::/10_start (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges/fe80::/10_mid (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges/fc00::/7_start (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges/fc00::/7_mid (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges/2001:4860:4860::8888_Google_DNS (0.00s)
--- PASS: TestIsPrivateIP_PrivateIPv6Ranges/2606:4700:4700::1111_Cloudflare_DNS (0.00s)
=== RUN TestTestURLConnectivity_PrivateIP_Blocked
=== RUN TestTestURLConnectivity_PrivateIP_Blocked/localhost
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"localhost","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_PrivateIP_Blocked/127.0.0.1
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"127.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_PrivateIP_Blocked/Private_IP_10.x
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"10.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_PrivateIP_Blocked/Private_IP_192.168.x
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"192.168.1.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_PrivateIP_Blocked/AWS_metadata
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_PrivateIP_Blocked (0.00s)
--- PASS: TestTestURLConnectivity_PrivateIP_Blocked/localhost (0.00s)
--- PASS: TestTestURLConnectivity_PrivateIP_Blocked/127.0.0.1 (0.00s)
--- PASS: TestTestURLConnectivity_PrivateIP_Blocked/Private_IP_10.x (0.00s)
--- PASS: TestTestURLConnectivity_PrivateIP_Blocked/Private_IP_192.168.x (0.00s)
--- PASS: TestTestURLConnectivity_PrivateIP_Blocked/AWS_metadata (0.00s)
=== RUN TestTestURLConnectivity_SSRF_Protection_Comprehensive
=== RUN TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://localhost:8080
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"localhost","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://127.0.0.1:8080
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"127.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://0.0.0.0:8080
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"0.0.0.0","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://[::1]:8080
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"::1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://169.254.169.254/latest/meta-data/
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://metadata.google.internal/computeMetadata/v1/
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"metadata.google.internal","request_id":"test-1768011443914517171","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_SSRF_Protection_Comprehensive (0.00s)
--- PASS: TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://localhost:8080 (0.00s)
--- PASS: TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://127.0.0.1:8080 (0.00s)
--- PASS: TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://0.0.0.0:8080 (0.00s)
--- PASS: TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://[::1]:8080 (0.00s)
--- PASS: TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://169.254.169.254/latest/meta-data/ (0.00s)
--- PASS: TestTestURLConnectivity_SSRF_Protection_Comprehensive/http://metadata.google.internal/computeMetadata/v1/ (0.00s)
=== RUN TestTestURLConnectivity_HTTPSSupport
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"127.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
url_connectivity_test.go:345: HTTPS test failed (expected with self-signed cert): security validation failed: connection to private IP addresses is blocked for security (detected IPv4-mapped IPv6: 127.0.0.1)
--- PASS: TestTestURLConnectivity_HTTPSSupport (0.00s)
=== RUN TestTestURLConnectivity_RedirectLimit_ProductionPath
--- PASS: TestTestURLConnectivity_RedirectLimit_ProductionPath (0.00s)
=== RUN TestTestURLConnectivity_InvalidPortFormat
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"http://example.com:badport","request_id":"test-1768011443920778663","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_InvalidPortFormat (0.00s)
=== RUN TestTestURLConnectivity_EmptyDNSResult
--- PASS: TestTestURLConnectivity_EmptyDNSResult (0.00s)
=== RUN TestGetPublicURL_WithConfiguredURL
--- PASS: TestGetPublicURL_WithConfiguredURL (0.01s)
=== RUN TestGetPublicURL_WithTrailingSlash
--- PASS: TestGetPublicURL_WithTrailingSlash (0.00s)
=== RUN TestGetPublicURL_Fallback_HTTPSWithTLS
2026/01/10 02:17:23 /projects/Charon/backend/internal/utils/url.go:17 record not found
[0.108ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestGetPublicURL_Fallback_HTTPSWithTLS (0.00s)
=== RUN TestGetPublicURL_Fallback_HTTP
2026/01/10 02:17:23 /projects/Charon/backend/internal/utils/url.go:17 record not found
[0.078ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestGetPublicURL_Fallback_HTTP (0.00s)
=== RUN TestGetPublicURL_Fallback_XForwardedProto
2026/01/10 02:17:23 /projects/Charon/backend/internal/utils/url.go:17 record not found
[0.076ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestGetPublicURL_Fallback_XForwardedProto (0.00s)
=== RUN TestGetPublicURL_EmptyValue
--- PASS: TestGetPublicURL_EmptyValue (0.00s)
=== RUN TestGetPublicURL_NoSettingInDB
2026/01/10 02:17:23 /projects/Charon/backend/internal/utils/url.go:17 record not found
[0.064ms] [rows:0] SELECT * FROM `settings` WHERE key = "app.public_url" ORDER BY `settings`.`id` LIMIT 1
--- PASS: TestGetPublicURL_NoSettingInDB (0.00s)
=== RUN TestValidateURL_ValidHTTPS
=== RUN TestValidateURL_ValidHTTPS/HTTPS_with_trailing_slash
=== RUN TestValidateURL_ValidHTTPS/HTTPS_without_path
=== RUN TestValidateURL_ValidHTTPS/HTTPS_with_port
=== RUN TestValidateURL_ValidHTTPS/HTTPS_with_subdomain
--- PASS: TestValidateURL_ValidHTTPS (0.00s)
--- PASS: TestValidateURL_ValidHTTPS/HTTPS_with_trailing_slash (0.00s)
--- PASS: TestValidateURL_ValidHTTPS/HTTPS_without_path (0.00s)
--- PASS: TestValidateURL_ValidHTTPS/HTTPS_with_port (0.00s)
--- PASS: TestValidateURL_ValidHTTPS/HTTPS_with_subdomain (0.00s)
=== RUN TestValidateURL_ValidHTTP
=== RUN TestValidateURL_ValidHTTP/HTTP_with_trailing_slash
=== RUN TestValidateURL_ValidHTTP/HTTP_without_path
=== RUN TestValidateURL_ValidHTTP/HTTP_with_port
--- PASS: TestValidateURL_ValidHTTP (0.00s)
--- PASS: TestValidateURL_ValidHTTP/HTTP_with_trailing_slash (0.00s)
--- PASS: TestValidateURL_ValidHTTP/HTTP_without_path (0.00s)
--- PASS: TestValidateURL_ValidHTTP/HTTP_with_port (0.00s)
=== RUN TestValidateURL_InvalidScheme
=== RUN TestValidateURL_InvalidScheme/ftp://example.com
=== RUN TestValidateURL_InvalidScheme/file:///etc/passwd
=== RUN TestValidateURL_InvalidScheme/javascript:alert(1)
=== RUN TestValidateURL_InvalidScheme/data:text/html,<script>alert(1)</script>
=== RUN TestValidateURL_InvalidScheme/ssh://user@host
--- PASS: TestValidateURL_InvalidScheme (0.00s)
--- PASS: TestValidateURL_InvalidScheme/ftp://example.com (0.00s)
--- PASS: TestValidateURL_InvalidScheme/file:///etc/passwd (0.00s)
--- PASS: TestValidateURL_InvalidScheme/javascript:alert(1) (0.00s)
--- PASS: TestValidateURL_InvalidScheme/data:text/html,<script>alert(1)</script> (0.00s)
--- PASS: TestValidateURL_InvalidScheme/ssh://user@host (0.00s)
=== RUN TestValidateURL_WithPath
=== RUN TestValidateURL_WithPath/https://example.com/api/v1
=== RUN TestValidateURL_WithPath/https://example.com/admin
=== RUN TestValidateURL_WithPath/http://example.com/path/to/resource
=== RUN TestValidateURL_WithPath/https://example.com/index.html
--- PASS: TestValidateURL_WithPath (0.00s)
--- PASS: TestValidateURL_WithPath/https://example.com/api/v1 (0.00s)
--- PASS: TestValidateURL_WithPath/https://example.com/admin (0.00s)
--- PASS: TestValidateURL_WithPath/http://example.com/path/to/resource (0.00s)
--- PASS: TestValidateURL_WithPath/https://example.com/index.html (0.00s)
=== RUN TestValidateURL_RootPathAllowed
=== RUN TestValidateURL_RootPathAllowed/https://example.com/
=== RUN TestValidateURL_RootPathAllowed/http://example.com/
--- PASS: TestValidateURL_RootPathAllowed (0.00s)
--- PASS: TestValidateURL_RootPathAllowed/https://example.com/ (0.00s)
--- PASS: TestValidateURL_RootPathAllowed/http://example.com/ (0.00s)
=== RUN TestValidateURL_MalformedURL
=== RUN TestValidateURL_MalformedURL/not_a_url
=== RUN TestValidateURL_MalformedURL/://missing-scheme
=== RUN TestValidateURL_MalformedURL/http://
=== RUN TestValidateURL_MalformedURL/https://[invalid
=== RUN TestValidateURL_MalformedURL/#00
--- PASS: TestValidateURL_MalformedURL (0.00s)
--- PASS: TestValidateURL_MalformedURL/not_a_url (0.00s)
--- PASS: TestValidateURL_MalformedURL/://missing-scheme (0.00s)
--- PASS: TestValidateURL_MalformedURL/http:// (0.00s)
--- PASS: TestValidateURL_MalformedURL/https://[invalid (0.00s)
--- PASS: TestValidateURL_MalformedURL/#00 (0.00s)
=== RUN TestValidateURL_SpecialCharacters
=== RUN TestValidateURL_SpecialCharacters/Punycode_domain
=== RUN TestValidateURL_SpecialCharacters/Port_with_special_chars
=== RUN TestValidateURL_SpecialCharacters/Query_string_(no_path_component)
=== RUN TestValidateURL_SpecialCharacters/Fragment_(no_path_component)
=== RUN TestValidateURL_SpecialCharacters/Userinfo
--- PASS: TestValidateURL_SpecialCharacters (0.00s)
--- PASS: TestValidateURL_SpecialCharacters/Punycode_domain (0.00s)
--- PASS: TestValidateURL_SpecialCharacters/Port_with_special_chars (0.00s)
--- PASS: TestValidateURL_SpecialCharacters/Query_string_(no_path_component) (0.00s)
--- PASS: TestValidateURL_SpecialCharacters/Fragment_(no_path_component) (0.00s)
--- PASS: TestValidateURL_SpecialCharacters/Userinfo (0.00s)
=== RUN TestValidateURL_Normalization
=== RUN TestValidateURL_Normalization/https://EXAMPLE.COM
=== RUN TestValidateURL_Normalization/https://example.com/
=== RUN TestValidateURL_Normalization/https://example.com///
=== RUN TestValidateURL_Normalization/http://example.com:80
=== RUN TestValidateURL_Normalization/https://example.com:443
--- PASS: TestValidateURL_Normalization (0.00s)
--- PASS: TestValidateURL_Normalization/https://EXAMPLE.COM (0.00s)
--- PASS: TestValidateURL_Normalization/https://example.com/ (0.00s)
--- PASS: TestValidateURL_Normalization/https://example.com/// (0.00s)
--- PASS: TestValidateURL_Normalization/http://example.com:80 (0.00s)
--- PASS: TestValidateURL_Normalization/https://example.com:443 (0.00s)
=== RUN TestGetBaseURL
=== RUN TestGetBaseURL/HTTPS_with_TLS
=== RUN TestGetBaseURL/HTTP_without_TLS
=== RUN TestGetBaseURL/X-Forwarded-Proto_HTTPS
=== RUN TestGetBaseURL/X-Forwarded-Proto_HTTP
=== RUN TestGetBaseURL/With_port
=== RUN TestGetBaseURL/IPv4_host
=== RUN TestGetBaseURL/IPv6_host
--- PASS: TestGetBaseURL (0.00s)
--- PASS: TestGetBaseURL/HTTPS_with_TLS (0.00s)
--- PASS: TestGetBaseURL/HTTP_without_TLS (0.00s)
--- PASS: TestGetBaseURL/X-Forwarded-Proto_HTTPS (0.00s)
--- PASS: TestGetBaseURL/X-Forwarded-Proto_HTTP (0.00s)
--- PASS: TestGetBaseURL/With_port (0.00s)
--- PASS: TestGetBaseURL/IPv4_host (0.00s)
--- PASS: TestGetBaseURL/IPv6_host (0.00s)
=== RUN TestGetBaseURL_PrecedenceOrder
--- PASS: TestGetBaseURL_PrecedenceOrder (0.00s)
=== RUN TestGetBaseURL_EmptyHost
--- PASS: TestGetBaseURL_EmptyHost (0.00s)
=== RUN TestTestURLConnectivity_EnhancedSSRF
=== RUN TestTestURLConnectivity_EnhancedSSRF/AWS_metadata_endpoint
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/GCP_metadata_endpoint
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"metadata.google.internal","request_id":"test-1768011443951185546","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/Azure_metadata_endpoint
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/Private_10.0.0.0/8
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"10.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/Private_172.16.0.0/12
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"172.16.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/Private_192.168.0.0/16
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"192.168.1.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/IPv4_loopback
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"127.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/IPv6_loopback
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"::1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/Link-local_IPv4
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.1.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_EnhancedSSRF/Link-local_IPv6
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"fe80::1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_EnhancedSSRF (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/AWS_metadata_endpoint (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/GCP_metadata_endpoint (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/Azure_metadata_endpoint (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/Private_10.0.0.0/8 (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/Private_172.16.0.0/12 (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/Private_192.168.0.0/16 (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/IPv4_loopback (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/IPv6_loopback (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/Link-local_IPv4 (0.00s)
--- PASS: TestTestURLConnectivity_EnhancedSSRF/Link-local_IPv6 (0.00s)
=== RUN TestTestURLConnectivity_RedirectValidation
=== RUN TestTestURLConnectivity_RedirectValidation/Redirect_to_private_IP_should_be_blocked
url_testing_enhanced_test.go:123: Redirect validation test requires complex HTTP client mocking
=== RUN TestTestURLConnectivity_RedirectValidation/Too_many_redirects_should_be_blocked
--- PASS: TestTestURLConnectivity_RedirectValidation (0.00s)
--- SKIP: TestTestURLConnectivity_RedirectValidation/Redirect_to_private_IP_should_be_blocked (0.00s)
--- PASS: TestTestURLConnectivity_RedirectValidation/Too_many_redirects_should_be_blocked (0.00s)
=== RUN TestTestURLConnectivity_UnicodeHomograph
=== RUN TestTestURLConnectivity_UnicodeHomograph/Cyrillic_homograph
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"gооgle.com","request_id":"test-1768011443957532178","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_UnicodeHomograph/Mixed_script_attack
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"раypal.com","request_id":"test-1768011443957740167","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_UnicodeHomograph (0.00s)
--- PASS: TestTestURLConnectivity_UnicodeHomograph/Cyrillic_homograph (0.00s)
--- PASS: TestTestURLConnectivity_UnicodeHomograph/Mixed_script_attack (0.00s)
=== RUN TestTestURLConnectivity_LongHostname
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.com","request_id":"test-1768011443957966949","result":"blocked","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_LongHostname (0.00s)
=== RUN TestTestURLConnectivity_RequestTracingHeaders
--- PASS: TestTestURLConnectivity_RequestTracingHeaders (0.00s)
=== RUN TestTestURLConnectivity_MetricsIntegration
=== RUN TestTestURLConnectivity_MetricsIntegration/Valid_URL_records_metrics
=== RUN TestTestURLConnectivity_MetricsIntegration/Blocked_URL_records_metrics
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"127.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_MetricsIntegration/Invalid_URL_records_metrics
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"","request_id":"test-1768011443961052630","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_MetricsIntegration (0.00s)
--- PASS: TestTestURLConnectivity_MetricsIntegration/Valid_URL_records_metrics (0.00s)
--- PASS: TestTestURLConnectivity_MetricsIntegration/Blocked_URL_records_metrics (0.00s)
--- PASS: TestTestURLConnectivity_MetricsIntegration/Invalid_URL_records_metrics (0.00s)
=== RUN TestValidateRedirectTarget
=== RUN TestValidateRedirectTarget/Localhost_redirect_allowed
=== RUN TestValidateRedirectTarget/127.0.0.1_redirect_allowed
=== RUN TestValidateRedirectTarget/IPv6_loopback_allowed
=== RUN TestValidateRedirectTarget/Too_many_redirects
=== RUN TestValidateRedirectTarget/Three_redirects
=== RUN TestValidateRedirectTarget/Scheme_downgrade_blocked_(https_->_http)
--- PASS: TestValidateRedirectTarget (0.00s)
--- PASS: TestValidateRedirectTarget/Localhost_redirect_allowed (0.00s)
--- PASS: TestValidateRedirectTarget/127.0.0.1_redirect_allowed (0.00s)
--- PASS: TestValidateRedirectTarget/IPv6_loopback_allowed (0.00s)
--- PASS: TestValidateRedirectTarget/Too_many_redirects (0.00s)
--- PASS: TestValidateRedirectTarget/Three_redirects (0.00s)
--- PASS: TestValidateRedirectTarget/Scheme_downgrade_blocked_(https_->_http) (0.00s)
=== RUN TestTestURLConnectivity_AuditLogging
=== RUN TestTestURLConnectivity_AuditLogging/Invalid_URL_format_logs_audit_event
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"://invalid","request_id":"test-1768011443962054942","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_AuditLogging/Invalid_scheme_logs_audit_event
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443962234283","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_AuditLogging/Private_IP_logs_SSRF_block_audit_event
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"10.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_AuditLogging/Metadata_endpoint_logs_SSRF_block_audit_event
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_AuditLogging/Valid_URL_with_mock_transport_logs_success
--- PASS: TestTestURLConnectivity_AuditLogging (0.00s)
--- PASS: TestTestURLConnectivity_AuditLogging/Invalid_URL_format_logs_audit_event (0.00s)
--- PASS: TestTestURLConnectivity_AuditLogging/Invalid_scheme_logs_audit_event (0.00s)
--- PASS: TestTestURLConnectivity_AuditLogging/Private_IP_logs_SSRF_block_audit_event (0.00s)
--- PASS: TestTestURLConnectivity_AuditLogging/Metadata_endpoint_logs_SSRF_block_audit_event (0.00s)
--- PASS: TestTestURLConnectivity_AuditLogging/Valid_URL_with_mock_transport_logs_success (0.00s)
=== RUN TestTestURLConnectivity_RequestIDConsistency
--- PASS: TestTestURLConnectivity_RequestIDConsistency (0.00s)
=== RUN TestResolveAllowedIP_EmptyHostname
--- PASS: TestResolveAllowedIP_EmptyHostname (0.00s)
=== RUN TestResolveAllowedIP_LoopbackIPLiteral
=== RUN TestResolveAllowedIP_LoopbackIPLiteral/127.0.0.1_without_allowLocalhost
=== RUN TestResolveAllowedIP_LoopbackIPLiteral/127.0.0.1_with_allowLocalhost
=== RUN TestResolveAllowedIP_LoopbackIPLiteral/::1_without_allowLocalhost
=== RUN TestResolveAllowedIP_LoopbackIPLiteral/::1_with_allowLocalhost
--- PASS: TestResolveAllowedIP_LoopbackIPLiteral (0.00s)
--- PASS: TestResolveAllowedIP_LoopbackIPLiteral/127.0.0.1_without_allowLocalhost (0.00s)
--- PASS: TestResolveAllowedIP_LoopbackIPLiteral/127.0.0.1_with_allowLocalhost (0.00s)
--- PASS: TestResolveAllowedIP_LoopbackIPLiteral/::1_without_allowLocalhost (0.00s)
--- PASS: TestResolveAllowedIP_LoopbackIPLiteral/::1_with_allowLocalhost (0.00s)
=== RUN TestResolveAllowedIP_PrivateIPLiterals
=== RUN TestResolveAllowedIP_PrivateIPLiterals/IP_10.0.0.1
=== RUN TestResolveAllowedIP_PrivateIPLiterals/IP_172.16.0.1
=== RUN TestResolveAllowedIP_PrivateIPLiterals/IP_192.168.1.1
=== RUN TestResolveAllowedIP_PrivateIPLiterals/IP_169.254.169.254
=== RUN TestResolveAllowedIP_PrivateIPLiterals/IP_fc00::1
=== RUN TestResolveAllowedIP_PrivateIPLiterals/IP_fe80::1
--- PASS: TestResolveAllowedIP_PrivateIPLiterals (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPLiterals/IP_10.0.0.1 (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPLiterals/IP_172.16.0.1 (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPLiterals/IP_192.168.1.1 (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPLiterals/IP_169.254.169.254 (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPLiterals/IP_fc00::1 (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPLiterals/IP_fe80::1 (0.00s)
=== RUN TestResolveAllowedIP_PublicIPLiteral
=== RUN TestResolveAllowedIP_PublicIPLiteral/IP_8.8.8.8
=== RUN TestResolveAllowedIP_PublicIPLiteral/IP_1.1.1.1
=== RUN TestResolveAllowedIP_PublicIPLiteral/IP_2001:4860:4860::8888
--- PASS: TestResolveAllowedIP_PublicIPLiteral (0.00s)
--- PASS: TestResolveAllowedIP_PublicIPLiteral/IP_8.8.8.8 (0.00s)
--- PASS: TestResolveAllowedIP_PublicIPLiteral/IP_1.1.1.1 (0.00s)
--- PASS: TestResolveAllowedIP_PublicIPLiteral/IP_2001:4860:4860::8888 (0.00s)
=== RUN TestResolveAllowedIP_Timeout
--- PASS: TestResolveAllowedIP_Timeout (0.00s)
=== RUN TestResolveAllowedIP_NoIPsResolved
url_testing_security_test.go:150: Requires custom DNS resolver to return empty IP list
--- SKIP: TestResolveAllowedIP_NoIPsResolved (0.00s)
=== RUN TestSSRFSafeDialer_Concept
url_testing_security_test.go:163: ssrfSafeDialer validates IPs at dial time to prevent DNS rebinding
url_testing_security_test.go:164: All resolved IPs must pass private IP check before connection
--- PASS: TestSSRFSafeDialer_Concept (0.00s)
=== RUN TestSSRFSafeDialer_InvalidAddress
=== RUN TestSSRFSafeDialer_InvalidAddress/No_port
=== RUN TestSSRFSafeDialer_InvalidAddress/Invalid_format
=== RUN TestSSRFSafeDialer_InvalidAddress/Empty_address
--- PASS: TestSSRFSafeDialer_InvalidAddress (0.00s)
--- PASS: TestSSRFSafeDialer_InvalidAddress/No_port (0.00s)
--- PASS: TestSSRFSafeDialer_InvalidAddress/Invalid_format (0.00s)
--- PASS: TestSSRFSafeDialer_InvalidAddress/Empty_address (0.00s)
=== RUN TestSSRFSafeDialer_ContextCancellation
--- PASS: TestSSRFSafeDialer_ContextCancellation (0.00s)
=== RUN TestTestURLConnectivity_ErrorPaths
=== RUN TestTestURLConnectivity_ErrorPaths/Invalid_URL_format
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"://invalid","request_id":"test-1768011443967837572","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_ErrorPaths/Unsupported_scheme_FTP
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443967979832","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_ErrorPaths/Embedded_credentials
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443968099643","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_ErrorPaths/Private_IP_10.x
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"10.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_ErrorPaths/Private_IP_192.168.x
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"192.168.1.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_ErrorPaths/AWS_metadata_endpoint
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_ErrorPaths (0.00s)
--- PASS: TestTestURLConnectivity_ErrorPaths/Invalid_URL_format (0.00s)
--- PASS: TestTestURLConnectivity_ErrorPaths/Unsupported_scheme_FTP (0.00s)
--- PASS: TestTestURLConnectivity_ErrorPaths/Embedded_credentials (0.00s)
--- PASS: TestTestURLConnectivity_ErrorPaths/Private_IP_10.x (0.00s)
--- PASS: TestTestURLConnectivity_ErrorPaths/Private_IP_192.168.x (0.00s)
--- PASS: TestTestURLConnectivity_ErrorPaths/AWS_metadata_endpoint (0.00s)
=== RUN TestTestURLConnectivity_InvalidPort
=== RUN TestTestURLConnectivity_InvalidPort/Port_out_of_range_(too_high)
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443968785745","result":"blocked","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_InvalidPort/Port_zero
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443968989516","result":"blocked","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestTestURLConnectivity_InvalidPort/Negative_port
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"https://example.com:-1","request_id":"test-1768011443969192356","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestTestURLConnectivity_InvalidPort (0.00s)
--- PASS: TestTestURLConnectivity_InvalidPort/Port_out_of_range_(too_high) (0.00s)
--- PASS: TestTestURLConnectivity_InvalidPort/Port_zero (0.00s)
--- PASS: TestTestURLConnectivity_InvalidPort/Negative_port (0.00s)
=== RUN TestSSRFSafeDialer_ValidPublicIP
--- PASS: TestSSRFSafeDialer_ValidPublicIP (0.01s)
=== RUN TestSSRFSafeDialer_PrivateIPBlocking
=== RUN TestSSRFSafeDialer_PrivateIPBlocking/10.0.0.1:80
=== RUN TestSSRFSafeDialer_PrivateIPBlocking/192.168.1.1:80
=== RUN TestSSRFSafeDialer_PrivateIPBlocking/172.16.0.1:80
=== RUN TestSSRFSafeDialer_PrivateIPBlocking/127.0.0.1:80
--- PASS: TestSSRFSafeDialer_PrivateIPBlocking (0.00s)
--- PASS: TestSSRFSafeDialer_PrivateIPBlocking/10.0.0.1:80 (0.00s)
--- PASS: TestSSRFSafeDialer_PrivateIPBlocking/192.168.1.1:80 (0.00s)
--- PASS: TestSSRFSafeDialer_PrivateIPBlocking/172.16.0.1:80 (0.00s)
--- PASS: TestSSRFSafeDialer_PrivateIPBlocking/127.0.0.1:80 (0.00s)
=== RUN TestSSRFSafeDialer_DNSResolutionFailure
--- PASS: TestSSRFSafeDialer_DNSResolutionFailure (0.00s)
=== RUN TestSSRFSafeDialer_MultipleIPsWithPrivate
--- PASS: TestSSRFSafeDialer_MultipleIPsWithPrivate (0.00s)
=== RUN TestURLConnectivity_ProductionPathValidation
=== RUN TestURLConnectivity_ProductionPathValidation/localhost_blocked_at_dial_time
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"localhost","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_ProductionPathValidation/127.0.0.1_blocked_at_dial_time
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"127.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_ProductionPathValidation/private_10.x_blocked_at_validation
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"10.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_ProductionPathValidation/private_192.168.x_blocked_at_validation
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"192.168.1.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_ProductionPathValidation/AWS_metadata_blocked_at_validation
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_ProductionPathValidation (0.00s)
--- PASS: TestURLConnectivity_ProductionPathValidation/localhost_blocked_at_dial_time (0.00s)
--- PASS: TestURLConnectivity_ProductionPathValidation/127.0.0.1_blocked_at_dial_time (0.00s)
--- PASS: TestURLConnectivity_ProductionPathValidation/private_10.x_blocked_at_validation (0.00s)
--- PASS: TestURLConnectivity_ProductionPathValidation/private_192.168.x_blocked_at_validation (0.00s)
--- PASS: TestURLConnectivity_ProductionPathValidation/AWS_metadata_blocked_at_validation (0.00s)
=== RUN TestURLConnectivity_TestHook_AllowsLocalhostWithInjectedTransport
--- PASS: TestURLConnectivity_TestHook_AllowsLocalhostWithInjectedTransport (0.00s)
=== RUN TestValidateRedirectTarget_AllowsLocalhost
--- PASS: TestValidateRedirectTarget_AllowsLocalhost (0.00s)
=== RUN TestValidateRedirectTarget_BlocksInvalidExternalRedirect
--- PASS: TestValidateRedirectTarget_BlocksInvalidExternalRedirect (0.00s)
=== RUN TestURLConnectivity_RejectsUserinfo
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443983562626","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_RejectsUserinfo (0.00s)
=== RUN TestURLConnectivity_InvalidScheme
=== RUN TestURLConnectivity_InvalidScheme/ftp://example.com
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443983744726","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_InvalidScheme/file:///etc/passwd
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"","request_id":"test-1768011443983856636","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_InvalidScheme/javascript:alert(1)
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"","request_id":"test-1768011443985204971","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_InvalidScheme/data:text/html,<script>alert(1)</script>
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"","request_id":"test-1768011443985477132","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_InvalidScheme/gopher://example.com
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011443985719173","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_InvalidScheme (0.00s)
--- PASS: TestURLConnectivity_InvalidScheme/ftp://example.com (0.00s)
--- PASS: TestURLConnectivity_InvalidScheme/file:///etc/passwd (0.00s)
--- PASS: TestURLConnectivity_InvalidScheme/javascript:alert(1) (0.00s)
--- PASS: TestURLConnectivity_InvalidScheme/data:text/html,<script>alert(1)</script> (0.00s)
--- PASS: TestURLConnectivity_InvalidScheme/gopher://example.com (0.00s)
=== RUN TestURLConnectivity_SSRFValidationFailure
=== RUN TestURLConnectivity_SSRFValidationFailure/http://10.0.0.1
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"10.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_SSRFValidationFailure/http://192.168.1.1
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"192.168.1.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_SSRFValidationFailure/http://172.16.0.1
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"172.16.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_SSRFValidationFailure/http://localhost
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"localhost","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_SSRFValidationFailure/http://127.0.0.1
2026/01/10 02:17:23 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:23Z","action":"ssrf_block","host":"127.0.0.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_SSRFValidationFailure (0.00s)
--- PASS: TestURLConnectivity_SSRFValidationFailure/http://10.0.0.1 (0.00s)
--- PASS: TestURLConnectivity_SSRFValidationFailure/http://192.168.1.1 (0.00s)
--- PASS: TestURLConnectivity_SSRFValidationFailure/http://172.16.0.1 (0.00s)
--- PASS: TestURLConnectivity_SSRFValidationFailure/http://localhost (0.00s)
--- PASS: TestURLConnectivity_SSRFValidationFailure/http://127.0.0.1 (0.00s)
=== RUN TestURLConnectivity_HTTPRequestFailure
--- PASS: TestURLConnectivity_HTTPRequestFailure (0.00s)
=== RUN TestURLConnectivity_RedirectHandling
--- PASS: TestURLConnectivity_RedirectHandling (0.00s)
=== RUN TestURLConnectivity_2xxSuccess
=== RUN TestURLConnectivity_2xxSuccess/status_200
=== RUN TestURLConnectivity_2xxSuccess/status_201
=== RUN TestURLConnectivity_2xxSuccess/status_204
--- PASS: TestURLConnectivity_2xxSuccess (0.00s)
--- PASS: TestURLConnectivity_2xxSuccess/status_200 (0.00s)
--- PASS: TestURLConnectivity_2xxSuccess/status_201 (0.00s)
--- PASS: TestURLConnectivity_2xxSuccess/status_204 (0.00s)
=== RUN TestURLConnectivity_3xxSuccess
=== RUN TestURLConnectivity_3xxSuccess/status_301
=== RUN TestURLConnectivity_3xxSuccess/status_302
=== RUN TestURLConnectivity_3xxSuccess/status_307
=== RUN TestURLConnectivity_3xxSuccess/status_308
--- PASS: TestURLConnectivity_3xxSuccess (0.01s)
--- PASS: TestURLConnectivity_3xxSuccess/status_301 (0.00s)
--- PASS: TestURLConnectivity_3xxSuccess/status_302 (0.00s)
--- PASS: TestURLConnectivity_3xxSuccess/status_307 (0.00s)
--- PASS: TestURLConnectivity_3xxSuccess/status_308 (0.00s)
=== RUN TestURLConnectivity_4xxFailure
=== RUN TestURLConnectivity_4xxFailure/status_400
=== RUN TestURLConnectivity_4xxFailure/status_401
=== RUN TestURLConnectivity_4xxFailure/status_403
=== RUN TestURLConnectivity_4xxFailure/status_404
=== RUN TestURLConnectivity_4xxFailure/status_429
--- PASS: TestURLConnectivity_4xxFailure (0.01s)
--- PASS: TestURLConnectivity_4xxFailure/status_400 (0.00s)
--- PASS: TestURLConnectivity_4xxFailure/status_401 (0.00s)
--- PASS: TestURLConnectivity_4xxFailure/status_403 (0.00s)
--- PASS: TestURLConnectivity_4xxFailure/status_404 (0.00s)
--- PASS: TestURLConnectivity_4xxFailure/status_429 (0.00s)
=== RUN TestIsPrivateIP_AllReservedRanges
=== RUN TestIsPrivateIP_AllReservedRanges/10.0.0.1
=== RUN TestIsPrivateIP_AllReservedRanges/10.255.255.255
=== RUN TestIsPrivateIP_AllReservedRanges/172.16.0.1
=== RUN TestIsPrivateIP_AllReservedRanges/172.31.255.255
=== RUN TestIsPrivateIP_AllReservedRanges/192.168.0.1
=== RUN TestIsPrivateIP_AllReservedRanges/192.168.255.255
=== RUN TestIsPrivateIP_AllReservedRanges/127.0.0.1
=== RUN TestIsPrivateIP_AllReservedRanges/127.0.0.2
=== RUN TestIsPrivateIP_AllReservedRanges/127.255.255.255
=== RUN TestIsPrivateIP_AllReservedRanges/169.254.0.1
=== RUN TestIsPrivateIP_AllReservedRanges/169.254.169.254
=== RUN TestIsPrivateIP_AllReservedRanges/169.254.255.255
=== RUN TestIsPrivateIP_AllReservedRanges/0.0.0.0
=== RUN TestIsPrivateIP_AllReservedRanges/0.0.0.1
=== RUN TestIsPrivateIP_AllReservedRanges/240.0.0.1
=== RUN TestIsPrivateIP_AllReservedRanges/255.255.255.255
=== RUN TestIsPrivateIP_AllReservedRanges/::1
=== RUN TestIsPrivateIP_AllReservedRanges/fc00::1
=== RUN TestIsPrivateIP_AllReservedRanges/fd00::1
=== RUN TestIsPrivateIP_AllReservedRanges/fe80::1
=== RUN TestIsPrivateIP_AllReservedRanges/8.8.8.8
=== RUN TestIsPrivateIP_AllReservedRanges/1.1.1.1
=== RUN TestIsPrivateIP_AllReservedRanges/93.184.216.34
=== RUN TestIsPrivateIP_AllReservedRanges/2606:2800:220:1:248:1893:25c8:1946
--- PASS: TestIsPrivateIP_AllReservedRanges (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/10.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/10.255.255.255 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/172.16.0.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/172.31.255.255 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/192.168.0.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/192.168.255.255 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/127.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/127.0.0.2 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/127.255.255.255 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/169.254.0.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/169.254.169.254 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/169.254.255.255 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/0.0.0.0 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/0.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/240.0.0.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/255.255.255.255 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/::1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/fc00::1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/fd00::1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/fe80::1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/8.8.8.8 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/1.1.1.1 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/93.184.216.34 (0.00s)
--- PASS: TestIsPrivateIP_AllReservedRanges/2606:2800:220:1:248:1893:25c8:1946 (0.00s)
=== RUN TestURLConnectivity_ErrorWrapping
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"://invalid","request_id":"test-1768011444010591117","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_ErrorWrapping (0.00s)
=== RUN TestURLConnectivity_UserAgent
--- PASS: TestURLConnectivity_UserAgent (0.00s)
=== RUN TestResolveAllowedIP_EmptyHost
--- PASS: TestResolveAllowedIP_EmptyHost (0.00s)
=== RUN TestResolveAllowedIP_IPLiteralPublic
--- PASS: TestResolveAllowedIP_IPLiteralPublic (0.00s)
=== RUN TestResolveAllowedIP_IPLiteralPrivateBlocked
=== RUN TestResolveAllowedIP_IPLiteralPrivateBlocked/10.0.0.1
=== RUN TestResolveAllowedIP_IPLiteralPrivateBlocked/192.168.1.1
=== RUN TestResolveAllowedIP_IPLiteralPrivateBlocked/172.16.0.1
--- PASS: TestResolveAllowedIP_IPLiteralPrivateBlocked (0.00s)
--- PASS: TestResolveAllowedIP_IPLiteralPrivateBlocked/10.0.0.1 (0.00s)
--- PASS: TestResolveAllowedIP_IPLiteralPrivateBlocked/192.168.1.1 (0.00s)
--- PASS: TestResolveAllowedIP_IPLiteralPrivateBlocked/172.16.0.1 (0.00s)
=== RUN TestResolveAllowedIP_DNSResolutionFailure
--- PASS: TestResolveAllowedIP_DNSResolutionFailure (0.00s)
=== RUN TestSSRFSafeDialer_InvalidAddressFormat
--- PASS: TestSSRFSafeDialer_InvalidAddressFormat (0.00s)
=== RUN TestSSRFSafeDialer_NoIPsFound
--- PASS: TestSSRFSafeDialer_NoIPsFound (0.00s)
=== RUN TestURLConnectivity_5xxServerErrors
=== RUN TestURLConnectivity_5xxServerErrors/status_500
=== RUN TestURLConnectivity_5xxServerErrors/status_502
=== RUN TestURLConnectivity_5xxServerErrors/status_503
=== RUN TestURLConnectivity_5xxServerErrors/status_504
--- PASS: TestURLConnectivity_5xxServerErrors (0.01s)
--- PASS: TestURLConnectivity_5xxServerErrors/status_500 (0.00s)
--- PASS: TestURLConnectivity_5xxServerErrors/status_502 (0.00s)
--- PASS: TestURLConnectivity_5xxServerErrors/status_503 (0.00s)
--- PASS: TestURLConnectivity_5xxServerErrors/status_504 (0.00s)
=== RUN TestURLConnectivity_TooManyRedirects
--- PASS: TestURLConnectivity_TooManyRedirects (0.00s)
=== RUN TestValidateRedirectTarget_TooManyRedirects
--- PASS: TestValidateRedirectTarget_TooManyRedirects (0.00s)
=== RUN TestValidateRedirectTarget_SchemeChangeBlocked
--- PASS: TestValidateRedirectTarget_SchemeChangeBlocked (0.00s)
=== RUN TestValidateRedirectTarget_HTTPToHTTPSAllowed
--- PASS: TestValidateRedirectTarget_HTTPToHTTPSAllowed (0.00s)
=== RUN TestValidateRedirectTarget_HTTPToHTTPSBlockedWhenNotAllowed
--- PASS: TestValidateRedirectTarget_HTTPToHTTPSBlockedWhenNotAllowed (0.00s)
=== RUN TestURLConnectivity_CloudMetadataBlocked
=== RUN TestURLConnectivity_CloudMetadataBlocked/http://169.254.169.254/latest/meta-data/
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_CloudMetadataBlocked/http://169.254.169.254
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"169.254.169.254","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_CloudMetadataBlocked (0.00s)
--- PASS: TestURLConnectivity_CloudMetadataBlocked/http://169.254.169.254/latest/meta-data/ (0.00s)
--- PASS: TestURLConnectivity_CloudMetadataBlocked/http://169.254.169.254 (0.00s)
=== RUN TestURLConnectivity_InvalidPort
=== RUN TestURLConnectivity_InvalidPort/port_zero
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011444027089363","result":"blocked","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_InvalidPort/port_negative
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"http://example.com:-1/path","request_id":"test-1768011444027214553","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_InvalidPort/port_too_large
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"example.com","request_id":"test-1768011444027317454","result":"blocked","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_InvalidPort/port_non_numeric
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"http://example.com:abc/path","request_id":"test-1768011444027442354","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_InvalidPort (0.00s)
--- PASS: TestURLConnectivity_InvalidPort/port_zero (0.00s)
--- PASS: TestURLConnectivity_InvalidPort/port_negative (0.00s)
--- PASS: TestURLConnectivity_InvalidPort/port_too_large (0.00s)
--- PASS: TestURLConnectivity_InvalidPort/port_non_numeric (0.00s)
=== RUN TestURLConnectivity_HTTPSScheme
--- PASS: TestURLConnectivity_HTTPSScheme (0.01s)
=== RUN TestURLConnectivity_ExplicitPort
--- PASS: TestURLConnectivity_ExplicitPort (0.00s)
=== RUN TestURLConnectivity_DefaultHTTPPort
--- PASS: TestURLConnectivity_DefaultHTTPPort (0.00s)
=== RUN TestURLConnectivity_ConnectionTimeout
--- PASS: TestURLConnectivity_ConnectionTimeout (0.10s)
=== RUN TestURLConnectivity_RequestHeaders
--- PASS: TestURLConnectivity_RequestHeaders (0.00s)
=== RUN TestURLConnectivity_EmptyURL
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"","request_id":"test-1768011444140529788","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_EmptyURL (0.00s)
=== RUN TestURLConnectivity_MalformedURL
=== RUN TestURLConnectivity_MalformedURL/://missing-scheme
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"://missing-scheme","request_id":"test-1768011444140750969","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_MalformedURL/http://
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"","request_id":"test-1768011444140886880","result":"blocked","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_MalformedURL/http:///no-host
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"","request_id":"test-1768011444141011500","result":"blocked","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_MalformedURL (0.00s)
--- PASS: TestURLConnectivity_MalformedURL/://missing-scheme (0.00s)
--- PASS: TestURLConnectivity_MalformedURL/http:// (0.00s)
--- PASS: TestURLConnectivity_MalformedURL/http:///no-host (0.00s)
=== RUN TestURLConnectivity_IPv6Loopback
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"::1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_IPv6Loopback (0.00s)
=== RUN TestURLConnectivity_HeadMethod
--- PASS: TestURLConnectivity_HeadMethod (0.00s)
=== RUN TestResolveAllowedIP_LoopbackWithAllowLocalhost
--- PASS: TestResolveAllowedIP_LoopbackWithAllowLocalhost (0.00s)
=== RUN TestResolveAllowedIP_LoopbackWithoutAllowLocalhost
--- PASS: TestResolveAllowedIP_LoopbackWithoutAllowLocalhost (0.00s)
=== RUN TestURLConnectivity_HTTPSDefaultPort
--- PASS: TestURLConnectivity_HTTPSDefaultPort (0.01s)
=== RUN TestURLConnectivity_ValidPortNumber
--- PASS: TestURLConnectivity_ValidPortNumber (0.00s)
=== RUN TestURLConnectivity_PublicIPLiteralHTTP
--- PASS: TestURLConnectivity_PublicIPLiteralHTTP (0.00s)
=== RUN TestURLConnectivity_DNSResolutionError
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"url_connectivity_test","host":"nonexistent-domain-xyz123456.invalid","request_id":"test-1768011444155460119","result":"error","resolved_ips":null,"blocked_reason":"","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_DNSResolutionError (0.00s)
=== RUN TestResolveAllowedIP_PublicIPv4Literal
--- PASS: TestResolveAllowedIP_PublicIPv4Literal (0.00s)
=== RUN TestResolveAllowedIP_PublicIPv6Literal
--- PASS: TestResolveAllowedIP_PublicIPv6Literal (0.00s)
=== RUN TestResolveAllowedIP_PrivateIPBlocked
=== RUN TestResolveAllowedIP_PrivateIPBlocked/RFC1918_10x
=== RUN TestResolveAllowedIP_PrivateIPBlocked/RFC1918_172x
=== RUN TestResolveAllowedIP_PrivateIPBlocked/RFC1918_192x
=== RUN TestResolveAllowedIP_PrivateIPBlocked/LinkLocal
=== RUN TestResolveAllowedIP_PrivateIPBlocked/Metadata
--- PASS: TestResolveAllowedIP_PrivateIPBlocked (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPBlocked/RFC1918_10x (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPBlocked/RFC1918_172x (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPBlocked/RFC1918_192x (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPBlocked/LinkLocal (0.00s)
--- PASS: TestResolveAllowedIP_PrivateIPBlocked/Metadata (0.00s)
=== RUN TestURLConnectivity_PrivateNetworkRanges
=== RUN TestURLConnectivity_PrivateNetworkRanges/RFC1918_10x
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"10.255.255.255","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_PrivateNetworkRanges/RFC1918_172x
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"172.31.255.255","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_PrivateNetworkRanges/RFC1918_192x
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"192.168.255.255","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_PrivateNetworkRanges/LinkLocal
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"169.254.1.1","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_PrivateNetworkRanges/ZeroNet
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"0.0.0.0","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
=== RUN TestURLConnectivity_PrivateNetworkRanges/Broadcast
2026/01/10 02:17:24 [SECURITY AUDIT] {"timestamp":"2026-01-10T02:17:24Z","action":"ssrf_block","host":"255.255.255.255","request_id":"","result":"blocked","resolved_ips":null,"blocked_reason":"private_ip","user_id":"system","source_ip":""}
--- PASS: TestURLConnectivity_PrivateNetworkRanges (0.00s)
--- PASS: TestURLConnectivity_PrivateNetworkRanges/RFC1918_10x (0.00s)
--- PASS: TestURLConnectivity_PrivateNetworkRanges/RFC1918_172x (0.00s)
--- PASS: TestURLConnectivity_PrivateNetworkRanges/RFC1918_192x (0.00s)
--- PASS: TestURLConnectivity_PrivateNetworkRanges/LinkLocal (0.00s)
--- PASS: TestURLConnectivity_PrivateNetworkRanges/ZeroNet (0.00s)
--- PASS: TestURLConnectivity_PrivateNetworkRanges/Broadcast (0.00s)
=== RUN TestURLConnectivity_MultipleStatusCodes
=== RUN TestURLConnectivity_MultipleStatusCodes/200_OK
=== RUN TestURLConnectivity_MultipleStatusCodes/201_Created
=== RUN TestURLConnectivity_MultipleStatusCodes/204_NoContent
=== RUN TestURLConnectivity_MultipleStatusCodes/400_BadRequest
=== RUN TestURLConnectivity_MultipleStatusCodes/401_Unauthorized
=== RUN TestURLConnectivity_MultipleStatusCodes/403_Forbidden
=== RUN TestURLConnectivity_MultipleStatusCodes/404_NotFound
=== RUN TestURLConnectivity_MultipleStatusCodes/429_TooManyRequests
=== RUN TestURLConnectivity_MultipleStatusCodes/500_InternalServerError
=== RUN TestURLConnectivity_MultipleStatusCodes/502_BadGateway
=== RUN TestURLConnectivity_MultipleStatusCodes/503_ServiceUnavailable
=== RUN TestURLConnectivity_MultipleStatusCodes/504_GatewayTimeout
--- PASS: TestURLConnectivity_MultipleStatusCodes (0.02s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/200_OK (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/201_Created (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/204_NoContent (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/400_BadRequest (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/401_Unauthorized (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/403_Forbidden (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/404_NotFound (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/429_TooManyRequests (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/500_InternalServerError (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/502_BadGateway (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/503_ServiceUnavailable (0.00s)
--- PASS: TestURLConnectivity_MultipleStatusCodes/504_GatewayTimeout (0.00s)
=== RUN TestURLConnectivity_RedirectToPrivateIP
--- PASS: TestURLConnectivity_RedirectToPrivateIP (0.00s)
=== RUN TestValidateRedirectTarget_ValidExternalRedirect
--- PASS: TestValidateRedirectTarget_ValidExternalRedirect (0.00s)
=== RUN TestValidateRedirectTarget_SameSchemeAllowed
--- PASS: TestValidateRedirectTarget_SameSchemeAllowed (0.00s)
=== RUN TestURLConnectivity_NetworkError
--- PASS: TestURLConnectivity_NetworkError (0.00s)
=== RUN TestURLConnectivity_HTTPSWithDefaultPort
--- PASS: TestURLConnectivity_HTTPSWithDefaultPort (0.01s)
=== RUN TestURLConnectivity_HTTPWithExplicitPortValidation
--- PASS: TestURLConnectivity_HTTPWithExplicitPortValidation (0.00s)
=== RUN TestIsDockerBridgeIP_AllCases
=== RUN TestIsDockerBridgeIP_AllCases/docker_bridge_172_17
=== RUN TestIsDockerBridgeIP_AllCases/docker_bridge_172_18
=== RUN TestIsDockerBridgeIP_AllCases/docker_bridge_172_31
=== RUN TestIsDockerBridgeIP_AllCases/public_ip
=== RUN TestIsDockerBridgeIP_AllCases/localhost
=== RUN TestIsDockerBridgeIP_AllCases/private_10x
=== RUN TestIsDockerBridgeIP_AllCases/private_192x
=== RUN TestIsDockerBridgeIP_AllCases/empty
=== RUN TestIsDockerBridgeIP_AllCases/invalid
=== RUN TestIsDockerBridgeIP_AllCases/hostname
=== RUN TestIsDockerBridgeIP_AllCases/ipv6_loopback
--- PASS: TestIsDockerBridgeIP_AllCases (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/docker_bridge_172_17 (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/docker_bridge_172_18 (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/docker_bridge_172_31 (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/public_ip (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/localhost (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/private_10x (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/private_192x (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/empty (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/invalid (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/hostname (0.00s)
--- PASS: TestIsDockerBridgeIP_AllCases/ipv6_loopback (0.00s)
=== RUN TestURLConnectivity_RedirectChain
--- PASS: TestURLConnectivity_RedirectChain (0.00s)
=== RUN TestValidateRedirectTarget_FirstRedirect
--- PASS: TestValidateRedirectTarget_FirstRedirect (0.00s)
=== RUN TestURLConnectivity_ResponseBodyClosed
--- PASS: TestURLConnectivity_ResponseBodyClosed (0.00s)
PASS
coverage: 89.2% of statements
ok github.com/Wikid82/charon/backend/internal/utils (cached) coverage: 89.2% of statements
=== RUN TestFull
=== PAUSE TestFull
=== CONT TestFull
--- PASS: TestFull (0.00s)
PASS
coverage: 100.0% of statements
ok github.com/Wikid82/charon/backend/internal/version (cached) coverage: 100.0% of statements
github.com/Wikid82/charon/backend/pkg/dnsprovider coverage: 0.0% of statements
=== RUN TestCloudflareProvider
--- PASS: TestCloudflareProvider (0.00s)
=== RUN TestRoute53Provider
--- PASS: TestRoute53Provider (0.00s)
=== RUN TestDigitalOceanProvider
--- PASS: TestDigitalOceanProvider (0.00s)
=== RUN TestGoogleCloudDNSProvider
--- PASS: TestGoogleCloudDNSProvider (0.00s)
=== RUN TestAzureProvider
--- PASS: TestAzureProvider (0.00s)
=== RUN TestNamecheapProvider
--- PASS: TestNamecheapProvider (0.00s)
=== RUN TestGoDaddyProvider
--- PASS: TestGoDaddyProvider (0.00s)
=== RUN TestHetznerProvider
--- PASS: TestHetznerProvider (0.00s)
=== RUN TestVultrProvider
--- PASS: TestVultrProvider (0.00s)
=== RUN TestDNSimpleProvider
--- PASS: TestDNSimpleProvider (0.00s)
=== RUN TestProviderRegistration
--- PASS: TestProviderRegistration (0.00s)
PASS
coverage: 30.4% of statements
ok github.com/Wikid82/charon/backend/pkg/dnsprovider/builtin (cached) coverage: 30.4% of statements
FAIL
Reference in New Issue View Git Blame Copy Permalink