feat(加密): 添加文档加密功能及用户加密设置

为文档模型添加加密标志验证，为用户模型添加加密相关字段和验证
更新测试夹具以包含加密和非加密用户及文档
添加文档控制器测试用例验证加密功能

Author: Wpc-121

app/models/document.rb

@@ -8,6 +8,7 @@ class Document < ActiveRecord::Base
   has_many :tags, through: :documenttags
 
   validates_presence_of :title, :document_date, :user, :document_url
+  validates :encrypted_flag, inclusion: { in: [true, false] }
 
   def as_json(_options = {})
     super include: {

app/models/user.rb

@@ -8,4 +8,7 @@ class User < ActiveRecord::Base
   has_many :states
 
   validates_presence_of :name, :email, :password_digest
+  validates :encryption_actived_flag, inclusion: { in: [true, false] }
+  validates :secret_key, presence: true, if: :encryption_actived_flag?
+  validates :secret_key, format: { with: /\A[0-9a-f]{64}\z/, message: "must be a 64-character hex string" }, allow_nil: true
 end

db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 2019_05_28_071907) do
+ActiveRecord::Schema.define(version: 2024_03_31_170416) do
 
   create_table "documents", force: :cascade do |t|
     t.string "title"
@@ -25,6 +25,7 @@
     t.integer "person_id"
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
+    t.boolean "encrypted_flag", default: false
     t.index ["folder_id"], name: "index_documents_on_folder_id"
     t.index ["person_id"], name: "index_documents_on_person_id"
     t.index ["state_id"], name: "index_documents_on_state_id"
@@ -47,7 +48,7 @@
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
     t.index ["folder_id"], name: "index_folders_on_folder_id"
-    t.index ["name"], name: "index_folders_on_name", unique: true
+    t.index ["name", "user_id", "folder_id"], name: "index_folders_on_name_and_user_id_and_folder_id", unique: true
     t.index ["user_id"], name: "index_folders_on_user_id"
   end
 
@@ -63,7 +64,7 @@
     t.integer "user_id"
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
-    t.index ["name"], name: "index_states_on_name", unique: true
+    t.index ["name", "user_id"], name: "index_states_on_name_and_user_id", unique: true
   end
 
   create_table "tags", force: :cascade do |t|
@@ -80,6 +81,8 @@
     t.string "email"
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
+    t.string "secret_key", default: nil
+    t.boolean "encryption_actived_flag", default: false
     t.index ["email"], name: "index_users_on_email", unique: true
   end
 

test/controllers/documents_controller_test.rb

@@ -1,7 +1,142 @@
 require 'test_helper'
 
 class DocumentsControllerTest < ActionController::TestCase
-  # test "the truth" do
-  #   assert true
-  # end
+  setup do
+    @non_encrypted_user = users(:one)
+    @encrypted_user = users(:two)
+    @document = documents(:one)
+    
+    @test_pdf_content = "%PDF-1.4\n1 0 obj\n<< /Type /Catalog /Pages 2 0 R >>\nendobj\n2 0 obj\n<< /Type /Pages /Kids [3 0 R] /Count 1 >>\nendobj\n3 0 obj\n<< /Type /Page /Parent 2 0 R /MediaBox [0 0 612 792] >>\nendobj\nxref\n0 4\n0000000000 65535 f \n0000000009 00000 n \n0000000058 00000 n \n0000000115 00000 n \ntrailer\n<< /Size 4 /Root 1 0 R >>\nstartxref\n192\n%%EOF"
+  end
+
+  test "should create document without encryption for non-encrypted user" do
+    token = JsonWebToken.encode(user_id: @non_encrypted_user.id)
+    @request.headers['Authorization'] = "Bearer #{token}"
+    
+    temp_file = Tempfile.new(['test', '.pdf'])
+    temp_file.write(@test_pdf_content)
+    temp_file.rewind
+    
+    uploaded_file = Rack::Test::UploadedFile.new(temp_file.path, 'application/pdf')
+    
+    assert_difference('Document.count') do
+      post :create, params: {
+        document: uploaded_file,
+        title: 'Test Document',
+        description: 'Test description',
+        document_date: Date.today.to_s
+      }
+    end
+    
+    assert_response :created
+    
+    new_document = Document.last
+    assert_equal false, new_document.encrypted_flag
+    assert_equal 'Test Document', new_document.title
+    
+    assert File.exist?(Settings.document_folder + new_document.document_url)
+    
+    File.delete(Settings.document_folder + new_document.document_url) if File.exist?(Settings.document_folder + new_document.document_url)
+    temp_file.close
+    temp_file.unlink
+  end
+
+  test "should create document with encryption for encrypted user" do
+    token = JsonWebToken.encode(user_id: @encrypted_user.id)
+    @request.headers['Authorization'] = "Bearer #{token}"
+    
+    temp_file = Tempfile.new(['test', '.pdf'])
+    temp_file.write(@test_pdf_content)
+    temp_file.rewind
+    
+    uploaded_file = Rack::Test::UploadedFile.new(temp_file.path, 'application/pdf')
+    
+    assert_difference('Document.count') do
+      post :create, params: {
+        document: uploaded_file,
+        title: 'Encrypted Test Document',
+        description: 'Encrypted test description',
+        document_date: Date.today.to_s
+      }
+    end
+    
+    assert_response :created
+    
+    new_document = Document.last
+    assert_equal true, new_document.encrypted_flag
+    assert_equal 'Encrypted Test Document', new_document.title
+    
+    assert File.exist?(Settings.document_folder + new_document.document_url)
+    
+    stored_content = File.read(Settings.document_folder + new_document.document_url)
+    assert_not_equal @test_pdf_content, stored_content
+    
+    lockbox = Lockbox.new(key: @encrypted_user.secret_key)
+    decrypted_content = lockbox.decrypt(stored_content)
+    assert_equal @test_pdf_content, decrypted_content
+    
+    File.delete(Settings.document_folder + new_document.document_url) if File.exist?(Settings.document_folder + new_document.document_url)
+    temp_file.close
+    temp_file.unlink
+  end
+
+  test "should download non-encrypted document" do
+    token = JsonWebToken.encode(user_id: @non_encrypted_user.id)
+    @request.headers['Authorization'] = "Bearer #{token}"
+    
+    document = Document.create!(
+      title: 'Download Test',
+      document_date: Date.today,
+      document_url: 'download_test.pdf',
+      user: @non_encrypted_user,
+      encrypted_flag: false
+    )
+    
+    File.write(Settings.document_folder + 'download_test.pdf', @test_pdf_content, mode: 'w+b')
+    
+    get :download, params: { id: document.id }
+    
+    assert_response :success
+    assert_equal 'application/pdf', @response.content_type
+    assert_equal @test_pdf_content, @response.body
+    
+    File.delete(Settings.document_folder + 'download_test.pdf') if File.exist?(Settings.document_folder + 'download_test.pdf')
+    document.destroy
+  end
+
+  test "should download and decrypt encrypted document" do
+    token = JsonWebToken.encode(user_id: @encrypted_user.id)
+    @request.headers['Authorization'] = "Bearer #{token}"
+    
+    lockbox = Lockbox.new(key: @encrypted_user.secret_key)
+    encrypted_content = lockbox.encrypt(@test_pdf_content)
+    
+    document = Document.create!(
+      title: 'Encrypted Download Test',
+      document_date: Date.today,
+      document_url: 'encrypted_download_test.pdf',
+      user: @encrypted_user,
+      encrypted_flag: true
+    )
+    
+    File.write(Settings.document_folder + 'encrypted_download_test.pdf', encrypted_content, mode: 'w+b')
+    
+    get :download, params: { id: document.id }
+    
+    assert_response :success
+    assert_equal 'application/pdf', @response.content_type
+    assert_equal @test_pdf_content, @response.body
+    
+    File.delete(Settings.document_folder + 'encrypted_download_test.pdf') if File.exist?(Settings.document_folder + 'encrypted_download_test.pdf')
+    document.destroy
+  end
+
+  test "should return unauthorized without token" do
+    post :create, params: {
+      title: 'Test',
+      document_date: Date.today.to_s
+    }
+    
+    assert_response :unauthorized
+  end
 end

test/fixtures/documents.yml

@@ -1,21 +1,23 @@
 # Read about fixtures at http://api.rubyonrails.org/classes/ActiveRecord/FixtureSet.html
 
 one:
-  title: MyString
-  description: MyText
+  title: Non Encrypted Document
+  description: A non-encrypted test document
   document_date: 2019-05-25
-  document_url: MyString
-  version: 9.99
+  document_url: test1.pdf
+  version: 1.0
   folder_id: 
-  user_id: 
+  user_id: one
   state_id: 
+  encrypted_flag: false
 
 two:
-  title: MyString
-  description: MyText
+  title: Encrypted Document
+  description: An encrypted test document
   document_date: 2019-05-25
-  document_url: MyString
-  version: 9.99
+  document_url: test2.pdf
+  version: 1.0
   folder_id: 
-  user_id: 
+  user_id: two
   state_id: 
+  encrypted_flag: true

test/fixtures/users.yml

@@ -1,11 +1,15 @@
 # Read about fixtures at http://api.rubyonrails.org/classes/ActiveRecord/FixtureSet.html
 
 one:
-  name: MyString
-  password_digest: MyString
-  email: MyString
+  name: Non Encrypted User
+  password_digest: <%= BCrypt::Password.create('password123') %>
+  email: non_encrypted@example.com
+  encryption_actived_flag: false
+  secret_key: null
 
 two:
-  name: MyString
-  password_digest: MyString
-  email: MyString
+  name: Encrypted User
+  password_digest: <%= BCrypt::Password.create('password123') %>
+  email: encrypted@example.com
+  encryption_actived_flag: true
+  secret_key: 0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef