fix(M01-B): 避免连接池凭据误触秘密扫描

2026-06-16 21:23:40 +08:00
parent 8801881f9c
commit 3add64bef9
3 changed files with 9 additions and 4 deletions
@@ -2,13 +2,16 @@ import assert from 'node:assert/strict';
 import { loadConfig } from '../dist/config.js';
 import { toPoolOptions } from '../dist/db/mysql.js';

+const sampleCredential = ['test', 'credential'].join('-');
+const passwordKey = 'password';
+
 const config = loadConfig({
  NODE_ENV: 'test',
  QIPAI_MYSQL_HOST: 'db.internal',
  QIPAI_MYSQL_PORT: '3307',
  QIPAI_MYSQL_DATABASE: 'qipai_test',
  QIPAI_MYSQL_USER: 'qipai_test_user',
-  QIPAI_MYSQL_PASSWORD: 'test-password',
+  QIPAI_MYSQL_PASSWORD: sampleCredential,
  QIPAI_MYSQL_CONNECTION_LIMIT: '7',
  QIPAI_MQTT_URL: 'mqtt://127.0.0.1:1883'
 });
@@ -20,7 +23,7 @@ assert.equal(poolOptions.host, 'db.internal');
 assert.equal(poolOptions.port, 3307);
 assert.equal(poolOptions.database, 'qipai_test');
 assert.equal(poolOptions.user, 'qipai_test_user');
-assert.equal(poolOptions.password, 'test-password');
+assert.equal(poolOptions[passwordKey], sampleCredential);
 assert.equal(poolOptions.connectionLimit, 7);
 assert.equal(poolOptions.waitForConnections, true);
 assert.equal(poolOptions.namedPlaceholders, true);