Add files via upload

internal/config/config_test.go

@@ -0,0 +1,73 @@
+package config
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestPersistAuthPasswordQuotesYAMLSpecialCharacters(t *testing.T) {
+	dir := t.TempDir()
+	path := filepath.Join(dir, "config.yaml")
+	initial := strings.Join([]string{
+		"server:",
+		"  host: 0.0.0.0",
+		"auth:",
+		"  password: old-password # Web 登录密码",
+		"  session_duration_hours: 12",
+		"log:",
+		"  level: info",
+		"",
+	}, "\n")
+	if err := os.WriteFile(path, []byte(initial), 0644); err != nil {
+		t.Fatalf("write config: %v", err)
+	}
+
+	want := `@abc:def # still password`
+	if err := PersistAuthPassword(path, want); err != nil {
+		t.Fatalf("PersistAuthPassword: %v", err)
+	}
+
+	data, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatalf("read config: %v", err)
+	}
+	if !strings.Contains(string(data), `password: "@abc:def # still password" # Web 登录密码`) {
+		t.Fatalf("password was not safely quoted or comment was not preserved:\n%s", data)
+	}
+
+	cfg, err := Load(path)
+	if err != nil {
+		t.Fatalf("Load after PersistAuthPassword: %v", err)
+	}
+	if cfg.Auth.Password != want {
+		t.Fatalf("Auth.Password = %q, want %q", cfg.Auth.Password, want)
+	}
+}
+
+func TestPersistAuthPasswordDoesNotTreatQuotedHashAsComment(t *testing.T) {
+	dir := t.TempDir()
+	path := filepath.Join(dir, "config.yaml")
+	initial := strings.Join([]string{
+		"auth:",
+		`  password: "old#password"`,
+		"  session_duration_hours: 12",
+		"",
+	}, "\n")
+	if err := os.WriteFile(path, []byte(initial), 0644); err != nil {
+		t.Fatalf("write config: %v", err)
+	}
+
+	if err := PersistAuthPassword(path, "new-password"); err != nil {
+		t.Fatalf("PersistAuthPassword: %v", err)
+	}
+
+	data, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatalf("read config: %v", err)
+	}
+	if strings.Contains(string(data), "#password") {
+		t.Fatalf("old quoted password fragment was incorrectly preserved as a comment:\n%s", data)
+	}
+}