181 lines
14 KiB
PHP
181 lines
14 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
/**
|
|
* Prüft die Verwaltung des digitalen Assistenten über die App-Schnittstelle: Rechte (nur Admin oder Recht „Assistent“), Einstellungen,
|
|
* Antworten, Synonyme, Fragen-Log mit Filtern und das Löschen.
|
|
*/
|
|
|
|
date_default_timezone_set('Europe/Berlin'); // wie in der Test-Installation
|
|
$root = dirname(__DIR__);
|
|
$work = sys_get_temp_dir() . '/deskhub-assistapi-' . bin2hex(random_bytes(4));
|
|
$tmp = $work . '/inst';
|
|
mkdir($tmp, 0755, true);
|
|
$webPort = random_int(36500, 36999);
|
|
$skip = '#^(config/config\.php|database/[^/]+\.sqlite[^/]*|backups|uploads|tests|plugins/[^/]+|\.git)(/|$)#';
|
|
foreach (new RecursiveIteratorIterator(new RecursiveDirectoryIterator($root, FilesystemIterator::SKIP_DOTS), RecursiveIteratorIterator::SELF_FIRST) as $f) {
|
|
$rel = str_replace(chr(92), '/', substr($f->getPathname(), strlen($root) + 1));
|
|
if (preg_match($skip, $rel) && !preg_match('#^(backups|uploads|plugins)/(\.htaccess|README\.md)$#', $rel)) continue;
|
|
if ($f->isDir()) { @mkdir($tmp . '/' . $rel, 0755, true); continue; }
|
|
@mkdir(dirname($tmp . '/' . $rel), 0755, true);
|
|
copy($f->getPathname(), $tmp . '/' . $rel);
|
|
}
|
|
@mkdir($tmp . '/uploads');
|
|
@mkdir($tmp . '/config');
|
|
file_put_contents($tmp . '/config/config.php', '<?php return ' . var_export([
|
|
'app_key' => bin2hex(random_bytes(32)),
|
|
'db' => ['driver' => 'sqlite', 'sqlite_path' => $tmp . '/database/deskhub.sqlite'],
|
|
'site' => ['name' => 'Test', 'url' => 'http://127.0.0.1', 'admin_email' => 'a@test.de', 'timezone' => 'Europe/Berlin'],
|
|
'uploads' => ['max_size_bytes' => 10485760, 'allowed_extensions' => ['png'], 'path' => $tmp . '/uploads'],
|
|
], true) . ';');
|
|
|
|
putenv('DESKHUB_CONFIG_JSON');
|
|
putenv('DESKHUB_SQLITE_PATH');
|
|
putenv('DESKHUB_TESTING');
|
|
putenv('DESKHUB_API_ALLOW_INSECURE=1');
|
|
require_once $root . '/database/sqlite_schema.php';
|
|
require_once $root . '/database/migrate.php';
|
|
$db = new PDO('sqlite:' . $tmp . '/database/deskhub.sqlite');
|
|
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
$db->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
|
|
$db->exec('PRAGMA foreign_keys = ON');
|
|
$db->exec(convert_schema_to_sqlite((string) file_get_contents($root . '/database/schema.sql')));
|
|
$mig = run_migrations($db, true);
|
|
$now = date('Y-m-d H:i:s');
|
|
$dept = (int) $db->query('SELECT id FROM departments ORDER BY id LIMIT 1')->fetchColumn();
|
|
$db->exec('DELETE FROM staff');
|
|
$ins = $db->prepare('INSERT INTO staff (name, email, password_hash, role, department_id, is_active, created_at) VALUES (?,?,?,?,?,1,?)');
|
|
$ids = [];
|
|
foreach ([['Chef', 'chef@test.de', 'admin'], ['Agent', 'agent@test.de', 'agent'], ['Pfleger', 'pfleger@test.de', 'agent']] as [$n, $e, $r]) {
|
|
$ins->execute([$n, $e, password_hash('Sehr-Sicher-1234', PASSWORD_DEFAULT), $r, $dept, $now]);
|
|
$ids[$n] = (int) $db->lastInsertId();
|
|
}
|
|
$db = null;
|
|
|
|
$failures = [];
|
|
$total = 0;
|
|
$check = function (bool $ok, string $what) use (&$failures, &$total): void { $total++; if (!$ok) $failures[] = $what; };
|
|
$webProc = proc_open([PHP_BINARY, '-S', "127.0.0.1:$webPort", '-t', $tmp], [['pipe', 'r'], ['file', $work . '/web.out', 'w'], ['file', $work . '/web.out', 'a']], $wp, $tmp);
|
|
|
|
try {
|
|
for ($i = 0; $i < 50; $i++) { if (@fsockopen('127.0.0.1', $webPort)) break; usleep(100000); }
|
|
$pdo = function () use ($tmp): PDO {
|
|
$p = new PDO('sqlite:' . $tmp . '/database/deskhub.sqlite');
|
|
$p->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
$p->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
|
|
return $p;
|
|
};
|
|
$api = function (string $method, string $path, ?array $json = null, ?string $bearer = null) use ($webPort): array {
|
|
$ch = curl_init("http://127.0.0.1:$webPort$path");
|
|
$h = ['Content-Type: application/json'];
|
|
if ($bearer) $h[] = 'Authorization: Bearer ' . $bearer;
|
|
curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 60, CURLOPT_HTTPHEADER => $h, CURLOPT_CUSTOMREQUEST => $method]);
|
|
if ($json !== null) curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($json));
|
|
$b = (string) curl_exec($ch);
|
|
$s = (int) curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
|
|
curl_close($ch);
|
|
return [$s, json_decode($b, true) ?? $b];
|
|
};
|
|
$loginApi = function (string $email) use ($api): string {
|
|
[, $r] = $api('POST', '/api/staff/v1/login.php', ['email' => $email, 'password' => 'Sehr-Sicher-1234', 'deviceName' => 'Test']);
|
|
return (string) ($r['token'] ?? '');
|
|
};
|
|
$db = $pdo();
|
|
$db->prepare('INSERT INTO roles (name, permissions) VALUES (?,?)')->execute(['Assistent-Pfleger', json_encode(['reply_ticket' => true, 'manage_assistant' => true])]);
|
|
$db->prepare('UPDATE staff SET role_id = ? WHERE email = ?')->execute([(int) $db->lastInsertId(), 'pfleger@test.de']);
|
|
$chef = $loginApi('chef@test.de');
|
|
$agent = $loginApi('agent@test.de');
|
|
$pfleger = $loginApi('pfleger@test.de');
|
|
$check($chef !== '' && $agent !== '' && $pfleger !== '', 'Anmeldung der drei Mitarbeiter');
|
|
|
|
// ── Rechte ─────────────────────────────────────────────────────────────
|
|
foreach (['GET /api/staff/v1/assistant.php?section=overview', 'GET /api/staff/v1/assistant.php?section=answers', 'GET /api/staff/v1/assistant.php?section=log'] as $call) {
|
|
[$m, $p] = explode(' ', $call);
|
|
[$s] = $api($m, $p, null, $agent);
|
|
$check($s === 403, "Ohne Recht: $p wird abgelehnt (HTTP $s)");
|
|
}
|
|
foreach (['save_settings', 'save_answer', 'delete_answer', 'save_synonyms', 'clear_log', 'test'] as $a) {
|
|
[$s] = $api('POST', '/api/staff/v1/assistant.php', ['action' => $a, 'title' => 'x', 'answer' => 'y', 'id' => 1, 'question' => 'x'], $agent);
|
|
$check($s === 403, "Ohne Recht: Aktion $a wird abgelehnt (HTTP $s)");
|
|
}
|
|
[$s] = $api('GET', '/api/staff/v1/assistant.php?section=overview');
|
|
$check($s === 401, 'Ohne Anmeldung: HTTP 401');
|
|
[, $me] = $api('GET', '/api/staff/v1/me.php', null, $pfleger);
|
|
$check(($me['staff']['permissions']['manage_assistant'] ?? false) === true, 'Die App erfährt das Recht „manage_assistant“ über me.php');
|
|
[, $me] = $api('GET', '/api/staff/v1/me.php', null, $agent);
|
|
$check(($me['staff']['permissions']['manage_assistant'] ?? true) === false, '… und bei Mitarbeitern ohne das Recht als „nein“');
|
|
|
|
// ── Einstellungen ──────────────────────────────────────────────────────
|
|
[$s, $o] = $api('GET', '/api/staff/v1/assistant.php?section=overview', null, $pfleger);
|
|
$check($s === 200 && $o['dbReady'] === true && $o['settings']['enabled'] === false && $o['settings']['logDays'] === 90 && !empty($o['defaults']['greeting']) && count($o['departments']) >= 1 && count($o['priorities']) >= 1, 'Mit dem Recht: Übersicht mit Einstellungen, Vorgaben, Abteilungen und Prioritäten (HTTP ' . $s . ')');
|
|
$deptId = (int) $o['departments'][0]['id'];
|
|
[$s] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'save_settings', 'enabled' => true, 'mode' => 'always', 'name' => 'Hilfe-Bot <b>', 'greeting' => 'Moin!', 'noAnswer' => 'Nichts gefunden.', 'departmentId' => $deptId, 'priorityId' => 999999, 'logDays' => 30], $pfleger);
|
|
[, $o] = $api('GET', '/api/staff/v1/assistant.php?section=overview', null, $chef);
|
|
$st = $o['settings'];
|
|
$check($s === 200 && $st['enabled'] === true && $st['mode'] === 'always' && $st['name'] === 'Hilfe-Bot' && $st['greeting'] === 'Moin!' && $st['departmentId'] === $deptId && $st['priorityId'] === 0 && $st['logDays'] === 30 && $o['state']['activeNow'] === true, 'Einstellungen speichern: HTML entfernt, unbekannte Priorität ignoriert, Zustand „aktiv“ ' . json_encode($st));
|
|
$check((int) $pdo()->query("SELECT COUNT(*) FROM admin_audit_log WHERE action LIKE 'Einstellungen des digitalen Assistenten%(App)'")->fetchColumn() === 1, 'Die Änderung steht im Admin-Protokoll');
|
|
|
|
// ── Antworten ──────────────────────────────────────────────────────────
|
|
[$s] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'save_answer', 'title' => '', 'answer' => 'x'], $pfleger);
|
|
$check($s === 422, 'Antwort ohne Titel wird abgelehnt (HTTP ' . $s . ')');
|
|
[$s, $r] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'save_answer', 'title' => 'Wie lange dauert der Versand?', 'keywords' => 'Lieferzeit, Paket', 'answer' => 'Zwei bis drei Werktage.', 'isActive' => true], $pfleger);
|
|
$aid = (int) ($r['item']['id'] ?? 0);
|
|
$check($s === 200 && $aid > 0 && $r['item']['isActive'] === true, 'Antwort anlegen (HTTP ' . $s . ')');
|
|
[, $r] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'save_answer', 'id' => $aid, 'title' => 'Wie lange dauert der Versand?', 'keywords' => 'Lieferzeit, Paket, Lieferung', 'answer' => 'Zwei bis drei Werktage.', 'isActive' => true], $chef);
|
|
$check(($r['item']['keywords'] ?? '') === 'Lieferzeit, Paket, Lieferung', 'Antwort ändern');
|
|
[, $l] = $api('GET', '/api/staff/v1/assistant.php?section=answers', null, $pfleger);
|
|
$check(count($l['items'] ?? []) === 1 && $l['items'][0]['hits'] === 0, 'Liste der Antworten');
|
|
[, $t] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'test', 'question' => 'Wie lange dauert die Lieferung meines Pakets?'], $pfleger);
|
|
$check(($t['found'] ?? false) === true && ($t['result']['source'] ?? '') === 'custom' && str_contains($t['result']['text'] ?? '', 'Werktage'), 'Frage ausprobieren findet die Antwort');
|
|
[, $l] = $api('GET', '/api/staff/v1/assistant.php?section=answers', null, $pfleger);
|
|
$check($l['items'][0]['hits'] === 0, 'Das Ausprobieren zählt nicht als Nutzung');
|
|
[, $t] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'test', 'question' => 'Wie wird das Wetter morgen?'], $pfleger);
|
|
$check(($t['found'] ?? true) === false, 'Ohne Treffer: found = false');
|
|
|
|
// ── Synonyme ───────────────────────────────────────────────────────────
|
|
[$s, $r] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'save_synonyms', 'text' => "Versand, Zustellung, Auslieferung\nnur"], $pfleger);
|
|
$check($s === 200 && $r['groups'] === 1, 'Synonyme speichern: eine gültige Gruppe');
|
|
[, $t] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'test', 'question' => 'Wann ist die Zustellung?'], $pfleger);
|
|
$check(($t['found'] ?? false) === true, 'Die eigene Gruppe wirkt sofort (Zustellung findet „Versand“)');
|
|
|
|
// ── Log ────────────────────────────────────────────────────────────────
|
|
$now = date('Y-m-d H:i:s');
|
|
$ins = $pdo()->prepare('INSERT INTO assistant_log (question, result, source, matched_title, helpful, created_at) VALUES (?,?,?,?,?,?)');
|
|
$ins->execute(['Wo ist mein Paket?', 'custom', 'custom', 'Wie lange dauert der Versand?', 1, $now]);
|
|
$ins->execute(['Wie kündige ich?', 'none', null, null, null, $now]);
|
|
$ins->execute(['Wie kündige ich?', 'none', null, null, null, $now]);
|
|
$ins->execute(['Brauche Rechnung', 'kb', 'kb', 'Rechnungen', 0, $now]);
|
|
[$s, $g] = $api('GET', '/api/staff/v1/assistant.php?section=log&period=all', null, $pfleger);
|
|
$check($s === 200 && $g['total'] === 4 && $g['stats']['none'] === 2 && $g['stats']['helpful'] === 1 && $g['stats']['not_helpful'] === 1 && ($g['top'][0]['n'] ?? 0) === 2, 'Log: Einträge, Kennzahlen und häufigste Frage ohne Antwort ' . json_encode($g['stats'] ?? $g));
|
|
[, $g] = $api('GET', '/api/staff/v1/assistant.php?section=log&period=all&result=none', null, $pfleger);
|
|
$check($g['total'] === 2, 'Log: Filter „Keine Antwort“');
|
|
[, $g] = $api('GET', '/api/staff/v1/assistant.php?section=log&period=all&result=helpful', null, $pfleger);
|
|
$check($g['total'] === 1 && $g['items'][0]['helpful'] === true, 'Log: Filter „Hat geholfen“');
|
|
[, $g] = $api('GET', '/api/staff/v1/assistant.php?section=log&period=all&q=Paket', null, $pfleger);
|
|
$check($g['total'] === 1, 'Log: Suche');
|
|
[$s] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'clear_log'], $pfleger);
|
|
$check($s === 200 && (int) $pdo()->query('SELECT COUNT(*) FROM assistant_log')->fetchColumn() === 0, 'Log leeren');
|
|
|
|
// ── Löschen ────────────────────────────────────────────────────────────
|
|
[$s] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'delete_answer', 'id' => $aid], $pfleger);
|
|
$check($s === 200 && (int) $pdo()->query('SELECT COUNT(*) FROM assistant_answers')->fetchColumn() === 0, 'Antwort löschen');
|
|
[$s] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'delete_answer', 'id' => $aid], $pfleger);
|
|
$check($s === 404, 'Nochmal löschen: HTTP 404');
|
|
[$s] = $api('POST', '/api/staff/v1/assistant.php', ['action' => 'unbekannt'], $pfleger);
|
|
$check($s === 422, 'Unbekannte Aktion: HTTP 422');
|
|
} finally {
|
|
if (isset($webProc) && is_resource($webProc)) { proc_terminate($webProc); proc_close($webProc); }
|
|
}
|
|
|
|
usleep(300000);
|
|
$rm = function (string $d) use (&$rm) {
|
|
foreach (scandir($d) ?: [] as $e) { if ($e === '.' || $e === '..') continue; is_dir("$d/$e") && !is_link("$d/$e") ? $rm("$d/$e") : @unlink("$d/$e"); }
|
|
@rmdir($d);
|
|
};
|
|
if (str_starts_with($work, sys_get_temp_dir() . '/deskhub-assistapi-')) $rm($work);
|
|
|
|
if ($failures) {
|
|
fwrite(STDERR, "Fehlgeschlagen:\n - " . implode("\n - ", $failures) . "\n");
|
|
exit(1);
|
|
}
|
|
echo "Assistant API checks passed ({$total} Prüfungen).\n";
|