feat: limit audit trail (#6744)

* feat: enable limiting audit trail * support AddExclusiveQuery * fix invalid condition * register event mappers * fix NullDuration validity * test query side for limits * lint * acceptance test audit trail limit * fix acceptance test * translate limits not found * update tests * fix linting * add audit log retention to default instance * fix tests * update docs * remove todo * improve test name
2025-10-28 07:06:25 +00:00 · 2023-10-25 13:42:00 +02:00
parent 1c839e308b
commit 385a55bd21
52 changed files with 1778 additions and 172 deletions
--- a/internal/query/limits_test.go
+++ b/internal/query/limits_test.go
@@ -0,0 +1,116 @@
+package query
+
+import (
+	"database/sql"
+	"database/sql/driver"
+	"errors"
+	"fmt"
+	"regexp"
+	"testing"
+	"time"
+
+	"github.com/muhlemmer/gu"
+
+	errs "github.com/zitadel/zitadel/internal/errors"
+)
+
+var (
+	expectedLimitsQuery = regexp.QuoteMeta("SELECT projections.limits.aggregate_id," +
+		" projections.limits.creation_date," +
+		" projections.limits.change_date," +
+		" projections.limits.resource_owner," +
+		" projections.limits.sequence," +
+		" projections.limits.audit_log_retention" +
+		" FROM projections.limits" +
+		" AS OF SYSTEM TIME '-1 ms'",
+	)
+
+	limitsCols = []string{
+		"aggregate_id",
+		"creation_date",
+		"change_date",
+		"resource_owner",
+		"sequence",
+		"audit_log_retention",
+	}
+)
+
+func Test_LimitsPrepare(t *testing.T) {
+	type want struct {
+		sqlExpectations sqlExpectation
+		err             checkErr
+	}
+	tests := []struct {
+		name    string
+		prepare interface{}
+		want    want
+		object  interface{}
+	}{
+		{
+			name:    "prepareLimitsQuery no result",
+			prepare: prepareLimitsQuery,
+			want: want{
+				sqlExpectations: mockQueriesScanErr(
+					expectedLimitsQuery,
+					nil,
+					nil,
+				),
+				err: func(err error) (error, bool) {
+					if !errs.IsNotFound(err) {
+						return fmt.Errorf("err should be zitadel.NotFoundError got: %w", err), false
+					}
+					return nil, true
+				},
+			},
+			object: (*Limits)(nil),
+		},
+		{
+			name:    "prepareLimitsQuery",
+			prepare: prepareLimitsQuery,
+			want: want{
+				sqlExpectations: mockQuery(
+					expectedLimitsQuery,
+					limitsCols,
+					[]driver.Value{
+						"limits1",
+						testNow,
+						testNow,
+						"instance1",
+						0,
+						intervalDriverValue(t, time.Hour),
+					},
+				),
+			},
+			object: &Limits{
+				AggregateID:       "limits1",
+				CreationDate:      testNow,
+				ChangeDate:        testNow,
+				ResourceOwner:     "instance1",
+				Sequence:          0,
+				AuditLogRetention: gu.Ptr(time.Hour),
+			},
+		},
+		{
+			name:    "prepareLimitsQuery sql err",
+			prepare: prepareLimitsQuery,
+			want: want{
+				sqlExpectations: mockQueryErr(
+					expectedLimitsQuery,
+					sql.ErrConnDone,
+				),
+				err: func(err error) (error, bool) {
+					if !errors.Is(err, sql.ErrConnDone) {
+						return fmt.Errorf("err should be sql.ErrConnDone got: %w", err), false
+					}
+					return nil, true
+				},
+			},
+			object: (*Limits)(nil),
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			assertPrepare(t, tt.prepare, tt.object, tt.want.sqlExpectations, tt.want.err, defaultPrepareArgs...)
+		})
+	}
+}