Add factory reset functionality and update identity service

- Introduced a new DELETE endpoint `/api/admin/maintenance/factory-reset` for a complete reset of the admin panel, removing all users except the current admin and clearing various data. - Implemented the `FactoryReset` method in `AdminMaintenanceEndpoints` to handle the reset logic. - Added a new method `ListAllUserIdsExceptAsync` in `IIdentityService` to retrieve user IDs excluding a specified user, aiding in the factory reset process. - Updated the frontend to include a confirmation dialog for the factory reset action, enhancing user experience and safety. - Enhanced localization support for the new factory reset feature in both Russian and English, ensuring clarity for all users.
2026-07-14 18:58:51 +03:00
parent 94ba514b8e
commit 701c3a1d51
16 changed files with 564 additions and 64 deletions
@@ -0,0 +1,144 @@
+using NSubstitute;
+using PnvPanel.Application.Admin.Maintenance;
+using PnvPanel.Application.Common.Interfaces;
+using PnvPanel.Application.Common.Models;
+using PnvPanel.Application.Tests.TestSupport;
+using PnvPanel.Domain.Audit;
+using PnvPanel.Domain.Configs;
+using PnvPanel.Domain.Inbounds;
+using PnvPanel.Domain.News;
+using PnvPanel.Domain.Nodes;
+using PnvPanel.Domain.Support;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Admin.Maintenance;
+
+public class FactoryResetCommandHandlerTests
+{
+    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
+    private readonly IRoleService _roleService = Substitute.For<IRoleService>();
+    private readonly IXuiPanelGateway _gateway = Substitute.For<IXuiPanelGateway>();
+    private readonly IFileStorage _fileStorage = Substitute.For<IFileStorage>();
+    private readonly IClientAppCatalogSeeder _catalogSeeder =
+        Substitute.For<IClientAppCatalogSeeder>();
+
+    [Fact]
+    public async Task Handle_WipesEverythingExceptCurrentAdminAndSystemRoles()
+    {
+        using var dbContext = InMemoryDbContextFactory.Create();
+        var adminId = Guid.NewGuid();
+        var otherUserId = Guid.NewGuid();
+
+        var node = Node.Register(
+            "node-1",
+            new Uri("https://node.example.com"),
+            new NodeCredentials("u", "p"),
+            null
+        );
+        var inbound = Inbound.FromRemote(node.Id, "1", VpnProtocol.Vless, "remark", 443);
+        var config = VpnConfig.Create(otherUserId, inbound.Id, VpnProtocol.Vless, "label");
+        dbContext.Nodes.Add(node);
+        dbContext.Inbounds.Add(inbound);
+        dbContext.VpnConfigs.Add(config);
+
+        var ticket = SupportTicket.CreateBugReport(otherUserId);
+        dbContext.SupportTickets.Add(ticket);
+        var comment = TicketComment.Create(ticket.Id, otherUserId, "текст");
+        dbContext.TicketComments.Add(comment);
+        var attachment = TicketAttachment.Create(
+            comment.Id,
+            "shot.png",
+            "stored-name",
+            "image/png",
+            10
+        );
+        dbContext.TicketAttachments.Add(attachment);
+
+        dbContext.NewsPosts.Add(NewsPost.Create("Заголовок", "Текст"));
+        dbContext.AuditLogs.Add(
+            AuditLog.Create(adminId, "SomeOldAction", "Test", "1", null, AuditSource.Web)
+        );
+
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        var adminRoleId = Guid.NewGuid();
+        var customRoleId = Guid.NewGuid();
+        _roleService
+            .ListRolesAsync(Arg.Any<CancellationToken>())
+            .Returns(
+                new List<RoleDto>
+                {
+                    new(adminRoleId, "admin", -1, -1, IsSystem: true),
+                    new(customRoleId, "premium", 10, 5, IsSystem: false),
+                }
+            );
+        _roleService
+            .DeleteRoleAsync(customRoleId, Arg.Any<CancellationToken>())
+            .Returns(Result.Success());
+
+        _identityService
+            .ListAllUserIdsExceptAsync(adminId, Arg.Any<CancellationToken>())
+            .Returns(new List<Guid> { otherUserId });
+        _identityService
+            .DeleteUserAsync(otherUserId, Arg.Any<CancellationToken>())
+            .Returns(Result.Success());
+
+        _gateway
+            .RemoveClientAsync(
+                Arg.Any<Node>(),
+                Arg.Any<string>(),
+                Arg.Any<string>(),
+                Arg.Any<VpnProtocol>(),
+                Arg.Any<CancellationToken>()
+            )
+            .Returns(Result.Success());
+
+        var currentUser = FakeCurrentUser.Authenticated(adminId, "admin");
+        var handler = new FactoryResetCommandHandler(
+            dbContext,
+            _identityService,
+            _roleService,
+            _gateway,
+            _fileStorage,
+            _catalogSeeder,
+            currentUser
+        );
+
+        var result = await handler.Handle(new FactoryResetCommand(), CancellationToken.None);
+        // Хендлер сам коммитит несколько раз (в проде это делает он же, а не диспетчер) — фиксируем финально.
+        await dbContext.SaveChangesAsync(CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+
+        Assert.False(dbContext.VpnConfigs.Any());
+        Assert.False(dbContext.Inbounds.Any());
+        Assert.False(dbContext.Nodes.Any());
+        Assert.False(dbContext.SupportTickets.Any());
+        Assert.False(dbContext.TicketComments.Any());
+        Assert.False(dbContext.TicketAttachments.Any());
+        Assert.False(dbContext.NewsPosts.Any());
+
+        // Аудит очищен, но остаётся ровно одна собственная запись о факте сброса.
+        var auditLog = Assert.Single(dbContext.AuditLogs);
+        Assert.Equal("FactoryReset", auditLog.Action);
+
+        await _identityService
+            .Received(1)
+            .DeleteUserAsync(otherUserId, Arg.Any<CancellationToken>());
+        await _roleService.Received(1).DeleteRoleAsync(customRoleId, Arg.Any<CancellationToken>());
+        await _roleService
+            .DidNotReceive()
+            .DeleteRoleAsync(adminRoleId, Arg.Any<CancellationToken>());
+        await _gateway
+            .Received(1)
+            .RemoveClientAsync(
+                Arg.Any<Node>(),
+                inbound.RemoteInboundId,
+                config.ClientExternalId,
+                config.Protocol,
+                Arg.Any<CancellationToken>()
+            );
+        await _fileStorage.Received(1).DeleteAsync("stored-name", Arg.Any<CancellationToken>());
+        await _catalogSeeder.Received(1).SeedIfEmptyAsync(Arg.Any<CancellationToken>());
+    }
+}