mirror of
https://github.com/hanzoai/namespace.git
synced 2026-09-30 22:57:59 +00:00
zeekayandHanzo Dev
f16f998889
An account's subject (hanzoai/account Account.Subject) already names "org or user" — a bare slug for an org, "<org>/<name>" for a person or project — and it is what the ledger keys on. Deriving the namespace from that one string means the wallet and the database cannot disagree: a request that bills hanzo/alice reads and writes hanzo/alice's data by construction. The alternative is a table mapping each account kind to a namespace kind, which is one more place for the two vocabularies to drift. The org half is kept via the existing group, so acme/alice and globex/alice are different namespaces — and therefore different databases — and a person's namespace differs from their org's, which is what stops every personal account in the signup org from sharing one. Co-authored-by: Hanzo Dev <[email protected]>
61 lines
1.5 KiB
Go
61 lines
1.5 KiB
Go
// Copyright (C) 2026, Hanzo AI. All rights reserved.
|
|
// See the file LICENSE for licensing terms.
|
|
|
|
package namespace
|
|
|
|
import "testing"
|
|
|
|
func TestOfOrgSubject(t *testing.T) {
|
|
ns, err := Of("acme")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if ns.Kind() != KindOrg || ns.ID() != "acme" || ns.Group().String() != "" {
|
|
t.Fatalf("got %q", ns)
|
|
}
|
|
}
|
|
|
|
func TestOfPersonSubjectKeepsBothHalves(t *testing.T) {
|
|
ns, err := Of("hanzo/alice")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if ns.ID() != "hanzo" || ns.Group().String() != "alice" {
|
|
t.Fatalf("got id=%q group=%q", ns.ID(), ns.Group())
|
|
}
|
|
}
|
|
|
|
// Two orgs may use the same username; collapsing to a bare name would put both
|
|
// in one database.
|
|
func TestOfKeepsUsersInDifferentOrgsApart(t *testing.T) {
|
|
a, err := Of("acme/alice")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
b, err := Of("globex/alice")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if a.String() == b.String() {
|
|
t.Fatalf("acme/alice and globex/alice share a namespace: %q", a)
|
|
}
|
|
}
|
|
|
|
// A person's namespace must differ from their org's, or every personal account
|
|
// in the signup org shares one database.
|
|
func TestOfPersonDiffersFromItsOrg(t *testing.T) {
|
|
person, _ := Of("hanzo/alice")
|
|
org, _ := Of("hanzo")
|
|
if person.String() == org.String() {
|
|
t.Fatalf("person and org share a namespace: %q", org)
|
|
}
|
|
}
|
|
|
|
func TestOfRejectsBadSubjects(t *testing.T) {
|
|
for _, s := range []string{"", "/", "acme/", "/alice", "acme/alice/extra", "../etc", "acme/../etc", "a b"} {
|
|
if ns, err := Of(s); err == nil {
|
|
t.Fatalf("Of(%q) = %q, want an error", s, ns)
|
|
}
|
|
}
|
|
}
|