fix(ssf): 修复安全事件连接基础阻断

为已记录旧迁移版本的环境补充幂等表修复迁移，并让 Transmitter 网络连接在 IPv6 地址不可达时继续尝试 IPv4。失败连接现在通过 If-Match 安全重试，页面同步提供重试入口并清理过期错误提示。\n\n验证：Go securityevents/migrate 测试、Web Vitest 与 TypeScript 类型检查通过。
2026-07-16 10:44:59 +08:00
parent 9efeb16fd1
commit 42ddc70b27
8 changed files with 123 additions and 6 deletions
@@ -55,6 +55,21 @@ describe('security event connection transport', () => {
    expect(JSON.parse(String(init.body))).toEqual({ transmitter_issuer: 'https://auth.example/ssf' });
    expect(String(init.body)).not.toMatch(/secret|bearer|scope|credential/i);
    expect(new Headers(init.headers).get('Idempotency-Key')).toContain('ssf-connect-');
+    expect(new Headers(init.headers).has('If-Match')).toBe(false);
+  });
+
+  it('sends If-Match when retrying an existing failed connection', async () => {
+    const fetchMock = vi.fn().mockResolvedValue(new Response(JSON.stringify({ connected: true }), {
+      status: 202,
+      headers: { 'Content-Type': 'application/json' },
+    }));
+    vi.stubGlobal('fetch', fetchMock);
+    vi.stubGlobal('crypto', { randomUUID: () => '00000000-0000-4000-8000-000000000000' });
+
+    await connectSecurityEventTransmitter('manager-token', 'https://auth.example/ssf', 7);
+
+    const [, init] = fetchMock.mock.calls[0] as [string, RequestInit];
+    expect(new Headers(init.headers).get('If-Match')).toBe('W/"7"');
  });
 });