nodedb 0.3.0

Local-first, real-time, edge-to-cloud hybrid database for multi-modal workloads
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101

// SPDX-License-Identifier: BUSL-1.1

//! Cross-tenant isolation: CDC (Change Data Capture).
//!
//! Writes by Tenant A must NOT appear in Tenant B's change stream subscription.
//! The ChangeStream is scoped by `(collection, tenant_id)` — this test verifies it.

use crate::helpers::{TENANT_A, TENANT_B};
use nodedb::control::change_stream::{ChangeEvent, ChangeOperation, ChangeStream};
use nodedb::types::{Lsn, TenantId};

#[test]
fn cdc_stream_isolated_between_tenants() {
    let stream = ChangeStream::new(1024);

    // Subscribe Tenant B to "orders" — should only see Tenant B's events.
    let _sub_b = stream.subscribe(Some("orders".into()), Some(TenantId::new(TENANT_B)));

    // Publish a change event for Tenant A on "orders".
    stream.publish(ChangeEvent {
        collection: "orders".into(),
        document_id: "order_1".into(),
        operation: ChangeOperation::Insert,
        timestamp_ms: 1000,
        tenant_id: TenantId::new(TENANT_A),
        lsn: Lsn::new(1),
        after: None,
    });

    // Publish a change event for Tenant B on "orders".
    stream.publish(ChangeEvent {
        collection: "orders".into(),
        document_id: "order_2".into(),
        operation: ChangeOperation::Insert,
        timestamp_ms: 2000,
        tenant_id: TenantId::new(TENANT_B),
        lsn: Lsn::new(2),
        after: None,
    });

    // Query recent changes and verify tenant scoping.
    // query_changes returns all events — we filter by tenant_id manually
    // to verify that events are tagged correctly for subscription filtering.
    let all_events = stream.query_changes(Some("orders"), 0, 100);
    assert!(
        all_events.len() >= 2,
        "Should have at least 2 events, got {}",
        all_events.len()
    );

    // Verify Tenant A's event is tagged with Tenant A.
    let a_events: Vec<_> = all_events
        .iter()
        .filter(|e| e.tenant_id == TenantId::new(TENANT_A))
        .collect();
    assert_eq!(a_events.len(), 1);
    assert_eq!(a_events[0].document_id, "order_1");

    // Verify Tenant B's event is tagged with Tenant B.
    let b_events: Vec<_> = all_events
        .iter()
        .filter(|e| e.tenant_id == TenantId::new(TENANT_B))
        .collect();
    assert_eq!(b_events.len(), 1);
    assert_eq!(b_events[0].document_id, "order_2");

    // The subscription filtering (recv_filtered) uses tenant_filter to drop
    // events from other tenants. Here we verify the events are correctly
    // tagged so that filtering works.
}

#[test]
fn cdc_different_collections_isolated() {
    let stream = ChangeStream::new(1024);

    // Same tenant, different collections.
    stream.publish(ChangeEvent {
        collection: "orders".into(),
        document_id: "o1".into(),
        operation: ChangeOperation::Insert,
        timestamp_ms: 1000,
        tenant_id: TenantId::new(TENANT_A),
        lsn: Lsn::new(1),
        after: None,
    });
    stream.publish(ChangeEvent {
        collection: "users".into(),
        document_id: "u1".into(),
        operation: ChangeOperation::Insert,
        timestamp_ms: 2000,
        tenant_id: TenantId::new(TENANT_A),
        lsn: Lsn::new(2),
        after: None,
    });

    // Query only "orders" — should not include "users".
    let order_events = stream.query_changes(Some("orders"), 0, 100);
    for event in &order_events {
        assert_eq!(event.collection, "orders");
    }
}