test(agentcompat): add dashboard runtime harness

Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>

integration/agentcompat/internal/dashboard/tls.go

@@ -0,0 +1,46 @@
+//go:build linux
+
+package dashboard
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"net/http"
+	"net/http/cookiejar"
+
+	"github.com/nezhahq/nezha/integration/agentcompat/internal/client"
+)
+
+func (dashboard *Dashboard) verifyTrustedTLS(ctx context.Context) error {
+	httpClient, transport, err := dashboard.newTLSHTTPClient("localhost")
+	if err != nil {
+		return err
+	}
+	dashboard.tlsTransport = transport
+	tlsClient, err := client.New(client.Config{BaseURL: dashboard.TLSURL(), HTTPClient: httpClient})
+	if err != nil {
+		return err
+	}
+	login, err := tlsClient.Login(ctx, client.LoginRequest{Username: "admin", Password: "admin"})
+	if err != nil {
+		return fmt.Errorf("login through trusted dashboard TLS: %w", err)
+	}
+	if login.Token == "" {
+		return errors.New("trusted dashboard TLS login omitted JWT")
+	}
+	dashboard.bootstrap.TLSAuthenticated = true
+	return nil
+}
+
+func (dashboard *Dashboard) newTLSHTTPClient(serverName string) (*http.Client, *http.Transport, error) {
+	jar, err := cookiejar.New(nil)
+	if err != nil {
+		return nil, nil, fmt.Errorf("create TLS cookie jar: %w", err)
+	}
+	transport := &http.Transport{
+		TLSClientConfig: dashboard.tlsFixture.ClientConfig(serverName),
+		DialContext:     dialAddress(dashboard.httpsAddress),
+	}
+	return &http.Client{Transport: transport, Jar: jar, Timeout: dashboardHTTPClientTimeout}, transport, nil
+}