mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 08:55:24 +00:00
104 lines
2.9 KiB
Go
104 lines
2.9 KiB
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/fleetdm/fleet/server/config"
|
|
"github.com/fleetdm/fleet/server/fleet"
|
|
"github.com/pkg/errors"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/mock"
|
|
)
|
|
|
|
type mockService struct {
|
|
mock.Mock
|
|
fleet.Service
|
|
}
|
|
|
|
func (m *mockService) GetSessionByKey(ctx context.Context, sessionKey string) (*fleet.Session, error) {
|
|
args := m.Called(ctx, sessionKey)
|
|
if ret := args.Get(0); ret != nil {
|
|
return ret.(*fleet.Session), nil
|
|
}
|
|
return nil, args.Error(1)
|
|
}
|
|
|
|
func (m *mockService) UserUnauthorized(ctx context.Context, userId uint) (*fleet.User, error) {
|
|
args := m.Called(ctx, userId)
|
|
if ret := args.Get(0); ret != nil {
|
|
return ret.(*fleet.User), nil
|
|
}
|
|
return nil, args.Error(1)
|
|
}
|
|
|
|
var testConfig = config.FleetConfig{
|
|
Auth: config.AuthConfig{
|
|
JwtKey: "insecure",
|
|
},
|
|
}
|
|
|
|
func TestDebugHandlerAuthenticationTokenMissing(t *testing.T) {
|
|
handler := MakeDebugHandler(&mockService{}, testConfig, nil)
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "https://fleetdm.com/debug/pprof/profile", nil)
|
|
res := httptest.NewRecorder()
|
|
|
|
handler.ServeHTTP(res, req)
|
|
assert.Equal(t, http.StatusUnauthorized, res.Code)
|
|
}
|
|
|
|
func TestDebugHandlerAuthenticationTokenInvalid(t *testing.T) {
|
|
handler := MakeDebugHandler(&mockService{}, testConfig, nil)
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "https://fleetdm.com/debug/pprof/profile", nil)
|
|
req.Header.Add("Authorization", "BEARER foobar")
|
|
res := httptest.NewRecorder()
|
|
|
|
handler.ServeHTTP(res, req)
|
|
assert.Equal(t, http.StatusUnauthorized, res.Code)
|
|
}
|
|
|
|
func TestDebugHandlerAuthenticationSessionInvalid(t *testing.T) {
|
|
svc := &mockService{}
|
|
svc.On(
|
|
"GetSessionByKey",
|
|
mock.Anything,
|
|
"session",
|
|
).Return(nil, errors.New("invalid session"))
|
|
|
|
handler := MakeDebugHandler(svc, testConfig, nil)
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "https://fleetdm.com/debug/pprof/profile", nil)
|
|
req.Header.Add("Authorization", "BEARER eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZXNzaW9uX2tleSI6InNlc3Npb24iLCJpYXQiOjE1MTYyMzkwMjJ9.YZIL9fKxfVg7fCms4CTKCPT2w8x8N3e2pciV_h0OvTk")
|
|
res := httptest.NewRecorder()
|
|
|
|
handler.ServeHTTP(res, req)
|
|
assert.Equal(t, http.StatusUnauthorized, res.Code)
|
|
}
|
|
|
|
func TestDebugHandlerAuthenticationSuccess(t *testing.T) {
|
|
svc := &mockService{}
|
|
svc.On(
|
|
"GetSessionByKey",
|
|
mock.Anything,
|
|
"session",
|
|
).Return(&fleet.Session{UserID: 42, ID: 1}, nil)
|
|
svc.On(
|
|
"UserUnauthorized",
|
|
mock.Anything,
|
|
uint(42),
|
|
).Return(&fleet.User{}, nil)
|
|
|
|
handler := MakeDebugHandler(svc, testConfig, nil)
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "https://fleetdm.com/debug/pprof/cmdline", nil)
|
|
req.Header.Add("Authorization", "BEARER eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZXNzaW9uX2tleSI6InNlc3Npb24iLCJpYXQiOjE1MTYyMzkwMjJ9.YZIL9fKxfVg7fCms4CTKCPT2w8x8N3e2pciV_h0OvTk")
|
|
res := httptest.NewRecorder()
|
|
|
|
handler.ServeHTTP(res, req)
|
|
assert.Equal(t, http.StatusOK, res.Code)
|
|
}
|