e610d1ea5f
Without sanity check, container service provides successful response, even though such request will never be approved by Alphabet nodes. Signed-off-by: Alex Vanin <alexey@nspcc.ru>
101 lines
2.6 KiB
Go
101 lines
2.6 KiB
Go
package container_test
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/nspcc-dev/neofs-api-go/v2/container"
|
|
"github.com/nspcc-dev/neofs-api-go/v2/session"
|
|
containerCore "github.com/nspcc-dev/neofs-node/pkg/core/container"
|
|
containerSvc "github.com/nspcc-dev/neofs-node/pkg/services/container"
|
|
containerSvcMorph "github.com/nspcc-dev/neofs-node/pkg/services/container/morph"
|
|
containerSDK "github.com/nspcc-dev/neofs-sdk-go/container"
|
|
cid "github.com/nspcc-dev/neofs-sdk-go/container/id"
|
|
"github.com/nspcc-dev/neofs-sdk-go/eacl"
|
|
"github.com/nspcc-dev/neofs-sdk-go/owner"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
type mock struct{}
|
|
|
|
func (m mock) Put(c *containerSDK.Container) (*cid.ID, error) {
|
|
return new(cid.ID), nil
|
|
}
|
|
|
|
func (m mock) Delete(witness containerCore.RemovalWitness) error {
|
|
return nil
|
|
}
|
|
|
|
func (m mock) PutEACL(table *eacl.Table) error {
|
|
return nil
|
|
}
|
|
|
|
func (m mock) Get(id *cid.ID) (*containerSDK.Container, error) {
|
|
panic("implement me")
|
|
}
|
|
|
|
func (m mock) GetEACL(id *cid.ID) (*eacl.Table, error) {
|
|
panic("implement me")
|
|
}
|
|
|
|
func (m mock) List(id *owner.ID) ([]*cid.ID, error) {
|
|
panic("implement me")
|
|
}
|
|
|
|
func TestInvalidToken(t *testing.T) {
|
|
m := mock{}
|
|
e := containerSvcMorph.NewExecutor(m, m)
|
|
|
|
tests := []struct {
|
|
name string
|
|
op func(e containerSvc.ServiceExecutor, ctx containerSvc.ContextWithToken) error
|
|
}{
|
|
{
|
|
name: "put",
|
|
op: func(e containerSvc.ServiceExecutor, ctx containerSvc.ContextWithToken) (err error) {
|
|
_, err = e.Put(ctx, new(container.PutRequestBody))
|
|
return
|
|
},
|
|
},
|
|
{
|
|
name: "delete",
|
|
op: func(e containerSvc.ServiceExecutor, ctx containerSvc.ContextWithToken) (err error) {
|
|
_, err = e.Delete(ctx, new(container.DeleteRequestBody))
|
|
return
|
|
},
|
|
},
|
|
{
|
|
name: "setEACL",
|
|
op: func(e containerSvc.ServiceExecutor, ctx containerSvc.ContextWithToken) (err error) {
|
|
_, err = e.SetExtendedACL(ctx, new(container.SetExtendedACLRequestBody))
|
|
return
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, test := range tests {
|
|
t.Run(test.name, func(t *testing.T) {
|
|
ctx := containerSvc.ContextWithToken{
|
|
Context: context.Background(),
|
|
SessionToken: generateToken(new(session.ObjectSessionContext)),
|
|
}
|
|
require.Error(t, test.op(e, ctx), containerSvcMorph.ErrInvalidContext)
|
|
|
|
ctx.SessionToken = generateToken(new(session.ContainerSessionContext))
|
|
require.NoError(t, test.op(e, ctx))
|
|
|
|
ctx.SessionToken = nil
|
|
require.NoError(t, test.op(e, ctx))
|
|
})
|
|
}
|
|
}
|
|
|
|
func generateToken(ctx session.SessionTokenContext) *session.SessionToken {
|
|
body := new(session.SessionTokenBody)
|
|
body.SetContext(ctx)
|
|
|
|
tok := new(session.SessionToken)
|
|
tok.SetBody(body)
|
|
|
|
return tok
|
|
}
|