[#197] session: Refactor and document the package
Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>
This commit is contained in:
Leonard Lyubich
LeL
parent
497053c785
commit
552c7875bf
32 changed files with 1622 additions and 1358 deletions
|
|
@ -1,8 +1,12 @@
|
|||
package session_test
|
||||
|
||||
import (
|
||||
"math"
|
||||
"math/rand"
|
||||
"testing"
|
||||
|
||||
"github.com/google/uuid"
|
||||
"github.com/nspcc-dev/neofs-api-go/v2/refs"
|
||||
v2session "github.com/nspcc-dev/neofs-api-go/v2/session"
|
||||
cidtest "github.com/nspcc-dev/neofs-sdk-go/container/id/test"
|
||||
"github.com/nspcc-dev/neofs-sdk-go/session"
|
||||
|
|
@ -10,103 +14,274 @@ import (
|
|||
"github.com/stretchr/testify/require"
|
||||
)
|
||||
|
||||
func TestContainerContextVerbs(t *testing.T) {
|
||||
c := session.NewContainerContext()
|
||||
func TestContainer_ReadFromV2(t *testing.T) {
|
||||
var x session.Container
|
||||
var m v2session.Token
|
||||
var b v2session.TokenBody
|
||||
var c v2session.ContainerSessionContext
|
||||
id := uuid.New()
|
||||
|
||||
assert := func(setter func(), getter func() bool, verb v2session.ContainerSessionVerb) {
|
||||
setter()
|
||||
t.Run("protocol violation", func(t *testing.T) {
|
||||
require.Error(t, x.ReadFromV2(m))
|
||||
|
||||
require.True(t, getter())
|
||||
m.SetBody(&b)
|
||||
|
||||
require.Equal(t, verb, c.ToV2().Verb())
|
||||
}
|
||||
require.Error(t, x.ReadFromV2(m))
|
||||
|
||||
t.Run("PUT", func(t *testing.T) {
|
||||
assert(c.ForPut, c.IsForPut, v2session.ContainerVerbPut)
|
||||
b.SetID(id[:])
|
||||
|
||||
require.Error(t, x.ReadFromV2(m))
|
||||
|
||||
b.SetContext(&c)
|
||||
|
||||
require.Error(t, x.ReadFromV2(m))
|
||||
|
||||
c.SetWildcard(true)
|
||||
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
})
|
||||
|
||||
t.Run("DELETE", func(t *testing.T) {
|
||||
assert(c.ForDelete, c.IsForDelete, v2session.ContainerVerbDelete)
|
||||
m.SetBody(&b)
|
||||
b.SetContext(&c)
|
||||
b.SetID(id[:])
|
||||
c.SetWildcard(true)
|
||||
|
||||
t.Run("container", func(t *testing.T) {
|
||||
cnr1 := cidtest.ID()
|
||||
cnr2 := cidtest.ID()
|
||||
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
require.True(t, x.AppliedTo(cnr1))
|
||||
require.True(t, x.AppliedTo(cnr2))
|
||||
|
||||
var cnrv2 refs.ContainerID
|
||||
cnr1.WriteToV2(&cnrv2)
|
||||
|
||||
c.SetContainerID(&cnrv2)
|
||||
c.SetWildcard(false)
|
||||
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
require.True(t, x.AppliedTo(cnr1))
|
||||
require.False(t, x.AppliedTo(cnr2))
|
||||
})
|
||||
|
||||
t.Run("SETEACL", func(t *testing.T) {
|
||||
assert(c.ForSetEACL, c.IsForSetEACL, v2session.ContainerVerbSetEACL)
|
||||
t.Run("verb", func(t *testing.T) {
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
require.True(t, x.AssertVerb(0))
|
||||
|
||||
verb := v2session.ContainerSessionVerb(rand.Uint32())
|
||||
|
||||
c.SetVerb(verb)
|
||||
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
require.True(t, x.AssertVerb(session.ContainerVerb(verb)))
|
||||
})
|
||||
|
||||
t.Run("id", func(t *testing.T) {
|
||||
id := uuid.New()
|
||||
bID := id[:]
|
||||
|
||||
b.SetID(bID)
|
||||
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
require.Equal(t, id, x.ID())
|
||||
})
|
||||
|
||||
t.Run("lifetime", func(t *testing.T) {
|
||||
const nbf, iat, exp = 11, 22, 33
|
||||
|
||||
var lt v2session.TokenLifetime
|
||||
lt.SetNbf(nbf)
|
||||
lt.SetIat(iat)
|
||||
lt.SetExp(exp)
|
||||
|
||||
b.SetLifetime(<)
|
||||
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
require.False(t, x.ExpiredAt(exp-1))
|
||||
require.True(t, x.ExpiredAt(exp))
|
||||
require.True(t, x.ExpiredAt(exp+1))
|
||||
require.True(t, x.InvalidAt(nbf-1))
|
||||
require.True(t, x.InvalidAt(iat-1))
|
||||
require.False(t, x.InvalidAt(iat))
|
||||
require.False(t, x.InvalidAt(exp-1))
|
||||
require.True(t, x.InvalidAt(exp))
|
||||
require.True(t, x.InvalidAt(exp+1))
|
||||
})
|
||||
|
||||
t.Run("session key", func(t *testing.T) {
|
||||
key := randPublicKey()
|
||||
|
||||
bKey := make([]byte, key.MaxEncodedSize())
|
||||
bKey = bKey[:key.Encode(bKey)]
|
||||
|
||||
b.SetSessionKey(bKey)
|
||||
|
||||
require.NoError(t, x.ReadFromV2(m))
|
||||
require.True(t, x.AssertAuthKey(key))
|
||||
})
|
||||
}
|
||||
|
||||
func TestContainerContext_ApplyTo(t *testing.T) {
|
||||
c := session.NewContainerContext()
|
||||
id := cidtest.ID()
|
||||
|
||||
t.Run("method", func(t *testing.T) {
|
||||
c.ApplyTo(&id)
|
||||
|
||||
require.Equal(t, id, *c.Container())
|
||||
|
||||
c.ApplyTo(nil)
|
||||
|
||||
require.Nil(t, c.Container())
|
||||
})
|
||||
|
||||
t.Run("helper functions", func(t *testing.T) {
|
||||
c.ApplyTo(&id)
|
||||
|
||||
session.ApplyToAllContainers(c)
|
||||
|
||||
require.Nil(t, c.Container())
|
||||
})
|
||||
}
|
||||
|
||||
func TestContextFilter_ToV2(t *testing.T) {
|
||||
t.Run("nil", func(t *testing.T) {
|
||||
var x *session.ContainerContext
|
||||
|
||||
require.Nil(t, x.ToV2())
|
||||
})
|
||||
|
||||
t.Run("default values", func(t *testing.T) {
|
||||
c := session.NewContainerContext()
|
||||
|
||||
// check initial values
|
||||
require.Nil(t, c.Container())
|
||||
|
||||
for _, op := range []func() bool{
|
||||
c.IsForPut,
|
||||
c.IsForDelete,
|
||||
c.IsForSetEACL,
|
||||
} {
|
||||
require.False(t, op())
|
||||
}
|
||||
|
||||
// convert to v2 message
|
||||
cV2 := c.ToV2()
|
||||
|
||||
require.Equal(t, v2session.ContainerVerbUnknown, cV2.Verb())
|
||||
require.True(t, cV2.Wildcard())
|
||||
require.Nil(t, cV2.ContainerID())
|
||||
})
|
||||
}
|
||||
|
||||
func TestContainerContextEncoding(t *testing.T) {
|
||||
c := sessiontest.ContainerContext()
|
||||
func TestEncodingContainer(t *testing.T) {
|
||||
tok := *sessiontest.ContainerSigned()
|
||||
|
||||
t.Run("binary", func(t *testing.T) {
|
||||
data, err := c.Marshal()
|
||||
require.NoError(t, err)
|
||||
data := tok.Marshal()
|
||||
|
||||
c2 := session.NewContainerContext()
|
||||
require.NoError(t, c2.Unmarshal(data))
|
||||
var tok2 session.Container
|
||||
require.NoError(t, tok2.Unmarshal(data))
|
||||
|
||||
require.Equal(t, c, c2)
|
||||
require.Equal(t, tok, tok2)
|
||||
})
|
||||
|
||||
t.Run("json", func(t *testing.T) {
|
||||
data, err := c.MarshalJSON()
|
||||
data, err := tok.MarshalJSON()
|
||||
require.NoError(t, err)
|
||||
|
||||
c2 := session.NewContainerContext()
|
||||
require.NoError(t, c2.UnmarshalJSON(data))
|
||||
var tok2 session.Container
|
||||
require.NoError(t, tok2.UnmarshalJSON(data))
|
||||
|
||||
require.Equal(t, c, c2)
|
||||
require.Equal(t, tok, tok2)
|
||||
})
|
||||
}
|
||||
|
||||
func TestContainerAppliedTo(t *testing.T) {
|
||||
var x session.Container
|
||||
|
||||
cnr1 := cidtest.ID()
|
||||
cnr2 := cidtest.ID()
|
||||
|
||||
require.True(t, x.AppliedTo(cnr1))
|
||||
require.True(t, x.AppliedTo(cnr2))
|
||||
|
||||
x.ApplyOnlyTo(cnr1)
|
||||
|
||||
require.True(t, x.AppliedTo(cnr1))
|
||||
require.False(t, x.AppliedTo(cnr2))
|
||||
}
|
||||
|
||||
func TestContainerExp(t *testing.T) {
|
||||
var x session.Container
|
||||
|
||||
exp := rand.Uint64()
|
||||
|
||||
require.True(t, x.ExpiredAt(exp))
|
||||
|
||||
x.SetExp(exp)
|
||||
|
||||
require.False(t, x.ExpiredAt(exp-1))
|
||||
require.True(t, x.ExpiredAt(exp))
|
||||
require.True(t, x.ExpiredAt(exp+1))
|
||||
}
|
||||
|
||||
func TestContainerLifetime(t *testing.T) {
|
||||
var x session.Container
|
||||
|
||||
nbf := rand.Uint64()
|
||||
if nbf == math.MaxUint64 {
|
||||
nbf--
|
||||
}
|
||||
|
||||
iat := nbf
|
||||
exp := iat + 1
|
||||
|
||||
x.SetNbf(nbf)
|
||||
x.SetIat(iat)
|
||||
x.SetExp(exp)
|
||||
|
||||
require.True(t, x.InvalidAt(nbf-1))
|
||||
require.True(t, x.InvalidAt(iat-1))
|
||||
require.False(t, x.InvalidAt(iat))
|
||||
require.True(t, x.InvalidAt(exp))
|
||||
}
|
||||
|
||||
func TestContainerID(t *testing.T) {
|
||||
var x session.Container
|
||||
|
||||
require.Zero(t, x.ID())
|
||||
|
||||
id := uuid.New()
|
||||
|
||||
x.SetID(id)
|
||||
|
||||
require.Equal(t, id, x.ID())
|
||||
}
|
||||
|
||||
func TestContainerAuthKey(t *testing.T) {
|
||||
var x session.Container
|
||||
|
||||
key := randPublicKey()
|
||||
|
||||
require.False(t, x.AssertAuthKey(key))
|
||||
|
||||
x.SetAuthKey(key)
|
||||
|
||||
require.True(t, x.AssertAuthKey(key))
|
||||
}
|
||||
|
||||
func TestContainerVerb(t *testing.T) {
|
||||
var x session.Container
|
||||
|
||||
const v1, v2 = session.VerbContainerPut, session.VerbContainerDelete
|
||||
|
||||
require.False(t, x.AssertVerb(v1))
|
||||
require.False(t, x.AssertVerb(v2))
|
||||
|
||||
x.ForVerb(v1)
|
||||
require.True(t, x.AssertVerb(v1))
|
||||
require.False(t, x.AssertVerb(v2))
|
||||
}
|
||||
|
||||
func TestContainerSignature(t *testing.T) {
|
||||
var x session.Container
|
||||
|
||||
const nbf = 11
|
||||
const iat = 22
|
||||
const exp = 33
|
||||
id := uuid.New()
|
||||
key := randPublicKey()
|
||||
cnr := cidtest.ID()
|
||||
verb := session.VerbContainerPut
|
||||
|
||||
signer := randSigner()
|
||||
|
||||
fs := []func(){
|
||||
func() { x.SetNbf(nbf) },
|
||||
func() { x.SetNbf(nbf + 1) },
|
||||
|
||||
func() { x.SetIat(iat) },
|
||||
func() { x.SetIat(iat + 1) },
|
||||
|
||||
func() { x.SetExp(exp) },
|
||||
func() { x.SetExp(exp + 1) },
|
||||
|
||||
func() { x.SetID(id) },
|
||||
func() {
|
||||
idcp := id
|
||||
idcp[0]++
|
||||
x.SetID(idcp)
|
||||
},
|
||||
|
||||
func() { x.SetAuthKey(key) },
|
||||
func() { x.SetAuthKey(randPublicKey()) },
|
||||
|
||||
func() { x.ApplyOnlyTo(cnr) },
|
||||
func() { x.ApplyOnlyTo(cidtest.ID()) },
|
||||
|
||||
func() { x.ForVerb(verb) },
|
||||
func() { x.ForVerb(verb + 1) },
|
||||
}
|
||||
|
||||
for i := 0; i < len(fs); i += 2 {
|
||||
fs[i]()
|
||||
|
||||
require.NoError(t, x.Sign(signer))
|
||||
require.True(t, x.VerifySignature())
|
||||
|
||||
fs[i+1]()
|
||||
require.False(t, x.VerifySignature())
|
||||
|
||||
fs[i]()
|
||||
require.True(t, x.VerifySignature())
|
||||
}
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue