mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2026-05-10 14:28:12 +00:00
Stavros
4f7335ed73
* feat: add new logger * refactor: use one struct for context handling and cancellation * refactor: rework logging and config in controllers * refactor: rework logging and config in middlewares * refactor: rework logging and cancellation in services * refactor: rework cli logging * fix: improve logging in routines * feat: use sync groups for better cancellation * refactor: simplify middleware, controller and service init * tests: fix controller tests * tests: use require instead of assert where previous step is required * tests: fix middleware tests * tests: fix service tests * tests: fix context tests * fix: fix typos * feat: add option to enable or disable concurrent listeners * fix: assign public key correctly in oidc server * tests: fix don't try to test logger with char size * fix: coderabbit comments * tests: use filepath join instead of path join * fix: ensure unix socket shutdown doesn't run twice * chore: remove temp lint file
79 lines
2.3 KiB
Go
79 lines
2.3 KiB
Go
package controller_test
|
|
|
|
import (
|
|
"net/http/httptest"
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
"github.com/tinyauthapp/tinyauth/internal/controller"
|
|
"github.com/tinyauthapp/tinyauth/internal/test"
|
|
)
|
|
|
|
func TestResourcesController(t *testing.T) {
|
|
cfg, _ := test.CreateTestConfigs(t)
|
|
|
|
err := os.MkdirAll(cfg.Resources.Path, 0777)
|
|
require.NoError(t, err)
|
|
|
|
type testCase struct {
|
|
description string
|
|
run func(t *testing.T, router *gin.Engine, recorder *httptest.ResponseRecorder)
|
|
}
|
|
|
|
tests := []testCase{
|
|
{
|
|
description: "Ensure resources endpoint returns 200 OK for existing file",
|
|
run: func(t *testing.T, router *gin.Engine, recorder *httptest.ResponseRecorder) {
|
|
req := httptest.NewRequest("GET", "/resources/testfile.txt", nil)
|
|
router.ServeHTTP(recorder, req)
|
|
|
|
assert.Equal(t, 200, recorder.Code)
|
|
assert.Equal(t, "This is a test file.", recorder.Body.String())
|
|
},
|
|
},
|
|
{
|
|
description: "Ensure resources endpoint returns 404 Not Found for non-existing file",
|
|
run: func(t *testing.T, router *gin.Engine, recorder *httptest.ResponseRecorder) {
|
|
req := httptest.NewRequest("GET", "/resources/nonexistent.txt", nil)
|
|
router.ServeHTTP(recorder, req)
|
|
|
|
assert.Equal(t, 404, recorder.Code)
|
|
},
|
|
},
|
|
{
|
|
description: "Ensure resources controller denies path traversal",
|
|
run: func(t *testing.T, router *gin.Engine, recorder *httptest.ResponseRecorder) {
|
|
req := httptest.NewRequest("GET", "/resources/../somefile.txt", nil)
|
|
router.ServeHTTP(recorder, req)
|
|
|
|
assert.Equal(t, 404, recorder.Code)
|
|
},
|
|
},
|
|
}
|
|
|
|
testFilePath := cfg.Resources.Path + "/testfile.txt"
|
|
err = os.WriteFile(testFilePath, []byte("This is a test file."), 0777)
|
|
require.NoError(t, err)
|
|
|
|
testFilePathParent := filepath.Dir(cfg.Resources.Path) + "/somefile.txt"
|
|
err = os.WriteFile(testFilePathParent, []byte("This file should not be accessible."), 0777)
|
|
require.NoError(t, err)
|
|
|
|
for _, test := range tests {
|
|
t.Run(test.description, func(t *testing.T) {
|
|
router := gin.Default()
|
|
group := router.Group("/")
|
|
gin.SetMode(gin.TestMode)
|
|
|
|
controller.NewResourcesController(cfg, group)
|
|
|
|
recorder := httptest.NewRecorder()
|
|
test.run(t, router, recorder)
|
|
})
|
|
}
|
|
}
|