gotosocial/internal/db/bundb/domain_test.go

// GoToSocial
// Copyright (C) GoToSocial Authors admin@gotosocial.org
// SPDX-License-Identifier: AGPL-3.0-or-later
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with this program.  If not, see <http://www.gnu.org/licenses/>.

package bundb_test

import (
	"slices"
	"testing"
	"time"

	"code.superseriousbusiness.org/gotosocial/internal/gtsmodel"
	"github.com/stretchr/testify/suite"
)

type DomainTestSuite struct {
	BunDBStandardTestSuite
}

func (suite *DomainTestSuite) TestIsDomainBlocked() {
	ctx := suite.T().Context()

	domainBlock := &gtsmodel.DomainBlock{
		ID:                 "01G204214Y9TNJEBX39C7G88SW",
		Domain:             "some.bad.apples",
		CreatedByAccountID: suite.testAccounts["admin_account"].ID,
		CreatedByAccount:   suite.testAccounts["admin_account"],
	}

	// no domain block exists for the given domain yet
	blocked, err := suite.db.IsDomainBlocked(ctx, domainBlock.Domain)
	suite.NoError(err)
	suite.False(blocked)

	err = suite.db.PutDomainBlock(ctx, domainBlock)
	suite.NoError(err)

	// domain block now exists
	blocked, err = suite.db.IsDomainBlocked(ctx, domainBlock.Domain)
	suite.NoError(err)
	suite.True(blocked)
	suite.WithinDuration(time.Now(), domainBlock.CreatedAt, 10*time.Second)
}

func (suite *DomainTestSuite) TestIsDomainBlockedWithAllow() {
	ctx := suite.T().Context()

	domainBlock := &gtsmodel.DomainBlock{
		ID:                 "01G204214Y9TNJEBX39C7G88SW",
		Domain:             "some.bad.apples",
		CreatedByAccountID: suite.testAccounts["admin_account"].ID,
		CreatedByAccount:   suite.testAccounts["admin_account"],
	}

	// no domain block exists for the given domain yet
	blocked, err := suite.db.IsDomainBlocked(ctx, domainBlock.Domain)
	if err != nil {
		suite.FailNow(err.Error())
	}

	suite.False(blocked)

	// Block this domain.
	if err := suite.db.PutDomainBlock(ctx, domainBlock); err != nil {
		suite.FailNow(err.Error())
	}

	// domain block now exists
	blocked, err = suite.db.IsDomainBlocked(ctx, domainBlock.Domain)
	if err != nil {
		suite.FailNow(err.Error())
	}

	suite.True(blocked)
	suite.WithinDuration(time.Now(), domainBlock.CreatedAt, 10*time.Second)

	// Explicitly allow this domain.
	domainAllow := &gtsmodel.DomainAllow{
		ID:                 "01H8KY9MJQFWE712EG3VN02Y3J",
		Domain:             "some.bad.apples",
		CreatedByAccountID: suite.testAccounts["admin_account"].ID,
		CreatedByAccount:   suite.testAccounts["admin_account"],
	}

	if err := suite.db.PutDomainAllow(ctx, domainAllow); err != nil {
		suite.FailNow(err.Error())
	}

	// Domain allow now exists
	blocked, err = suite.db.IsDomainBlocked(ctx, domainBlock.Domain)
	if err != nil {
		suite.FailNow(err.Error())
	}

	suite.False(blocked)
}

func (suite *DomainTestSuite) TestIsDomainBlockedWildcard() {
	ctx := suite.T().Context()

	domainBlock := &gtsmodel.DomainBlock{
		ID:                 "01G204214Y9TNJEBX39C7G88SW",
		Domain:             "bad.apples",
		CreatedByAccountID: suite.testAccounts["admin_account"].ID,
		CreatedByAccount:   suite.testAccounts["admin_account"],
	}

	// no domain block exists for the given domain yet
	blocked, err := suite.db.IsDomainBlocked(ctx, domainBlock.Domain)
	suite.NoError(err)
	suite.False(blocked)

	err = suite.db.PutDomainBlock(ctx, domainBlock)
	suite.NoError(err)

	// Start with the base block domain
	domain := domainBlock.Domain

	for _, part := range []string{"extra", "domain", "parts"} {
		// Prepend the next domain part
		domain = part + "." + domain

		// Check that domain block is wildcarded for this subdomain
		blocked, err = suite.db.IsDomainBlocked(ctx, domainBlock.Domain)
		suite.NoError(err)
		suite.True(blocked)
	}
}

func (suite *DomainTestSuite) TestIsDomainBlockedNonASCII() {
	ctx := suite.T().Context()

	now := time.Now()

	domainBlock := &gtsmodel.DomainBlock{
		ID:                 "01G204214Y9TNJEBX39C7G88SW",
		Domain:             "xn--80aaa1bbb1h.com",
		CreatedAt:          now,
		UpdatedAt:          now,
		CreatedByAccountID: suite.testAccounts["admin_account"].ID,
		CreatedByAccount:   suite.testAccounts["admin_account"],
	}

	// no domain block exists for the given domain yet
	blocked, err := suite.db.IsDomainBlocked(ctx, "какашка.com")
	suite.NoError(err)
	suite.False(blocked)

	blocked, err = suite.db.IsDomainBlocked(ctx, "xn--80aaa1bbb1h.com")
	suite.NoError(err)
	suite.False(blocked)

	err = suite.db.PutDomainBlock(ctx, domainBlock)
	suite.NoError(err)

	// domain block now exists
	blocked, err = suite.db.IsDomainBlocked(ctx, "какашка.com")
	suite.NoError(err)
	suite.True(blocked)

	blocked, err = suite.db.IsDomainBlocked(ctx, "xn--80aaa1bbb1h.com")
	suite.NoError(err)
	suite.True(blocked)
}

func (suite *DomainTestSuite) TestIsDomainBlockedNonASCII2() {
	ctx := suite.T().Context()

	now := time.Now()

	domainBlock := &gtsmodel.DomainBlock{
		ID:                 "01G204214Y9TNJEBX39C7G88SW",
		Domain:             "какашка.com",
		CreatedAt:          now,
		UpdatedAt:          now,
		CreatedByAccountID: suite.testAccounts["admin_account"].ID,
		CreatedByAccount:   suite.testAccounts["admin_account"],
	}

	// no domain block exists for the given domain yet
	blocked, err := suite.db.IsDomainBlocked(ctx, "какашка.com")
	suite.NoError(err)
	suite.False(blocked)

	blocked, err = suite.db.IsDomainBlocked(ctx, "xn--80aaa1bbb1h.com")
	suite.NoError(err)
	suite.False(blocked)

	err = suite.db.PutDomainBlock(ctx, domainBlock)
	suite.NoError(err)

	// domain block now exists
	blocked, err = suite.db.IsDomainBlocked(ctx, "какашка.com")
	suite.NoError(err)
	suite.True(blocked)

	blocked, err = suite.db.IsDomainBlocked(ctx, "xn--80aaa1bbb1h.com")
	suite.NoError(err)
	suite.True(blocked)
}

func (suite *DomainTestSuite) TestIsOtherDomainBlockedWildcardAndExplicit() {
	ctx := suite.T().Context()

	blocks := []*gtsmodel.DomainBlock{
		{
			ID:                 "01G204214Y9TNJEBX39C7G88SW",
			Domain:             "bad.apples",
			CreatedByAccountID: suite.testAccounts["admin_account"].ID,
			CreatedByAccount:   suite.testAccounts["admin_account"],
		},
		{
			ID:                 "01HKPSVQ864FQ2JJ01CDGPHHMJ",
			Domain:             "some.bad.apples",
			CreatedByAccountID: suite.testAccounts["admin_account"].ID,
			CreatedByAccount:   suite.testAccounts["admin_account"],
		},
	}

	for _, block := range blocks {
		if err := suite.db.PutDomainBlock(ctx, block); err != nil {
			suite.FailNow(err.Error())
		}
	}

	// Ensure each block created
	// above is now present in the db.
	dbBlocks, err := suite.db.GetDomainBlocks(ctx)
	if err != nil {
		suite.FailNow(err.Error())
	}

	for _, block := range blocks {
		if !slices.ContainsFunc(
			dbBlocks,
			func(dbBlock *gtsmodel.DomainBlock) bool {
				return block.Domain == dbBlock.Domain
			},
		) {
			suite.FailNow("", "stored blocks did not contain %s", block.Domain)
		}
	}

	// All domains and subdomains
	// should now be blocked, even
	// ones without an explicit block.
	for _, domain := range []string{
		"bad.apples",
		"some.bad.apples",
		"other.bad.apples",
	} {
		blocked, err := suite.db.IsDomainBlocked(ctx, domain)
		if err != nil {
			suite.FailNow(err.Error())
		}

		if !blocked {
			suite.Fail("", "domain %s should be blocked", domain)
		}
	}
}

func TestDomainTestSuite(t *testing.T) {
	suite.Run(t, new(DomainTestSuite))
}