mirror of
				https://github.com/superseriousbusiness/gotosocial.git
				synced 2025-11-03 19:02:26 -06:00 
			
		
		
		
	* cache transports in controller by privkey-generated pubkey, add retry logic to transport requests
Signed-off-by: kim <grufwub@gmail.com>
* update code comments, defer mutex unlocks
Signed-off-by: kim <grufwub@gmail.com>
* add count to 'performing request' log message
Signed-off-by: kim <grufwub@gmail.com>
* reduce repeated conversions of same url.URL object
Signed-off-by: kim <grufwub@gmail.com>
* move worker.Worker to concurrency subpackage, add WorkQueue type, limit transport http client use by WorkQueue
Signed-off-by: kim <grufwub@gmail.com>
* fix security advisories regarding max outgoing conns, max rsp body size
- implemented by a new httpclient.Client{} that wraps an underlying
  client with a queue to limit connections, and limit reader wrapping
  a response body with a configured maximum size
- update pub.HttpClient args passed around to be this new httpclient.Client{}
Signed-off-by: kim <grufwub@gmail.com>
* add httpclient tests, move ip validation to separate package + change mechanism
Signed-off-by: kim <grufwub@gmail.com>
* fix merge conflicts
Signed-off-by: kim <grufwub@gmail.com>
* use singular mutex in transport rather than separate signer mus
Signed-off-by: kim <grufwub@gmail.com>
* improved useragent string
Signed-off-by: kim <grufwub@gmail.com>
* add note regarding missing test
Signed-off-by: kim <grufwub@gmail.com>
* remove useragent field from transport (instead store in controller)
Signed-off-by: kim <grufwub@gmail.com>
* shutup linter
Signed-off-by: kim <grufwub@gmail.com>
* reset other signing headers on each loop iteration
Signed-off-by: kim <grufwub@gmail.com>
* respect request ctx during retry-backoff sleep period
Signed-off-by: kim <grufwub@gmail.com>
* use external pkg with docs explaining performance "hack"
Signed-off-by: kim <grufwub@gmail.com>
* use http package constants instead of string method literals
Signed-off-by: kim <grufwub@gmail.com>
* add license file headers
Signed-off-by: kim <grufwub@gmail.com>
* update code comment to match new func names
Signed-off-by: kim <grufwub@gmail.com>
* updates to user-agent string
Signed-off-by: kim <grufwub@gmail.com>
* update signed testrig models to fit with new transport logic (instead uses separate signer now)
Signed-off-by: kim <grufwub@gmail.com>
* fuck you linter
Signed-off-by: kim <grufwub@gmail.com>
		
	
			
		
			
				
	
	
		
			171 lines
		
	
	
	
		
			7.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			171 lines
		
	
	
	
		
			7.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
/*
 | 
						|
   GoToSocial
 | 
						|
   Copyright (C) 2021-2022 GoToSocial Authors admin@gotosocial.org
 | 
						|
 | 
						|
   This program is free software: you can redistribute it and/or modify
 | 
						|
   it under the terms of the GNU Affero General Public License as published by
 | 
						|
   the Free Software Foundation, either version 3 of the License, or
 | 
						|
   (at your option) any later version.
 | 
						|
 | 
						|
   This program is distributed in the hope that it will be useful,
 | 
						|
   but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						|
   GNU Affero General Public License for more details.
 | 
						|
 | 
						|
   You should have received a copy of the GNU Affero General Public License
 | 
						|
   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 | 
						|
*/
 | 
						|
 | 
						|
package webfinger_test
 | 
						|
 | 
						|
import (
 | 
						|
	"context"
 | 
						|
	"fmt"
 | 
						|
	"io/ioutil"
 | 
						|
	"net/http"
 | 
						|
	"net/http/httptest"
 | 
						|
	"testing"
 | 
						|
 | 
						|
	"github.com/gin-gonic/gin"
 | 
						|
	"github.com/spf13/viper"
 | 
						|
	"github.com/stretchr/testify/assert"
 | 
						|
	"github.com/stretchr/testify/suite"
 | 
						|
	"github.com/superseriousbusiness/gotosocial/internal/api/s2s/webfinger"
 | 
						|
	"github.com/superseriousbusiness/gotosocial/internal/concurrency"
 | 
						|
	"github.com/superseriousbusiness/gotosocial/internal/config"
 | 
						|
	"github.com/superseriousbusiness/gotosocial/internal/messages"
 | 
						|
	"github.com/superseriousbusiness/gotosocial/internal/processing"
 | 
						|
	"github.com/superseriousbusiness/gotosocial/testrig"
 | 
						|
)
 | 
						|
 | 
						|
type WebfingerGetTestSuite struct {
 | 
						|
	WebfingerStandardTestSuite
 | 
						|
}
 | 
						|
 | 
						|
func (suite *WebfingerGetTestSuite) TestFingerUser() {
 | 
						|
	targetAccount := suite.testAccounts["local_account_1"]
 | 
						|
 | 
						|
	// setup request
 | 
						|
	host := viper.GetString(config.Keys.Host)
 | 
						|
	requestPath := fmt.Sprintf("/%s?resource=acct:%s@%s", webfinger.WebfingerBasePath, targetAccount.Username, host)
 | 
						|
 | 
						|
	recorder := httptest.NewRecorder()
 | 
						|
	ctx, _ := gin.CreateTestContext(recorder)
 | 
						|
	ctx.Request = httptest.NewRequest(http.MethodGet, requestPath, nil) // the endpoint we're hitting
 | 
						|
	ctx.Request.Header.Set("accept", "application/json")
 | 
						|
 | 
						|
	// trigger the function being tested
 | 
						|
	suite.webfingerModule.WebfingerGETRequest(ctx)
 | 
						|
 | 
						|
	// check response
 | 
						|
	suite.EqualValues(http.StatusOK, recorder.Code)
 | 
						|
 | 
						|
	result := recorder.Result()
 | 
						|
	defer result.Body.Close()
 | 
						|
	b, err := ioutil.ReadAll(result.Body)
 | 
						|
	assert.NoError(suite.T(), err)
 | 
						|
 | 
						|
	suite.Equal(`{"subject":"acct:the_mighty_zork@localhost:8080","aliases":["http://localhost:8080/users/the_mighty_zork","http://localhost:8080/@the_mighty_zork"],"links":[{"rel":"http://webfinger.net/rel/profile-page","type":"text/html","href":"http://localhost:8080/@the_mighty_zork"},{"rel":"self","type":"application/activity+json","href":"http://localhost:8080/users/the_mighty_zork"}]}`, string(b))
 | 
						|
}
 | 
						|
 | 
						|
func (suite *WebfingerGetTestSuite) TestFingerUserWithDifferentAccountDomainByHost() {
 | 
						|
	viper.Set(config.Keys.Host, "gts.example.org")
 | 
						|
	viper.Set(config.Keys.AccountDomain, "example.org")
 | 
						|
	clientWorker := concurrency.NewWorkerPool[messages.FromClientAPI](-1, -1)
 | 
						|
	fedWorker := concurrency.NewWorkerPool[messages.FromFederator](-1, -1)
 | 
						|
	suite.processor = processing.NewProcessor(suite.tc, suite.federator, testrig.NewTestOauthServer(suite.db), testrig.NewTestMediaManager(suite.db, suite.storage), suite.storage, suite.db, suite.emailSender, clientWorker, fedWorker)
 | 
						|
	suite.webfingerModule = webfinger.New(suite.processor).(*webfinger.Module)
 | 
						|
 | 
						|
	targetAccount := accountDomainAccount()
 | 
						|
	if err := suite.db.Put(context.Background(), targetAccount); err != nil {
 | 
						|
		panic(err)
 | 
						|
	}
 | 
						|
 | 
						|
	// setup request
 | 
						|
	host := viper.GetString(config.Keys.Host)
 | 
						|
	requestPath := fmt.Sprintf("/%s?resource=acct:%s@%s", webfinger.WebfingerBasePath, targetAccount.Username, host)
 | 
						|
 | 
						|
	recorder := httptest.NewRecorder()
 | 
						|
	ctx, _ := gin.CreateTestContext(recorder)
 | 
						|
	ctx.Request = httptest.NewRequest(http.MethodGet, requestPath, nil) // the endpoint we're hitting
 | 
						|
	ctx.Request.Header.Set("accept", "application/json")
 | 
						|
 | 
						|
	// trigger the function being tested
 | 
						|
	suite.webfingerModule.WebfingerGETRequest(ctx)
 | 
						|
 | 
						|
	// check response
 | 
						|
	suite.EqualValues(http.StatusOK, recorder.Code)
 | 
						|
 | 
						|
	result := recorder.Result()
 | 
						|
	defer result.Body.Close()
 | 
						|
	b, err := ioutil.ReadAll(result.Body)
 | 
						|
	assert.NoError(suite.T(), err)
 | 
						|
 | 
						|
	suite.Equal(`{"subject":"acct:aaaaa@example.org","aliases":["http://gts.example.org/users/aaaaa","http://gts.example.org/@aaaaa"],"links":[{"rel":"http://webfinger.net/rel/profile-page","type":"text/html","href":"http://gts.example.org/@aaaaa"},{"rel":"self","type":"application/activity+json","href":"http://gts.example.org/users/aaaaa"}]}`, string(b))
 | 
						|
}
 | 
						|
 | 
						|
func (suite *WebfingerGetTestSuite) TestFingerUserWithDifferentAccountDomainByAccountDomain() {
 | 
						|
	viper.Set(config.Keys.Host, "gts.example.org")
 | 
						|
	viper.Set(config.Keys.AccountDomain, "example.org")
 | 
						|
	clientWorker := concurrency.NewWorkerPool[messages.FromClientAPI](-1, -1)
 | 
						|
	fedWorker := concurrency.NewWorkerPool[messages.FromFederator](-1, -1)
 | 
						|
	suite.processor = processing.NewProcessor(suite.tc, suite.federator, testrig.NewTestOauthServer(suite.db), testrig.NewTestMediaManager(suite.db, suite.storage), suite.storage, suite.db, suite.emailSender, clientWorker, fedWorker)
 | 
						|
	suite.webfingerModule = webfinger.New(suite.processor).(*webfinger.Module)
 | 
						|
 | 
						|
	targetAccount := accountDomainAccount()
 | 
						|
	if err := suite.db.Put(context.Background(), targetAccount); err != nil {
 | 
						|
		panic(err)
 | 
						|
	}
 | 
						|
 | 
						|
	// setup request
 | 
						|
	accountDomain := viper.GetString(config.Keys.AccountDomain)
 | 
						|
	requestPath := fmt.Sprintf("/%s?resource=acct:%s@%s", webfinger.WebfingerBasePath, targetAccount.Username, accountDomain)
 | 
						|
 | 
						|
	recorder := httptest.NewRecorder()
 | 
						|
	ctx, _ := gin.CreateTestContext(recorder)
 | 
						|
	ctx.Request = httptest.NewRequest(http.MethodGet, requestPath, nil) // the endpoint we're hitting
 | 
						|
	ctx.Request.Header.Set("accept", "application/json")
 | 
						|
 | 
						|
	// trigger the function being tested
 | 
						|
	suite.webfingerModule.WebfingerGETRequest(ctx)
 | 
						|
 | 
						|
	// check response
 | 
						|
	suite.EqualValues(http.StatusOK, recorder.Code)
 | 
						|
 | 
						|
	result := recorder.Result()
 | 
						|
	defer result.Body.Close()
 | 
						|
	b, err := ioutil.ReadAll(result.Body)
 | 
						|
	assert.NoError(suite.T(), err)
 | 
						|
 | 
						|
	suite.Equal(`{"subject":"acct:aaaaa@example.org","aliases":["http://gts.example.org/users/aaaaa","http://gts.example.org/@aaaaa"],"links":[{"rel":"http://webfinger.net/rel/profile-page","type":"text/html","href":"http://gts.example.org/@aaaaa"},{"rel":"self","type":"application/activity+json","href":"http://gts.example.org/users/aaaaa"}]}`, string(b))
 | 
						|
}
 | 
						|
 | 
						|
func (suite *WebfingerGetTestSuite) TestFingerUserWithoutAcct() {
 | 
						|
	targetAccount := suite.testAccounts["local_account_1"]
 | 
						|
 | 
						|
	// setup request -- leave out the 'acct:' prefix, which is prettymuch what pixelfed currently does
 | 
						|
	host := viper.GetString(config.Keys.Host)
 | 
						|
	requestPath := fmt.Sprintf("/%s?resource=%s@%s", webfinger.WebfingerBasePath, targetAccount.Username, host)
 | 
						|
 | 
						|
	recorder := httptest.NewRecorder()
 | 
						|
	ctx, _ := gin.CreateTestContext(recorder)
 | 
						|
	ctx.Request = httptest.NewRequest(http.MethodGet, requestPath, nil) // the endpoint we're hitting
 | 
						|
	ctx.Request.Header.Set("accept", "application/json")
 | 
						|
 | 
						|
	// trigger the function being tested
 | 
						|
	suite.webfingerModule.WebfingerGETRequest(ctx)
 | 
						|
 | 
						|
	// check response
 | 
						|
	suite.EqualValues(http.StatusOK, recorder.Code)
 | 
						|
 | 
						|
	result := recorder.Result()
 | 
						|
	defer result.Body.Close()
 | 
						|
	b, err := ioutil.ReadAll(result.Body)
 | 
						|
	assert.NoError(suite.T(), err)
 | 
						|
 | 
						|
	suite.Equal(`{"subject":"acct:the_mighty_zork@localhost:8080","aliases":["http://localhost:8080/users/the_mighty_zork","http://localhost:8080/@the_mighty_zork"],"links":[{"rel":"http://webfinger.net/rel/profile-page","type":"text/html","href":"http://localhost:8080/@the_mighty_zork"},{"rel":"self","type":"application/activity+json","href":"http://localhost:8080/users/the_mighty_zork"}]}`, string(b))
 | 
						|
}
 | 
						|
 | 
						|
func TestWebfingerGetTestSuite(t *testing.T) {
 | 
						|
	suite.Run(t, new(WebfingerGetTestSuite))
 | 
						|
}
 |