姚章浩
78 lines
2.3 KiB
Go
78 lines
2.3 KiB
Go
package outboundimage
|
|
|
|
import (
|
|
"context"
|
|
"io"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
)
|
|
|
|
func TestWeKnoraFetcherDownloadsAuthenticatedResourceImage(t *testing.T) {
|
|
var called bool
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
|
|
called = true
|
|
if req.URL.Path != "/files" {
|
|
t.Fatalf("path=%q", req.URL.Path)
|
|
}
|
|
if got := req.URL.Query().Get("file_path"); got != "resource://AbCdEfGhIjKlMnOpQrStUv" {
|
|
t.Fatalf("file_path=%q", got)
|
|
}
|
|
if got := req.Header.Get("X-API-Key"); got != "secret-test-key" {
|
|
t.Fatalf("api key header=%q", got)
|
|
}
|
|
w.Header().Set("Content-Type", "image/jpeg")
|
|
w.Header().Set("Content-Length", "4")
|
|
_, _ = io.WriteString(w, "JPEG")
|
|
}))
|
|
defer server.Close()
|
|
|
|
fetcher, err := NewWeKnoraFetcher(server.URL+"/api/v1", "secret-test-key", server.Client(), 10<<20)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
data, contentType, err := fetcher.Fetch(context.Background(), "resource://AbCdEfGhIjKlMnOpQrStUv")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if !called || string(data) != "JPEG" || contentType != "image/jpeg" {
|
|
t.Fatalf("called=%t data=%q type=%q", called, data, contentType)
|
|
}
|
|
}
|
|
|
|
func TestWeKnoraFetcherRejectsUnsafeReferenceNonImageAndOversize(t *testing.T) {
|
|
t.Run("unsafe reference", func(t *testing.T) {
|
|
fetcher, err := NewWeKnoraFetcher("https://weknora.example", "key", http.DefaultClient, 4)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, _, err := fetcher.Fetch(context.Background(), "https://evil.example/a.png"); err == nil {
|
|
t.Fatal("expected unsafe reference rejection")
|
|
}
|
|
})
|
|
|
|
for _, tc := range []struct {
|
|
name string
|
|
contentType string
|
|
body string
|
|
}{
|
|
{name: "non image", contentType: "text/plain", body: "TEXT"},
|
|
{name: "oversize", contentType: "image/png", body: "12345"},
|
|
} {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
|
|
w.Header().Set("Content-Type", tc.contentType)
|
|
_, _ = io.WriteString(w, tc.body)
|
|
}))
|
|
defer server.Close()
|
|
fetcher, err := NewWeKnoraFetcher(server.URL, "key", server.Client(), 4)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, _, err := fetcher.Fetch(context.Background(), "resource://AbCdEfGhIjKlMnOpQrStUv"); err == nil {
|
|
t.Fatal("expected response rejection")
|
|
}
|
|
})
|
|
}
|
|
}
|