7373b0b6f7
- Introduced ExpandHosts function to parse and expand comma-separated host entries, including special values like "internal" and "localhost". - Updated gRPC server to utilize the new ExpandHosts function for improved host management. - Added HostHasInternal function to check for "internal" in host strings, enhancing configuration flexibility. - Implemented new gRPC endpoints for TaiTunnel registration and forwarding, improving tunnel communication capabilities. - Refactored authentication logic to include new TaiTunnel endpoints, ensuring proper access control. Made-with: Cursor
123 lines
3.1 KiB
Go
123 lines
3.1 KiB
Go
package tunnel
|
|
|
|
import (
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/yaoapp/yao/tai/tunnel/taipb"
|
|
"github.com/yaoapp/yao/tai/types"
|
|
)
|
|
|
|
func TestExtractBearer(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
header string
|
|
want string
|
|
}{
|
|
{"valid", "Bearer abc123", "abc123"},
|
|
{"lowercase", "bearer xyz", "xyz"},
|
|
{"empty", "", ""},
|
|
{"no_scheme", "abc123", ""},
|
|
{"only_bearer", "Bearer ", ""},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
r := &http.Request{Header: http.Header{}}
|
|
if tt.header != "" {
|
|
r.Header.Set("Authorization", tt.header)
|
|
}
|
|
got := extractBearer(r)
|
|
if got != tt.want {
|
|
t.Errorf("extractBearer(%q) = %q, want %q", tt.header, got, tt.want)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestPortsFromMap(t *testing.T) {
|
|
m := map[string]int{"grpc": 19100, "http": 8099, "vnc": 16080, "docker": 12375, "k8s": 16443}
|
|
p := portsFromMap(m)
|
|
if p.GRPC != 19100 || p.HTTP != 8099 || p.VNC != 16080 || p.Docker != 12375 || p.K8s != 16443 {
|
|
t.Errorf("portsFromMap got %+v", p)
|
|
}
|
|
}
|
|
|
|
func TestPortsFromMap_Empty(t *testing.T) {
|
|
p := portsFromMap(nil)
|
|
if p.GRPC != 0 || p.HTTP != 0 {
|
|
t.Errorf("portsFromMap(nil) got %+v", p)
|
|
}
|
|
}
|
|
|
|
func TestCapsFromMap(t *testing.T) {
|
|
m := map[string]bool{"docker": true, "k8s": false, "host_exec": true}
|
|
c := capsFromMap(m)
|
|
if !c.Docker || c.K8s || !c.HostExec {
|
|
t.Errorf("capsFromMap got %+v", c)
|
|
}
|
|
}
|
|
|
|
func TestCapsFromMap_Empty(t *testing.T) {
|
|
c := capsFromMap(nil)
|
|
if c.Docker || c.K8s || c.HostExec {
|
|
t.Errorf("capsFromMap(nil) got %+v", c)
|
|
}
|
|
}
|
|
|
|
func TestPortsFromProto(t *testing.T) {
|
|
pp := &taipb.Ports{Grpc: 19100, Http: 8099, Vnc: 16080, Docker: 12375, K8S: 16443}
|
|
p := portsFromProto(pp)
|
|
if p.GRPC != 19100 || p.HTTP != 8099 || p.VNC != 16080 || p.Docker != 12375 || p.K8s != 16443 {
|
|
t.Errorf("portsFromProto got %+v", p)
|
|
}
|
|
}
|
|
|
|
func TestPortsFromProto_Nil(t *testing.T) {
|
|
p := portsFromProto(nil)
|
|
if p != (types.Ports{}) {
|
|
t.Errorf("portsFromProto(nil) = %+v", p)
|
|
}
|
|
}
|
|
|
|
func TestCapsFromProto(t *testing.T) {
|
|
cp := &taipb.Capabilities{Docker: true, K8S: false, HostExec: true}
|
|
c := capsFromProto(cp)
|
|
if !c.Docker || c.K8s || !c.HostExec {
|
|
t.Errorf("capsFromProto got %+v", c)
|
|
}
|
|
}
|
|
|
|
func TestCapsFromProto_Nil(t *testing.T) {
|
|
c := capsFromProto(nil)
|
|
if c != (types.Capabilities{}) {
|
|
t.Errorf("capsFromProto(nil) = %+v", c)
|
|
}
|
|
}
|
|
|
|
func TestSystemFromProto(t *testing.T) {
|
|
sp := &taipb.SystemInfo{Os: "linux", Arch: "amd64", Hostname: "host1", Shell: "bash"}
|
|
s := systemFromProto(sp)
|
|
if s.OS != "linux" || s.Arch != "amd64" || s.Hostname != "host1" || s.Shell != "bash" {
|
|
t.Errorf("systemFromProto got %+v", s)
|
|
}
|
|
}
|
|
|
|
func TestSystemFromProto_Nil(t *testing.T) {
|
|
s := systemFromProto(nil)
|
|
if s != (types.SystemInfo{}) {
|
|
t.Errorf("systemFromProto(nil) = %+v", s)
|
|
}
|
|
}
|
|
|
|
func TestAuthenticateBearerDefault_NoOAuth(t *testing.T) {
|
|
_, err := authenticateBearerDefault("some-token")
|
|
if err == nil {
|
|
t.Fatal("expected error when oauth service is nil")
|
|
}
|
|
}
|
|
|
|
func TestAuthenticateBearerFunc_IsDefault(t *testing.T) {
|
|
if authenticateBearerFunc == nil {
|
|
t.Fatal("authenticateBearerFunc should be set")
|
|
}
|
|
}
|