mirror of
https://github.com/hanzoai/base.git
synced 2026-10-21 03:41:50 +00:00
zeekay
3fe483ac1b
Remove all _hz_ prefixes from collection IDs, internal markers, and test fixtures. The default users collection is now _users_auth_ instead of _hz_users_auth_. Internal SQL parser tokens renamed from __hz_join__/__hz_discard__ to __join__/__discard__. Backup prefix changed from @auto_hz_backup_ to @auto_backup_. Test database updated with correct collection IDs and indexes. JWT tokens in test files regenerated with new collection IDs. Add LogoURL field to MetaConfig so the admin UI logo is configurable via app settings instead of hardcoded. FullPage.svelte and App.svelte sidebar now read logo and app name from the settings store, falling back to defaults when not configured.
569 lines
19 KiB
Go
569 lines
19 KiB
Go
package apis_test
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"os"
|
|
"path"
|
|
"path/filepath"
|
|
"runtime"
|
|
"sync"
|
|
"testing"
|
|
|
|
"github.com/hanzoai/base/apis"
|
|
"github.com/hanzoai/base/core"
|
|
"github.com/hanzoai/base/tests"
|
|
"github.com/hanzoai/base/tools/types"
|
|
)
|
|
|
|
func TestFileToken(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
scenarios := []tests.ApiScenario{
|
|
{
|
|
Name: "unauthorized",
|
|
Method: http.MethodPost,
|
|
URL: "/api/files/token",
|
|
ExpectedStatus: 401,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "regular user",
|
|
Method: http.MethodPost,
|
|
URL: "/api/files/token",
|
|
Headers: map[string]string{
|
|
"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.AuFTIzCsdLEy-5adFzpjZzbqAdTP6Iu9B1wPBAxLBgo",
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{
|
|
`"token":"`,
|
|
},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileTokenRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "superuser",
|
|
Method: http.MethodPost,
|
|
URL: "/api/files/token",
|
|
Headers: map[string]string{
|
|
"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJoYmNfMzE0MjYzNTgyMyIsImV4cCI6MjUyNDYwNDQ2MSwiaWQiOiJzeXdiaGVjbmg0NnJobTAiLCJyZWZyZXNoYWJsZSI6dHJ1ZSwidHlwZSI6ImF1dGgifQ.CXBf8BazmUeg2RnJW8OEs1UFYF41rbCMOa6YZa4wZio",
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{
|
|
`"token":"`,
|
|
},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileTokenRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "hook token overwrite",
|
|
Method: http.MethodPost,
|
|
URL: "/api/files/token",
|
|
Headers: map[string]string{
|
|
"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJoYmNfMzE0MjYzNTgyMyIsImV4cCI6MjUyNDYwNDQ2MSwiaWQiOiJzeXdiaGVjbmg0NnJobTAiLCJyZWZyZXNoYWJsZSI6dHJ1ZSwidHlwZSI6ImF1dGgifQ.CXBf8BazmUeg2RnJW8OEs1UFYF41rbCMOa6YZa4wZio",
|
|
},
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileTokenRequest().BindFunc(func(e *core.FileTokenRequestEvent) error {
|
|
e.Token = "test"
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{
|
|
`"token":"test"`,
|
|
},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileTokenRequest": 1,
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, scenario := range scenarios {
|
|
scenario.Test(t)
|
|
}
|
|
}
|
|
|
|
func TestFileDownload(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
_, currentFile, _, _ := runtime.Caller(0)
|
|
dataDirRelPath := "../tests/data/"
|
|
|
|
testFilePath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/oap640cot4yru2s/test_kfd2wYLxkz.txt")
|
|
testImgPath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png")
|
|
testThumbCropCenterPath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/4q1xlclmfloku33/thumbs_300_1SEi6Q6U72.png/70x50_300_1SEi6Q6U72.png")
|
|
testThumbCropTopPath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/4q1xlclmfloku33/thumbs_300_1SEi6Q6U72.png/70x50t_300_1SEi6Q6U72.png")
|
|
testThumbCropBottomPath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/4q1xlclmfloku33/thumbs_300_1SEi6Q6U72.png/70x50b_300_1SEi6Q6U72.png")
|
|
testThumbFitPath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/4q1xlclmfloku33/thumbs_300_1SEi6Q6U72.png/70x50f_300_1SEi6Q6U72.png")
|
|
testThumbZeroWidthPath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/4q1xlclmfloku33/thumbs_300_1SEi6Q6U72.png/0x50_300_1SEi6Q6U72.png")
|
|
testThumbZeroHeightPath := filepath.Join(path.Dir(currentFile), dataDirRelPath, "storage/_users_auth_/4q1xlclmfloku33/thumbs_300_1SEi6Q6U72.png/70x0_300_1SEi6Q6U72.png")
|
|
|
|
testFile, fileErr := os.ReadFile(testFilePath)
|
|
if fileErr != nil {
|
|
t.Fatal(fileErr)
|
|
}
|
|
|
|
testImg, imgErr := os.ReadFile(testImgPath)
|
|
if imgErr != nil {
|
|
t.Fatal(imgErr)
|
|
}
|
|
|
|
testThumbCropCenter, thumbErr := os.ReadFile(testThumbCropCenterPath)
|
|
if thumbErr != nil {
|
|
t.Fatal(thumbErr)
|
|
}
|
|
|
|
testThumbCropTop, thumbErr := os.ReadFile(testThumbCropTopPath)
|
|
if thumbErr != nil {
|
|
t.Fatal(thumbErr)
|
|
}
|
|
|
|
testThumbCropBottom, thumbErr := os.ReadFile(testThumbCropBottomPath)
|
|
if thumbErr != nil {
|
|
t.Fatal(thumbErr)
|
|
}
|
|
|
|
testThumbFit, thumbErr := os.ReadFile(testThumbFitPath)
|
|
if thumbErr != nil {
|
|
t.Fatal(thumbErr)
|
|
}
|
|
|
|
testThumbZeroWidth, thumbErr := os.ReadFile(testThumbZeroWidthPath)
|
|
if thumbErr != nil {
|
|
t.Fatal(thumbErr)
|
|
}
|
|
|
|
testThumbZeroHeight, thumbErr := os.ReadFile(testThumbZeroHeightPath)
|
|
if thumbErr != nil {
|
|
t.Fatal(thumbErr)
|
|
}
|
|
|
|
scenarios := []tests.ApiScenario{
|
|
{
|
|
Name: "missing collection",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/missing/4q1xlclmfloku33/300_1SEi6Q6U72.png",
|
|
ExpectedStatus: 404,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "missing record",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/missing/300_1SEi6Q6U72.png",
|
|
ExpectedStatus: 404,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "missing file",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/missing.png",
|
|
ExpectedStatus: 404,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "existing image",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png",
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testImg)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing image - missing thumb (should fallback to the original)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png?thumb=999x999",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError == nil {
|
|
t.Fatal("Expected thumb error, got nil")
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testImg)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing image - existing thumb (crop center)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png?thumb=70x50",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError != nil {
|
|
t.Fatalf("Expected no thumb error, got %v", e.ThumbError)
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testThumbCropCenter)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing image - existing thumb (crop top)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png?thumb=70x50t",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError != nil {
|
|
t.Fatalf("Expected no thumb error, got %v", e.ThumbError)
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testThumbCropTop)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing image - existing thumb (crop bottom)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png?thumb=70x50b",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError != nil {
|
|
t.Fatalf("Expected no thumb error, got %v", e.ThumbError)
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testThumbCropBottom)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing image - existing thumb (fit)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png?thumb=70x50f",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError != nil {
|
|
t.Fatalf("Expected no thumb error, got %v", e.ThumbError)
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testThumbFit)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing image - existing thumb (zero width)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png?thumb=0x50",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError != nil {
|
|
t.Fatalf("Expected no thumb error, got %v", e.ThumbError)
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testThumbZeroWidth)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing image - existing thumb (zero height)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png?thumb=70x0",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError != nil {
|
|
t.Fatalf("Expected no thumb error, got %v", e.ThumbError)
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testThumbZeroHeight)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "existing non image file - thumb parameter should be ignored",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/oap640cot4yru2s/test_kfd2wYLxkz.txt?thumb=100x100",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.OnFileDownloadRequest().BindFunc(func(e *core.FileDownloadRequestEvent) error {
|
|
if e.ThumbError == nil {
|
|
t.Fatal("Expected thumb error, got nil")
|
|
}
|
|
return e.Next()
|
|
})
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{string(testFile)},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
|
|
// protected file access checks
|
|
{
|
|
Name: "protected file - superuser with expired file token",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJoYmNfMzE0MjYzNTgyMyIsImV4cCI6MTc2ODgxMzAwNCwiaWQiOiJzeXdiaGVjbmg0NnJobTAiLCJ0eXBlIjoiZmlsZSJ9.WHf_Yt9X9L-hdXzpY3ZOQa89JQ9rrKb56ni9AAQt0AY",
|
|
ExpectedStatus: 404,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "protected file - superuser with valid file token",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJoYmNfMzE0MjYzNTgyMyIsImV4cCI6NDkyMjQxNjYwNCwiaWQiOiJzeXdiaGVjbmg0NnJobTAiLCJ0eXBlIjoiZmlsZSJ9.OuICrgrFGLFWo3zuC0-_Lm3VO3N8U03mOYoDZB7vQp8",
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{"PNG"},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "protected file - guest without view access",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png",
|
|
ExpectedStatus: 404,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "protected file - guest with view access",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
// mock public view access
|
|
c, err := app.FindCachedCollectionByNameOrId("demo1")
|
|
if err != nil {
|
|
t.Fatalf("Failed to fetch mock collection: %v", err)
|
|
}
|
|
c.ViewRule = types.Pointer("")
|
|
if err := app.UnsafeWithoutHooks().Save(c); err != nil {
|
|
t.Fatalf("Failed to update mock collection: %v", err)
|
|
}
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{"PNG"},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "protected file - auth record without view access",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjQ5MjI0MTcyMTAsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwidHlwZSI6ImZpbGUifQ.eE47sRcF1Vm4DQ7bpRFntr3Xr2wjPVlwJtdgssP9Rxw",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
// mock restricted user view access
|
|
c, err := app.FindCachedCollectionByNameOrId("demo1")
|
|
if err != nil {
|
|
t.Fatalf("Failed to fetch mock collection: %v", err)
|
|
}
|
|
c.ViewRule = types.Pointer("@request.auth.verified = true")
|
|
if err := app.UnsafeWithoutHooks().Save(c); err != nil {
|
|
t.Fatalf("Failed to update mock collection: %v", err)
|
|
}
|
|
},
|
|
ExpectedStatus: 404,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "protected file - auth record with view access",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjQ5MjI0MTcyMTAsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwidHlwZSI6ImZpbGUifQ.eE47sRcF1Vm4DQ7bpRFntr3Xr2wjPVlwJtdgssP9Rxw",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
// mock user view access
|
|
c, err := app.FindCachedCollectionByNameOrId("demo1")
|
|
if err != nil {
|
|
t.Fatalf("Failed to fetch mock collection: %v", err)
|
|
}
|
|
c.ViewRule = types.Pointer("@request.auth.verified = false")
|
|
if err := app.UnsafeWithoutHooks().Save(c); err != nil {
|
|
t.Fatalf("Failed to update mock collection: %v", err)
|
|
}
|
|
},
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{"PNG"},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
{
|
|
Name: "protected file in view (view's View API rule failure)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/view1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjQ5MjI0MTcyMTAsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwidHlwZSI6ImZpbGUifQ.eE47sRcF1Vm4DQ7bpRFntr3Xr2wjPVlwJtdgssP9Rxw",
|
|
ExpectedStatus: 404,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "protected file in view (view's View API rule success)",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/view1/84nmscqy84lsi1t/test_d61b33QdDU.txt?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjQ5MjI0MTcyMTAsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwidHlwZSI6ImZpbGUifQ.eE47sRcF1Vm4DQ7bpRFntr3Xr2wjPVlwJtdgssP9Rxw",
|
|
ExpectedStatus: 200,
|
|
ExpectedContent: []string{"test"},
|
|
ExpectedEvents: map[string]int{
|
|
"*": 0,
|
|
"OnFileDownloadRequest": 1,
|
|
},
|
|
},
|
|
|
|
// rate limit checks
|
|
// -----------------------------------------------------------
|
|
{
|
|
Name: "RateLimit rule - users:file",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.Settings().RateLimits.Enabled = true
|
|
app.Settings().RateLimits.Rules = []core.RateLimitRule{
|
|
{MaxRequests: 100, Label: "abc"},
|
|
{MaxRequests: 100, Label: "*:file"},
|
|
{MaxRequests: 0, Label: "users:file"},
|
|
}
|
|
},
|
|
ExpectedStatus: 429,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
{
|
|
Name: "RateLimit rule - *:file",
|
|
Method: http.MethodGet,
|
|
URL: "/api/files/_users_auth_/4q1xlclmfloku33/300_1SEi6Q6U72.png",
|
|
BeforeTestFunc: func(t testing.TB, app *tests.TestApp, e *core.ServeEvent) {
|
|
app.Settings().RateLimits.Enabled = true
|
|
app.Settings().RateLimits.Rules = []core.RateLimitRule{
|
|
{MaxRequests: 100, Label: "abc"},
|
|
{MaxRequests: 0, Label: "*:file"},
|
|
}
|
|
},
|
|
ExpectedStatus: 429,
|
|
ExpectedContent: []string{`"data":{}`},
|
|
ExpectedEvents: map[string]int{"*": 0},
|
|
},
|
|
}
|
|
|
|
for _, scenario := range scenarios {
|
|
// clone for the HEAD test (the same as the original scenario but without body)
|
|
head := scenario
|
|
head.Method = http.MethodHead
|
|
head.Name = ("(HEAD) " + scenario.Name)
|
|
head.ExpectedContent = nil
|
|
head.Test(t)
|
|
|
|
// regular request test
|
|
scenario.Test(t)
|
|
}
|
|
}
|
|
|
|
func TestConcurrentThumbsGeneration(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
app, err := tests.NewTestApp()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer app.Cleanup()
|
|
|
|
fsys, err := app.NewFilesystem()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer fsys.Close()
|
|
|
|
// create a dummy file field collection
|
|
demo1, err := app.FindCollectionByNameOrId("demo1")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
fileField := demo1.Fields.GetByName("file_one").(*core.FileField)
|
|
fileField.Protected = false
|
|
fileField.MaxSelect = 1
|
|
fileField.MaxSize = 999999
|
|
// new thumbs
|
|
fileField.Thumbs = []string{"111x111", "111x222", "111x333"}
|
|
demo1.Fields.Add(fileField)
|
|
if err = app.Save(demo1); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
fileKey := "wsmn24bux7wo113/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png"
|
|
|
|
urls := []string{
|
|
"/api/files/" + fileKey + "?thumb=111x111",
|
|
"/api/files/" + fileKey + "?thumb=111x111", // should still result in single thumb
|
|
"/api/files/" + fileKey + "?thumb=111x222",
|
|
"/api/files/" + fileKey + "?thumb=111x333",
|
|
}
|
|
|
|
var wg sync.WaitGroup
|
|
|
|
wg.Add(len(urls))
|
|
|
|
for _, url := range urls {
|
|
go func() {
|
|
defer wg.Done()
|
|
|
|
recorder := httptest.NewRecorder()
|
|
|
|
req := httptest.NewRequest("GET", url, nil)
|
|
|
|
baseRouter, _ := apis.NewRouter(app)
|
|
mux, _ := baseRouter.BuildMux()
|
|
if mux != nil {
|
|
mux.ServeHTTP(recorder, req)
|
|
}
|
|
}()
|
|
}
|
|
|
|
wg.Wait()
|
|
|
|
// ensure that all new requested thumbs were created
|
|
thumbKeys := []string{
|
|
"wsmn24bux7wo113/al1h9ijdeojtsjy/thumbs_300_Jsjq7RdBgA.png/111x111_" + filepath.Base(fileKey),
|
|
"wsmn24bux7wo113/al1h9ijdeojtsjy/thumbs_300_Jsjq7RdBgA.png/111x222_" + filepath.Base(fileKey),
|
|
"wsmn24bux7wo113/al1h9ijdeojtsjy/thumbs_300_Jsjq7RdBgA.png/111x333_" + filepath.Base(fileKey),
|
|
}
|
|
for _, k := range thumbKeys {
|
|
if exists, _ := fsys.Exists(k); !exists {
|
|
t.Fatalf("Missing thumb %q: %v", k, err)
|
|
}
|
|
}
|
|
}
|