mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
1ab6e799c1
go.mod still declared `module github.com/hanzoai/deploy` after the repo was renamed. A Go module path is not cosmetic — it is the resolvable location. So `go get github.com/hanzoai/cd` could not work, and anything importing this module had to spell a name that no longer exists at that address. The build log of v3.6.0 is where it surfaced: the compiler was still emitting github.com/hanzoai/deploy/cmd/cd/commands. 3541 import paths across 690 .go, 19 .proto, 4 .yaml, 3 .sh, 2 .mod, Procfile and Makefile. Plus the 62 ghcr.io/hanzoai/deploy image references, moved to ghcr.io/hanzoai/cd to match hanzo.yml's build target — a distinct string from the module path, replaced separately so neither could clobber the other. go mod tidy clean, CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build ./... clean. Co-authored-by: Hanzo Dev <[email protected]>
60 lines
1.4 KiB
Go
60 lines
1.4 KiB
Go
package security
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/golang-jwt/jwt/v5"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
utiltest "github.com/hanzoai/cd/util/test"
|
|
)
|
|
|
|
func Test_UnverifiedHasAudClaim(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
tokenForAud := func(t *testing.T, aud jwt.ClaimStrings) string {
|
|
t.Helper()
|
|
claims := jwt.RegisteredClaims{Audience: aud, Subject: "admin", ExpiresAt: jwt.NewNumericDate(time.Now().Add(time.Hour * 24))}
|
|
token := jwt.NewWithClaims(jwt.SigningMethodRS512, claims)
|
|
key, err := jwt.ParseRSAPrivateKeyFromPEM(utiltest.PrivateKey)
|
|
require.NoError(t, err)
|
|
tokenString, err := token.SignedString(key)
|
|
require.NoError(t, err)
|
|
return tokenString
|
|
}
|
|
|
|
testCases := []struct {
|
|
name string
|
|
aud jwt.ClaimStrings
|
|
expectedHasAud bool
|
|
}{
|
|
{
|
|
name: "no audience",
|
|
aud: jwt.ClaimStrings{},
|
|
expectedHasAud: false,
|
|
},
|
|
{
|
|
name: "one empty audience",
|
|
aud: jwt.ClaimStrings{""},
|
|
expectedHasAud: true,
|
|
},
|
|
{
|
|
name: "one non-empty audience",
|
|
aud: jwt.ClaimStrings{"test"},
|
|
expectedHasAud: true,
|
|
},
|
|
}
|
|
|
|
for _, testCase := range testCases {
|
|
testCaseCopy := testCase
|
|
t.Run(testCaseCopy.name, func(t *testing.T) {
|
|
t.Parallel()
|
|
out, err := UnverifiedHasAudClaim(tokenForAud(t, testCaseCopy.aud))
|
|
require.NoError(t, err)
|
|
assert.Equal(t, testCaseCopy.expectedHasAud, out)
|
|
})
|
|
}
|
|
}
|