mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
1ab6e799c1
go.mod still declared `module github.com/hanzoai/deploy` after the repo was renamed. A Go module path is not cosmetic — it is the resolvable location. So `go get github.com/hanzoai/cd` could not work, and anything importing this module had to spell a name that no longer exists at that address. The build log of v3.6.0 is where it surfaced: the compiler was still emitting github.com/hanzoai/deploy/cmd/cd/commands. 3541 import paths across 690 .go, 19 .proto, 4 .yaml, 3 .sh, 2 .mod, Procfile and Makefile. Plus the 62 ghcr.io/hanzoai/deploy image references, moved to ghcr.io/hanzoai/cd to match hanzo.yml's build target — a distinct string from the module path, replaced separately so neither could clobber the other. go mod tidy clean, CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build ./... clean. Co-authored-by: Hanzo Dev <[email protected]>
39 lines
1.3 KiB
Go
39 lines
1.3 KiB
Go
//go:build !race
|
|
|
|
package session
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/hanzoai/cd/util/settings"
|
|
)
|
|
|
|
func TestRandomPasswordVerificationDelay(t *testing.T) {
|
|
t.Parallel()
|
|
// !race:
|
|
// `SessionManager.VerifyUsernamePassword` uses bcrypt to prevent against time-based attacks
|
|
// and verify the hashed password; however this is a CPU intensive algorithm that is made
|
|
// significantly slower due to data race detection being enabled, which breaks through
|
|
// the maximum time limit required by `TestRandomPasswordVerificationDelay`.
|
|
|
|
var sleptFor time.Duration
|
|
settingsMgr := settings.NewSettingsManager(t.Context(), getKubeClient(t, "password", true), "cd")
|
|
mgr := newSessionManager(settingsMgr, getProjLister(), NewUserStateStorage(nil))
|
|
mgr.verificationDelayNoiseEnabled = true
|
|
mgr.sleep = func(d time.Duration) {
|
|
sleptFor = d
|
|
}
|
|
for range 10 {
|
|
sleptFor = 0
|
|
start := time.Now()
|
|
require.NoError(t, mgr.VerifyUsernamePassword("admin", "password"))
|
|
totalDuration := time.Since(start) + sleptFor
|
|
assert.GreaterOrEqual(t, totalDuration.Nanoseconds(), verificationDelayNoiseMin.Nanoseconds())
|
|
assert.LessOrEqual(t, totalDuration.Nanoseconds(), verificationDelayNoiseMax.Nanoseconds())
|
|
}
|
|
}
|