mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
1ab6e799c1
go.mod still declared `module github.com/hanzoai/deploy` after the repo was renamed. A Go module path is not cosmetic — it is the resolvable location. So `go get github.com/hanzoai/cd` could not work, and anything importing this module had to spell a name that no longer exists at that address. The build log of v3.6.0 is where it surfaced: the compiler was still emitting github.com/hanzoai/deploy/cmd/cd/commands. 3541 import paths across 690 .go, 19 .proto, 4 .yaml, 3 .sh, 2 .mod, Procfile and Makefile. Plus the 62 ghcr.io/hanzoai/deploy image references, moved to ghcr.io/hanzoai/cd to match hanzo.yml's build target — a distinct string from the module path, replaced separately so neither could clobber the other. go mod tidy clean, CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build ./... clean. Co-authored-by: Hanzo Dev <[email protected]>
72 lines
2.1 KiB
Go
72 lines
2.1 KiB
Go
package swagger
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net"
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/go-openapi/loads"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/hanzoai/cd/util/assets"
|
|
)
|
|
|
|
func TestSwaggerUI(t *testing.T) {
|
|
t.Parallel()
|
|
lc := &net.ListenConfig{}
|
|
serve := func(c chan<- string) {
|
|
// listen on first available dynamic (unprivileged) port
|
|
listener, err := lc.Listen(t.Context(), "tcp", ":0")
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
// send back the address so that it can be used
|
|
c <- listener.Addr().String()
|
|
|
|
mux := http.NewServeMux()
|
|
ServeSwaggerUI(mux, assets.SwaggerJSON, "/swagger-ui", "")
|
|
panic(http.Serve(listener, mux))
|
|
}
|
|
|
|
c := make(chan string, 1)
|
|
|
|
// run a local webserver to test data retrieval
|
|
go serve(c)
|
|
|
|
address := <-c
|
|
t.Logf("Listening at address: %s", address)
|
|
|
|
server := "http://" + address
|
|
|
|
specDoc, err := loads.Spec(server + "/swagger.json")
|
|
require.NoError(t, err)
|
|
|
|
_, err = json.MarshalIndent(specDoc.Spec(), "", " ")
|
|
require.NoError(t, err)
|
|
|
|
req, err := http.NewRequestWithContext(t.Context(), http.MethodGet, server+"/swagger.json", http.NoBody)
|
|
require.NoError(t, err)
|
|
|
|
resp, err := http.DefaultClient.Do(req)
|
|
require.NoError(t, err)
|
|
require.Equalf(t, http.StatusOK, resp.StatusCode, "Was expecting status code 200 from swagger-ui, but got %d instead", resp.StatusCode)
|
|
require.NoError(t, resp.Body.Close())
|
|
|
|
// Verify clickjacking protection headers on swagger.json
|
|
require.Equal(t, "DENY", resp.Header.Get("X-Frame-Options"))
|
|
require.Equal(t, "frame-ancestors 'none'", resp.Header.Get("Content-Security-Policy"))
|
|
|
|
// Verify clickjacking protection headers on swagger-ui
|
|
uiReq, err := http.NewRequestWithContext(t.Context(), http.MethodGet, server+"/swagger-ui", http.NoBody)
|
|
require.NoError(t, err)
|
|
|
|
uiResp, err := http.DefaultClient.Do(uiReq)
|
|
require.NoError(t, err)
|
|
require.Equalf(t, http.StatusOK, uiResp.StatusCode, "Was expecting status code 200 from swagger-ui, but got %d instead", uiResp.StatusCode)
|
|
require.Equal(t, "DENY", uiResp.Header.Get("X-Frame-Options"))
|
|
require.Equal(t, "frame-ancestors 'none'", uiResp.Header.Get("Content-Security-Policy"))
|
|
require.NoError(t, uiResp.Body.Close())
|
|
}
|