mirror of
https://github.com/hanzoai/forge.git
synced 2026-10-30 15:00:39 +00:00
zeekayandHanzo Dev
9a07b4d089
2978 files. The fork is 2026-07-15 (rebrand: gitea.dev -> github.com/hanzoai/git), so 2026 is the year, and "Copyright 2026 Hanzo AI, Inc." was already the form used by the handful of files that had ours. Shape is now: // Copyright 2026 Hanzo AI, Inc. All rights reserved. // Copyright 2015 The Gogs Authors. All rights reserved. // Copyright 2019 The Gitea Authors. All rights reserved. // SPDX-License-Identifier: MIT Ours on top, theirs retained verbatim. Retained because MIT requires it, and separately because they are true — those authors did write that code. Not renamed to "The Git Authors": Git is a different project under a different license, and putting its name here would attribute this code to people who have nothing to do with it. Adding our line is the fix; overwriting theirs would have been both a licence violation and a false statement. gofmt still reports import-order drift in some of these files. It predates this change (verified against a stash) and is left alone rather than burying a one-line-per-file legal change under 3000 files of unrelated reordering. Build clean. Co-authored-by: Hanzo Dev <[email protected]>
101 lines
4.2 KiB
Go
101 lines
4.2 KiB
Go
// Copyright 2026 Hanzo AI, Inc. All rights reserved.
|
|
// Copyright 2025 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package asymkey
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
|
|
asymkey_model "github.com/hanzoai/git/models/asymkey"
|
|
"github.com/hanzoai/git/models/db"
|
|
"github.com/hanzoai/git/models/unittest"
|
|
user_model "github.com/hanzoai/git/models/user"
|
|
"github.com/hanzoai/git/modules/git"
|
|
"github.com/hanzoai/git/modules/setting"
|
|
"github.com/hanzoai/git/modules/test"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestParseCommitWithSSHSignature(t *testing.T) {
|
|
assert.NoError(t, unittest.PrepareTestDatabase())
|
|
|
|
// Here we only need to do some tests that "tests/integration/gpg_ssh_git_test.go" doesn't cover
|
|
|
|
// -----BEGIN OPENSSH PRIVATE KEY-----
|
|
// b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
|
|
// QyNTUxOQAAACC6T6zF0oPak8dOIzzT1kXB7LrcsVo04SKc3GjuvMllZwAAAJgy08upMtPL
|
|
// qQAAAAtzc2gtZWQyNTUxOQAAACC6T6zF0oPak8dOIzzT1kXB7LrcsVo04SKc3GjuvMllZw
|
|
// AAAEDWqPHTH51xb4hy1y1f1VeWL/2A9Q0b6atOyv5fx8x5prpPrMXSg9qTx04jPNPWRcHs
|
|
// utyxWjThIpzcaO68yWVnAAAAEXVzZXIyQGV4YW1wbGUuY29tAQIDBA==
|
|
// -----END OPENSSH PRIVATE KEY-----
|
|
sshPubKey, err := asymkey_model.AddPublicKey(t.Context(), 999, "user-ssh-key-any-name", "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILpPrMXSg9qTx04jPNPWRcHsutyxWjThIpzcaO68yWVn", 0, false)
|
|
require.NoError(t, err)
|
|
_, err = db.GetEngine(t.Context()).ID(sshPubKey.ID).Cols("verified").Update(&asymkey_model.PublicKey{Verified: true})
|
|
require.NoError(t, err)
|
|
|
|
t.Run("UserSSHKey", func(t *testing.T) {
|
|
commit, err := git.CommitFromReader(git.Sha1ObjectFormat.EmptyObjectID(), strings.NewReader(`tree a3b1fad553e0f9a2b4a58327bebde36c7da75aa2
|
|
author user2 <[email protected]> 1752194028 -0700
|
|
committer user2 <[email protected]> 1752194028 -0700
|
|
gpgsig -----BEGIN SSH SIGNATURE-----
|
|
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAguk+sxdKD2pPHTiM809ZFwey63L
|
|
FaNOEinNxo7rzJZWcAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
|
|
AAAAQBfX+6mcKZBnXckwHcBFqRuXMD3vTKi1yv5wgrqIxTyr2LWB97xxmO92cvjsr0POQ2
|
|
2YA7mQS510Cg2s1uU1XAk=
|
|
-----END SSH SIGNATURE-----
|
|
|
|
init project
|
|
`))
|
|
require.NoError(t, err)
|
|
|
|
// the committingUser is guaranteed by the caller, parseCommitWithSSHSignature doesn't do any more checks
|
|
committingUser := &user_model.User{ID: 999, Name: "user-x"}
|
|
ret := parseCommitWithSSHSignature(t.Context(), commit, committingUser)
|
|
require.NotNil(t, ret)
|
|
assert.True(t, ret.Verified)
|
|
assert.Equal(t, committingUser.Name+" / "+sshPubKey.Fingerprint, ret.Reason)
|
|
assert.False(t, ret.Warning)
|
|
assert.Equal(t, committingUser, ret.SigningUser)
|
|
assert.Equal(t, committingUser, ret.CommittingUser)
|
|
assert.Equal(t, sshPubKey.ID, ret.SigningSSHKey.ID)
|
|
})
|
|
|
|
t.Run("TrustedSSHKey", func(t *testing.T) {
|
|
defer test.MockVariableValue(&setting.Repository.Signing.SigningName, "gitea")()
|
|
defer test.MockVariableValue(&setting.Repository.Signing.SigningEmail, "[email protected]")()
|
|
defer test.MockVariableValue(&setting.Repository.Signing.TrustedSSHKeys, []string{"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH6Y4idVaW3E+bLw1uqoAfJD7o5Siu+HqS51E9oQLPE9"})()
|
|
|
|
commit, err := git.CommitFromReader(git.Sha1ObjectFormat.EmptyObjectID(), strings.NewReader(`tree 9a93ffa76e8b72bdb6431910b3a506fa2b39f42e
|
|
author User Two <[email protected]> 1749230009 +0200
|
|
committer User Two <[email protected]> 1749230009 +0200
|
|
gpgsig -----BEGIN SSH SIGNATURE-----
|
|
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgfpjiJ1VpbcT5svDW6qgB8kPujl
|
|
KK74epLnUT2hAs8T0AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
|
|
AAAAQDX2t2iHuuLxEWHLJetYXKsgayv3c43r0pJNfAzdLN55Q65pC5M7rG6++gT2bxcpOu
|
|
Y6EXbpLqia9sunEF3+LQY=
|
|
-----END SSH SIGNATURE-----
|
|
|
|
Initial commit with signed file
|
|
`))
|
|
require.NoError(t, err)
|
|
committingUser := &user_model.User{
|
|
ID: 2,
|
|
Name: "User Two",
|
|
Email: "[email protected]",
|
|
}
|
|
ret := parseCommitWithSSHSignature(t.Context(), commit, committingUser)
|
|
require.NotNil(t, ret)
|
|
assert.True(t, ret.Verified)
|
|
assert.False(t, ret.Warning)
|
|
assert.Equal(t, committingUser, ret.CommittingUser)
|
|
if assert.NotNil(t, ret.SigningUser) {
|
|
assert.Equal(t, "gitea", ret.SigningUser.Name)
|
|
assert.Equal(t, "[email protected]", ret.SigningUser.Email)
|
|
}
|
|
})
|
|
}
|