mirror of
https://github.com/hanzoai/livekit.git
synced 2026-10-30 18:29:34 +00:00
zeekay
e9292da479
This fork lived at github.com/hanzoai/livekit but still declared
`module github.com/livekit/livekit-server`, so all 505 self-references pointed
at upstream. A fork that does not own its module path is the exact thing the
owned-module-paths rule exists to prevent: every import line in every consumer
carries someone else's brand, and `go get` resolves to their code, not ours.
module + 505 self-imports github.com/livekit/livekit-server -> github.com/hanzoai/livekit
KV client github.com/redis/go-redis/v9 -> github.com/hanzokv/go/v9
message bus github.com/livekit/psrpc -> github.com/hanzoai/psrpc
psrpc had to be forked (hanzoai/psrpc, Apache-2.0) because its bus is typed
against the KV client — the same shape redsync had for hanzoai/git.
DELIBERATELY NOT FORKED: github.com/livekit/{protocol,mediatransportutil,
mageutil} keep their addresses. Only `protocol` still reaches go-redis, through
a single file (redis/redis.go) out of 305. Forking an 11.5MB core wire-protocol
library that this server must track in lockstep — and that upstream pushed
yesterday — to change one file trades a tidy dependency graph for permanent
divergence on the fastest-moving dependency here. So one indirect
github.com/redis/go-redis entry remains, via livekit/protocol/redis, and that
is the correct place for it to live.
75 lines
2.1 KiB
Go
75 lines
2.1 KiB
Go
// Copyright 2023 LiveKit, Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package service_test
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/livekit/protocol/auth"
|
|
"github.com/livekit/protocol/auth/authfakes"
|
|
|
|
"github.com/hanzoai/livekit/pkg/service"
|
|
)
|
|
|
|
func TestAuthMiddleware(t *testing.T) {
|
|
api := "APIabcdefg"
|
|
secret := "somesecretencodedinbase62extendto32bytes"
|
|
provider := &authfakes.FakeKeyProvider{}
|
|
provider.GetSecretReturns(secret)
|
|
|
|
m := service.NewAPIKeyAuthMiddleware(provider)
|
|
var grants *auth.ClaimGrants
|
|
handler := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
grants = service.GetGrants(r.Context())
|
|
w.WriteHeader(http.StatusOK)
|
|
})
|
|
|
|
orig := &auth.VideoGrant{Room: "abcdefg", RoomJoin: true}
|
|
// ensure that the original claim could be retrieved
|
|
at := auth.NewAccessToken(api, secret).
|
|
AddGrant(orig)
|
|
token, err := at.ToJWT()
|
|
require.NoError(t, err)
|
|
|
|
r := &http.Request{Header: http.Header{}}
|
|
w := httptest.NewRecorder()
|
|
service.SetAuthorizationToken(r, token)
|
|
m.ServeHTTP(w, r, handler)
|
|
|
|
require.NotNil(t, grants)
|
|
require.EqualValues(t, orig, grants.Video)
|
|
|
|
// no authorization == no claims
|
|
grants = nil
|
|
w = httptest.NewRecorder()
|
|
r = &http.Request{Header: http.Header{}}
|
|
m.ServeHTTP(w, r, handler)
|
|
require.Nil(t, grants)
|
|
require.Equal(t, http.StatusOK, w.Code)
|
|
|
|
// incorrect authorization: error
|
|
grants = nil
|
|
w = httptest.NewRecorder()
|
|
r = &http.Request{Header: http.Header{}}
|
|
service.SetAuthorizationToken(r, "invalid token")
|
|
m.ServeHTTP(w, r, handler)
|
|
require.Nil(t, grants)
|
|
require.Equal(t, http.StatusUnauthorized, w.Code)
|
|
}
|