Files
team/server/channels/app/platform/cluster_handlers_revoke_test.go
zeekay 8feb24ea1f One name for this fork, and it is ours
The server module named github.com/hanzoai/team/server/v8 — a path that
resolves to the retired workspace's repository, not this one — while
server/public still published github.com/mattermost/mattermost/server/public.
Both are github.com/hanzoteam/server/... now, which is where this code
actually lives.

That second half is what made the binary unbootable. Upstream's public path
stayed claimed by upstream, mattermost-plugin-ai imported it, and the build
linked public/model twice; public/plugin's gob.Register then ran twice under
one name and panicked at init, before main. Reverting the rename traded the
brand for a working binary. Rebranding the plugin alongside it needs no such
trade: the agents fork is github.com/hanzoteam/agents/v2 against our public
module, so no module named mattermost/mattermost is in the graph at all.

Measured: `go list -deps ./cmd/mattermost` names exactly one public/model, and
it is ours.
2026-08-28 23:35:36 -07:00

97 lines
2.7 KiB
Go

// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
// See LICENSE.txt for license information.
package platform
import (
"net/http/httptest"
"testing"
"time"
"github.com/stretchr/testify/require"
"github.com/hanzoteam/server/server/public/model"
)
// TestRevokeSessionsFromAllUsersInvalidatesWebConnSession asserts that
// after the public RevokeSessionsFromAllUsers entry point returns,
// every live WebConn on this node — across multiple users (hashed to
// different hubs) and multiple connections per user — has its cached
// session reset to the authenticated-as-no-one state.
func TestRevokeSessionsFromAllUsersInvalidatesWebConnSession(t *testing.T) {
mainHelper.Parallel(t)
th := Setup(t).InitBasic(t)
s := httptest.NewServer(dummyWebsocketHandler(t))
defer s.Close()
// Spread connections across multiple hubs via GetHubForUserId's
// hash(userID) mod len(hubs) sharding, and use multiple conns per
// user to cover the multi-device case.
type userConns struct {
userID string
wcs []*WebConn
}
users := []*userConns{
{userID: th.BasicUser.Id},
{userID: th.BasicUser2.Id},
}
for range 4 {
users = append(users, &userConns{userID: model.NewId()})
}
for _, u := range users {
preWarmStatusOnline(th, u.userID)
}
const connsPerUser = 2
for _, u := range users {
for range connsPerUser {
session, err := th.Service.CreateSession(th.Context, &model.Session{
UserId: u.userID,
})
require.NoError(t, err)
session.ExpiresAt = model.GetMillis() + time.Hour.Milliseconds()
wc := registerDummyWebConn(t, th, s.Listener.Addr(), session)
t.Cleanup(func() { wc.Close() })
u.wcs = append(u.wcs, wc)
waitForWebConnRegistered(t, th, session)
}
}
for _, u := range users {
for _, wc := range u.wcs {
require.NotNil(t, wc.GetSession(),
"precondition: webconn for user %q must have a cached session before revoke", u.userID)
require.Greater(t, wc.GetSessionExpiresAt(), model.GetMillis(),
"precondition: cached expiry for user %q must be in the future before revoke", u.userID)
require.NotEmpty(t, wc.GetSessionToken(),
"precondition: webconn for user %q must have a cached session token before revoke", u.userID)
}
}
require.NoError(t, th.Service.RevokeSessionsFromAllUsers(),
"RevokeSessionsFromAllUsers should not error")
require.Eventually(t, func() bool {
for _, u := range users {
for _, wc := range u.wcs {
if wc.GetSession() != nil {
return false
}
if wc.GetSessionExpiresAt() != 0 {
return false
}
if wc.GetSessionToken() != "" {
return false
}
}
}
return true
}, 5*time.Second, 25*time.Millisecond,
"RevokeSessionsFromAllUsers did not invalidate every live WebConn across all hubs")
}