1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
package client
import (
"encoding/base64"
"fmt"
"net/http"
"net/http/httptest"
"testing"
"github.com/stretchr/testify/require"
jwt "github.com/dgrijalva/jwt-go"
)
var (
encodedSecret = "e41rcFh7XBA7sNABWVCe2AZvxMsy6QDtJ8S9Ql1UiN8=" // 32 bytes, base64 encoded
)
func TestGetVirtualDomainForErrorResponses(t *testing.T) {
tests := map[int]string{
http.StatusNoContent: "No Content",
http.StatusUnauthorized: "Unauthorized",
http.StatusNotFound: "Not Found",
}
for statusCode, expectedError := range tests {
name := fmt.Sprintf("%d %s", statusCode, expectedError)
t.Run(name, func(t *testing.T) {
mux := http.NewServeMux()
mux.HandleFunc("/api/v4/internal/pages", func(w http.ResponseWriter, r *http.Request) {
w.WriteHeader(statusCode)
})
server := httptest.NewServer(mux)
defer server.Close()
client := NewClient(server.URL, secretKey())
actual, err := client.GetVirtualDomain("group.gitlab.io")
require.EqualError(t, err, expectedError)
require.Nil(t, actual)
})
}
}
func TestGetVirtualDomainAuthenticatedRequest(t *testing.T) {
mux := http.NewServeMux()
mux.HandleFunc("/api/v4/internal/pages", func(w http.ResponseWriter, r *http.Request) {
require.Equal(t, "GET", r.Method)
require.Equal(t, "group.gitlab.io", r.FormValue("host"))
validateToken(t, r.Header.Get("Gitlab-Pages-Api-Request"))
response := `{
"certificate": "foo",
"key": "bar",
"lookup_paths": [
{
"project_id": 123,
"access_control": false,
"source": {
"type": "file",
"path": "mygroup/myproject/public/"
},
"https_only": true,
"prefix": "/myproject/"
}
]
}`
w.WriteHeader(http.StatusOK)
fmt.Fprint(w, response)
})
server := httptest.NewServer(mux)
defer server.Close()
client := NewClient(server.URL, secretKey())
actual, err := client.GetVirtualDomain("group.gitlab.io")
require.NoError(t, err)
require.Equal(t, "foo", actual.Certificate)
require.Equal(t, "bar", actual.Key)
lookupPath := actual.LookupPaths[0]
require.Equal(t, 123, lookupPath.ProjectID)
require.Equal(t, false, lookupPath.AccessControl)
require.Equal(t, true, lookupPath.HTTPSOnly)
require.Equal(t, "/myproject/", lookupPath.Prefix)
require.Equal(t, "file", lookupPath.Source.Type)
require.Equal(t, "mygroup/myproject/public/", lookupPath.Source.Path)
}
func validateToken(t *testing.T, tokenString string) {
token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
return nil, fmt.Errorf("Unexpected signing method: %v", token.Header["alg"])
}
return secretKey(), nil
})
require.NoError(t, err)
claims, ok := token.Claims.(jwt.MapClaims)
require.True(t, ok)
require.True(t, token.Valid)
require.NotNil(t, claims["exp"])
require.Equal(t, "gitlab-pages", claims["iss"])
}
func secretKey() []byte {
secretKey, _ := base64.StdEncoding.DecodeString(encodedSecret)
return secretKey
}
|
