HTTPS-only CDN URLs; блокировка private/loopback/metadata IP и DNS-resolve на fetch; проверка в httpapi при create/preview/patch CDN sources. Co-authored-by: Cursor <[email protected]>
197 lines
4.9 KiB
Go
197 lines
4.9 KiB
Go
package pipeline
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"evobgp/internal/store"
|
|
)
|
|
|
|
func TestCollectModulePrefixRows_CDNSendsIfNoneMatch(t *testing.T) {
|
|
t.Setenv("EVOBGP_CDN_ALLOW_PRIVATE", "1")
|
|
m := store.NewMemory()
|
|
m.SeedDemo()
|
|
tenant, _, _, _, _ := m.DemoIDs()
|
|
|
|
mod, err := m.CreateModule(tenant, &store.Module{
|
|
Type: "CDN_CIDRS",
|
|
Name: "cdn-conditional",
|
|
Enabled: true,
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
var gotIfNoneMatch string
|
|
srv := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
gotIfNoneMatch = strings.TrimSpace(r.Header.Get("If-None-Match"))
|
|
w.Header().Set("ETag", "etag-new")
|
|
_, _ = w.Write([]byte("198.51.100.0/24\n"))
|
|
}))
|
|
defer srv.Close()
|
|
|
|
etag := "etag-old"
|
|
if _, err := m.CreateCDNSource(tenant, mod.ID, &store.CDNSource{
|
|
SourceKind: "txt",
|
|
URL: srv.URL,
|
|
Etag: etag,
|
|
}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
collected, err := collectModulePrefixRows(context.Background(), m, srv.Client(), tenant, mod, nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if gotIfNoneMatch != etag {
|
|
t.Fatalf("want If-None-Match %q, got %q", etag, gotIfNoneMatch)
|
|
}
|
|
if len(collected) != 1 || collected[0].Prefix != "198.51.100.0/24" {
|
|
t.Fatalf("unexpected collected rows: %+v", collected)
|
|
}
|
|
}
|
|
|
|
func TestCollectModulePrefixRows_CDN304UsesSnapshot(t *testing.T) {
|
|
t.Setenv("EVOBGP_CDN_ALLOW_PRIVATE", "1")
|
|
m := store.NewMemory()
|
|
m.SeedDemo()
|
|
tenant, _, _, _, _ := m.DemoIDs()
|
|
|
|
mod, err := m.CreateModule(tenant, &store.Module{
|
|
Type: "CDN_CIDRS",
|
|
Name: "cdn-304",
|
|
Enabled: true,
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
srv := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusNotModified)
|
|
}))
|
|
defer srv.Close()
|
|
|
|
etag := "etag-stable"
|
|
src, err := m.CreateCDNSource(tenant, mod.ID, &store.CDNSource{
|
|
SourceKind: "txt",
|
|
URL: srv.URL,
|
|
Etag: etag,
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
prior := []store.PrefixRow{{
|
|
Prefix: "203.0.113.0/24",
|
|
Source: cdnSourceKey(src.ID),
|
|
}}
|
|
if err := mergeCDNSourceIntoModuleSnapshot(m, tenant, mod, src.ID, prior); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
collected, err := collectModulePrefixRows(context.Background(), m, srv.Client(), tenant, mod, prior)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if len(collected) != 1 || collected[0].Prefix != "203.0.113.0/24" {
|
|
t.Fatalf("want cached prefix on 304, got %+v", collected)
|
|
}
|
|
}
|
|
|
|
func TestRefreshModuleIngest_CDN304UsesStoredSnapshot(t *testing.T) {
|
|
t.Setenv("EVOBGP_CDN_ALLOW_PRIVATE", "1")
|
|
m := store.NewMemory()
|
|
m.SeedDemo()
|
|
tenant, _, _, _, _ := m.DemoIDs()
|
|
|
|
mod, err := m.CreateModule(tenant, &store.Module{
|
|
Type: "CDN_CIDRS",
|
|
Name: "cdn-304-ingest",
|
|
Enabled: true,
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
srv := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusNotModified)
|
|
}))
|
|
defer srv.Close()
|
|
|
|
etag := "etag-stable"
|
|
src, err := m.CreateCDNSource(tenant, mod.ID, &store.CDNSource{
|
|
SourceKind: "txt",
|
|
URL: srv.URL,
|
|
Etag: etag,
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
prior := []store.PrefixRow{{
|
|
Prefix: "203.0.113.0/24",
|
|
Source: cdnSourceKey(src.ID),
|
|
}}
|
|
if err := mergeCDNSourceIntoModuleSnapshot(m, tenant, mod, src.ID, prior); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
if err := RefreshModuleIngest(context.Background(), m, srv.Client(), tenant, mod.ID); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func TestCollectModulePrefixRows_CDN304RetriesWithoutETag(t *testing.T) {
|
|
t.Setenv("EVOBGP_CDN_ALLOW_PRIVATE", "1")
|
|
m := store.NewMemory()
|
|
m.SeedDemo()
|
|
tenant, _, _, _, _ := m.DemoIDs()
|
|
|
|
mod, err := m.CreateModule(tenant, &store.Module{
|
|
Type: "CDN_CIDRS",
|
|
Name: "cdn-304-retry",
|
|
Enabled: true,
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
var calls int
|
|
srv := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
calls++
|
|
if calls == 1 {
|
|
if got := strings.TrimSpace(r.Header.Get("If-None-Match")); got != "etag-stable" {
|
|
t.Fatalf("first request want If-None-Match etag-stable, got %q", got)
|
|
}
|
|
w.WriteHeader(http.StatusNotModified)
|
|
return
|
|
}
|
|
if got := strings.TrimSpace(r.Header.Get("If-None-Match")); got != "" {
|
|
t.Fatalf("retry must omit If-None-Match, got %q", got)
|
|
}
|
|
w.Header().Set("ETag", "etag-stable")
|
|
_, _ = w.Write([]byte("198.51.100.0/24\n"))
|
|
}))
|
|
defer srv.Close()
|
|
|
|
if _, err := m.CreateCDNSource(tenant, mod.ID, &store.CDNSource{
|
|
SourceKind: "txt",
|
|
URL: srv.URL,
|
|
Etag: "etag-stable",
|
|
}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
collected, err := collectModulePrefixRows(context.Background(), m, srv.Client(), tenant, mod, nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if calls != 2 {
|
|
t.Fatalf("want 2 HTTP calls (304 then 200), got %d", calls)
|
|
}
|
|
if len(collected) != 1 || collected[0].Prefix != "198.51.100.0/24" {
|
|
t.Fatalf("unexpected collected rows: %+v", collected)
|
|
}
|
|
}
|