mirror of
https://github.com/alibaba/higress.git
synced 2026-06-09 04:37:31 +08:00
feat(wasm-go): add wasm go plugin unit test and ci workflow (#2809)
This commit is contained in:
364
plugins/wasm-go/extensions/opa/main_test.go
Normal file
364
plugins/wasm-go/extensions/opa/main_test.go
Normal file
@@ -0,0 +1,364 @@
|
||||
// Copyright (c) 2022 Alibaba Group Holding Ltd.
|
||||
//
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
|
||||
package main
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"net/http"
|
||||
"testing"
|
||||
|
||||
"github.com/higress-group/proxy-wasm-go-sdk/proxywasm/types"
|
||||
"github.com/higress-group/wasm-go/pkg/test"
|
||||
"github.com/stretchr/testify/require"
|
||||
)
|
||||
|
||||
// 测试配置:基本配置
|
||||
var basicConfig = func() json.RawMessage {
|
||||
data, _ := json.Marshal(map[string]interface{}{
|
||||
"policy": "example1",
|
||||
"timeout": "5s",
|
||||
"serviceSource": "k8s",
|
||||
"serviceName": "opa",
|
||||
"servicePort": "8181",
|
||||
"namespace": "higress-backend",
|
||||
})
|
||||
return data
|
||||
}()
|
||||
|
||||
// 测试配置:IP 服务配置
|
||||
var ipConfig = func() json.RawMessage {
|
||||
data, _ := json.Marshal(map[string]interface{}{
|
||||
"policy": "example2",
|
||||
"timeout": "3s",
|
||||
"serviceSource": "ip",
|
||||
"host": "192.168.1.100",
|
||||
"servicePort": "8181",
|
||||
})
|
||||
return data
|
||||
}()
|
||||
|
||||
// 测试配置:Nacos 服务配置
|
||||
var nacosConfig = func() json.RawMessage {
|
||||
data, _ := json.Marshal(map[string]interface{}{
|
||||
"policy": "example3",
|
||||
"timeout": "10s",
|
||||
"serviceSource": "nacos",
|
||||
"serviceName": "opa-service",
|
||||
"servicePort": "8181",
|
||||
"namespace": "public",
|
||||
})
|
||||
return data
|
||||
}()
|
||||
|
||||
// 测试配置:Route 服务配置
|
||||
var routeConfig = func() json.RawMessage {
|
||||
data, _ := json.Marshal(map[string]interface{}{
|
||||
"policy": "example4",
|
||||
"timeout": "2s",
|
||||
"serviceSource": "route",
|
||||
"host": "example.com",
|
||||
})
|
||||
return data
|
||||
}()
|
||||
|
||||
// 测试配置:无效配置(缺少 policy)
|
||||
var invalidConfigMissingPolicy = func() json.RawMessage {
|
||||
data, _ := json.Marshal(map[string]interface{}{
|
||||
"timeout": "5s",
|
||||
"serviceSource": "k8s",
|
||||
"serviceName": "opa",
|
||||
"servicePort": "8181",
|
||||
})
|
||||
return data
|
||||
}()
|
||||
|
||||
// 测试配置:无效配置(缺少 timeout)
|
||||
var invalidConfigMissingTimeout = func() json.RawMessage {
|
||||
data, _ := json.Marshal(map[string]interface{}{
|
||||
"policy": "example1",
|
||||
"serviceSource": "k8s",
|
||||
"serviceName": "opa",
|
||||
"servicePort": "8181",
|
||||
})
|
||||
return data
|
||||
}()
|
||||
|
||||
// 测试配置:无效配置(无效的 timeout 格式)
|
||||
var invalidConfigInvalidTimeout = func() json.RawMessage {
|
||||
data, _ := json.Marshal(map[string]interface{}{
|
||||
"policy": "example1",
|
||||
"timeout": "invalid-timeout",
|
||||
"serviceSource": "k8s",
|
||||
"serviceName": "opa",
|
||||
"servicePort": "8181",
|
||||
})
|
||||
return data
|
||||
}()
|
||||
|
||||
func TestParseConfig(t *testing.T) {
|
||||
test.RunGoTest(t, func(t *testing.T) {
|
||||
// 测试基本配置解析
|
||||
t.Run("basic config", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(basicConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
config, err := host.GetMatchConfig()
|
||||
require.NoError(t, err)
|
||||
require.NotNil(t, config)
|
||||
})
|
||||
|
||||
// 测试 IP 服务配置解析
|
||||
t.Run("ip service config", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(ipConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
config, err := host.GetMatchConfig()
|
||||
require.NoError(t, err)
|
||||
require.NotNil(t, config)
|
||||
})
|
||||
|
||||
// 测试 Nacos 服务配置解析
|
||||
t.Run("nacos service config", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(nacosConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
config, err := host.GetMatchConfig()
|
||||
require.NoError(t, err)
|
||||
require.NotNil(t, config)
|
||||
})
|
||||
|
||||
// 测试 Route 服务配置解析
|
||||
t.Run("route service config", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(routeConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
config, err := host.GetMatchConfig()
|
||||
require.NoError(t, err)
|
||||
require.NotNil(t, config)
|
||||
})
|
||||
|
||||
// 测试无效配置 - 缺少 policy
|
||||
t.Run("invalid config - missing policy", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(invalidConfigMissingPolicy)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusFailed, status)
|
||||
})
|
||||
|
||||
// 测试无效配置 - 缺少 timeout
|
||||
t.Run("invalid config - missing timeout", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(invalidConfigMissingTimeout)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusFailed, status)
|
||||
})
|
||||
|
||||
// 测试无效配置 - 无效的 timeout 格式
|
||||
t.Run("invalid config - invalid timeout format", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(invalidConfigInvalidTimeout)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusFailed, status)
|
||||
})
|
||||
})
|
||||
}
|
||||
|
||||
func TestOnHttpRequestHeaders(t *testing.T) {
|
||||
test.RunTest(t, func(t *testing.T) {
|
||||
// 测试基本请求头处理
|
||||
t.Run("basic request headers", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(basicConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||||
{":authority", "example.com"},
|
||||
{":path", "/test"},
|
||||
{":method", "GET"},
|
||||
{"Content-Type", "application/json"},
|
||||
})
|
||||
|
||||
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
|
||||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||||
|
||||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||||
// 模拟成功响应 - 允许访问
|
||||
host.CallOnHttpCall([][2]string{
|
||||
{":status", "200"},
|
||||
{"content-type", "application/json"},
|
||||
}, []byte(`{"result": true}`))
|
||||
|
||||
require.Equal(t, types.ActionContinue, host.GetHttpStreamAction())
|
||||
host.CompleteHttp()
|
||||
})
|
||||
|
||||
// 测试 OPA 服务拒绝访问
|
||||
t.Run("opa service denies access", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(basicConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||||
{":authority", "example.com"},
|
||||
{":path", "/test"},
|
||||
{":method", "POST"},
|
||||
{"Content-Type", "application/json"},
|
||||
})
|
||||
|
||||
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
|
||||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||||
|
||||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||||
// 模拟成功响应 - 拒绝访问
|
||||
host.CallOnHttpCall([][2]string{
|
||||
{":status", "200"},
|
||||
{"content-type", "application/json"},
|
||||
}, []byte(`{"result": false}`))
|
||||
|
||||
response := host.GetLocalResponse()
|
||||
require.Equal(t, uint32(http.StatusUnauthorized), response.StatusCode)
|
||||
require.Equal(t, "opa.server_not_allowed", response.StatusCodeDetail)
|
||||
require.Equal(t, "opa server not allowed", string(response.Data))
|
||||
host.CompleteHttp()
|
||||
})
|
||||
|
||||
// 测试 OPA 服务返回非 200 状态码
|
||||
t.Run("opa service returns non-200 status", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(basicConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||||
{":authority", "example.com"},
|
||||
{":path", "/test"},
|
||||
{":method", "GET"},
|
||||
{"Content-Type", "application/json"},
|
||||
})
|
||||
|
||||
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
|
||||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||||
|
||||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||||
// 模拟 500 错误响应
|
||||
host.CallOnHttpCall([][2]string{
|
||||
{":status", "500"},
|
||||
{"content-type", "application/json"},
|
||||
}, []byte(`{"error": "internal error"}`))
|
||||
|
||||
response := host.GetLocalResponse()
|
||||
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
|
||||
require.Equal(t, "opa.status_ne_200", response.StatusCodeDetail)
|
||||
require.Equal(t, "opa state not is 200", string(response.Data))
|
||||
host.CompleteHttp()
|
||||
})
|
||||
|
||||
// 测试 OPA 服务返回无效响应
|
||||
t.Run("opa service returns invalid response", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(basicConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||||
{":authority", "example.com"},
|
||||
{":path", "/test"},
|
||||
{":method", "GET"},
|
||||
{"Content-Type", "application/json"},
|
||||
})
|
||||
|
||||
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
|
||||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||||
|
||||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||||
// 模拟无效 JSON 响应
|
||||
host.CallOnHttpCall([][2]string{
|
||||
{":status", "200"},
|
||||
{"content-type", "application/json"},
|
||||
}, []byte(`invalid json`))
|
||||
|
||||
response := host.GetLocalResponse()
|
||||
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
|
||||
require.Equal(t, "opa.bad_response_body", response.StatusCodeDetail)
|
||||
host.CompleteHttp()
|
||||
})
|
||||
|
||||
// 测试 OPA 服务返回缺少 result 字段的响应
|
||||
t.Run("opa service returns response without result field", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(basicConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||||
{":authority", "example.com"},
|
||||
{":path", "/test"},
|
||||
{":method", "GET"},
|
||||
{"Content-Type", "application/json"},
|
||||
})
|
||||
|
||||
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
|
||||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||||
|
||||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||||
// 模拟缺少 result 字段的响应
|
||||
host.CallOnHttpCall([][2]string{
|
||||
{":status", "200"},
|
||||
{"content-type", "application/json"},
|
||||
}, []byte(`{"status": "ok"}`))
|
||||
|
||||
response := host.GetLocalResponse()
|
||||
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
|
||||
require.Equal(t, "opa.conversion_fail", response.StatusCodeDetail)
|
||||
require.Equal(t, "rsp type conversion fail", string(response.Data))
|
||||
host.CompleteHttp()
|
||||
})
|
||||
})
|
||||
}
|
||||
|
||||
func TestOnHttpRequestBody(t *testing.T) {
|
||||
test.RunTest(t, func(t *testing.T) {
|
||||
// 测试带请求体的请求处理
|
||||
t.Run("request with body", func(t *testing.T) {
|
||||
host, status := test.NewTestHost(basicConfig)
|
||||
defer host.Reset()
|
||||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||||
|
||||
// 先处理请求头
|
||||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||||
{":authority", "example.com"},
|
||||
{":path", "/test"},
|
||||
{":method", "POST"},
|
||||
{"Content-Type", "application/json"},
|
||||
})
|
||||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||||
|
||||
// 处理请求体
|
||||
requestBody := []byte(`{"key": "value", "data": "test"}`)
|
||||
action = host.CallOnHttpRequestBody(requestBody)
|
||||
|
||||
// 由于 OPA 调用是异步的,这里会返回 ActionPause
|
||||
require.Equal(t, types.ActionPause, action)
|
||||
|
||||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||||
// 模拟成功响应 - 允许访问
|
||||
host.CallOnHttpCall([][2]string{
|
||||
{":status", "200"},
|
||||
{"content-type", "application/json"},
|
||||
}, []byte(`{"result": true}`))
|
||||
|
||||
require.Equal(t, types.ActionContinue, host.GetHttpStreamAction())
|
||||
host.CompleteHttp()
|
||||
})
|
||||
})
|
||||
}
|
||||
Reference in New Issue
Block a user