feat(wasm-go): add wasm go plugin unit test and ci workflow (#2809)

This commit is contained in:
Jingze
2025-08-28 20:02:03 +08:00
committed by GitHub
parent 3e0a5f02a7
commit a00b810be5
138 changed files with 27695 additions and 313 deletions

View File

@@ -0,0 +1,364 @@
// Copyright (c) 2022 Alibaba Group Holding Ltd.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package main
import (
"encoding/json"
"net/http"
"testing"
"github.com/higress-group/proxy-wasm-go-sdk/proxywasm/types"
"github.com/higress-group/wasm-go/pkg/test"
"github.com/stretchr/testify/require"
)
// 测试配置:基本配置
var basicConfig = func() json.RawMessage {
data, _ := json.Marshal(map[string]interface{}{
"policy": "example1",
"timeout": "5s",
"serviceSource": "k8s",
"serviceName": "opa",
"servicePort": "8181",
"namespace": "higress-backend",
})
return data
}()
// 测试配置IP 服务配置
var ipConfig = func() json.RawMessage {
data, _ := json.Marshal(map[string]interface{}{
"policy": "example2",
"timeout": "3s",
"serviceSource": "ip",
"host": "192.168.1.100",
"servicePort": "8181",
})
return data
}()
// 测试配置Nacos 服务配置
var nacosConfig = func() json.RawMessage {
data, _ := json.Marshal(map[string]interface{}{
"policy": "example3",
"timeout": "10s",
"serviceSource": "nacos",
"serviceName": "opa-service",
"servicePort": "8181",
"namespace": "public",
})
return data
}()
// 测试配置Route 服务配置
var routeConfig = func() json.RawMessage {
data, _ := json.Marshal(map[string]interface{}{
"policy": "example4",
"timeout": "2s",
"serviceSource": "route",
"host": "example.com",
})
return data
}()
// 测试配置:无效配置(缺少 policy
var invalidConfigMissingPolicy = func() json.RawMessage {
data, _ := json.Marshal(map[string]interface{}{
"timeout": "5s",
"serviceSource": "k8s",
"serviceName": "opa",
"servicePort": "8181",
})
return data
}()
// 测试配置:无效配置(缺少 timeout
var invalidConfigMissingTimeout = func() json.RawMessage {
data, _ := json.Marshal(map[string]interface{}{
"policy": "example1",
"serviceSource": "k8s",
"serviceName": "opa",
"servicePort": "8181",
})
return data
}()
// 测试配置:无效配置(无效的 timeout 格式)
var invalidConfigInvalidTimeout = func() json.RawMessage {
data, _ := json.Marshal(map[string]interface{}{
"policy": "example1",
"timeout": "invalid-timeout",
"serviceSource": "k8s",
"serviceName": "opa",
"servicePort": "8181",
})
return data
}()
func TestParseConfig(t *testing.T) {
test.RunGoTest(t, func(t *testing.T) {
// 测试基本配置解析
t.Run("basic config", func(t *testing.T) {
host, status := test.NewTestHost(basicConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
config, err := host.GetMatchConfig()
require.NoError(t, err)
require.NotNil(t, config)
})
// 测试 IP 服务配置解析
t.Run("ip service config", func(t *testing.T) {
host, status := test.NewTestHost(ipConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
config, err := host.GetMatchConfig()
require.NoError(t, err)
require.NotNil(t, config)
})
// 测试 Nacos 服务配置解析
t.Run("nacos service config", func(t *testing.T) {
host, status := test.NewTestHost(nacosConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
config, err := host.GetMatchConfig()
require.NoError(t, err)
require.NotNil(t, config)
})
// 测试 Route 服务配置解析
t.Run("route service config", func(t *testing.T) {
host, status := test.NewTestHost(routeConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
config, err := host.GetMatchConfig()
require.NoError(t, err)
require.NotNil(t, config)
})
// 测试无效配置 - 缺少 policy
t.Run("invalid config - missing policy", func(t *testing.T) {
host, status := test.NewTestHost(invalidConfigMissingPolicy)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusFailed, status)
})
// 测试无效配置 - 缺少 timeout
t.Run("invalid config - missing timeout", func(t *testing.T) {
host, status := test.NewTestHost(invalidConfigMissingTimeout)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusFailed, status)
})
// 测试无效配置 - 无效的 timeout 格式
t.Run("invalid config - invalid timeout format", func(t *testing.T) {
host, status := test.NewTestHost(invalidConfigInvalidTimeout)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusFailed, status)
})
})
}
func TestOnHttpRequestHeaders(t *testing.T) {
test.RunTest(t, func(t *testing.T) {
// 测试基本请求头处理
t.Run("basic request headers", func(t *testing.T) {
host, status := test.NewTestHost(basicConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
action := host.CallOnHttpRequestHeaders([][2]string{
{":authority", "example.com"},
{":path", "/test"},
{":method", "GET"},
{"Content-Type", "application/json"},
})
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
// 模拟外部 OPA 服务的 HTTP 调用响应
// 模拟成功响应 - 允许访问
host.CallOnHttpCall([][2]string{
{":status", "200"},
{"content-type", "application/json"},
}, []byte(`{"result": true}`))
require.Equal(t, types.ActionContinue, host.GetHttpStreamAction())
host.CompleteHttp()
})
// 测试 OPA 服务拒绝访问
t.Run("opa service denies access", func(t *testing.T) {
host, status := test.NewTestHost(basicConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
action := host.CallOnHttpRequestHeaders([][2]string{
{":authority", "example.com"},
{":path", "/test"},
{":method", "POST"},
{"Content-Type", "application/json"},
})
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
// 模拟外部 OPA 服务的 HTTP 调用响应
// 模拟成功响应 - 拒绝访问
host.CallOnHttpCall([][2]string{
{":status", "200"},
{"content-type", "application/json"},
}, []byte(`{"result": false}`))
response := host.GetLocalResponse()
require.Equal(t, uint32(http.StatusUnauthorized), response.StatusCode)
require.Equal(t, "opa.server_not_allowed", response.StatusCodeDetail)
require.Equal(t, "opa server not allowed", string(response.Data))
host.CompleteHttp()
})
// 测试 OPA 服务返回非 200 状态码
t.Run("opa service returns non-200 status", func(t *testing.T) {
host, status := test.NewTestHost(basicConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
action := host.CallOnHttpRequestHeaders([][2]string{
{":authority", "example.com"},
{":path", "/test"},
{":method", "GET"},
{"Content-Type", "application/json"},
})
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
// 模拟外部 OPA 服务的 HTTP 调用响应
// 模拟 500 错误响应
host.CallOnHttpCall([][2]string{
{":status", "500"},
{"content-type", "application/json"},
}, []byte(`{"error": "internal error"}`))
response := host.GetLocalResponse()
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
require.Equal(t, "opa.status_ne_200", response.StatusCodeDetail)
require.Equal(t, "opa state not is 200", string(response.Data))
host.CompleteHttp()
})
// 测试 OPA 服务返回无效响应
t.Run("opa service returns invalid response", func(t *testing.T) {
host, status := test.NewTestHost(basicConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
action := host.CallOnHttpRequestHeaders([][2]string{
{":authority", "example.com"},
{":path", "/test"},
{":method", "GET"},
{"Content-Type", "application/json"},
})
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
// 模拟外部 OPA 服务的 HTTP 调用响应
// 模拟无效 JSON 响应
host.CallOnHttpCall([][2]string{
{":status", "200"},
{"content-type", "application/json"},
}, []byte(`invalid json`))
response := host.GetLocalResponse()
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
require.Equal(t, "opa.bad_response_body", response.StatusCodeDetail)
host.CompleteHttp()
})
// 测试 OPA 服务返回缺少 result 字段的响应
t.Run("opa service returns response without result field", func(t *testing.T) {
host, status := test.NewTestHost(basicConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
action := host.CallOnHttpRequestHeaders([][2]string{
{":authority", "example.com"},
{":path", "/test"},
{":method", "GET"},
{"Content-Type", "application/json"},
})
// 由于 OPA 调用是异步的,这里会返回 HeaderStopAllIterationAndWatermark
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
// 模拟外部 OPA 服务的 HTTP 调用响应
// 模拟缺少 result 字段的响应
host.CallOnHttpCall([][2]string{
{":status", "200"},
{"content-type", "application/json"},
}, []byte(`{"status": "ok"}`))
response := host.GetLocalResponse()
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
require.Equal(t, "opa.conversion_fail", response.StatusCodeDetail)
require.Equal(t, "rsp type conversion fail", string(response.Data))
host.CompleteHttp()
})
})
}
func TestOnHttpRequestBody(t *testing.T) {
test.RunTest(t, func(t *testing.T) {
// 测试带请求体的请求处理
t.Run("request with body", func(t *testing.T) {
host, status := test.NewTestHost(basicConfig)
defer host.Reset()
require.Equal(t, types.OnPluginStartStatusOK, status)
// 先处理请求头
action := host.CallOnHttpRequestHeaders([][2]string{
{":authority", "example.com"},
{":path", "/test"},
{":method", "POST"},
{"Content-Type", "application/json"},
})
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
// 处理请求体
requestBody := []byte(`{"key": "value", "data": "test"}`)
action = host.CallOnHttpRequestBody(requestBody)
// 由于 OPA 调用是异步的,这里会返回 ActionPause
require.Equal(t, types.ActionPause, action)
// 模拟外部 OPA 服务的 HTTP 调用响应
// 模拟成功响应 - 允许访问
host.CallOnHttpCall([][2]string{
{":status", "200"},
{"content-type", "application/json"},
}, []byte(`{"result": true}`))
require.Equal(t, types.ActionContinue, host.GetHttpStreamAction())
host.CompleteHttp()
})
})
}