mirror of
https://github.com/alibaba/higress.git
synced 2026-02-06 23:21:08 +08:00
246 lines
8.1 KiB
C++
246 lines
8.1 KiB
C++
// Copyright (c) 2022 Alibaba Group Holding Ltd.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#include "extensions/key_auth/plugin.h"
|
|
|
|
#include "common/base64.h"
|
|
#include "gmock/gmock.h"
|
|
#include "gtest/gtest.h"
|
|
#include "include/proxy-wasm/context.h"
|
|
#include "include/proxy-wasm/null.h"
|
|
|
|
namespace proxy_wasm {
|
|
namespace null_plugin {
|
|
namespace key_auth {
|
|
|
|
NullPluginRegistry* context_registry_;
|
|
RegisterNullVmPluginFactory register_key_auth_plugin("key_auth", []() {
|
|
return std::make_unique<NullPlugin>(key_auth::context_registry_);
|
|
});
|
|
|
|
class MockContext : public proxy_wasm::ContextBase {
|
|
public:
|
|
MockContext(WasmBase* wasm) : ContextBase(wasm) {}
|
|
|
|
MOCK_METHOD(BufferInterface*, getBuffer, (WasmBufferType));
|
|
MOCK_METHOD(WasmResult, log, (uint32_t, std::string_view));
|
|
MOCK_METHOD(WasmResult, getHeaderMapValue,
|
|
(WasmHeaderMapType /* type */, std::string_view /* key */,
|
|
std::string_view* /*result */));
|
|
MOCK_METHOD(WasmResult, addHeaderMapValue,
|
|
(WasmHeaderMapType /* type */, std::string_view /* key */,
|
|
std::string_view /* value */));
|
|
MOCK_METHOD(WasmResult, sendLocalResponse,
|
|
(uint32_t /* response_code */, std::string_view /* body */,
|
|
Pairs /* additional_headers */, uint32_t /* grpc_status */,
|
|
std::string_view /* details */));
|
|
MOCK_METHOD(WasmResult, getProperty, (std::string_view, std::string*));
|
|
};
|
|
|
|
class KeyAuthTest : public ::testing::Test {
|
|
protected:
|
|
KeyAuthTest() {
|
|
// Initialize test VM
|
|
test_vm_ = createNullVm();
|
|
wasm_base_ = std::make_unique<WasmBase>(
|
|
std::move(test_vm_), "test-vm", "", "",
|
|
std::unordered_map<std::string, std::string>{},
|
|
AllowedCapabilitiesMap{});
|
|
wasm_base_->load("key_auth");
|
|
wasm_base_->initialize();
|
|
|
|
// Initialize host side context
|
|
mock_context_ = std::make_unique<MockContext>(wasm_base_.get());
|
|
current_context_ = mock_context_.get();
|
|
|
|
ON_CALL(*mock_context_, log(testing::_, testing::_))
|
|
.WillByDefault([](uint32_t, std::string_view m) {
|
|
std::cerr << m << "\n";
|
|
return WasmResult::Ok;
|
|
});
|
|
|
|
ON_CALL(*mock_context_, getHeaderMapValue(WasmHeaderMapType::RequestHeaders,
|
|
testing::_, testing::_))
|
|
.WillByDefault([&](WasmHeaderMapType, std::string_view header,
|
|
std::string_view* result) {
|
|
if (header == ":authority") {
|
|
*result = authority_;
|
|
}
|
|
if (header == ":path") {
|
|
*result = path_;
|
|
}
|
|
if (header == "x-api-key") {
|
|
*result = key_header_;
|
|
}
|
|
return WasmResult::Ok;
|
|
});
|
|
ON_CALL(*mock_context_, addHeaderMapValue(WasmHeaderMapType::RequestHeaders,
|
|
testing::_, testing::_))
|
|
.WillByDefault([&](WasmHeaderMapType, std::string_view key,
|
|
std::string_view value) { return WasmResult::Ok; });
|
|
|
|
ON_CALL(*mock_context_, getProperty(testing::_, testing::_))
|
|
.WillByDefault([&](std::string_view path, std::string* result) {
|
|
*result = route_name_;
|
|
return WasmResult::Ok;
|
|
});
|
|
|
|
// Initialize Wasm sandbox context
|
|
root_context_ = std::make_unique<PluginRootContext>(0, "");
|
|
context_ = std::make_unique<PluginContext>(1, root_context_.get());
|
|
}
|
|
~KeyAuthTest() override {}
|
|
|
|
std::unique_ptr<WasmBase> wasm_base_;
|
|
std::unique_ptr<WasmVm> test_vm_;
|
|
std::unique_ptr<MockContext> mock_context_;
|
|
|
|
std::unique_ptr<PluginRootContext> root_context_;
|
|
std::unique_ptr<PluginContext> context_;
|
|
|
|
std::string path_;
|
|
std::string authority_;
|
|
std::string route_name_;
|
|
std::string key_header_;
|
|
};
|
|
|
|
TEST_F(KeyAuthTest, InQuery) {
|
|
std::string configuration = R"(
|
|
{
|
|
"_rules_": [
|
|
{
|
|
"_match_route_": ["test"],
|
|
"credentials":["abc"],
|
|
"keys": ["apiKey", "x-api-key"]
|
|
}
|
|
]
|
|
})";
|
|
BufferBase buffer;
|
|
buffer.set(configuration);
|
|
EXPECT_CALL(*mock_context_, getBuffer(WasmBufferType::PluginConfiguration))
|
|
.WillOnce([&buffer](WasmBufferType) { return &buffer; });
|
|
EXPECT_TRUE(root_context_->configure(configuration.size()));
|
|
|
|
route_name_ = "test";
|
|
path_ = "/test?hello=123&apiKey=abc";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::Continue);
|
|
|
|
path_ = "/test?hello=123";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
|
|
path_ = "/test?hello=123&apiKey=123";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
}
|
|
|
|
TEST_F(KeyAuthTest, InQueryWithConsumer) {
|
|
std::string configuration = R"(
|
|
{
|
|
"consumers" : [ {"credential" : "abc", "name" : "consumer1"} ],
|
|
"keys" : [ "apiKey", "x-api-key" ],
|
|
"_rules_" : [ {"_match_route_" : ["test"], "allow" : ["consumer1"]} ]
|
|
})";
|
|
BufferBase buffer;
|
|
buffer.set(configuration);
|
|
EXPECT_CALL(*mock_context_, getBuffer(WasmBufferType::PluginConfiguration))
|
|
.WillOnce([&buffer](WasmBufferType) { return &buffer; });
|
|
EXPECT_TRUE(root_context_->configure(configuration.size()));
|
|
|
|
route_name_ = "test";
|
|
path_ = "/test?hello=1&apiKey=abc";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::Continue);
|
|
|
|
path_ = "/test?hello=123";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
|
|
path_ = "/test?hello=123&apiKey=123";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
}
|
|
|
|
TEST_F(KeyAuthTest, InHeader) {
|
|
std::string configuration = R"(
|
|
{
|
|
"credentials":["abc", "xyz"],
|
|
"keys": ["x-api-key"]
|
|
})";
|
|
BufferBase buffer;
|
|
buffer.set(configuration);
|
|
EXPECT_CALL(*mock_context_, getBuffer(WasmBufferType::PluginConfiguration))
|
|
.WillOnce([&buffer](WasmBufferType) { return &buffer; });
|
|
EXPECT_TRUE(root_context_->configure(configuration.size()));
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "abc";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::Continue);
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "xyz";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::Continue);
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "123";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
}
|
|
|
|
TEST_F(KeyAuthTest, InHeaderWithConsumer) {
|
|
std::string configuration = R"(
|
|
{
|
|
"consumers" : [ {"credential" : "abc", "name" : "consumer1"},
|
|
{"credential" : "xyz", "name" : "consumer1"} ],
|
|
"keys": ["x-api-key"]
|
|
})";
|
|
BufferBase buffer;
|
|
buffer.set(configuration);
|
|
EXPECT_CALL(*mock_context_, getBuffer(WasmBufferType::PluginConfiguration))
|
|
.WillOnce([&buffer](WasmBufferType) { return &buffer; });
|
|
EXPECT_TRUE(root_context_->configure(configuration.size()));
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "abc";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::Continue);
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "xyz";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::Continue);
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
|
|
path_ = "/test?hello=123";
|
|
key_header_ = "123";
|
|
EXPECT_EQ(context_->onRequestHeaders(0, false),
|
|
FilterHeadersStatus::StopIteration);
|
|
}
|
|
|
|
} // namespace key_auth
|
|
} // namespace null_plugin
|
|
} // namespace proxy_wasm
|