mirror of
https://github.com/alibaba/higress.git
synced 2026-03-02 15:40:54 +08:00
365 lines
11 KiB
Go
365 lines
11 KiB
Go
// Copyright (c) 2022 Alibaba Group Holding Ltd.
|
||
//
|
||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||
// you may not use this file except in compliance with the License.
|
||
// You may obtain a copy of the License at
|
||
//
|
||
// http://www.apache.org/licenses/LICENSE-2.0
|
||
//
|
||
// Unless required by applicable law or agreed to in writing, software
|
||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
// See the License for the specific language governing permissions and
|
||
// limitations under the License.
|
||
|
||
package main
|
||
|
||
import (
|
||
"encoding/json"
|
||
"net/http"
|
||
"testing"
|
||
|
||
"github.com/higress-group/proxy-wasm-go-sdk/proxywasm/types"
|
||
"github.com/higress-group/wasm-go/pkg/test"
|
||
"github.com/stretchr/testify/require"
|
||
)
|
||
|
||
// 测试配置：基本配置
|
||
var basicConfig = func() json.RawMessage {
|
||
data, _ := json.Marshal(map[string]interface{}{
|
||
"policy": "example1",
|
||
"timeout": "5s",
|
||
"serviceSource": "k8s",
|
||
"serviceName": "opa",
|
||
"servicePort": "8181",
|
||
"namespace": "higress-backend",
|
||
})
|
||
return data
|
||
}()
|
||
|
||
// 测试配置：IP 服务配置
|
||
var ipConfig = func() json.RawMessage {
|
||
data, _ := json.Marshal(map[string]interface{}{
|
||
"policy": "example2",
|
||
"timeout": "3s",
|
||
"serviceSource": "ip",
|
||
"host": "192.168.1.100",
|
||
"servicePort": "8181",
|
||
})
|
||
return data
|
||
}()
|
||
|
||
// 测试配置：Nacos 服务配置
|
||
var nacosConfig = func() json.RawMessage {
|
||
data, _ := json.Marshal(map[string]interface{}{
|
||
"policy": "example3",
|
||
"timeout": "10s",
|
||
"serviceSource": "nacos",
|
||
"serviceName": "opa-service",
|
||
"servicePort": "8181",
|
||
"namespace": "public",
|
||
})
|
||
return data
|
||
}()
|
||
|
||
// 测试配置：Route 服务配置
|
||
var routeConfig = func() json.RawMessage {
|
||
data, _ := json.Marshal(map[string]interface{}{
|
||
"policy": "example4",
|
||
"timeout": "2s",
|
||
"serviceSource": "route",
|
||
"host": "example.com",
|
||
})
|
||
return data
|
||
}()
|
||
|
||
// 测试配置：无效配置（缺少 policy）
|
||
var invalidConfigMissingPolicy = func() json.RawMessage {
|
||
data, _ := json.Marshal(map[string]interface{}{
|
||
"timeout": "5s",
|
||
"serviceSource": "k8s",
|
||
"serviceName": "opa",
|
||
"servicePort": "8181",
|
||
})
|
||
return data
|
||
}()
|
||
|
||
// 测试配置：无效配置（缺少 timeout）
|
||
var invalidConfigMissingTimeout = func() json.RawMessage {
|
||
data, _ := json.Marshal(map[string]interface{}{
|
||
"policy": "example1",
|
||
"serviceSource": "k8s",
|
||
"serviceName": "opa",
|
||
"servicePort": "8181",
|
||
})
|
||
return data
|
||
}()
|
||
|
||
// 测试配置：无效配置（无效的 timeout 格式）
|
||
var invalidConfigInvalidTimeout = func() json.RawMessage {
|
||
data, _ := json.Marshal(map[string]interface{}{
|
||
"policy": "example1",
|
||
"timeout": "invalid-timeout",
|
||
"serviceSource": "k8s",
|
||
"serviceName": "opa",
|
||
"servicePort": "8181",
|
||
})
|
||
return data
|
||
}()
|
||
|
||
func TestParseConfig(t *testing.T) {
|
||
test.RunGoTest(t, func(t *testing.T) {
|
||
// 测试基本配置解析
|
||
t.Run("basic config", func(t *testing.T) {
|
||
host, status := test.NewTestHost(basicConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
config, err := host.GetMatchConfig()
|
||
require.NoError(t, err)
|
||
require.NotNil(t, config)
|
||
})
|
||
|
||
// 测试 IP 服务配置解析
|
||
t.Run("ip service config", func(t *testing.T) {
|
||
host, status := test.NewTestHost(ipConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
config, err := host.GetMatchConfig()
|
||
require.NoError(t, err)
|
||
require.NotNil(t, config)
|
||
})
|
||
|
||
// 测试 Nacos 服务配置解析
|
||
t.Run("nacos service config", func(t *testing.T) {
|
||
host, status := test.NewTestHost(nacosConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
config, err := host.GetMatchConfig()
|
||
require.NoError(t, err)
|
||
require.NotNil(t, config)
|
||
})
|
||
|
||
// 测试 Route 服务配置解析
|
||
t.Run("route service config", func(t *testing.T) {
|
||
host, status := test.NewTestHost(routeConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
config, err := host.GetMatchConfig()
|
||
require.NoError(t, err)
|
||
require.NotNil(t, config)
|
||
})
|
||
|
||
// 测试无效配置 - 缺少 policy
|
||
t.Run("invalid config - missing policy", func(t *testing.T) {
|
||
host, status := test.NewTestHost(invalidConfigMissingPolicy)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusFailed, status)
|
||
})
|
||
|
||
// 测试无效配置 - 缺少 timeout
|
||
t.Run("invalid config - missing timeout", func(t *testing.T) {
|
||
host, status := test.NewTestHost(invalidConfigMissingTimeout)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusFailed, status)
|
||
})
|
||
|
||
// 测试无效配置 - 无效的 timeout 格式
|
||
t.Run("invalid config - invalid timeout format", func(t *testing.T) {
|
||
host, status := test.NewTestHost(invalidConfigInvalidTimeout)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusFailed, status)
|
||
})
|
||
})
|
||
}
|
||
|
||
func TestOnHttpRequestHeaders(t *testing.T) {
|
||
test.RunTest(t, func(t *testing.T) {
|
||
// 测试基本请求头处理
|
||
t.Run("basic request headers", func(t *testing.T) {
|
||
host, status := test.NewTestHost(basicConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||
{":authority", "example.com"},
|
||
{":path", "/test"},
|
||
{":method", "GET"},
|
||
{"Content-Type", "application/json"},
|
||
})
|
||
|
||
// 由于 OPA 调用是异步的，这里会返回 HeaderStopAllIterationAndWatermark
|
||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||
|
||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||
// 模拟成功响应 - 允许访问
|
||
host.CallOnHttpCall([][2]string{
|
||
{":status", "200"},
|
||
{"content-type", "application/json"},
|
||
}, []byte(`{"result": true}`))
|
||
|
||
require.Equal(t, types.ActionContinue, host.GetHttpStreamAction())
|
||
host.CompleteHttp()
|
||
})
|
||
|
||
// 测试 OPA 服务拒绝访问
|
||
t.Run("opa service denies access", func(t *testing.T) {
|
||
host, status := test.NewTestHost(basicConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||
{":authority", "example.com"},
|
||
{":path", "/test"},
|
||
{":method", "POST"},
|
||
{"Content-Type", "application/json"},
|
||
})
|
||
|
||
// 由于 OPA 调用是异步的，这里会返回 HeaderStopAllIterationAndWatermark
|
||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||
|
||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||
// 模拟成功响应 - 拒绝访问
|
||
host.CallOnHttpCall([][2]string{
|
||
{":status", "200"},
|
||
{"content-type", "application/json"},
|
||
}, []byte(`{"result": false}`))
|
||
|
||
response := host.GetLocalResponse()
|
||
require.Equal(t, uint32(http.StatusUnauthorized), response.StatusCode)
|
||
require.Equal(t, "opa.server_not_allowed", response.StatusCodeDetail)
|
||
require.Equal(t, "opa server not allowed", string(response.Data))
|
||
host.CompleteHttp()
|
||
})
|
||
|
||
// 测试 OPA 服务返回非 200 状态码
|
||
t.Run("opa service returns non-200 status", func(t *testing.T) {
|
||
host, status := test.NewTestHost(basicConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||
{":authority", "example.com"},
|
||
{":path", "/test"},
|
||
{":method", "GET"},
|
||
{"Content-Type", "application/json"},
|
||
})
|
||
|
||
// 由于 OPA 调用是异步的，这里会返回 HeaderStopAllIterationAndWatermark
|
||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||
|
||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||
// 模拟 500 错误响应
|
||
host.CallOnHttpCall([][2]string{
|
||
{":status", "500"},
|
||
{"content-type", "application/json"},
|
||
}, []byte(`{"error": "internal error"}`))
|
||
|
||
response := host.GetLocalResponse()
|
||
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
|
||
require.Equal(t, "opa.status_ne_200", response.StatusCodeDetail)
|
||
require.Equal(t, "opa state not is 200", string(response.Data))
|
||
host.CompleteHttp()
|
||
})
|
||
|
||
// 测试 OPA 服务返回无效响应
|
||
t.Run("opa service returns invalid response", func(t *testing.T) {
|
||
host, status := test.NewTestHost(basicConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||
{":authority", "example.com"},
|
||
{":path", "/test"},
|
||
{":method", "GET"},
|
||
{"Content-Type", "application/json"},
|
||
})
|
||
|
||
// 由于 OPA 调用是异步的，这里会返回 HeaderStopAllIterationAndWatermark
|
||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||
|
||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||
// 模拟无效 JSON 响应
|
||
host.CallOnHttpCall([][2]string{
|
||
{":status", "200"},
|
||
{"content-type", "application/json"},
|
||
}, []byte(`invalid json`))
|
||
|
||
response := host.GetLocalResponse()
|
||
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
|
||
require.Equal(t, "opa.bad_response_body", response.StatusCodeDetail)
|
||
host.CompleteHttp()
|
||
})
|
||
|
||
// 测试 OPA 服务返回缺少 result 字段的响应
|
||
t.Run("opa service returns response without result field", func(t *testing.T) {
|
||
host, status := test.NewTestHost(basicConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||
{":authority", "example.com"},
|
||
{":path", "/test"},
|
||
{":method", "GET"},
|
||
{"Content-Type", "application/json"},
|
||
})
|
||
|
||
// 由于 OPA 调用是异步的，这里会返回 HeaderStopAllIterationAndWatermark
|
||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||
|
||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||
// 模拟缺少 result 字段的响应
|
||
host.CallOnHttpCall([][2]string{
|
||
{":status", "200"},
|
||
{"content-type", "application/json"},
|
||
}, []byte(`{"status": "ok"}`))
|
||
|
||
response := host.GetLocalResponse()
|
||
require.Equal(t, uint32(http.StatusInternalServerError), response.StatusCode)
|
||
require.Equal(t, "opa.conversion_fail", response.StatusCodeDetail)
|
||
require.Equal(t, "rsp type conversion fail", string(response.Data))
|
||
host.CompleteHttp()
|
||
})
|
||
})
|
||
}
|
||
|
||
func TestOnHttpRequestBody(t *testing.T) {
|
||
test.RunTest(t, func(t *testing.T) {
|
||
// 测试带请求体的请求处理
|
||
t.Run("request with body", func(t *testing.T) {
|
||
host, status := test.NewTestHost(basicConfig)
|
||
defer host.Reset()
|
||
require.Equal(t, types.OnPluginStartStatusOK, status)
|
||
|
||
// 先处理请求头
|
||
action := host.CallOnHttpRequestHeaders([][2]string{
|
||
{":authority", "example.com"},
|
||
{":path", "/test"},
|
||
{":method", "POST"},
|
||
{"Content-Type", "application/json"},
|
||
})
|
||
require.Equal(t, types.HeaderStopAllIterationAndWatermark, action)
|
||
|
||
// 处理请求体
|
||
requestBody := []byte(`{"key": "value", "data": "test"}`)
|
||
action = host.CallOnHttpRequestBody(requestBody)
|
||
|
||
// 由于 OPA 调用是异步的，这里会返回 ActionPause
|
||
require.Equal(t, types.ActionPause, action)
|
||
|
||
// 模拟外部 OPA 服务的 HTTP 调用响应
|
||
// 模拟成功响应 - 允许访问
|
||
host.CallOnHttpCall([][2]string{
|
||
{":status", "200"},
|
||
{"content-type", "application/json"},
|
||
}, []byte(`{"result": true}`))
|
||
|
||
require.Equal(t, types.ActionContinue, host.GetHttpStreamAction())
|
||
host.CompleteHttp()
|
||
})
|
||
})
|
||
}
|