higress/test/e2e/conformance/tests/go-wasm-request-validation.go

// Copyright (c) 2022 Alibaba Group Holding Ltd.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package tests

import (
	"testing"

	"github.com/alibaba/higress/test/e2e/conformance/utils/http"
	"github.com/alibaba/higress/test/e2e/conformance/utils/suite"
)

func init() {
	Register(WasmPluginsRequestValidation)
}

var WasmPluginsRequestValidation = suite.ConformanceTest{
	ShortName:   "WasmPluginsRequestValidation",
	Description: "The Ingress in the higress-conformance-infra namespace test the request-validation wasmplugins.",
	Manifests:   []string{"tests/go-wasm-request-validation.yaml"},
	Features:    []suite.SupportedFeature{suite.WASMGoConformanceFeature},
	Test: func(t *testing.T, suite *suite.ConformanceTestSuite) {
		testCases := []http.Assertion{
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "request validation pass",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 200,
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "header lack of require parameter",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body lack of require parameter",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body enum payload not in enum list",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_3",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body bool payload not bool type",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": "string",
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body integer payload not in range",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 70000,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body string payload length not in range",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "a",
								"regex_payload": "abc123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body regex payload not match regex pattern",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc@123",
								"array_payload": [200, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body array payload not in array range",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [150, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body array payload not unique array items",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [302, 302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
			{
				Meta: http.AssertionMeta{
					TestCaseName:    "body array payload length not in range",
					TargetBackend:   "infra-backend-v1",
					TargetNamespace: "higress-conformance-infra",
					CompareTarget:   http.CompareTargetResponse,
				},
				Request: http.AssertionRequest{
					ActualRequest: http.Request{
						Host: "foo.com",
						Path: "/foo",
						Headers: map[string]string{
							"enum_payload": "enum_string_1",
						},
						Body: []byte(`
							{
								"enum_payload": "enum_string_1",
								"bool_payload": true,
								"integer_payload": 100,
								"string_payload": "abc",
								"regex_payload": "abc123",
								"array_payload": [302]
							}
 						`),
						ContentType: http.ContentTypeApplicationJson,
					},
				},
				Response: http.AssertionResponse{
					ExpectedResponse: http.Response{
						StatusCode: 403,
						Body:       []byte(`customize reject message`),
					},
				},
			},
		}

		t.Run("WasmPlugins request-validation", func(t *testing.T) {
			for _, testcase := range testCases {
				t.Logf("Running test case: %s", testcase.Meta.TestCaseName)
				http.MakeRequestAndExpectEventuallyConsistentResponse(t, suite.RoundTripper, suite.TimeoutConfig, suite.GatewayAddress, testcase)
			}
		})
	},
}