mirror of
https://github.com/DeBrosOfficial/network.git
synced 2025-10-06 13:49:07 +00:00
anonpenguin
917b0e5acd
- Require API key or JWT by default for client connections - Auto-derive namespace from JWT claim or API key format `ak_<rand>:<namespace>` - Deny calls if per-call namespace override mismatches resolved namespace - Guard Storage, PubSub, Database, and NetworkInfo operations with access checks - Add context helpers for consistent namespace override handling - Update docs and add end-to-end and unit tests for authentication logic
46 lines
1.3 KiB
Go
46 lines
1.3 KiB
Go
package auth
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
func withTempHome(t *testing.T) func() {
|
|
d := t.TempDir()
|
|
oldHome := os.Getenv("HOME")
|
|
os.Setenv("HOME", d)
|
|
return func() { os.Setenv("HOME", oldHome) }
|
|
}
|
|
|
|
func TestCredentialStoreCRUD(t *testing.T) {
|
|
defer withTempHome(t)()
|
|
store, err := LoadCredentials()
|
|
if err != nil { t.Fatal(err) }
|
|
if len(store.Gateways) != 0 { t.Fatalf("expected empty") }
|
|
|
|
creds := &Credentials{APIKey: "ak_1:ns", Namespace: "ns", IssuedAt: time.Now()}
|
|
store.SetCredentialsForGateway("http://gw", creds)
|
|
if err := store.SaveCredentials(); err != nil { t.Fatal(err) }
|
|
|
|
store2, err := LoadCredentials()
|
|
if err != nil { t.Fatal(err) }
|
|
c, ok := store2.GetCredentialsForGateway("http://gw")
|
|
if !ok || c.APIKey != "ak_1:ns" { t.Fatalf("not found") }
|
|
|
|
store2.RemoveCredentialsForGateway("http://gw")
|
|
if err := store2.SaveCredentials(); err != nil { t.Fatal(err) }
|
|
|
|
path, _ := GetCredentialsPath()
|
|
if _, err := os.Stat(filepath.Dir(path)); err != nil { t.Fatal(err) }
|
|
}
|
|
|
|
func TestIsExpiredAndValid(t *testing.T) {
|
|
c := &Credentials{APIKey: "ak", Namespace: "ns", ExpiresAt: time.Now().Add(-time.Hour)}
|
|
if !c.IsExpired() { t.Fatalf("expected expired") }
|
|
if c.IsValid() { t.Fatalf("expired should be invalid") }
|
|
c.ExpiresAt = time.Time{}
|
|
if !c.IsValid() { t.Fatalf("no expiry should be valid") }
|
|
}
|