52ae0c5802
Some checks failed
cache-seeder / prune (push) Has been skipped
cache-seeder / frontend (push) Failing after 3s
cache-seeder / python (push) Failing after 3s
cache-seeder / gobuild (push) Failing after 4s
cache-seeder / lint (bindata, lint-backend) (push) Failing after 3s
giteabot backport / giteabot (push) Has been skipped
giteabot / giteabot (push) Has been skipped
cache-prune / prune (push) Has been skipped
release-nightly-snapcraft / build-and-publish (ubuntu-24.04) (push) Has been cancelled
release-nightly-snapcraft / build-and-publish (ubuntu-24.04-arm) (push) Has been cancelled
release-nightly / nightly-binary (push) Has been cancelled
release-nightly / nightly-container (push) Has been cancelled
cron-renovate / cron-renovate (push) Has been skipped
65 lines
1.9 KiB
Go
65 lines
1.9 KiB
Go
// Copyright 2024 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package actions
|
|
|
|
import (
|
|
"net/http"
|
|
"testing"
|
|
|
|
"gitea.dev/modules/json"
|
|
"gitea.dev/modules/setting"
|
|
|
|
"github.com/golang-jwt/jwt/v5"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestCreateAuthorizationToken(t *testing.T) {
|
|
var taskID int64 = 23
|
|
token, err := CreateAuthorizationToken(taskID, 1, 2)
|
|
assert.NoError(t, err)
|
|
assert.NotEmpty(t, token)
|
|
claims := jwt.MapClaims{}
|
|
_, err = jwt.ParseWithClaims(token, claims, func(t *jwt.Token) (any, error) {
|
|
return setting.GetGeneralTokenSigningSecret(), nil
|
|
})
|
|
assert.NoError(t, err)
|
|
scp, ok := claims["scp"]
|
|
assert.True(t, ok, "Has scp claim in jwt token")
|
|
assert.Contains(t, scp, "Actions.Results:1:2")
|
|
taskIDClaim, ok := claims["TaskID"]
|
|
assert.True(t, ok, "Has TaskID claim in jwt token")
|
|
assert.InDelta(t, float64(taskID), taskIDClaim, 0, "Supplied taskid must match stored one")
|
|
acClaim, ok := claims["ac"]
|
|
assert.True(t, ok, "Has ac claim in jwt token")
|
|
ac, ok := acClaim.(string)
|
|
assert.True(t, ok, "ac claim is a string for buildx gha cache")
|
|
scopes := []actionsCacheScope{}
|
|
err = json.Unmarshal([]byte(ac), &scopes)
|
|
assert.NoError(t, err, "ac claim is a json list for buildx gha cache")
|
|
assert.GreaterOrEqual(t, len(scopes), 1, "Expected at least one action cache scope for buildx gha cache")
|
|
}
|
|
|
|
func TestParseAuthorizationToken(t *testing.T) {
|
|
var taskID int64 = 23
|
|
token, err := CreateAuthorizationToken(taskID, 1, 2)
|
|
assert.NoError(t, err)
|
|
assert.NotEmpty(t, token)
|
|
headers := http.Header{}
|
|
headers.Set("Authorization", "Bearer "+token)
|
|
rTaskID, err := ParseAuthorizationToken(&http.Request{
|
|
Header: headers,
|
|
})
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, taskID, rTaskID)
|
|
}
|
|
|
|
func TestParseAuthorizationTokenNoAuthHeader(t *testing.T) {
|
|
headers := http.Header{}
|
|
rTaskID, err := ParseAuthorizationToken(&http.Request{
|
|
Header: headers,
|
|
})
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, int64(0), rTaskID)
|
|
}
|