00b2e1a7d7
* by having megacheck in disable it also disabled staticcheck * fix closing body * keep interfacer disabled * hide bodies * don't use deprecated func * fix dead code * fix potential overrun * keep stylecheck disabled * don't pass nil as context * fix infinite recursion * remove extraneous return * fix data race * use correct func * ignore unused var * remove unused consts
90 lines
2.1 KiB
Go
90 lines
2.1 KiB
Go
// Copyright (C) 2019 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package grpcauth_test
|
|
|
|
import (
|
|
"context"
|
|
"net"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/codes"
|
|
pb "google.golang.org/grpc/examples/helloworld/helloworld"
|
|
"google.golang.org/grpc/status"
|
|
|
|
"storj.io/storj/internal/errs2"
|
|
"storj.io/storj/internal/testcontext"
|
|
"storj.io/storj/pkg/auth"
|
|
"storj.io/storj/pkg/auth/grpcauth"
|
|
)
|
|
|
|
func TestAPIKey(t *testing.T) {
|
|
ctx := testcontext.New(t)
|
|
defer ctx.Cleanup()
|
|
|
|
listener, err := net.Listen("tcp", "127.0.0.1:0")
|
|
require.NoError(t, err)
|
|
// listener is closed in server.Stop() internally
|
|
|
|
server := grpc.NewServer(
|
|
grpc.UnaryInterceptor(grpcauth.InterceptAPIKey),
|
|
)
|
|
defer server.Stop()
|
|
|
|
pb.RegisterGreeterServer(server, &helloServer{})
|
|
|
|
ctx.Go(func() error {
|
|
err := errs2.IgnoreCanceled(server.Serve(listener))
|
|
t.Log(err)
|
|
return err
|
|
})
|
|
|
|
type testcase struct {
|
|
apikey string
|
|
expected codes.Code
|
|
}
|
|
|
|
for _, test := range []testcase{
|
|
{"", codes.Unauthenticated},
|
|
{"wrong key", codes.Unauthenticated},
|
|
{"good key", codes.OK},
|
|
} {
|
|
conn, err := grpc.DialContext(ctx, listener.Addr().String(),
|
|
grpc.WithPerRPCCredentials(grpcauth.NewAPIKeyCredentials(test.apikey)),
|
|
grpc.WithBlock(),
|
|
grpc.WithInsecure(),
|
|
)
|
|
require.NoError(t, err)
|
|
|
|
client := pb.NewGreeterClient(conn)
|
|
response, err := client.SayHello(ctx, &pb.HelloRequest{Name: "Me"})
|
|
|
|
if test.expected == codes.OK {
|
|
require.NoError(t, err)
|
|
require.Equal(t, response.Message, "Hello Me")
|
|
} else {
|
|
require.Error(t, err)
|
|
require.Equal(t, status.Code(err), test.expected)
|
|
}
|
|
|
|
require.NoError(t, conn.Close())
|
|
}
|
|
}
|
|
|
|
type helloServer struct{}
|
|
|
|
// SayHello implements helloworld.GreeterServer
|
|
func (s *helloServer) SayHello(ctx context.Context, in *pb.HelloRequest) (*pb.HelloReply, error) {
|
|
key, ok := auth.GetAPIKey(ctx)
|
|
if !ok {
|
|
return nil, status.Errorf(codes.Unauthenticated, "Invalid API credentials")
|
|
}
|
|
if string(key) != "good key" {
|
|
return nil, status.Errorf(codes.Unauthenticated, "Invalid API credentials")
|
|
}
|
|
|
|
return &pb.HelloReply{Message: "Hello " + in.Name}, nil
|
|
}
|