OXYGENHUB
# 19c71c828f86 oxygenhub / crates / hub / tests / browse.rs
11.9 KiB · Rust · last changed Tests: browse's clones never see another test's OXY_TOKEN 19 days ago source blame history raw
1
//! End to end: a hub in a temporary data directory, a real `oxy` client
2
//! pushing over the wire protocol, and every milestone 0.1 page fetched.
3
4
use axum::body::Body;
5
use axum::http::{Request, StatusCode};
6
use http_body_util::BodyExt;
7
use oxy_core::repo::Repo;
8
use oxygenhub::config::Config;
9
use oxygenhub::repos::RepoName;
10
use oxygenhub::{db, Shared};
11
use std::path::Path;
12
use tower::ServiceExt;
13
14
/// Point `$OXY_HOME` at a throwaway directory so the client's identity and
15
/// configuration never touch the developer's.
16
fn hermetic() {
17
    static ONCE: std::sync::Once = std::sync::Once::new();
18
    static DIR: std::sync::OnceLock<tempfile::TempDir> = std::sync::OnceLock::new();
19
    ONCE.call_once(|| {
20
        let d = tempfile::tempdir().unwrap();
21
        std::env::set_var("OXY_HOME", d.path());
22
        DIR.set(d).ok();
23
    });
24
}
25
26
fn write(root: &Path, rel: &str, content: &[u8]) {
27
    let p = root.join(rel);
28
    std::fs::create_dir_all(p.parent().unwrap()).unwrap();
29
    std::fs::write(p, content).unwrap();
30
}
31
32
struct Hub {
33
    app: Shared,
34
    base: String,
35
    _dir: tempfile::TempDir,
36
}
37
38
/// Held by every clone here and while OXY_TOKEN is set: the variable is the
39
/// whole process's, and a clone in another test sent it (oxygenhub#247).
40
static ENV: std::sync::Mutex<()> = std::sync::Mutex::new(());
41
42
fn clone(url: &str, dir: &Path) -> Result<Repo, oxy_core::repo::RepoError> {
43
    let _env = ENV.lock().unwrap_or_else(|p| p.into_inner());
44
    Repo::clone(url, dir)
45
}
46
47
async fn hub(push_tokens: Vec<String>) -> Hub {
48
    hermetic();
49
    let dir = tempfile::tempdir().unwrap();
50
    let mut config = Config::load(dir.path()).unwrap();
51
    config.auth.push_tokens = push_tokens;
52
    let listener = tokio::net::TcpListener::bind("127.0.0.1:0").await.unwrap();
53
    let port = listener.local_addr().unwrap().port();
54
    config.server.base_url = format!("http://127.0.0.1:{port}");
55
    let app = oxygenhub::build(config).await.unwrap();
56
    let router = oxygenhub::router(app.clone());
57
    tokio::spawn(async move { axum::serve(listener, router).await.unwrap() });
58
    Hub { app, base: format!("http://127.0.0.1:{port}"), _dir: dir }
59
}
60
61
async fn get(app: &Shared, path: &str) -> (StatusCode, String) {
62
    let res = oxygenhub::router(app.clone()).oneshot(Request::get(path).body(Body::empty()).unwrap()).await.unwrap();
63
    let status = res.status();
64
    let bytes = res.into_body().collect().await.unwrap().to_bytes();
65
    (status, String::from_utf8_lossy(&bytes).into_owned())
66
}
67
68
async fn page(app: &Shared, path: &str) -> String {
69
    let (status, body) = get(app, path).await;
70
    assert_eq!(status, StatusCode::OK, "{path}: {}", body.lines().find(|l| l.contains("lead")).unwrap_or(""));
71
    body
72
}
73
74
/// Push a small history from a client: two changes on main, a second
75
/// bookmark, a tag.
76
fn populate(url: &str, work: &Path) -> (Repo, String, String) {
77
    // The hosted repository is unbound until the first push, so it cannot
78
    // be cloned yet: start locally and push, as moving an existing
79
    // repository to the hub does.
80
    assert!(clone(url, &work.join("early")).err().unwrap().to_string().contains("unbound"));
81
    let mut client = Repo::init(work).unwrap();
82
    // A signing identity, so changes and the tag travel signed.
83
    client.create_identity("Test Author", "[email protected]", oxy_core::repo::IdentityScope::User).unwrap();
84
    client.config.set("remote.origin.url", url).unwrap();
85
    client.config.set("core.sign", "change").unwrap();
86
    client.save_config().unwrap();
87
    write(work, "README.md", b"# Demo\n\nSee [docs](docs/guide.md).\n");
88
    write(work, "src/main.rs", b"fn main() {\n    println!(\"hi\");\n}\n");
89
    write(work, "docs/guide.md", b"# Guide\n");
90
    client.snapshot("test").unwrap();
91
    let c1 = client.commit("Initial import", &[]).unwrap();
92
    write(work, "src/main.rs", b"fn main() {\n    println!(\"hello\");\n}\n\nfn two() {}\n");
93
    client.snapshot("test").unwrap();
94
    let c2 = client.commit("Greet properly\n\nAlso adds two().", &[]).unwrap();
95
    client.tag_create("v0.1", &[c2], "First tag").unwrap();
96
    client.bookmark_create("feature", Some(&[c1])).unwrap();
97
    let results = client.push("origin", false).unwrap();
98
    assert!(results.iter().all(|r| r.ok), "{results:?}");
99
    let results = client.push_bookmark("origin", "feature", false).unwrap();
100
    assert!(results.iter().all(|r| r.ok), "{results:?}");
101
    // Bound now: a clone shares the id.
102
    let clone = clone(url, &work.join("clone")).unwrap();
103
    assert_eq!(clone.id().unwrap(), client.id().unwrap());
104
    (client, c1.to_hex(), c2.to_hex())
105
}
106
107
#[tokio::test(flavor = "multi_thread")]
108
async fn create_push_and_browse() {
109
    let h = hub(vec![]).await;
110
    let name = RepoName::parse("andy/demo").unwrap();
111
    h.app.repos.create(&name, None).unwrap();
112
    db::repos::create(&h.app.db, "andy", "demo", "A demo", hub_api::Visibility::Public).await.unwrap();
113
    let work = tempfile::tempdir().unwrap();
114
    let (_client, c1, c2) = populate(&format!("{}/andy/demo", h.base), work.path());
115
116
    // Front page and owner page list it.
117
    let home = page(&h.app, "/").await;
118
    assert!(home.contains("/andy/demo"), "{home}");
119
    assert!(page(&h.app, "/andy").await.contains("demo"));
120
    assert_eq!(get(&h.app, "/nobody").await.0, StatusCode::NOT_FOUND);
121
122
    // Overview: tree, README rendered with rebased links, clone URL, counts.
123
    let o = page(&h.app, "/andy/demo").await;
124
    assert!(o.contains("src"), "tree entries");
125
    assert!(o.contains("href=\"/andy/demo/file/main/docs/guide.md\""), "README link rebased: {o}");
126
    assert!(o.contains(&format!("oxy clone {}/andy/demo", h.base)));
127
    assert!(o.contains("2 changes"));
128
    assert!(o.contains("v0.1"));
129
    assert!(o.contains("feature"));
130
131
    // Tree at a bookmark, a tag and a change; file with highlighting; raw; blame.
132
    let t = page(&h.app, "/andy/demo/tree/main/src").await;
133
    assert!(t.contains("main.rs"));
134
    assert!(page(&h.app, "/andy/demo/tree/v0.1").await.contains("README.md"));
135
    assert!(page(&h.app, &format!("/andy/demo/tree/{}", &c1[..10])).await.contains("README.md"));
136
    assert_eq!(get(&h.app, "/andy/demo/tree/main/nope").await.0, StatusCode::NOT_FOUND);
137
    let f = page(&h.app, "/andy/demo/file/main/src/main.rs").await;
138
    assert!(f.contains("storage type function"), "highlighted: {f}");
139
    assert!(f.contains("id=\"L5\""));
140
    assert!(f.contains("Rust"));
141
    let (status, raw) = get(&h.app, "/andy/demo/file/main/src/main.rs?plain=1").await;
142
    assert_eq!(status, StatusCode::OK);
143
    assert_eq!(raw, "fn main() {\n    println!(\"hello\");\n}\n\nfn two() {}\n");
144
    let b = page(&h.app, "/andy/demo/file/main/src/main.rs?blame=1").await;
145
    assert!(b.contains(&c1[..8]) && b.contains(&c2[..8]), "both changes blamed: {b}");
146
    let md = page(&h.app, "/andy/demo/file/main/README.md").await;
147
    assert!(md.contains("<h1>Demo</h1>"), "markdown rendered");
148
    // Last-change JSON for tree rows.
149
    let (status, json) = get(&h.app, "/andy/demo/last/main?paths=README.md,src").await;
150
    assert_eq!(status, StatusCode::OK);
151
    assert!(json.contains("Initial import") && json.contains("Greet properly"), "{json}");
152
153
    // History with graph rows, filtered by path; change page with diff; compare.
154
    let hist = page(&h.app, "/andy/demo/changes/main").await;
155
    assert!(hist.contains("Greet properly") && hist.contains("Initial import"));
156
    assert!(hist.contains("<circle"), "graph drawn");
157
    assert!(hist.contains("lbl-tag") && hist.contains("v0.1"), "tag label on its head");
158
    let by_path = page(&h.app, "/andy/demo/changes/main?path=README.md").await;
159
    assert!(by_path.contains("Initial import") && !by_path.contains("Greet properly"));
160
    let c = page(&h.app, &format!("/andy/demo/change/{c2}")).await;
161
    assert!(c.contains("Also adds two()"), "body shown");
162
    assert!(c.contains("+fn two() {}") || c.contains("fn two() {}"), "diff shown: {c}");
163
    assert!(c.contains("class=\"add\"") && c.contains("class=\"del\""));
164
    assert!(c.contains(&c1[..12]), "dependency listed");
165
    assert!(page(&h.app, &format!("/andy/demo/change/{}", &c2[..8])).await.contains("Greet properly"));
166
    let cmp = page(&h.app, "/andy/demo/compare/feature...main").await;
167
    assert!(cmp.contains("1 change") && cmp.contains("Greet properly"));
168
    assert_eq!(get(&h.app, "/andy/demo/compare/feature").await.0, StatusCode::BAD_REQUEST);
169
170
    // Bookmarks, tags, conflicts (none), trust (no policy), pushes.
171
    let bm = page(&h.app, "/andy/demo/bookmarks").await;
172
    assert!(bm.contains("feature") && bm.contains("default"));
173
    let tags = page(&h.app, "/andy/demo/tags").await;
174
    assert!(tags.contains("v0.1") && tags.contains("First tag"));
175
    assert!(page(&h.app, "/andy/demo/conflicts").await.contains("No bookmark carries a conflict"));
176
    let trust = page(&h.app, "/andy/demo/trust").await;
177
    assert!(trust.contains("No trust policy") && trust.contains(&h.app.hub_key.key.to_hex()));
178
    assert!(trust.contains("2 signed"), "signed changes verified on the host: {trust}");
179
    assert!(c.contains("signed by Test Author"), "change page shows the signer");
180
    let pushes = page(&h.app, "/andy/demo/pushes").await;
181
    assert!(pushes.contains("accepted") && pushes.contains("main"), "{pushes}");
182
183
    // API and small endpoints.
184
    let (_, repos) = get(&h.app, "/api/v1/repos").await;
185
    assert!(repos.contains("\"name\":\"demo\""));
186
    let (_, bms) = get(&h.app, "/api/v1/repos/andy/demo/bookmarks").await;
187
    assert!(bms.contains("\"default\":true"));
188
    let (status, key) = get(&h.app, "/.well-known/oxyhub-key").await;
189
    assert_eq!(status, StatusCode::OK);
190
    assert!(!key.is_empty());
191
    assert!(get(&h.app, "/health").await.1.contains("\"ok\":true"));
192
    assert_eq!(get(&h.app, "/style.css").await.0, StatusCode::OK);
193
    assert_eq!(get(&h.app, "/static/fonts/Barlow-400.woff2").await.0, StatusCode::OK);
194
    assert_eq!(get(&h.app, "/andy/demo/oxy/v1/nothing").await.0, StatusCode::NOT_FOUND);
195
}
196
197
#[tokio::test(flavor = "multi_thread")]
198
async fn private_repositories_and_push_tokens() {
199
    let h = hub(vec!["s3cret".into()]).await;
200
    for (name, vis) in [("pub", hub_api::Visibility::Public), ("priv", hub_api::Visibility::Private)] {
201
        // `priv` is created bound so it can be cloned while still empty.
202
        let id = if name == "priv" { Some([7u8; 16]) } else { None };
203
        h.app.repos.create(&RepoName::parse(&format!("andy/{name}")).unwrap(), id).unwrap();
204
        db::repos::create(&h.app.db, "andy", name, "", vis).await.unwrap();
205
    }
206
    // The private one is invisible on pages and to anonymous clients.
207
    assert_eq!(get(&h.app, "/andy/priv").await.0, StatusCode::NOT_FOUND);
208
    assert!(!page(&h.app, "/").await.contains("priv"));
209
    assert!(clone(&format!("{}/andy/priv", h.base), &tempfile::tempdir().unwrap().path().join("x")).is_err());
210
    // Anonymous push to the public one is refused; with the token it lands.
211
    let work = tempfile::tempdir().unwrap();
212
    let mut client = Repo::init(work.path()).unwrap();
213
    client.config.set("remote.origin.url", &format!("{}/andy/pub", h.base)).unwrap();
214
    write(work.path(), "a.txt", b"a\n");
215
    client.snapshot("test").unwrap();
216
    client.commit("a", &[]).unwrap();
217
    assert!(client.push("origin", false).is_err());
218
    client.config.set("remote.origin.token", "s3cret").unwrap();
219
    assert!(client.push("origin", false).unwrap().iter().all(|r| r.ok));
220
    // With the token, the private repository can be cloned too.
221
    let priv_dir = tempfile::tempdir().unwrap();
222
    let ok = {
223
        let _env = ENV.lock().unwrap_or_else(|p| p.into_inner());
224
        std::env::set_var("OXY_TOKEN", "s3cret");
225
        let ok = Repo::clone(&format!("{}/andy/priv", h.base), &priv_dir.path().join("p")).is_ok();
226
        std::env::remove_var("OXY_TOKEN");
227
        ok
228
    };
229
    assert!(ok, "a token reads a private repository until accounts exist");
230
    // The pushes log shows the accepted update; the front page shows activity.
231
    tokio::time::sleep(std::time::Duration::from_millis(100)).await;
232
    assert!(page(&h.app, "/andy/pub/pushes").await.contains("accepted"));
233
    assert!(page(&h.app, "/andy/pub").await.contains("1 change"));
234
}