OXYGENHUB
# 3eb491e9489b oxygenhub / crates / hub / tests / browse.rs
17.8 KiB · Rust · last changed A new hub gives administrator only to whoever brings its setup code 20 days ago source blame history raw
1
//! End to end: a hub in a temporary data directory, a real `oxy` client
2
//! pushing over the wire protocol, and every milestone 0.1 page fetched.
3
4
use axum::body::Body;
5
use axum::http::{Request, StatusCode};
6
use http_body_util::BodyExt;
7
use oxy_core::repo::Repo;
8
use oxygenhub::config::Config;
9
use oxygenhub::repos::RepoName;
10
use oxygenhub::{db, Shared};
11
use std::path::Path;
12
use tower::ServiceExt;
13
14
/// Point `$OXY_HOME` at a throwaway directory so the client's identity and
15
/// configuration never touch the developer's.
16
fn hermetic() {
17
    static ONCE: std::sync::Once = std::sync::Once::new();
18
    static DIR: std::sync::OnceLock<tempfile::TempDir> = std::sync::OnceLock::new();
19
    ONCE.call_once(|| {
20
        let d = tempfile::tempdir().unwrap();
21
        std::env::set_var("OXY_HOME", d.path());
22
        DIR.set(d).ok();
23
    });
24
}
25
26
fn write(root: &Path, rel: &str, content: &[u8]) {
27
    let p = root.join(rel);
28
    std::fs::create_dir_all(p.parent().unwrap()).unwrap();
29
    std::fs::write(p, content).unwrap();
30
}
31
32
struct Hub {
33
    app: Shared,
34
    base: String,
35
    _dir: tempfile::TempDir,
36
}
37
38
async fn hub(push_tokens: Vec<String>) -> Hub {
39
    hermetic();
40
    let dir = tempfile::tempdir().unwrap();
41
    let mut config = Config::load(dir.path()).unwrap();
42
    // The first account's setup code (oxygenhub#245).
43
    config.registration.setup_code = "test-setup".into();
44
    config.auth.push_tokens = push_tokens;
45
    let listener = tokio::net::TcpListener::bind("127.0.0.1:0").await.unwrap();
46
    let port = listener.local_addr().unwrap().port();
47
    config.server.base_url = format!("http://127.0.0.1:{port}");
48
    let app = oxygenhub::build(config).await.unwrap();
49
    let router = oxygenhub::router(app.clone());
50
    tokio::spawn(async move { axum::serve(listener, router).await.unwrap() });
51
    Hub { app, base: format!("http://127.0.0.1:{port}"), _dir: dir }
52
}
53
54
async fn get(app: &Shared, path: &str) -> (StatusCode, String) {
55
    let res = oxygenhub::router(app.clone()).oneshot(Request::get(path).body(Body::empty()).unwrap()).await.unwrap();
56
    let status = res.status();
57
    let bytes = res.into_body().collect().await.unwrap().to_bytes();
58
    (status, String::from_utf8_lossy(&bytes).into_owned())
59
}
60
61
async fn page(app: &Shared, path: &str) -> String {
62
    let (status, body) = get(app, path).await;
63
    assert_eq!(status, StatusCode::OK, "{path}: {}", body.lines().find(|l| l.contains("lead")).unwrap_or(""));
64
    body
65
}
66
67
/// Push a small history from a client: two changes on main, a second
68
/// bookmark, a tag.
69
fn populate(url: &str, work: &Path) -> (Repo, String, String) {
70
    // The hosted repository is unbound until the first push, so it cannot
71
    // be cloned yet: start locally and push, as moving an existing
72
    // repository to the hub does.
73
    assert!(Repo::clone(url, &work.join("early")).err().unwrap().to_string().contains("unbound"));
74
    let mut client = Repo::init(work).unwrap();
75
    // A signing identity, so changes and the tag travel signed.
76
    client.create_identity("Test Author", "[email protected]", oxy_core::repo::IdentityScope::User).unwrap();
77
    client.config.set("remote.origin.url", url).unwrap();
78
    client.config.set("remote.origin.token", "site-token").unwrap();
79
    client.config.set("core.sign", "change").unwrap();
80
    client.save_config().unwrap();
81
    write(work, "README.md", b"# Demo\n\nSee [docs](docs/guide.md).\n");
82
    write(work, "src/main.rs", b"fn main() {\n    println!(\"hi\");\n}\n");
83
    write(work, "docs/guide.md", b"# Guide\n");
84
    client.snapshot("test").unwrap();
85
    let c1 = client.commit("Initial import", &[]).unwrap();
86
    write(work, "src/main.rs", b"fn main() {\n    println!(\"hello\");\n}\n\nfn two() {}\n");
87
    client.snapshot("test").unwrap();
88
    let c2 = client.commit("Greet properly\n\nAlso adds two().", &[]).unwrap();
89
    client.tag_create("v0.1", &[c2], "First tag").unwrap();
90
    client.bookmark_create("feature", Some(&[c1])).unwrap();
91
    let results = client.push("origin", false).unwrap();
92
    assert!(results.iter().all(|r| r.ok), "{results:?}");
93
    let results = client.push_bookmark("origin", "feature", false).unwrap();
94
    assert!(results.iter().all(|r| r.ok), "{results:?}");
95
    // Bound now: a clone shares the id.
96
    let clone = Repo::clone(url, &work.join("clone")).unwrap();
97
    assert_eq!(clone.id().unwrap(), client.id().unwrap());
98
    (client, c1.to_hex(), c2.to_hex())
99
}
100
101
#[tokio::test(flavor = "multi_thread")]
102
async fn create_push_and_browse() {
103
    let h = hub(vec!["site-token".into()]).await;
104
    let name = RepoName::parse("andy/demo").unwrap();
105
    h.app.repos.create(&name, None).unwrap();
106
    db::repos::create(&h.app.db, "andy", "demo", "A demo", hub_api::Visibility::Public).await.unwrap();
107
    let work = tempfile::tempdir().unwrap();
108
    let (_client, c1, c2) = populate(&format!("{}/andy/demo", h.base), work.path());
109
110
    // Help, filled in for this hub (hub spec §6.3).
111
    let help = page(&h.app, "/help").await;
112
    assert!(help.contains(&format!("oxy remote add hub {}/OWNER/REPOSITORY", h.base)), "commands carry this hub's address");
113
    assert!(help.contains(&format!("oxy clone {}/OWNER/REPOSITORY", h.base)));
114
    assert!(help.contains(&format!("curl -fsSL {}/.well-known/oxyhub-key -o hub.identity", h.base)), "the delegation recipe");
115
    assert!(!help.contains("oxyhub-ca.pem"), "no certificate step for a hub without a self-signed certificate");
116
    for id in ["start", "identity", "push", "clone", "proposals", "delegate", "flow", "keys", "glossary"] {
117
        assert!(help.contains(&format!("id=\"{id}\"")) && help.contains(&format!("href=\"#{id}\"")), "section {id}");
118
    }
119
    assert!(help.contains("<strong>bookmark</strong>") && help.contains("<strong>proposal</strong>"), "glossary");
120
    assert!(home_has_help(&page(&h.app, "/explore").await), "linked from every page");
121
122
    // Front page and owner page list it.
123
    let home = page(&h.app, "/").await;
124
    assert!(home.contains("/andy/demo"), "{home}");
125
    assert!(page(&h.app, "/andy").await.contains("demo"));
126
    assert_eq!(get(&h.app, "/nobody").await.0, StatusCode::NOT_FOUND);
127
128
    // Overview: tree, README rendered with rebased links, clone URL, counts.
129
    let o = page(&h.app, "/andy/demo").await;
130
    assert!(o.contains("src"), "tree entries");
131
    assert!(o.contains("href=\"/andy/demo/file/main/docs/guide.md\""), "README link rebased: {o}");
132
    assert!(o.contains(&format!("oxy clone {}/andy/demo", h.base)));
133
    assert!(o.contains("2 changes"));
134
    // Overview: clone popover, contributors, languages, visibility badge.
135
    assert!(o.contains("class=\"clone-pop\"") && o.contains("value=\"oxy clone "), "clone behind a button");
136
    // The Code button also offers the default bookmark as a zip.
137
    assert!(o.contains("&lt;&gt;</span> Code</summary>"), "a Code button");
138
    assert!(o.contains("href=\"/andy/demo/archive?ref=main&amp;format=zip\" download>"), "a zip download: {o}");
139
    let (status, zip) = get(&h.app, "/andy/demo/archive?ref=main&format=zip").await;
140
    assert_eq!(status, StatusCode::OK);
141
    assert!(zip.starts_with("PK"), "a zip archive");
142
    assert!(o.contains("<h3>Contributors") && o.contains("<h3>Languages</h3>") && o.contains("<strong>Rust</strong>"), "{o}");
143
    assert!(o.contains("class=\"vis vis-public\""));
144
    // Landmarks, skip link, current tab (hub spec §6.13).
145
    assert!(o.contains("<a class=\"skip\" href=\"#main\">") && o.contains("<main id=\"main\""));
146
    assert!(o.contains("aria-label=\"Site\"") && o.contains("aria-label=\"Repository\"") && o.contains("aria-label=\"Account\""));
147
    assert!(o.contains("class=\"on\" aria-current=\"page\">Code</a>"), "the current tab is announced");
148
    assert!(o.contains("v0.1"));
149
    assert!(o.contains("feature"));
150
151
    // Tree at a bookmark, a tag and a change; file with highlighting; raw; blame.
152
    let t = page(&h.app, "/andy/demo/tree/main/src").await;
153
    assert!(t.contains("main.rs"));
154
    // A ref's root is the overview with it chosen, side bar and all (#191).
155
    assert_eq!(get(&h.app, "/andy/demo/tree/v0.1").await.0, StatusCode::SEE_OTHER);
156
    let at_tag = page(&h.app, "/andy/demo?at=v0.1").await;
157
    assert!(at_tag.contains("README.md") && at_tag.contains("class=\"ref-pick\"") && at_tag.contains("side cards"), "{at_tag}");
158
    assert!(at_tag.contains("href=\"/andy/demo?at=v0.1\" class=\"on\""), "the tag is the one chosen");
159
    assert!(page(&h.app, &format!("/andy/demo?at={}", &c1[..10])).await.contains("README.md"));
160
    // A whole hash shows its two ends, the rest in a tip (#198).
161
    let at_hash = page(&h.app, &format!("/andy/demo?at={c1}")).await;
162
    let ends = format!("{}…{}", &c1[..8], &c1[c1.len() - 8..]);
163
    assert!(at_hash.contains(&format!("data-full=\"{c1}\"")) && at_hash.contains(&format!(">{ends}</span>")), "{at_hash}");
164
    assert_eq!(get(&h.app, "/andy/demo/tree/main/nope").await.0, StatusCode::NOT_FOUND);
165
    let (hits_before, _, _) = oxygenhub::render::highlight::cache_stats();
166
    let f = page(&h.app, "/andy/demo/file/main/src/main.rs").await;
167
    let again = page(&h.app, "/andy/demo/file/main/src/main.rs").await;
168
    assert!(oxygenhub::render::highlight::cache_stats().0 > hits_before, "the second view is served from the highlight cache");
169
    assert_eq!(f.split("<table").nth(1), again.split("<table").nth(1), "and renders the same");
170
    assert!(f.contains("sy-storage sy-type sy-function"), "highlighted: {f}");
171
    assert!(f.contains("id=\"L5\""));
172
    assert!(f.contains("Rust"));
173
    let (status, raw) = get(&h.app, "/andy/demo/file/main/src/main.rs?plain=1").await;
174
    assert_eq!(status, StatusCode::OK);
175
    assert_eq!(raw, "fn main() {\n    println!(\"hello\");\n}\n\nfn two() {}\n");
176
    let b = page(&h.app, "/andy/demo/file/main/src/main.rs?blame=1").await;
177
    assert!(b.contains(&c1[..8]) && b.contains(&c2[..8]), "both changes blamed: {b}");
178
    // Sidebar, permalink, blame shading and "blame before this change" (hub spec §6.6).
179
    assert!(f.contains("class=\"file-side\""), "sidebar");
180
    assert!(f.contains("href=\"/andy/demo/tree/main/docs\""), "sibling directory listed");
181
    let here = f.split("class=\"here\" aria-current=\"page\">").nth(1).unwrap_or("");
182
    assert!(here.trim_start().starts_with("<a href=\"/andy/demo/file/main/src/main.rs\""), "the file marked");
183
    assert!(f.contains(&format!("data-permalink=\"/andy/demo/file/{c2}/src/main.rs\"")), "permalink at the head");
184
    assert!(b.contains(&format!("data-permalink=\"/andy/demo/file/{c2}/src/main.rs?blame=1\"")));
185
    assert!(b.contains("blame age-0") && b.contains("blame age-9"), "oldest and newest shaded");
186
    assert!(b.contains(&format!("href=\"/andy/demo/file/{c1}/src/main.rs?blame=1#L")), "the state before c2 is c1");
187
    assert_eq!(b.matches("class=\"before\"").count(), b.matches("blame age-9").count(), "c1 has no dependencies, so no link");
188
    let before = page(&h.app, &format!("/andy/demo/file/{c1}/src/main.rs?blame=1")).await;
189
    assert!(before.contains(&c1[..8]) && !before.contains(&c2[..8]), "blamed in c1's state");
190
    // States: heads joined with +, in any order; not a change otherwise.
191
    let (lo, hi) = if c1 < c2 { (&c1, &c2) } else { (&c2, &c1) };
192
    assert!(page(&h.app, &format!("/andy/demo/tree/{hi}+{lo}/src"))
193
        .await
194
        .contains(&format!("data-permalink=\"/andy/demo/tree/{lo}+{hi}/src\"")));
195
    assert_ne!(get(&h.app, &format!("/andy/demo/tree/{c1}+{}", &c2[..12])).await.0, StatusCode::OK, "state heads are full hashes");
196
    let md = page(&h.app, "/andy/demo/file/main/README.md").await;
197
    assert!(md.contains("<h1>Demo</h1>"), "markdown rendered");
198
    // Last-change JSON for tree rows.
199
    let (status, json) = get(&h.app, "/andy/demo/last/main?paths=README.md,src").await;
200
    assert_eq!(status, StatusCode::OK);
201
    assert!(json.contains("Initial import") && json.contains("Greet properly"), "{json}");
202
203
    // History with graph rows, filtered by path; change page with diff; compare.
204
    let hist = page(&h.app, "/andy/demo/changes/main").await;
205
    assert!(hist.contains("Greet properly") && hist.contains("Initial import"));
206
    assert!(hist.contains("<circle"), "graph drawn");
207
    assert!(hist.contains("lbl-tag") && hist.contains("v0.1"), "tag label on its head");
208
    let by_path = page(&h.app, "/andy/demo/changes/main?path=README.md").await;
209
    assert!(by_path.contains("Initial import") && !by_path.contains("Greet properly"));
210
    let c = page(&h.app, &format!("/andy/demo/change/{c2}")).await;
211
    assert!(c.contains("Also adds two()"), "body shown");
212
    assert!(c.contains("+fn two() {}") || c.contains("fn two() {}"), "diff shown: {c}");
213
    assert!(c.contains("class=\"add\"") && c.contains("class=\"del\""));
214
    assert!(c.contains(&c1[..12]), "dependency listed");
215
    assert!(page(&h.app, &format!("/andy/demo/change/{}", &c2[..8])).await.contains("Greet properly"));
216
    let cmp = page(&h.app, "/andy/demo/compare/feature...main").await;
217
    assert!(cmp.contains("1 change") && cmp.contains("Greet properly"));
218
    assert_eq!(get(&h.app, "/andy/demo/compare/feature").await.0, StatusCode::BAD_REQUEST);
219
    // Pickers, swap and the /compare form (hub spec §6.3).
220
    assert!(
221
        cmp.contains("<datalist id=\"compare-refs\">")
222
            && cmp.contains("<option value=\"feature\">bookmark</option>")
223
            && cmp.contains("<option value=\"v0.1\">tag</option>")
224
    );
225
    assert!(cmp.contains("href=\"/andy/demo/compare/main...feature\""), "swap");
226
    assert!(!cmp.contains("Propose this"), "anonymous viewers cannot propose");
227
    let redirect = |path: &'static str| {
228
        let app = h.app.clone();
229
        async move {
230
            let res = oxygenhub::router(app).oneshot(Request::get(path).body(Body::empty()).unwrap()).await.unwrap();
231
            (res.status(), res.headers().get("location").and_then(|v| v.to_str().ok()).unwrap_or("").to_string())
232
        }
233
    };
234
    let (st, loc) = redirect("/andy/demo/compare").await;
235
    assert!(st.is_redirection() && loc == "/andy/demo/compare/main...feature", "the newest other bookmark against the default: {loc}");
236
    let (_, loc) = redirect("/andy/demo/compare?base=v0.1&head=+feature+").await;
237
    assert_eq!(loc, "/andy/demo/compare/v0.1...feature");
238
239
    // Bookmarks, tags, conflicts (none), trust (no policy), pushes.
240
    let bm = page(&h.app, "/andy/demo/bookmarks").await;
241
    assert!(bm.contains("feature") && bm.contains("default"));
242
    let tags = page(&h.app, "/andy/demo/tags").await;
243
    assert!(tags.contains("v0.1") && tags.contains("First tag"));
244
    assert!(page(&h.app, "/andy/demo/conflicts").await.contains("No bookmark carries a conflict"));
245
    let trust = page(&h.app, "/andy/demo/trust").await;
246
    assert!(trust.contains("No trust policy") && trust.contains(&h.app.hub_key.key.to_hex()));
247
    assert!(trust.contains("2 signed"), "signed changes verified on the host: {trust}");
248
    assert!(c.contains("signed by Test Author"), "change page shows the signer");
249
    let pushes = page(&h.app, "/andy/demo/pushes").await;
250
    assert!(pushes.contains("accepted") && pushes.contains("main"), "{pushes}");
251
    assert!(pushes.contains("<td>2</td>") && pushes.contains("<code title="), "two changes imported and the state shown: {pushes}");
252
253
    // API and small endpoints.
254
    let (_, repos) = get(&h.app, "/api/v1/repos").await;
255
    assert!(repos.contains("\"name\":\"demo\""));
256
    let (_, bms) = get(&h.app, "/api/v1/repos/andy/demo/bookmarks").await;
257
    assert!(bms.contains("\"default\":true"));
258
    let (status, key) = get(&h.app, "/.well-known/oxyhub-key").await;
259
    assert_eq!(status, StatusCode::OK);
260
    assert!(!key.is_empty());
261
    assert!(get(&h.app, "/health").await.1.contains("\"ok\":true"));
262
    assert_eq!(get(&h.app, "/.well-known/oxyhub-ca.pem").await.0, StatusCode::NOT_FOUND, "no self-signed certificate configured");
263
    assert_eq!(get(&h.app, "/style.css").await.0, StatusCode::OK);
264
    assert_eq!(get(&h.app, "/static/fonts/Barlow-400.woff2").await.0, StatusCode::OK);
265
    assert_eq!(get(&h.app, "/andy/demo/oxy/v1/nothing").await.0, StatusCode::NOT_FOUND);
266
}
267
268
#[tokio::test(flavor = "multi_thread")]
269
async fn private_repositories_and_push_tokens() {
270
    let h = hub(vec!["s3cret".into()]).await;
271
    for (name, vis) in [("pub", hub_api::Visibility::Public), ("priv", hub_api::Visibility::Private)] {
272
        // `priv` is created bound so it can be cloned while still empty.
273
        let id = if name == "priv" { Some([7u8; 16]) } else { None };
274
        h.app.repos.create(&RepoName::parse(&format!("andy/{name}")).unwrap(), id).unwrap();
275
        db::repos::create(&h.app.db, "andy", name, "", vis).await.unwrap();
276
    }
277
    // The private one is invisible on pages and to anonymous clients.
278
    assert_eq!(get(&h.app, "/andy/priv").await.0, StatusCode::NOT_FOUND);
279
    assert!(!page(&h.app, "/").await.contains("priv"));
280
    assert!(Repo::clone(&format!("{}/andy/priv", h.base), &tempfile::tempdir().unwrap().path().join("x")).is_err());
281
    // Anonymous push to the public one is refused; with the token it lands.
282
    let work = tempfile::tempdir().unwrap();
283
    let mut client = Repo::init(work.path()).unwrap();
284
    client.config.set("remote.origin.url", &format!("{}/andy/pub", h.base)).unwrap();
285
    write(work.path(), "a.txt", b"a\n");
286
    client.snapshot("test").unwrap();
287
    client.commit("a", &[]).unwrap();
288
    assert!(client.push("origin", false).is_err());
289
    client.config.set("remote.origin.token", "s3cret").unwrap();
290
    assert!(client.push("origin", false).unwrap().iter().all(|r| r.ok));
291
    // With the token, the private repository can be cloned too.
292
    let priv_dir = tempfile::tempdir().unwrap();
293
    std::env::set_var("OXY_TOKEN", "s3cret");
294
    let ok = Repo::clone(&format!("{}/andy/priv", h.base), &priv_dir.path().join("p")).is_ok();
295
    std::env::remove_var("OXY_TOKEN");
296
    assert!(ok, "a token reads a private repository until accounts exist");
297
    // The pushes log shows the accepted update; the front page shows activity.
298
    tokio::time::sleep(std::time::Duration::from_millis(100)).await;
299
    assert!(page(&h.app, "/andy/pub/pushes").await.contains("accepted"));
300
    assert!(page(&h.app, "/andy/pub").await.contains("1 change"));
301
}
302
303
fn home_has_help(page: &str) -> bool {
304
    page.contains("<a href=\"/help\">Help</a>")
305
}