GitHub Actions
78 lines
3.0 KiB
Go
78 lines
3.0 KiB
Go
package handlers
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
"gorm.io/driver/sqlite"
|
|
"gorm.io/gorm"
|
|
|
|
"github.com/Wikid82/charon/backend/internal/config"
|
|
"github.com/Wikid82/charon/backend/internal/models"
|
|
)
|
|
|
|
func setupSecurityTestRouterWithExtras(t *testing.T) (*gin.Engine, *gorm.DB) {
|
|
t.Helper()
|
|
db, err := gorm.Open(sqlite.Open("file::memory:?mode=memory&cache=shared"), &gorm.Config{})
|
|
require.NoError(t, err)
|
|
require.NoError(t, db.AutoMigrate(&models.SecurityConfig{}, &models.SecurityDecision{}, &models.SecurityAudit{}, &models.SecurityRuleSet{}))
|
|
|
|
r := gin.New()
|
|
api := r.Group("/api/v1")
|
|
cfg := config.SecurityConfig{}
|
|
h := NewSecurityHandler(cfg, db)
|
|
api.POST("/security/decisions", h.CreateDecision)
|
|
api.GET("/security/decisions", h.ListDecisions)
|
|
api.POST("/security/rulesets", h.UpsertRuleSet)
|
|
api.GET("/security/rulesets", h.ListRuleSets)
|
|
return r, db
|
|
}
|
|
|
|
func TestSecurityHandler_CreateAndListDecisionAndRulesets(t *testing.T) {
|
|
r, _ := setupSecurityTestRouterWithExtras(t)
|
|
|
|
payload := `{"ip":"1.2.3.4","action":"block","host":"example.com","rule_id":"manual-1","details":"test"}`
|
|
req := httptest.NewRequest(http.MethodPost, "/api/v1/security/decisions", strings.NewReader(payload))
|
|
req.Header.Set("Content-Type", "application/json")
|
|
resp := httptest.NewRecorder()
|
|
r.ServeHTTP(resp, req)
|
|
assert.Equal(t, http.StatusOK, resp.Code)
|
|
|
|
var decisionResp map[string]interface{}
|
|
require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &decisionResp))
|
|
require.NotNil(t, decisionResp["decision"])
|
|
|
|
req = httptest.NewRequest(http.MethodGet, "/api/v1/security/decisions?limit=10", nil)
|
|
resp = httptest.NewRecorder()
|
|
r.ServeHTTP(resp, req)
|
|
assert.Equal(t, http.StatusOK, resp.Code)
|
|
var listResp map[string][]map[string]interface{}
|
|
require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &listResp))
|
|
require.GreaterOrEqual(t, len(listResp["decisions"]), 1)
|
|
|
|
// Now test ruleset upsert
|
|
rpayload := `{"name":"owasp-crs","source_url":"https://example.com/owasp","mode":"owasp","content":"test"}`
|
|
req = httptest.NewRequest(http.MethodPost, "/api/v1/security/rulesets", strings.NewReader(rpayload))
|
|
req.Header.Set("Content-Type", "application/json")
|
|
resp = httptest.NewRecorder()
|
|
r.ServeHTTP(resp, req)
|
|
assert.Equal(t, http.StatusOK, resp.Code)
|
|
var rsResp map[string]interface{}
|
|
require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &rsResp))
|
|
require.NotNil(t, rsResp["ruleset"])
|
|
|
|
req = httptest.NewRequest(http.MethodGet, "/api/v1/security/rulesets", nil)
|
|
resp = httptest.NewRecorder()
|
|
r.ServeHTTP(resp, req)
|
|
assert.Equal(t, http.StatusOK, resp.Code)
|
|
var listRsResp map[string][]map[string]interface{}
|
|
require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &listRsResp))
|
|
require.GreaterOrEqual(t, len(listRsResp["rulesets"]), 1)
|
|
}
|