8294d6ee49
- Created `qa-test-output-after-fix.txt` and `qa-test-output.txt` to log results of certificate page authentication tests. - Added `build.sh` for deterministic backend builds in CI, utilizing `go list` for efficiency. - Introduced `codeql_scan.sh` for CodeQL database creation and analysis for Go and JavaScript/TypeScript. - Implemented `dockerfile_check.sh` to validate Dockerfiles for base image and package manager mismatches. - Added `sourcery_precommit_wrapper.sh` to facilitate Sourcery CLI usage in pre-commit hooks.
73 lines
1.9 KiB
Go
73 lines
1.9 KiB
Go
package middleware
|
|
|
|
import (
|
|
"bytes"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/Wikid82/charon/backend/internal/logger"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func TestRequestLoggerSanitizesPath(t *testing.T) {
|
|
old := logger.Log()
|
|
buf := &bytes.Buffer{}
|
|
logger.Init(true, buf)
|
|
|
|
longPath := "/" + strings.Repeat("a", 300)
|
|
|
|
router := gin.New()
|
|
router.Use(RequestID())
|
|
router.Use(RequestLogger())
|
|
router.GET(longPath, func(c *gin.Context) { c.Status(http.StatusOK) })
|
|
|
|
req := httptest.NewRequest(http.MethodGet, longPath, http.NoBody)
|
|
w := httptest.NewRecorder()
|
|
router.ServeHTTP(w, req)
|
|
|
|
out := buf.String()
|
|
if strings.Contains(out, strings.Repeat("a", 300)) {
|
|
t.Fatalf("logged unsanitized long path")
|
|
}
|
|
i := strings.Index(out, "path=")
|
|
if i == -1 {
|
|
t.Fatalf("could not find path in logs: %s", out)
|
|
}
|
|
sub := out[i:]
|
|
j := strings.Index(sub, " request_id=")
|
|
if j == -1 {
|
|
t.Fatalf("could not isolate path field from logs: %s", out)
|
|
}
|
|
pathField := sub[len("path="):j]
|
|
if strings.Contains(pathField, "\n") || strings.Contains(pathField, "\r") {
|
|
t.Fatalf("path field contains control characters after sanitization: %s", pathField)
|
|
}
|
|
_ = old // silence unused var
|
|
}
|
|
|
|
func TestRequestLoggerIncludesRequestID(t *testing.T) {
|
|
buf := &bytes.Buffer{}
|
|
logger.Init(true, buf)
|
|
|
|
router := gin.New()
|
|
router.Use(RequestID())
|
|
router.Use(RequestLogger())
|
|
router.GET("/ok", func(c *gin.Context) { c.String(200, "ok") })
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "/ok", http.NoBody)
|
|
w := httptest.NewRecorder()
|
|
router.ServeHTTP(w, req)
|
|
if w.Code != http.StatusOK {
|
|
t.Fatalf("unexpected status code: %d", w.Code)
|
|
}
|
|
out := buf.String()
|
|
if !strings.Contains(out, "request_id") {
|
|
t.Fatalf("expected log output to include request_id: %s", out)
|
|
}
|
|
if !strings.Contains(out, "handled request") {
|
|
t.Fatalf("expected log output to indicate handled request: %s", out)
|
|
}
|
|
}
|