53 lines
1.7 KiB
Go
53 lines
1.7 KiB
Go
|
package middleware
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"net/http/httptest"
|
||
|
|
"strings"
|
||
|
|
"testing"
|
||
|
|
|
||
|
|
"github.com/Tencent/WeKnora/internal/accesspolicy"
|
||
|
|
"github.com/Tencent/WeKnora/internal/types"
|
||
|
|
"github.com/gin-gonic/gin"
|
||
|
|
)
|
||
|
|
|
||
|
|
func TestKnowledgeVersionTransferPreservesProvenance(t *testing.T) {
|
||
|
|
gin.SetMode(gin.TestMode)
|
||
|
|
for _, tc := range []struct {
|
||
|
|
name, body string
|
||
|
|
admin, blocked bool
|
||
|
|
}{
|
||
|
|
{"global copy", `{"source_id":"global"}`, false, true},
|
||
|
|
{"personal move", `{"source_kb_id":"personal"}`, false, true},
|
||
|
|
{"ordinary copy", `{"source_id":"owned"}`, false, false},
|
||
|
|
{"admin copy", `{"source_id":"global"}`, true, false},
|
||
|
|
} {
|
||
|
|
t.Run(tc.name, func(t *testing.T) {
|
||
|
|
router := gin.New()
|
||
|
|
called := false
|
||
|
|
router.POST("/transfer", func(c *gin.Context) {
|
||
|
|
ctx := context.WithValue(c.Request.Context(), types.TenantRoleContextKey, types.TenantRoleContributor)
|
||
|
|
if tc.admin {
|
||
|
|
ctx = context.WithValue(ctx, types.TenantRoleContextKey, types.TenantRoleAdmin)
|
||
|
|
}
|
||
|
|
ctx = accesspolicy.WithSnapshot(ctx, &accesspolicy.Snapshot{Publications: map[string]bool{"knowledge:global": true}, NoExport: map[string]bool{"knowledge:personal": true}})
|
||
|
|
c.Request = c.Request.WithContext(ctx)
|
||
|
|
c.Next()
|
||
|
|
}, RequireKnowledgeVersionTransfer(), func(c *gin.Context) {
|
||
|
|
var body map[string]string
|
||
|
|
if err := c.ShouldBindJSON(&body); err != nil {
|
||
|
|
t.Error("middleware consumed request body", err)
|
||
|
|
}
|
||
|
|
called = true
|
||
|
|
c.Status(204)
|
||
|
|
})
|
||
|
|
req := httptest.NewRequest("POST", "/transfer", strings.NewReader(tc.body))
|
||
|
|
req.Header.Set("Content-Type", "application/json")
|
||
|
|
router.ServeHTTP(httptest.NewRecorder(), req)
|
||
|
|
if called == tc.blocked {
|
||
|
|
t.Fatal("incorrect transfer authorization")
|
||
|
|
}
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|