mirror of
https://github.com/gravitl/netmaker.git
synced 2024-09-20 07:16:06 +08:00
2e8d95e80e
* user mgmt models * define user roles * define models for new user mgmt and groups * oauth debug log * initialize user role after db conn * print oauth token in debug log * user roles CRUD apis * user groups CRUD Apis * additional api checks * add additional scopes * add additional scopes url * add additional scopes url * rm additional scopes url * setup middlleware permission checks * integrate permission check into middleware * integrate permission check into middleware * check for headers for subjects * refactor user role models * refactor user groups models * add new user to pending user via RAC login * untracked * allow multiple groups for an user * change json tag * add debug headers * refer network controls form roles, add debug headers * refer network controls form roles, add debug headers * replace auth checks, add network id to role model * nodes handler * migration funcs * invoke sync users migration func * add debug logs * comment middleware * fix get all nodes api * add debug logs * fix middleware error nil check * add new func to get username from jwt * fix jwt parsing * abort on error * allow multiple network roles * allow multiple network roles * add migration func * return err if jwt parsing fails * set global check to true when accessing user apis * set netid for acls api calls * set netid for acls api calls * update role and groups routes * add validation checks * add invite flow apis and magic links * add invited user via oauth signup automatically * create invited user on oauth signup, with groups in the invite * add group validation for user invite * update create user handler with new role mgmt * add validation checks * create user invites tables * add error logging for email invite * fix invite singup url * debug log * get query params from url * get query params from url * add query escape * debug log * debug log * fix user signup via invite api * set admin field for backward compatbility * use new role id for user apis * deprecate use of old admin fields * deprecate usage of old user fields * add user role as service user if empty * setup email sender * delete invite after user singup * add plaform user role * redirect on invite verification link * fix invite redirect * temporary redirect * fix invite redirect * point invite link to frontend * fix query params lookup * add resend support, configure email interface types * fix groups and user creation * validate user groups, add check for metrics api in middleware * add invite url to invite model * migrate rac apis to new user mgmt * handle network nodes * add platform user to default role * fix user role migration * add default on rag creation and cleanup after deletion * fix rac apis * change to invite code param * filter nodes and hosts based on user network access * extend create user group req to accomodate users * filter network based on user access * format oauth error * move user roles and groups * fix get user v1 api * move user mgmt func to pro * add user auth type to user model * fix roles init * remove platform role from group object * list only platform roles * add network roles to invite req * create default groups and roles * fix middleware for global access * create default role * fix nodes filter with global network roles * block selfupdate of groups and network roles * delete netID if net roles are empty * validate user roles nd groups on update * set extclient permission scope when rag vpn access is set * allow deletion of roles and groups * replace _ with - in role naming convention * fix failover middleware mgmt * format oauth templates * fetch route temaplate * return err if user wrong login type * check user groups on rac apis * fix rac apis * fix resp msg * add validation checks for admin invite * return oauth type * format group err msg * fix html tag * clean up default groups * create default rag role * add UI name to roles * remove default net group from user when deleted * reorder migration funcs * fix duplicacy of hosts * check old field for migration * from pro to ce make all secondary users admins * from pro to ce make all secondary users admins * revert: from pro to ce make all secondary users admins * make sure downgrades work * fix pending users approval * fix duplicate hosts * fix duplicate hosts entries * fix cache reference issue * feat: configure FRONTEND_URL during installation * disable user vpn access when network roles are modified * rm vpn acces when roles or groups are deleted * add http to frontend url * revert crypto version * downgrade crytpo version * add platform id check on user invites --------- Co-authored-by: the_aceix <aceixsmartx@gmail.com>
242 lines
6 KiB
Go
242 lines
6 KiB
Go
package controller
|
|
|
|
import (
|
|
"context"
|
|
"os"
|
|
"testing"
|
|
|
|
"github.com/google/uuid"
|
|
"github.com/gravitl/netmaker/database"
|
|
"github.com/gravitl/netmaker/logger"
|
|
"github.com/gravitl/netmaker/logic"
|
|
"github.com/gravitl/netmaker/models"
|
|
"github.com/stretchr/testify/assert"
|
|
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
|
|
)
|
|
|
|
type NetworkValidationTestCase struct {
|
|
testname string
|
|
network models.Network
|
|
errMessage string
|
|
}
|
|
|
|
var netHost models.Host
|
|
|
|
func TestMain(m *testing.M) {
|
|
database.InitializeDatabase()
|
|
defer database.CloseDB()
|
|
logic.CreateSuperAdmin(&models.User{
|
|
UserName: "admin",
|
|
Password: "password",
|
|
PlatformRoleID: models.SuperAdminRole,
|
|
})
|
|
peerUpdate := make(chan *models.Node)
|
|
go logic.ManageZombies(context.Background(), peerUpdate)
|
|
go func() {
|
|
for update := range peerUpdate {
|
|
//do nothing
|
|
logger.Log(3, "received node update", update.Action)
|
|
}
|
|
}()
|
|
os.Exit(m.Run())
|
|
|
|
}
|
|
|
|
func TestCreateNetwork(t *testing.T) {
|
|
deleteAllNetworks()
|
|
|
|
var network models.Network
|
|
network.NetID = "skynet1"
|
|
network.AddressRange = "10.10.0.1/24"
|
|
// if tests break - check here (removed displayname)
|
|
//network.DisplayName = "mynetwork"
|
|
|
|
_, err := logic.CreateNetwork(network)
|
|
assert.Nil(t, err)
|
|
}
|
|
func TestGetNetwork(t *testing.T) {
|
|
createNet()
|
|
|
|
t.Run("GetExistingNetwork", func(t *testing.T) {
|
|
network, err := logic.GetNetwork("skynet")
|
|
assert.Nil(t, err)
|
|
assert.Equal(t, "skynet", network.NetID)
|
|
})
|
|
t.Run("GetNonExistantNetwork", func(t *testing.T) {
|
|
network, err := logic.GetNetwork("doesnotexist")
|
|
assert.EqualError(t, err, "no result found")
|
|
assert.Equal(t, "", network.NetID)
|
|
})
|
|
}
|
|
|
|
func TestDeleteNetwork(t *testing.T) {
|
|
createNet()
|
|
//create nodes
|
|
t.Run("NetworkwithNodes", func(t *testing.T) {
|
|
})
|
|
t.Run("DeleteExistingNetwork", func(t *testing.T) {
|
|
err := logic.DeleteNetwork("skynet")
|
|
assert.Nil(t, err)
|
|
})
|
|
t.Run("NonExistentNetwork", func(t *testing.T) {
|
|
err := logic.DeleteNetwork("skynet")
|
|
assert.Nil(t, err)
|
|
})
|
|
}
|
|
|
|
func TestSecurityCheck(t *testing.T) {
|
|
//these seem to work but not sure it the tests are really testing the functionality
|
|
|
|
os.Setenv("MASTER_KEY", "secretkey")
|
|
t.Run("NoNetwork", func(t *testing.T) {
|
|
username, err := logic.UserPermissions(false, "Bearer secretkey")
|
|
assert.Nil(t, err)
|
|
t.Log(username)
|
|
})
|
|
|
|
t.Run("BadToken", func(t *testing.T) {
|
|
username, err := logic.UserPermissions(false, "Bearer badkey")
|
|
assert.NotNil(t, err)
|
|
t.Log(err)
|
|
t.Log(username)
|
|
})
|
|
}
|
|
|
|
func TestValidateNetwork(t *testing.T) {
|
|
//t.Skip()
|
|
//This functions is not called by anyone
|
|
//it panics as validation function 'display_name_valid' is not defined
|
|
//yes := true
|
|
//no := false
|
|
//deleteNet(t)
|
|
|
|
//DeleteNetworks
|
|
cases := []NetworkValidationTestCase{
|
|
{
|
|
testname: "InvalidAddress",
|
|
network: models.Network{
|
|
NetID: "skynet",
|
|
AddressRange: "10.0.0.256",
|
|
},
|
|
errMessage: "Field validation for 'AddressRange' failed on the 'cidrv4' tag",
|
|
},
|
|
{
|
|
testname: "InvalidAddress6",
|
|
network: models.Network{
|
|
NetID: "skynet1",
|
|
AddressRange6: "2607::ffff/130",
|
|
},
|
|
errMessage: "Field validation for 'AddressRange6' failed on the 'cidrv6' tag",
|
|
},
|
|
{
|
|
testname: "InvalidNetID",
|
|
network: models.Network{
|
|
NetID: "with spaces",
|
|
},
|
|
errMessage: "Field validation for 'NetID' failed on the 'netid_valid' tag",
|
|
},
|
|
{
|
|
testname: "NetIDTooLong",
|
|
network: models.Network{
|
|
NetID: "LongNetIDNameForMaxCharactersTest",
|
|
},
|
|
errMessage: "Field validation for 'NetID' failed on the 'max' tag",
|
|
},
|
|
{
|
|
testname: "ListenPortTooLow",
|
|
network: models.Network{
|
|
NetID: "skynet",
|
|
DefaultListenPort: 1023,
|
|
},
|
|
errMessage: "Field validation for 'DefaultListenPort' failed on the 'min' tag",
|
|
},
|
|
{
|
|
testname: "ListenPortTooHigh",
|
|
network: models.Network{
|
|
NetID: "skynet",
|
|
DefaultListenPort: 65536,
|
|
},
|
|
errMessage: "Field validation for 'DefaultListenPort' failed on the 'max' tag",
|
|
},
|
|
{
|
|
testname: "KeepAliveTooBig",
|
|
network: models.Network{
|
|
NetID: "skynet",
|
|
DefaultKeepalive: 1010,
|
|
},
|
|
errMessage: "Field validation for 'DefaultKeepalive' failed on the 'max' tag",
|
|
},
|
|
}
|
|
for _, tc := range cases {
|
|
t.Run(tc.testname, func(t *testing.T) {
|
|
t.Log(tc.testname)
|
|
network := models.Network(tc.network)
|
|
network.SetDefaults()
|
|
err := logic.ValidateNetwork(&network, false)
|
|
assert.NotNil(t, err)
|
|
assert.Contains(t, err.Error(), tc.errMessage) // test passes if err.Error() contains the expected errMessage.
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestIpv6Network(t *testing.T) {
|
|
//these seem to work but not sure it the tests are really testing the functionality
|
|
|
|
os.Setenv("MASTER_KEY", "secretkey")
|
|
deleteAllNetworks()
|
|
createNet()
|
|
createNetDualStack()
|
|
network, err := logic.GetNetwork("skynet6")
|
|
t.Run("Test Network Create IPv6", func(t *testing.T) {
|
|
assert.Nil(t, err)
|
|
assert.Equal(t, network.AddressRange6, "fde6:be04:fa5e:d076::/64")
|
|
})
|
|
node1 := createNodeWithParams("skynet6", "")
|
|
createNetHost()
|
|
nodeErr := logic.AssociateNodeToHost(node1, &netHost)
|
|
t.Run("Test node on network IPv6", func(t *testing.T) {
|
|
assert.Nil(t, nodeErr)
|
|
assert.Equal(t, "fde6:be04:fa5e:d076::1", node1.Address6.IP.String())
|
|
})
|
|
}
|
|
|
|
func deleteAllNetworks() {
|
|
deleteAllNodes()
|
|
database.DeleteAllRecords(database.NETWORKS_TABLE_NAME)
|
|
}
|
|
|
|
func createNet() {
|
|
var network models.Network
|
|
network.NetID = "skynet"
|
|
network.AddressRange = "10.0.0.1/24"
|
|
_, err := logic.GetNetwork("skynet")
|
|
if err != nil {
|
|
logic.CreateNetwork(network)
|
|
}
|
|
}
|
|
|
|
func createNetDualStack() {
|
|
var network models.Network
|
|
network.NetID = "skynet6"
|
|
network.AddressRange = "10.1.2.0/24"
|
|
network.AddressRange6 = "fde6:be04:fa5e:d076::/64"
|
|
network.IsIPv4 = "yes"
|
|
network.IsIPv6 = "yes"
|
|
_, err := logic.GetNetwork("skynet6")
|
|
if err != nil {
|
|
logic.CreateNetwork(network)
|
|
}
|
|
}
|
|
|
|
func createNetHost() {
|
|
k, _ := wgtypes.ParseKey("DM5qhLAE20PG9BbfBCger+Ac9D2NDOwCtY1rbYDLf34=")
|
|
netHost = models.Host{
|
|
ID: uuid.New(),
|
|
PublicKey: k.PublicKey(),
|
|
HostPass: "password",
|
|
OS: "linux",
|
|
Name: "nethost",
|
|
}
|
|
_ = logic.CreateHost(&netHost)
|
|
}
|