e68be80496
This is to defend the sneaking of extra http-headers in the access_header URI param that was recently fixed. Change-Id: Ic28cf58854847ac278bed8043f398b107f7992b3 Reviewed-on: https://gerrit.libreoffice.org/c/online/+/96862 Tested-by: Jenkins Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Ashod Nakashian <ashnakash@gmail.com>
116 lines
3.3 KiB
C++
116 lines
3.3 KiB
C++
/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4; fill-column: 100 -*- */
|
|
/*
|
|
* This file is part of the LibreOffice project.
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
#include <config.h>
|
|
|
|
#include "WopiTestServer.hpp"
|
|
#include <Log.hpp>
|
|
#include <Unit.hpp>
|
|
#include <UnitHTTP.hpp>
|
|
#include <helpers.hpp>
|
|
|
|
#include <Poco/Net/HTTPRequest.h>
|
|
|
|
class UnitWopiHttpHeaders : public WopiTestServer
|
|
{
|
|
enum class Phase
|
|
{
|
|
Load,
|
|
Polling
|
|
} _phase;
|
|
|
|
protected:
|
|
void assertCheckFileInfoRequest(const Poco::Net::HTTPRequest& request) override
|
|
{
|
|
assertHeaders(request);
|
|
}
|
|
|
|
void assertGetFileRequest(const Poco::Net::HTTPRequest& request) override
|
|
{
|
|
assertHeaders(request);
|
|
exitTest(TestResult::Ok); //TODO: Remove when we add put/rename cases.
|
|
}
|
|
|
|
void assertPutFileRequest(const Poco::Net::HTTPRequest& request) override
|
|
{
|
|
assertHeaders(request);
|
|
exitTest(TestResult::Ok);
|
|
}
|
|
|
|
void assertPutRelativeFileRequest(const Poco::Net::HTTPRequest& request) override
|
|
{
|
|
assertHeaders(request);
|
|
exitTest(TestResult::Ok);
|
|
}
|
|
|
|
void assertRenameFileRequest(const Poco::Net::HTTPRequest& request) override
|
|
{
|
|
assertHeaders(request);
|
|
exitTest(TestResult::Ok);
|
|
}
|
|
|
|
void assertHeaders(const Poco::Net::HTTPRequest& request) const
|
|
{
|
|
static const std::map<std::string, std::string> Headers{
|
|
{ "Authorization", "Bearer xyz123abc456vwc789z" },
|
|
{ "X-Requested-With", "XMLHttpRequest" },
|
|
};
|
|
|
|
for (const auto& pair : Headers)
|
|
{
|
|
LOK_ASSERT_MESSAGE("Request must have [" + pair.first + "]", request.has(pair.first));
|
|
LOK_ASSERT_EQUAL(pair.second, request[pair.first]);
|
|
}
|
|
}
|
|
|
|
public:
|
|
UnitWopiHttpHeaders()
|
|
: _phase(Phase::Load)
|
|
{
|
|
}
|
|
|
|
void invokeTest() override
|
|
{
|
|
constexpr char testName[] = "UnitWopiHttpHeaders";
|
|
|
|
switch (_phase)
|
|
{
|
|
case Phase::Load:
|
|
{
|
|
// Technically, having an empty line in the header
|
|
// is invalid (it signifies the end of headers), but
|
|
// this is to illustrate that we are able to overcome
|
|
// such issues and generate valid headers.
|
|
const std::string params
|
|
= "access_header=Authorization%3A%2520Bearer%"
|
|
"2520xyz123abc456vwc789z%250D%250A%250D%250AX-Requested-With%"
|
|
"3A%2520XMLHttpRequest&reuse_cookies=language%3Den-us%3AK%3DGS1&permission="
|
|
"edit";
|
|
|
|
initWebsocket("/wopi/files/0?" + params);
|
|
|
|
helpers::sendTextFrame(*getWs()->getLOOLWebSocket(), "load url=" + getWopiSrc(),
|
|
testName);
|
|
SocketPoll::wakeupWorld();
|
|
|
|
_phase = Phase::Polling;
|
|
break;
|
|
}
|
|
case Phase::Polling:
|
|
{
|
|
// Just wait for the results.
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
};
|
|
|
|
UnitBase* unit_create_wsd(void) { return new UnitWopiHttpHeaders(); }
|
|
|
|
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */
|