git.squeep.com Git - akkoma/blob - test/pleroma/web/plugs/ensure_http_signature_plug_test.exs

   1 # Akkoma: Magically expressive social media
   2 # Copyright Â© 2022-2022 Akkoma Authors <https://akkoma.dev/>
   3 # SPDX-License-Identifier: AGPL-3.0-only
   4
   5 defmodule Pleroma.Web.Plugs.EnsureHTTPSignaturePlugTest do
   6   use Pleroma.Web.ConnCase
   7   alias Pleroma.Web.Plugs.EnsureHTTPSignaturePlug
   8
   9   import Plug.Conn
  10   import Phoenix.Controller, only: [put_format: 2]
  11
  12   import Pleroma.Tests.Helpers, only: [clear_config: 2]
  13
  14   describe "requires a signature when `authorized_fetch_mode` is enabled" do
  15     setup do
  16       clear_config([:activitypub, :authorized_fetch_mode], true)
  17
  18       conn =
  19         build_conn(:get, "/doesntmatter")
  20         |> put_format("activity+json")
  21
  22       [conn: conn]
  23     end
  24
  25     test "and signature has been set as invalid", %{conn: conn} do
  26       conn =
  27         conn
  28         |> assign(:valid_signature, false)
  29         |> EnsureHTTPSignaturePlug.call(%{})
  30
  31       assert conn.halted == true
  32       assert conn.status == 401
  33       assert conn.state == :sent
  34       assert conn.resp_body == "Request not signed"
  35     end
  36
  37     test "and signature has been set as valid", %{conn: conn} do
  38       conn =
  39         conn
  40         |> assign(:valid_signature, true)
  41         |> EnsureHTTPSignaturePlug.call(%{})
  42
  43       assert conn.halted == false
  44     end
  45
  46     test "does nothing for non-ActivityPub content types", %{conn: conn} do
  47       conn =
  48         conn
  49         |> assign(:valid_signature, false)
  50         |> put_format("html")
  51         |> EnsureHTTPSignaturePlug.call(%{})
  52
  53       assert conn.halted == false
  54     end
  55   end
  56
  57   test "does nothing on invalid signature when `authorized_fetch_mode` is disabled" do
  58     clear_config([:activitypub, :authorized_fetch_mode], false)
  59
  60     conn =
  61       build_conn(:get, "/doesntmatter")
  62       |> put_format("activity+json")
  63       |> assign(:valid_signature, false)
  64       |> EnsureHTTPSignaturePlug.call(%{})
  65
  66     assert conn.halted == false
  67   end
  68 end