syncthing/test/http_test.go

362 lines
7.5 KiB
Go
Raw Normal View History

2014-11-16 20:13:20 +00:00
// Copyright (C) 2014 The Syncthing Authors.
2014-10-06 10:03:49 +00:00
//
2015-03-07 20:36:35 +00:00
// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this file,
// You can obtain one at http://mozilla.org/MPL/2.0/.
2014-10-06 10:03:49 +00:00
// +build integration
package integration
2014-10-06 10:03:49 +00:00
import (
"bytes"
2014-10-06 10:03:49 +00:00
"encoding/json"
"io/ioutil"
2014-10-06 10:03:49 +00:00
"net/http"
"strings"
2015-05-23 18:15:54 +00:00
"sync"
2014-10-06 10:03:49 +00:00
"testing"
2015-05-23 18:15:54 +00:00
"time"
"github.com/syncthing/protocol"
2014-10-06 10:03:49 +00:00
)
var jsonEndpoints = []string{
"/rest/db/completion?device=I6KAH76-66SLLLB-5PFXSOA-UFJCDZC-YAOMLEK-CP2GB32-BV5RQST-3PSROAU&folder=default",
"/rest/db/ignores?folder=default",
"/rest/db/need?folder=default",
"/rest/db/status?folder=default",
"/rest/db/browse?folder=default",
"/rest/events?since=-1&limit=5",
"/rest/stats/device",
"/rest/stats/folder",
"/rest/svc/deviceid?id=I6KAH76-66SLLLB-5PFXSOA-UFJCDZC-YAOMLEK-CP2GB32-BV5RQST-3PSROAU",
"/rest/svc/lang",
"/rest/svc/report",
"/rest/system/browse?current=.",
"/rest/system/config",
"/rest/system/config/insync",
"/rest/system/connections",
"/rest/system/discovery",
"/rest/system/error",
"/rest/system/ping",
"/rest/system/status",
"/rest/system/upgrade",
"/rest/system/version",
2014-10-06 10:03:49 +00:00
}
func TestGetIndex(t *testing.T) {
st := syncthingProcess{
argv: []string{"-home", "h2"},
port: 8082,
instance: "2",
2014-10-06 10:03:49 +00:00
}
err := st.start()
if err != nil {
t.Fatal(err)
}
defer st.stop()
res, err := st.get("/index.html")
if err != nil {
t.Fatal(err)
}
if res.StatusCode != 200 {
t.Errorf("Status %d != 200", res.StatusCode)
}
bs, err := ioutil.ReadAll(res.Body)
if err != nil {
t.Fatal(err)
}
if len(bs) < 1024 {
t.Errorf("Length %d < 1024", len(bs))
}
if !bytes.Contains(bs, []byte("</html>")) {
t.Error("Incorrect response")
2014-10-06 10:03:49 +00:00
}
if res.Header.Get("Set-Cookie") == "" {
t.Error("No set-cookie header")
}
res.Body.Close()
res, err = st.get("/")
if err != nil {
t.Fatal(err)
}
if res.StatusCode != 200 {
t.Errorf("Status %d != 200", res.StatusCode)
}
bs, err = ioutil.ReadAll(res.Body)
if err != nil {
t.Fatal(err)
}
if len(bs) < 1024 {
t.Errorf("Length %d < 1024", len(bs))
}
if !bytes.Contains(bs, []byte("</html>")) {
t.Error("Incorrect response")
2014-10-06 10:03:49 +00:00
}
if res.Header.Get("Set-Cookie") == "" {
t.Error("No set-cookie header")
}
res.Body.Close()
}
func TestGetIndexAuth(t *testing.T) {
st := syncthingProcess{
argv: []string{"-home", "h1"},
port: 8081,
instance: "1",
2015-04-01 08:43:19 +00:00
apiKey: "abc123",
2014-10-06 10:03:49 +00:00
}
err := st.start()
if err != nil {
t.Fatal(err)
}
defer st.stop()
// Without auth should give 401
res, err := http.Get("http://127.0.0.1:8081/")
if err != nil {
t.Fatal(err)
}
res.Body.Close()
if res.StatusCode != 401 {
t.Errorf("Status %d != 401", res.StatusCode)
}
// With wrong username/password should give 401
req, err := http.NewRequest("GET", "http://127.0.0.1:8081/", nil)
if err != nil {
t.Fatal(err)
}
req.SetBasicAuth("testuser", "wrongpass")
res, err = http.DefaultClient.Do(req)
if err != nil {
t.Fatal(err)
}
res.Body.Close()
if res.StatusCode != 401 {
t.Fatalf("Status %d != 401", res.StatusCode)
}
// With correct username/password should succeed
req, err = http.NewRequest("GET", "http://127.0.0.1:8081/", nil)
if err != nil {
t.Fatal(err)
}
req.SetBasicAuth("testuser", "testpass")
res, err = http.DefaultClient.Do(req)
if err != nil {
t.Fatal(err)
}
res.Body.Close()
if res.StatusCode != 200 {
t.Fatalf("Status %d != 200", res.StatusCode)
}
}
func TestGetJSON(t *testing.T) {
st := syncthingProcess{
argv: []string{"-home", "h2"},
port: 8082,
instance: "2",
2014-10-06 10:03:49 +00:00
}
err := st.start()
if err != nil {
t.Fatal(err)
}
defer st.stop()
for _, path := range jsonEndpoints {
res, err := st.get(path)
if err != nil {
t.Error(path, err)
continue
2014-10-06 10:03:49 +00:00
}
if ct := res.Header.Get("Content-Type"); ct != "application/json; charset=utf-8" {
t.Errorf("Incorrect Content-Type %q for %q", ct, path)
continue
2014-10-06 10:03:49 +00:00
}
var intf interface{}
err = json.NewDecoder(res.Body).Decode(&intf)
res.Body.Close()
if err != nil {
t.Error(path, err)
2014-10-06 10:03:49 +00:00
}
}
}
func TestPOSTWithoutCSRF(t *testing.T) {
st := syncthingProcess{
argv: []string{"-home", "h2"},
port: 8082,
instance: "2",
2014-10-06 10:03:49 +00:00
}
err := st.start()
if err != nil {
t.Fatal(err)
}
defer st.stop()
// Should fail without CSRF
req, err := http.NewRequest("POST", "http://127.0.0.1:8082/rest/system/error/clear", nil)
2014-10-06 10:03:49 +00:00
if err != nil {
t.Fatal(err)
}
res, err := http.DefaultClient.Do(req)
if err != nil {
t.Fatal(err)
}
res.Body.Close()
if res.StatusCode != 403 {
t.Fatalf("Status %d != 403 for POST", res.StatusCode)
}
// Get CSRF
req, err = http.NewRequest("GET", "http://127.0.0.1:8082/", nil)
if err != nil {
t.Fatal(err)
}
res, err = http.DefaultClient.Do(req)
if err != nil {
t.Fatal(err)
}
res.Body.Close()
hdr := res.Header.Get("Set-Cookie")
if !strings.Contains(hdr, "CSRF-Token") {
t.Error("Missing CSRF-Token in", hdr)
}
// Should succeed with CSRF
2015-04-09 15:16:39 +00:00
req, err = http.NewRequest("POST", "http://127.0.0.1:8082/rest/system/error/clear", nil)
2014-10-06 10:03:49 +00:00
if err != nil {
t.Fatal(err)
}
req.Header.Set("X-CSRF-Token", hdr[len("CSRF-Token="):])
res, err = http.DefaultClient.Do(req)
if err != nil {
t.Fatal(err)
}
res.Body.Close()
if res.StatusCode != 200 {
t.Fatalf("Status %d != 200 for POST", res.StatusCode)
}
// Should fail with incorrect CSRF
req, err = http.NewRequest("POST", "http://127.0.0.1:8082/rest/system/error/clear", nil)
2014-10-06 10:03:49 +00:00
if err != nil {
t.Fatal(err)
}
req.Header.Set("X-CSRF-Token", hdr[len("CSRF-Token="):]+"X")
res, err = http.DefaultClient.Do(req)
if err != nil {
t.Fatal(err)
}
res.Body.Close()
if res.StatusCode != 403 {
t.Fatalf("Status %d != 403 for POST", res.StatusCode)
}
}
2015-05-23 18:15:54 +00:00
var (
initOnce sync.Once
proc syncthingProcess
)
func setupAPIBench() {
err := removeAll("s1", "s2", "h1/index*", "h2/index*")
if err != nil {
panic(err)
}
err = generateFiles("s1", 25000, 20, "../LICENSE")
if err != nil {
panic(err)
}
err = ioutil.WriteFile("s1/knownfile", []byte("somedatahere"), 0644)
if err != nil {
panic(err)
}
proc = syncthingProcess{ // id1
instance: "1",
argv: []string{"-home", "h1"},
port: 8081,
apiKey: apiKey,
}
err = proc.start()
if err != nil {
panic(err)
}
// Wait for one scan to succeed, or up to 20 seconds... This is to let
// startup, UPnP etc complete and make sure the sender has the full index
// before they connect.
for i := 0; i < 20; i++ {
resp, err := proc.post("/rest/scan?folder=default", nil)
if err != nil {
time.Sleep(time.Second)
continue
}
if resp.StatusCode != 200 {
resp.Body.Close()
time.Sleep(time.Second)
continue
}
break
}
}
func benchmarkURL(b *testing.B, url string) {
initOnce.Do(setupAPIBench)
b.ResetTimer()
for i := 0; i < b.N; i++ {
resp, err := proc.get(url)
if err != nil {
b.Fatal(err)
}
if resp.StatusCode != 200 {
b.Fatal(resp.Status)
}
resp.Body.Close()
}
}
func BenchmarkAPI_db_completion(b *testing.B) {
benchmarkURL(b, "/rest/db/completion?folder=default&device="+protocol.LocalDeviceID.String())
}
func BenchmarkAPI_db_file(b *testing.B) {
benchmarkURL(b, "/rest/db/file?folder=default&file=knownfile")
}
func BenchmarkAPI_db_ignores(b *testing.B) {
benchmarkURL(b, "/rest/db/ignores?folder=default")
}
func BenchmarkAPI_db_need(b *testing.B) {
benchmarkURL(b, "/rest/db/need?folder=default")
}
func BenchmarkAPI_db_status(b *testing.B) {
benchmarkURL(b, "/rest/db/status?folder=default")
}
func BenchmarkAPI_db_browse_dirsonly(b *testing.B) {
benchmarkURL(b, "/rest/db/browse?folder=default&dirsonly=true")
}