mirror of
				https://github.com/go-gitea/gitea
				synced 2025-10-31 03:18:24 +00:00 
			
		
		
		
	Change all license headers to comply with REUSE specification. Fix #16132 Co-authored-by: flynnnnnnnnnn <flynnnnnnnnnn@github> Co-authored-by: John Olheiser <john.olheiser@gmail.com>
		
			
				
	
	
		
			113 lines
		
	
	
		
			3.3 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			113 lines
		
	
	
		
			3.3 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright 2022 The Gitea Authors. All rights reserved.
 | |
| // SPDX-License-Identifier: MIT
 | |
| 
 | |
| package integration
 | |
| 
 | |
| import (
 | |
| 	"context"
 | |
| 	"fmt"
 | |
| 	"net/http"
 | |
| 	"net/http/httptest"
 | |
| 	"net/url"
 | |
| 	"testing"
 | |
| 
 | |
| 	user_model "code.gitea.io/gitea/models/user"
 | |
| 	"code.gitea.io/gitea/modules/activitypub"
 | |
| 	"code.gitea.io/gitea/modules/setting"
 | |
| 	"code.gitea.io/gitea/routers"
 | |
| 
 | |
| 	ap "github.com/go-ap/activitypub"
 | |
| 	"github.com/stretchr/testify/assert"
 | |
| )
 | |
| 
 | |
| func TestActivityPubPerson(t *testing.T) {
 | |
| 	setting.Federation.Enabled = true
 | |
| 	c = routers.NormalRoutes(context.TODO())
 | |
| 	defer func() {
 | |
| 		setting.Federation.Enabled = false
 | |
| 		c = routers.NormalRoutes(context.TODO())
 | |
| 	}()
 | |
| 
 | |
| 	onGiteaRun(t, func(*testing.T, *url.URL) {
 | |
| 		username := "user2"
 | |
| 		req := NewRequestf(t, "GET", fmt.Sprintf("/api/v1/activitypub/user/%s", username))
 | |
| 		resp := MakeRequest(t, req, http.StatusOK)
 | |
| 		body := resp.Body.Bytes()
 | |
| 		assert.Contains(t, string(body), "@context")
 | |
| 
 | |
| 		var person ap.Person
 | |
| 		err := person.UnmarshalJSON(body)
 | |
| 		assert.NoError(t, err)
 | |
| 
 | |
| 		assert.Equal(t, ap.PersonType, person.Type)
 | |
| 		assert.Equal(t, username, person.PreferredUsername.String())
 | |
| 		keyID := person.GetID().String()
 | |
| 		assert.Regexp(t, fmt.Sprintf("activitypub/user/%s$", username), keyID)
 | |
| 		assert.Regexp(t, fmt.Sprintf("activitypub/user/%s/outbox$", username), person.Outbox.GetID().String())
 | |
| 		assert.Regexp(t, fmt.Sprintf("activitypub/user/%s/inbox$", username), person.Inbox.GetID().String())
 | |
| 
 | |
| 		pubKey := person.PublicKey
 | |
| 		assert.NotNil(t, pubKey)
 | |
| 		publicKeyID := keyID + "#main-key"
 | |
| 		assert.Equal(t, pubKey.ID.String(), publicKeyID)
 | |
| 
 | |
| 		pubKeyPem := pubKey.PublicKeyPem
 | |
| 		assert.NotNil(t, pubKeyPem)
 | |
| 		assert.Regexp(t, "^-----BEGIN PUBLIC KEY-----", pubKeyPem)
 | |
| 	})
 | |
| }
 | |
| 
 | |
| func TestActivityPubMissingPerson(t *testing.T) {
 | |
| 	setting.Federation.Enabled = true
 | |
| 	c = routers.NormalRoutes(context.TODO())
 | |
| 	defer func() {
 | |
| 		setting.Federation.Enabled = false
 | |
| 		c = routers.NormalRoutes(context.TODO())
 | |
| 	}()
 | |
| 
 | |
| 	onGiteaRun(t, func(*testing.T, *url.URL) {
 | |
| 		req := NewRequestf(t, "GET", "/api/v1/activitypub/user/nonexistentuser")
 | |
| 		resp := MakeRequest(t, req, http.StatusNotFound)
 | |
| 		assert.Contains(t, resp.Body.String(), "user redirect does not exist")
 | |
| 	})
 | |
| }
 | |
| 
 | |
| func TestActivityPubPersonInbox(t *testing.T) {
 | |
| 	setting.Federation.Enabled = true
 | |
| 	c = routers.NormalRoutes(context.TODO())
 | |
| 	defer func() {
 | |
| 		setting.Federation.Enabled = false
 | |
| 		c = routers.NormalRoutes(context.TODO())
 | |
| 	}()
 | |
| 
 | |
| 	srv := httptest.NewServer(c)
 | |
| 	defer srv.Close()
 | |
| 
 | |
| 	onGiteaRun(t, func(*testing.T, *url.URL) {
 | |
| 		appURL := setting.AppURL
 | |
| 		setting.AppURL = srv.URL
 | |
| 		defer func() {
 | |
| 			setting.Database.LogSQL = false
 | |
| 			setting.AppURL = appURL
 | |
| 		}()
 | |
| 		username1 := "user1"
 | |
| 		ctx := context.Background()
 | |
| 		user1, err := user_model.GetUserByName(ctx, username1)
 | |
| 		assert.NoError(t, err)
 | |
| 		user1url := fmt.Sprintf("%s/api/v1/activitypub/user/%s#main-key", srv.URL, username1)
 | |
| 		c, err := activitypub.NewClient(user1, user1url)
 | |
| 		assert.NoError(t, err)
 | |
| 		username2 := "user2"
 | |
| 		user2inboxurl := fmt.Sprintf("%s/api/v1/activitypub/user/%s/inbox", srv.URL, username2)
 | |
| 
 | |
| 		// Signed request succeeds
 | |
| 		resp, err := c.Post([]byte{}, user2inboxurl)
 | |
| 		assert.NoError(t, err)
 | |
| 		assert.Equal(t, http.StatusNoContent, resp.StatusCode)
 | |
| 
 | |
| 		// Unsigned request fails
 | |
| 		req := NewRequest(t, "POST", user2inboxurl)
 | |
| 		MakeRequest(t, req, http.StatusInternalServerError)
 | |
| 	})
 | |
| }
 |