|
|
|
@ -4,95 +4,134 @@ describe WellKnown::WebfingerController, type: :controller do
|
|
|
|
render_views
|
|
|
|
render_views
|
|
|
|
|
|
|
|
|
|
|
|
describe 'GET #show' do
|
|
|
|
describe 'GET #show' do
|
|
|
|
let(:alice) do
|
|
|
|
let(:alternate_domains) { [] }
|
|
|
|
Fabricate(:account, username: 'alice')
|
|
|
|
let(:alice) { Fabricate(:account, username: 'alice') }
|
|
|
|
|
|
|
|
let(:resource) { nil }
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
around(:each) do |example|
|
|
|
|
|
|
|
|
tmp = Rails.configuration.x.alternate_domains
|
|
|
|
|
|
|
|
Rails.configuration.x.alternate_domains = alternate_domains
|
|
|
|
|
|
|
|
example.run
|
|
|
|
|
|
|
|
Rails.configuration.x.alternate_domains = tmp
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
before do
|
|
|
|
subject do
|
|
|
|
alice.private_key = <<-PEM
|
|
|
|
get :show, params: { resource: resource }, format: :json
|
|
|
|
-----BEGIN RSA PRIVATE KEY-----
|
|
|
|
|
|
|
|
MIICXQIBAAKBgQDHgPoPJlrfMZrVcuF39UbVssa8r4ObLP3dYl9Y17Mgp5K4mSYD
|
|
|
|
|
|
|
|
R/Y2ag58tSi6ar2zM3Ze3QYsNfTq0NqN1g89eAu0MbSjWqpOsgntRPJiFuj3hai2
|
|
|
|
|
|
|
|
X2Im8TBrkiM/UyfTRgn8q8WvMoKbXk8Lu6nqv420eyqhhLxfUoCpxuem1QIDAQAB
|
|
|
|
|
|
|
|
AoGBAIKsOh2eM7spVI8mdgQKheEG/iEsnPkQ2R8ehfE9JzjmSbXbqghQJDaz9NU+
|
|
|
|
|
|
|
|
G3Uu4R31QT0VbCudE9SSA/UPFl82GeQG4QLjrSE+PSjSkuslgSXelJHfAJ+ycGax
|
|
|
|
|
|
|
|
ajtPyiQD0e4c2loagHNHPjqK9OhHx9mFnZWmoagjlZ+mQGEpAkEA8GtqfS65IaRQ
|
|
|
|
|
|
|
|
uVhMzpp25rF1RWOwaaa+vBPkd7pGdJEQGFWkaR/a9UkU+2C4ZxGBkJDP9FApKVQI
|
|
|
|
|
|
|
|
RANEwN3/hwJBANRuw5+es6BgBv4PD387IJvuruW2oUtYP+Lb2Z5k77J13hZTr0db
|
|
|
|
|
|
|
|
Oo9j1UbbR0/4g+vAcsDl4JD9c/9LrGYEpcMCQBon9Yvs+2M3lziy7JhFoc3zXIjS
|
|
|
|
|
|
|
|
Ea1M4M9hcqe78lJYPeIH3z04o/+vlcLLgQRlmSz7NESmO/QtGkEcAezhuh0CQHji
|
|
|
|
|
|
|
|
pzO4LeO/gXslut3eGcpiYuiZquOjToecMBRwv+5AIKd367Che4uJdh6iPcyGURvh
|
|
|
|
|
|
|
|
IewfZFFdyZqnx20ui90CQQC1W2rK5Y30wAunOtSLVA30TLK/tKrTppMC3corjKlB
|
|
|
|
|
|
|
|
FTX8IvYBNTbpEttc1VCf/0ccnNpfb0CrFNSPWxRj7t7D
|
|
|
|
|
|
|
|
-----END RSA PRIVATE KEY-----
|
|
|
|
|
|
|
|
PEM
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
alice.public_key = <<-PEM
|
|
|
|
|
|
|
|
-----BEGIN PUBLIC KEY-----
|
|
|
|
|
|
|
|
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHgPoPJlrfMZrVcuF39UbVssa8
|
|
|
|
|
|
|
|
r4ObLP3dYl9Y17Mgp5K4mSYDR/Y2ag58tSi6ar2zM3Ze3QYsNfTq0NqN1g89eAu0
|
|
|
|
|
|
|
|
MbSjWqpOsgntRPJiFuj3hai2X2Im8TBrkiM/UyfTRgn8q8WvMoKbXk8Lu6nqv420
|
|
|
|
|
|
|
|
eyqhhLxfUoCpxuem1QIDAQAB
|
|
|
|
|
|
|
|
-----END PUBLIC KEY-----
|
|
|
|
|
|
|
|
PEM
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
alice.save!
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
around(:each) do |example|
|
|
|
|
shared_examples 'a successful response' do
|
|
|
|
before = Rails.configuration.x.alternate_domains
|
|
|
|
it 'returns http success' do
|
|
|
|
example.run
|
|
|
|
expect(response).to have_http_status(200)
|
|
|
|
Rails.configuration.x.alternate_domains = before
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns application/jrd+json' do
|
|
|
|
|
|
|
|
expect(response.content_type).to eq 'application/jrd+json'
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns links for the account' do
|
|
|
|
|
|
|
|
json = body_as_json
|
|
|
|
|
|
|
|
expect(json[:subject]).to eq 'acct:alice@cb6e6126.ngrok.io'
|
|
|
|
|
|
|
|
expect(json[:aliases]).to include('https://cb6e6126.ngrok.io/@alice', 'https://cb6e6126.ngrok.io/users/alice')
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns JSON when account can be found' do
|
|
|
|
context 'when an account exists' do
|
|
|
|
get :show, params: { resource: alice.to_webfinger_s }, format: :json
|
|
|
|
let(:resource) { alice.to_webfinger_s }
|
|
|
|
|
|
|
|
|
|
|
|
json = body_as_json
|
|
|
|
before do
|
|
|
|
|
|
|
|
subject
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
expect(response).to have_http_status(200)
|
|
|
|
it_behaves_like 'a successful response'
|
|
|
|
expect(response.content_type).to eq 'application/jrd+json'
|
|
|
|
|
|
|
|
expect(json[:subject]).to eq 'acct:alice@cb6e6126.ngrok.io'
|
|
|
|
|
|
|
|
expect(json[:aliases]).to include('https://cb6e6126.ngrok.io/@alice', 'https://cb6e6126.ngrok.io/users/alice')
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns http not found when account cannot be found' do
|
|
|
|
context 'when an account is temporarily suspended' do
|
|
|
|
get :show, params: { resource: 'acct:not@existing.com' }, format: :json
|
|
|
|
let(:resource) { alice.to_webfinger_s }
|
|
|
|
|
|
|
|
|
|
|
|
expect(response).to have_http_status(:not_found)
|
|
|
|
before do
|
|
|
|
|
|
|
|
alice.suspend!
|
|
|
|
|
|
|
|
subject
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
it_behaves_like 'a successful response'
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns JSON when account can be found with alternate domains' do
|
|
|
|
context 'when an account is permanently suspended or deleted' do
|
|
|
|
Rails.configuration.x.alternate_domains = ['foo.org']
|
|
|
|
let(:resource) { alice.to_webfinger_s }
|
|
|
|
username, = alice.to_webfinger_s.split('@')
|
|
|
|
|
|
|
|
|
|
|
|
before do
|
|
|
|
|
|
|
|
alice.suspend!
|
|
|
|
|
|
|
|
alice.deletion_request.destroy
|
|
|
|
|
|
|
|
subject
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
get :show, params: { resource: "#{username}@foo.org" }, format: :json
|
|
|
|
it 'returns http gone' do
|
|
|
|
|
|
|
|
expect(response).to have_http_status(410)
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
context 'when an account is not found' do
|
|
|
|
|
|
|
|
let(:resource) { 'acct:not@existing.com' }
|
|
|
|
|
|
|
|
|
|
|
|
json = body_as_json
|
|
|
|
before do
|
|
|
|
|
|
|
|
subject
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
expect(response).to have_http_status(200)
|
|
|
|
it 'returns http not found' do
|
|
|
|
expect(response.content_type).to eq 'application/jrd+json'
|
|
|
|
expect(response).to have_http_status(404)
|
|
|
|
expect(json[:subject]).to eq 'acct:alice@cb6e6126.ngrok.io'
|
|
|
|
end
|
|
|
|
expect(json[:aliases]).to include('https://cb6e6126.ngrok.io/@alice', 'https://cb6e6126.ngrok.io/users/alice')
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns http not found when account can not be found with alternate domains' do
|
|
|
|
context 'with an alternate domain' do
|
|
|
|
Rails.configuration.x.alternate_domains = ['foo.org']
|
|
|
|
let(:alternate_domains) { ['foo.org'] }
|
|
|
|
username, = alice.to_webfinger_s.split('@')
|
|
|
|
|
|
|
|
|
|
|
|
before do
|
|
|
|
|
|
|
|
subject
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
context 'when an account exists' do
|
|
|
|
|
|
|
|
let(:resource) do
|
|
|
|
|
|
|
|
username, = alice.to_webfinger_s.split('@')
|
|
|
|
|
|
|
|
"#{username}@foo.org"
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
it_behaves_like 'a successful response'
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
get :show, params: { resource: "#{username}@bar.org" }, format: :json
|
|
|
|
context 'when the domain is wrong' do
|
|
|
|
|
|
|
|
let(:resource) do
|
|
|
|
|
|
|
|
username, = alice.to_webfinger_s.split('@')
|
|
|
|
|
|
|
|
"#{username}@bar.org"
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
expect(response).to have_http_status(:not_found)
|
|
|
|
it 'returns http not found' do
|
|
|
|
|
|
|
|
expect(response).to have_http_status(404)
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns http bad request when not given a resource parameter' do
|
|
|
|
context 'with no resource parameter' do
|
|
|
|
get :show, params: { }, format: :json
|
|
|
|
let(:resource) { nil }
|
|
|
|
expect(response).to have_http_status(:bad_request)
|
|
|
|
|
|
|
|
|
|
|
|
before do
|
|
|
|
|
|
|
|
subject
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns http bad request' do
|
|
|
|
|
|
|
|
expect(response).to have_http_status(400)
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns http bad request when given a nonsense parameter' do
|
|
|
|
context 'with a nonsense parameter' do
|
|
|
|
get :show, params: { resource: 'df/:dfkj' }
|
|
|
|
let(:resource) { 'df/:dfkj' }
|
|
|
|
expect(response).to have_http_status(:bad_request)
|
|
|
|
|
|
|
|
|
|
|
|
before do
|
|
|
|
|
|
|
|
subject
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
it 'returns http bad request' do
|
|
|
|
|
|
|
|
expect(response).to have_http_status(400)
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
Eugen Rochko
4 years ago
committed by
GitHub