mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-10-25 19:03:14 +01:00
56 lines
2.5 KiB
PHP
56 lines
2.5 KiB
PHP
|
<?php
|
|||
|
|
|
|||
|
|
use PHPUnit\Framework\TestCase;
|
|||
|
|
use XcVm\Core\Cluster\Crypto\ClusterCrypto;
|
|||
|
|
use XcVm\Core\Cluster\Crypto\ClusterCryptoFactory;
|
|||
|
|
use XcVm\Core\Cluster\Crypto\ClusterUnavailableException;
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* No extension, or one outside the API range, means no cluster crypto at all:
|
|||
|
|
* the factory throws and the node stays legacy. There is no PHP fallback.
|
|||
|
|
*/
|
|||
|
|
final class ClusterCryptoFailClosedTest extends TestCase {
|
|||
|
|
protected function tearDown(): void {
|
|||
|
|
ClusterCryptoFactory::useProbe(null);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/** @return iterable<string, array{0: ?array, 1: string}> */
|
|||
|
|
public static function refusals(): iterable {
|
|||
|
|
yield 'no extension' => [null, 'NO_EXTENSION'];
|
|||
|
|
yield 'no api field' => [['ext_version' => '3.0.0'], 'API_OUT_OF_RANGE'];
|
|||
|
|
yield 'too old' => [['api' => ClusterCryptoFactory::API_MIN - 1], 'API_OUT_OF_RANGE'];
|
|||
|
|
yield 'too new' => [['api' => ClusterCryptoFactory::API_MAX + 1], 'API_OUT_OF_RANGE'];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/** @dataProvider refusals */
|
|||
|
|
public function testRefuses(?array $rInfo, string $rReason): void {
|
|||
|
|
ClusterCryptoFactory::useProbe(fn() => $rInfo);
|
|||
|
|
$this->assertFalse(ClusterCryptoFactory::available());
|
|||
|
|
$this->assertSame($rReason, ClusterCryptoFactory::status()['reason']);
|
|||
|
|
$this->expectException(ClusterUnavailableException::class);
|
|||
|
|
ClusterCryptoFactory::create();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function testInRange(): void {
|
|||
|
|
ClusterCryptoFactory::useProbe(fn() => ['api' => ClusterCryptoFactory::API_MAX, 'ext_version' => '3.1.0']);
|
|||
|
|
$this->assertSame(['available' => true, 'reason' => 'OK', 'api' => 1, 'ext_version' => '3.1.0', 'range' => '1–1'], ClusterCryptoFactory::status());
|
|||
|
|
$this->assertInstanceOf(ClusterCrypto::class, ClusterCryptoFactory::create());
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function testRealProbeWithoutTheExtension(): void {
|
|||
|
|
if (class_exists('XC_VM', false) && method_exists('XC_VM', 'cluster_session')) {
|
|||
|
|
$this->markTestSkipped('xcvm_core with the cluster API is loaded here');
|
|||
|
|
}
|
|||
|
|
$this->assertSame('NO_EXTENSION', ClusterCryptoFactory::status()['reason']);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function testNoReferenceCryptoShips(): void {
|
|||
|
|
$rSrc = dirname(__DIR__, 2) . '/src/';
|
|||
|
|
foreach (new RecursiveIteratorIterator(new RecursiveDirectoryIterator($rSrc . 'Core/Cluster', FilesystemIterator::SKIP_DOTS)) as $rFile) {
|
|||
|
|
$rCode = (string) file_get_contents($rFile->getPathname());
|
|||
|
|
$this->assertStringNotContainsString('sodium_crypto_sign_seed_keypair', $rCode, $rFile->getPathname() . ' must not sign as the panel');
|
|||
|
|
$this->assertStringNotContainsString('xcvm-node-token', $rCode, $rFile->getPathname() . ' must not compute tokens');
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|