mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-11-01 03:03:23 +01:00
obscuremind
3a53f5aa9d
For an on-demand stream, the admin player first fetched the node's /admin/live with the stream password over plain HTTP from MAIN, then handed the browser a uitoken URL. The uitoken request runs the same on-demand start in admin/live.php, so the pre-start only exposed the password (and was refused once MAIN's own data plane is on). It is removed. The cluster developer reference no longer says the secret appears on a node's own loopback: the RTMP output and the recorder's pull carry none.
56 lines
2.9 KiB
PHP
56 lines
2.9 KiB
PHP
<?php
|
|
|
|
use PHPUnit\Framework\TestCase;
|
|
use XcVm\Core\Cluster\LoopbackToken;
|
|
use XcVm\Core\Cluster\RelayGuard;
|
|
|
|
/**
|
|
* A node's own loopback pull (the recorder reading its own /admin/live and
|
|
* /admin/timeshift) carries a token only that node can mint, for one stream,
|
|
* rather than the fleet's live_streaming_pass; RelayGuard takes it from
|
|
* 127.0.0.1 or ::1 only (ADR 0004, Phase 8). MAIN's admin player sends a
|
|
* node no password either: an on-demand stream starts on the browser's own
|
|
* uitoken request.
|
|
*/
|
|
final class LoopbackTokenTest extends TestCase {
|
|
private string $rDir;
|
|
|
|
protected function setUp(): void {
|
|
$this->rDir = sys_get_temp_dir() . '/xcvm-loopback-' . bin2hex(random_bytes(4));
|
|
LoopbackToken::useKeyPath($this->rDir . '/cluster/loopback.key');
|
|
}
|
|
|
|
protected function tearDown(): void {
|
|
LoopbackToken::useKeyPath(null);
|
|
exec('rm -rf ' . escapeshellarg($this->rDir));
|
|
}
|
|
|
|
public function testATokenOpensItsStreamOnlyUntilItExpires(): void {
|
|
$this->assertFalse(LoopbackToken::verify(7, 'lb1-9999999999-' . str_repeat('0', 64)), 'no key yet: nothing verifies');
|
|
$rToken = LoopbackToken::issue(7, 1800000000);
|
|
$this->assertIsString($rToken);
|
|
$this->assertSame(0600, fileperms($this->rDir . '/cluster/loopback.key') & 0777, 'the key is the node\'s own');
|
|
$this->assertTrue(LoopbackToken::verify(7, $rToken, 1800000000));
|
|
$this->assertFalse(LoopbackToken::verify(8, $rToken, 1800000000), 'another stream');
|
|
$this->assertFalse(LoopbackToken::verify(7, $rToken, 1800000000 + LoopbackToken::TTL + 1), 'expired');
|
|
$this->assertFalse(LoopbackToken::verify(7, substr($rToken, 0, -1) . (substr($rToken, -1) === '0' ? '1' : '0'), 1800000000), 'tampered');
|
|
$this->assertTrue(LoopbackToken::verify(7, (string) LoopbackToken::issue(7, 1800000000), 1800000000), 'the key is kept, not made again');
|
|
}
|
|
|
|
public function testRelayGuardTakesItFromTheNodeItselfOnly(): void {
|
|
$rToken = (string) LoopbackToken::issue(7);
|
|
$this->assertSame(RelayGuard::LOOPBACK, RelayGuard::admit(7, $rToken, '127.0.0.1', []));
|
|
$this->assertSame(RelayGuard::LOOPBACK, RelayGuard::admit(7, $rToken, '::1', []));
|
|
$this->assertNull(RelayGuard::admit(7, $rToken, '10.0.0.4', []), 'from another address: refused, never taken as the password');
|
|
$this->assertNull(RelayGuard::admit(8, $rToken, '127.0.0.1', []), 'another stream');
|
|
$this->assertNull(RelayGuard::admit(7, $rToken, '127.0.0.1', [], false), 'an endpoint that takes no password (thumb)');
|
|
}
|
|
|
|
public function testTheAdminPlayerSendsTheNodeNoStreamPassword(): void {
|
|
$rRoot = dirname(__DIR__, 2) . '/src/Public/';
|
|
$this->assertStringNotContainsString('live_streaming_pass', (string) file_get_contents($rRoot . 'Views/admin/player.php'));
|
|
$rLive = (string) file_get_contents($rRoot . 'admin/live.php');
|
|
$this->assertGreaterThan(strpos($rLive, '$rLocal = StreamSource::local();'), strpos($rLive, 'StreamProcess::startMonitor('), 'the on-demand start follows every admission, the uitoken one included');
|
|
}
|
|
}
|