106 lines
3.0 KiB
Go
106 lines
3.0 KiB
Go
|
// Copyright 2020 The Matrix.org Foundation C.I.C.
|
||
|
|
//
|
||
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
// you may not use this file except in compliance with the License.
|
||
|
|
// You may obtain a copy of the License at
|
||
|
|
//
|
||
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
//
|
||
|
|
// Unless required by applicable law or agreed to in writing, software
|
||
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
// See the License for the specific language governing permissions and
|
||
|
|
// limitations under the License.
|
||
|
|
|
||
|
|
package acls
|
||
|
|
|
||
|
|
import (
|
||
|
|
"regexp"
|
||
|
|
"testing"
|
||
|
|
)
|
||
|
|
|
||
|
|
func TestOpenACLsWithBlacklist(t *testing.T) {
|
||
|
|
roomID := "!test:test.com"
|
||
|
|
allowRegex, err := compileACLRegex("*")
|
||
|
|
if err != nil {
|
||
|
|
t.Fatalf(err.Error())
|
||
|
|
}
|
||
|
|
denyRegex, err := compileACLRegex("foo.com")
|
||
|
|
if err != nil {
|
||
|
|
t.Fatalf(err.Error())
|
||
|
|
}
|
||
|
|
|
||
|
|
acls := ServerACLs{
|
||
|
|
acls: make(map[string]*serverACL),
|
||
|
|
}
|
||
|
|
|
||
|
|
acls.acls[roomID] = &serverACL{
|
||
|
|
ServerACL: ServerACL{
|
||
|
|
AllowIPLiterals: true,
|
||
|
|
},
|
||
|
|
allowedRegexes: []*regexp.Regexp{allowRegex},
|
||
|
|
deniedRegexes: []*regexp.Regexp{denyRegex},
|
||
|
|
}
|
||
|
|
|
||
|
|
if acls.IsServerBannedFromRoom("1.2.3.4", roomID) {
|
||
|
|
t.Fatal("Expected 1.2.3.4 to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
if acls.IsServerBannedFromRoom("1.2.3.4:2345", roomID) {
|
||
|
|
t.Fatal("Expected 1.2.3.4:2345 to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
if !acls.IsServerBannedFromRoom("foo.com", roomID) {
|
||
|
|
t.Fatal("Expected foo.com to be banned but wasn't")
|
||
|
|
}
|
||
|
|
if !acls.IsServerBannedFromRoom("foo.com:3456", roomID) {
|
||
|
|
t.Fatal("Expected foo.com:3456 to be banned but wasn't")
|
||
|
|
}
|
||
|
|
if acls.IsServerBannedFromRoom("bar.com", roomID) {
|
||
|
|
t.Fatal("Expected bar.com to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
if acls.IsServerBannedFromRoom("bar.com:4567", roomID) {
|
||
|
|
t.Fatal("Expected bar.com:4567 to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func TestDefaultACLsWithWhitelist(t *testing.T) {
|
||
|
|
roomID := "!test:test.com"
|
||
|
|
allowRegex, err := compileACLRegex("foo.com")
|
||
|
|
if err != nil {
|
||
|
|
t.Fatalf(err.Error())
|
||
|
|
}
|
||
|
|
|
||
|
|
acls := ServerACLs{
|
||
|
|
acls: make(map[string]*serverACL),
|
||
|
|
}
|
||
|
|
|
||
|
|
acls.acls[roomID] = &serverACL{
|
||
|
|
ServerACL: ServerACL{
|
||
|
|
AllowIPLiterals: false,
|
||
|
|
},
|
||
|
|
allowedRegexes: []*regexp.Regexp{allowRegex},
|
||
|
|
deniedRegexes: []*regexp.Regexp{},
|
||
|
|
}
|
||
|
|
|
||
|
|
if !acls.IsServerBannedFromRoom("1.2.3.4", roomID) {
|
||
|
|
t.Fatal("Expected 1.2.3.4 to be banned but wasn't")
|
||
|
|
}
|
||
|
|
if !acls.IsServerBannedFromRoom("1.2.3.4:2345", roomID) {
|
||
|
|
t.Fatal("Expected 1.2.3.4:2345 to be banned but wasn't")
|
||
|
|
}
|
||
|
|
if acls.IsServerBannedFromRoom("foo.com", roomID) {
|
||
|
|
t.Fatal("Expected foo.com to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
if acls.IsServerBannedFromRoom("foo.com:3456", roomID) {
|
||
|
|
t.Fatal("Expected foo.com:3456 to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
if !acls.IsServerBannedFromRoom("bar.com", roomID) {
|
||
|
|
t.Fatal("Expected bar.com to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
if !acls.IsServerBannedFromRoom("baz.com", roomID) {
|
||
|
|
t.Fatal("Expected baz.com to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
if !acls.IsServerBannedFromRoom("qux.com:4567", roomID) {
|
||
|
|
t.Fatal("Expected qux.com:4567 to be allowed but wasn't")
|
||
|
|
}
|
||
|
|
}
|