bb02b35048
* model -> public/model * plugin -> public/plugin * public/model/utils -> public/utils * platform/shared/mlog -> public/shared/mlog * platform/shared/i18n -> public/shared/i18n * platform/shared/markdown -> public/shared/markdown * platform/services/timezones -> public/shared/timezones * channels/einterfaces -> einterfaces * expose public/ submodule * go mod tidy * .github: cache-dependency-path, setup-go-work * modules-tidy for public/ too * remove old gomodtidy
52 строки
1.3 KiB
Go
52 строки
1.3 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package utils
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"crypto/elliptic"
|
|
"crypto/rand"
|
|
"crypto/sha256"
|
|
"encoding/asn1"
|
|
"encoding/base64"
|
|
"math/big"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"net/url"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/mattermost/mattermost-server/server/public/model"
|
|
)
|
|
|
|
func TestRenderWebError(t *testing.T) {
|
|
r := httptest.NewRequest("GET", "http://foo", nil)
|
|
w := httptest.NewRecorder()
|
|
key, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
require.NoError(t, err)
|
|
RenderWebError(&model.Config{}, w, r, http.StatusTemporaryRedirect, url.Values{
|
|
"foo": []string{"bar"},
|
|
}, key)
|
|
|
|
resp := w.Result()
|
|
location, err := url.Parse(resp.Header.Get("Location"))
|
|
require.NoError(t, err)
|
|
require.NotEmpty(t, location.Query().Get("s"))
|
|
|
|
type ecdsaSignature struct {
|
|
R, S *big.Int
|
|
}
|
|
var rs ecdsaSignature
|
|
s, err := base64.URLEncoding.DecodeString(location.Query().Get("s"))
|
|
require.NoError(t, err)
|
|
_, err = asn1.Unmarshal(s, &rs)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "bar", location.Query().Get("foo"))
|
|
h := sha256.Sum256([]byte("/error?foo=bar"))
|
|
assert.True(t, ecdsa.Verify(&key.PublicKey, h[:], rs.R, rs.S))
|
|
}
|