mirror of
https://github.com/RuoJi6/ARTEX.git
synced 2026-10-27 17:03:49 +08:00
77 lines
2.8 KiB
Go
77 lines
2.8 KiB
Go
package server
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"github.com/Autumn-27/artex/db"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestIntelligenceHTTPSettingsAndScope(t *testing.T) {
|
|
s, initial, request := trafficEvidenceServer(t)
|
|
f, err := s.m.pg.GetFinding(initial.FindingID)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
taskID := *f.TaskID
|
|
if s.settingsPayload()[db.SettingTaskIntelligence] != false {
|
|
t.Fatal("default must be off")
|
|
}
|
|
if r := request("PUT", "/api/settings", `{"task_intelligence_enabled":true}`); r.Code != 200 {
|
|
t.Fatal(r.Code, r.Body)
|
|
}
|
|
defer s.m.pg.SetBool(db.SettingTaskIntelligence, false)
|
|
if !s.m.pg.GetBool(db.SettingTaskIntelligence, false) {
|
|
t.Fatal("setting not persisted")
|
|
}
|
|
in := db.IntelligenceInput{Kind: "credential", Title: "test credential", Content: "local-api-fixture-secret", Evidence: "local fixture evidence", Confidence: "observed"}
|
|
item, err := s.m.pg.RecordIntelligence(t.Context(), taskID, 0, "qa", in)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
base := fmt.Sprintf("/api/tasks/%d/intelligence", taskID)
|
|
r := request("GET", base, "")
|
|
if r.Code != 200 || !strings.Contains(r.Body.String(), in.Content) || !strings.Contains(r.Body.String(), in.Evidence) {
|
|
t.Fatalf("list omitted content or evidence: %d %s", r.Code, r.Body)
|
|
}
|
|
r = request("GET", fmt.Sprintf("%s/%d", base, item.ID), "")
|
|
if r.Code != 200 || !strings.Contains(r.Body.String(), in.Content) {
|
|
t.Fatal("detail content missing", r.Code, r.Body)
|
|
}
|
|
if r = request("PATCH", fmt.Sprintf("%s/%d", base, item.ID), `{"status":"verified"}`); r.Code != 200 {
|
|
t.Fatal(r.Code, r.Body)
|
|
}
|
|
other, err := s.m.pg.CreateTask("unrelated intel API", "test", nil, 0, 0)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer s.m.pg.DeleteTask(other.ID)
|
|
for _, method := range []string{"GET", "PATCH"} {
|
|
r = request(method, fmt.Sprintf("/api/tasks/%d/intelligence/%d", other.ID, item.ID), `{"status":"invalid"}`)
|
|
if r.Code != 404 {
|
|
t.Fatal("cross task access", method, r.Code, r.Body)
|
|
}
|
|
}
|
|
if _, err = s.m.pg.Exec(`INSERT INTO task_relations(task_id,source_task_id) VALUES($1,$2)`, other.ID, taskID); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
r = request("GET", fmt.Sprintf("/api/tasks/%d/intelligence/%d", other.ID, item.ID), "")
|
|
if r.Code != 200 {
|
|
t.Fatal(r.Code, r.Body)
|
|
}
|
|
var got db.Intelligence
|
|
if err = json.Unmarshal(r.Body.Bytes(), &got); err != nil || !got.Inherited {
|
|
t.Fatal("missing inherited marker")
|
|
}
|
|
if r = request("PATCH", fmt.Sprintf("/api/tasks/%d/intelligence/%d", other.ID, item.ID), `{"status":"invalid"}`); r.Code != 404 {
|
|
t.Fatal("inherited mutation accepted")
|
|
}
|
|
if r = request("PUT", "/api/settings", `{"task_intelligence_enabled":false}`); r.Code != 200 {
|
|
t.Fatal(r.Code, r.Body)
|
|
}
|
|
if r = request("GET", base, ""); r.Code != 200 || !strings.Contains(r.Body.String(), `"total":1`) {
|
|
t.Fatal("disable hid saved records")
|
|
}
|
|
}
|