Index: third_party/grpc/src/node/test/credentials_test.js |
diff --git a/third_party/grpc/src/node/test/credentials_test.js b/third_party/grpc/src/node/test/credentials_test.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..294600c85a93b66ca3da31614ccb5366a55cd2c5 |
--- /dev/null |
+++ b/third_party/grpc/src/node/test/credentials_test.js |
@@ -0,0 +1,457 @@ |
+/* |
+ * |
+ * Copyright 2015, Google Inc. |
+ * All rights reserved. |
+ * |
+ * Redistribution and use in source and binary forms, with or without |
+ * modification, are permitted provided that the following conditions are |
+ * met: |
+ * |
+ * * Redistributions of source code must retain the above copyright |
+ * notice, this list of conditions and the following disclaimer. |
+ * * Redistributions in binary form must reproduce the above |
+ * copyright notice, this list of conditions and the following disclaimer |
+ * in the documentation and/or other materials provided with the |
+ * distribution. |
+ * * Neither the name of Google Inc. nor the names of its |
+ * contributors may be used to endorse or promote products derived from |
+ * this software without specific prior written permission. |
+ * |
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
+ * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
+ * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
+ * |
+ */ |
+ |
+'use strict'; |
+ |
+var assert = require('assert'); |
+var fs = require('fs'); |
+var path = require('path'); |
+ |
+var grpc = require('..'); |
+ |
+/** |
+ * This is used for testing functions with multiple asynchronous calls that |
+ * can happen in different orders. This should be passed the number of async |
+ * function invocations that can occur last, and each of those should call this |
+ * function's return value |
+ * @param {function()} done The function that should be called when a test is |
+ * complete. |
+ * @param {number} count The number of calls to the resulting function if the |
+ * test passes. |
+ * @return {function()} The function that should be called at the end of each |
+ * sequence of asynchronous functions. |
+ */ |
+function multiDone(done, count) { |
+ return function() { |
+ count -= 1; |
+ if (count <= 0) { |
+ done(); |
+ } |
+ }; |
+} |
+ |
+var fakeSuccessfulGoogleCredentials = { |
+ getRequestMetadata: function(service_url, callback) { |
+ setTimeout(function() { |
+ callback(null, {Authorization: 'success'}); |
+ }, 0); |
+ } |
+}; |
+ |
+var fakeFailingGoogleCredentials = { |
+ getRequestMetadata: function(service_url, callback) { |
+ setTimeout(function() { |
+ callback(new Error('Authentication failure')); |
+ }, 0); |
+ } |
+}; |
+ |
+var key_data, pem_data, ca_data; |
+ |
+before(function() { |
+ var key_path = path.join(__dirname, './data/server1.key'); |
+ var pem_path = path.join(__dirname, './data/server1.pem'); |
+ var ca_path = path.join(__dirname, '../test/data/ca.pem'); |
+ key_data = fs.readFileSync(key_path); |
+ pem_data = fs.readFileSync(pem_path); |
+ ca_data = fs.readFileSync(ca_path); |
+}); |
+ |
+describe('channel credentials', function() { |
+ describe('#createSsl', function() { |
+ it('works with no arguments', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.credentials.createSsl(); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('works with just one Buffer argument', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.credentials.createSsl(ca_data); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('works with 3 Buffer arguments', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.credentials.createSsl(ca_data, key_data, pem_data); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('works if the first argument is null', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.credentials.createSsl(null, key_data, pem_data); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('fails if the first argument is a non-Buffer value', function() { |
+ assert.throws(function() { |
+ grpc.credentials.createSsl('test'); |
+ }, TypeError); |
+ }); |
+ it('fails if the second argument is a non-Buffer value', function() { |
+ assert.throws(function() { |
+ grpc.credentials.createSsl(null, 'test', pem_data); |
+ }, TypeError); |
+ }); |
+ it('fails if the third argument is a non-Buffer value', function() { |
+ assert.throws(function() { |
+ grpc.credentials.createSsl(null, key_data, 'test'); |
+ }, TypeError); |
+ }); |
+ it('fails if only 1 of the last 2 arguments is provided', function() { |
+ assert.throws(function() { |
+ grpc.credentials.createSsl(null, key_data); |
+ }); |
+ assert.throws(function() { |
+ grpc.credentials.createSsl(null, null, pem_data); |
+ }); |
+ }); |
+ }); |
+}); |
+ |
+describe('server credentials', function() { |
+ describe('#createSsl', function() { |
+ it('accepts a buffer and array as the first 2 arguments', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.ServerCredentials.createSsl(ca_data, []); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('accepts a boolean as the third argument', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.ServerCredentials.createSsl(ca_data, [], true); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('accepts an object with two buffers in the second argument', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.ServerCredentials.createSsl(null, |
+ [{private_key: key_data, |
+ cert_chain: pem_data}]); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('accepts multiple objects in the second argument', function() { |
+ var creds; |
+ assert.doesNotThrow(function() { |
+ creds = grpc.ServerCredentials.createSsl(null, |
+ [{private_key: key_data, |
+ cert_chain: pem_data}, |
+ {private_key: key_data, |
+ cert_chain: pem_data}]); |
+ }); |
+ assert.notEqual(creds, null); |
+ }); |
+ it('fails if the second argument is not an Array', function() { |
+ assert.throws(function() { |
+ grpc.ServerCredentials.createSsl(ca_data, 'test'); |
+ }, TypeError); |
+ }); |
+ it('fails if the first argument is a non-Buffer value', function() { |
+ assert.throws(function() { |
+ grpc.ServerCredentials.createSsl('test', []); |
+ }, TypeError); |
+ }); |
+ it('fails if the third argument is a non-boolean value', function() { |
+ assert.throws(function() { |
+ grpc.ServerCredentials.createSsl(ca_data, [], 'test'); |
+ }, TypeError); |
+ }); |
+ it('fails if the array elements are not objects', function() { |
+ assert.throws(function() { |
+ grpc.ServerCredentials.createSsl(ca_data, 'test'); |
+ }, TypeError); |
+ }); |
+ it('fails if the object does not have a Buffer private_key', function() { |
+ assert.throws(function() { |
+ grpc.ServerCredentials.createSsl(null, |
+ [{private_key: 'test', |
+ cert_chain: pem_data}]); |
+ }, TypeError); |
+ }); |
+ it('fails if the object does not have a Buffer cert_chain', function() { |
+ assert.throws(function() { |
+ grpc.ServerCredentials.createSsl(null, |
+ [{private_key: key_data, |
+ cert_chain: 'test'}]); |
+ }, TypeError); |
+ }); |
+ }); |
+}); |
+ |
+describe('client credentials', function() { |
+ var Client; |
+ var server; |
+ var port; |
+ var client_ssl_creds; |
+ var client_options = {}; |
+ before(function() { |
+ var proto = grpc.load(__dirname + '/test_service.proto'); |
+ server = new grpc.Server(); |
+ server.addProtoService(proto.TestService.service, { |
+ unary: function(call, cb) { |
+ call.sendMetadata(call.metadata); |
+ cb(null, {}); |
+ }, |
+ clientStream: function(stream, cb){ |
+ stream.on('data', function(data) {}); |
+ stream.on('end', function() { |
+ stream.sendMetadata(stream.metadata); |
+ cb(null, {}); |
+ }); |
+ }, |
+ serverStream: function(stream) { |
+ stream.sendMetadata(stream.metadata); |
+ stream.end(); |
+ }, |
+ bidiStream: function(stream) { |
+ stream.on('data', function(data) {}); |
+ stream.on('end', function() { |
+ stream.sendMetadata(stream.metadata); |
+ stream.end(); |
+ }); |
+ } |
+ }); |
+ var creds = grpc.ServerCredentials.createSsl(null, |
+ [{private_key: key_data, |
+ cert_chain: pem_data}]); |
+ port = server.bind('localhost:0', creds); |
+ server.start(); |
+ |
+ Client = proto.TestService; |
+ client_ssl_creds = grpc.credentials.createSsl(ca_data); |
+ var host_override = 'foo.test.google.fr'; |
+ client_options['grpc.ssl_target_name_override'] = host_override; |
+ client_options['grpc.default_authority'] = host_override; |
+ }); |
+ after(function() { |
+ server.forceShutdown(); |
+ }); |
+ it('Should accept SSL creds for a client', function(done) { |
+ var client = new Client('localhost:' + port, client_ssl_creds, |
+ client_options); |
+ client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ done(); |
+ }); |
+ }); |
+ it('Should update metadata with SSL creds', function(done) { |
+ var metadataUpdater = function(service_url, callback) { |
+ var metadata = new grpc.Metadata(); |
+ metadata.set('plugin_key', 'plugin_value'); |
+ callback(null, metadata); |
+ }; |
+ var creds = grpc.credentials.createFromMetadataGenerator(metadataUpdater); |
+ var combined_creds = grpc.credentials.combineChannelCredentials( |
+ client_ssl_creds, creds); |
+ var client = new Client('localhost:' + port, combined_creds, |
+ client_options); |
+ var call = client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ }); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ done(); |
+ }); |
+ }); |
+ it('Should update metadata for two simultaneous calls', function(done) { |
+ done = multiDone(done, 2); |
+ var metadataUpdater = function(service_url, callback) { |
+ var metadata = new grpc.Metadata(); |
+ metadata.set('plugin_key', 'plugin_value'); |
+ callback(null, metadata); |
+ }; |
+ var creds = grpc.credentials.createFromMetadataGenerator(metadataUpdater); |
+ var combined_creds = grpc.credentials.combineChannelCredentials( |
+ client_ssl_creds, creds); |
+ var client = new Client('localhost:' + port, combined_creds, |
+ client_options); |
+ var call = client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ }); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ done(); |
+ }); |
+ var call2 = client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ }); |
+ call2.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ done(); |
+ }); |
+ }); |
+ it.skip('should propagate errors that the updater emits', function(done) { |
+ var metadataUpdater = function(service_url, callback) { |
+ var error = new Error('Authentication error'); |
+ error.code = grpc.status.UNAUTHENTICATED; |
+ callback(error); |
+ }; |
+ var creds = grpc.credentials.createFromMetadataGenerator(metadataUpdater); |
+ var combined_creds = grpc.credentials.combineChannelCredentials( |
+ client_ssl_creds, creds); |
+ var client = new Client('localhost:' + port, combined_creds, |
+ client_options); |
+ client.unary({}, function(err, data) { |
+ assert(err); |
+ assert.strictEqual(err.message, 'Authentication error'); |
+ assert.strictEqual(err.code, grpc.status.UNAUTHENTICATED); |
+ done(); |
+ }); |
+ }); |
+ it('should successfully wrap a Google credential', function(done) { |
+ var creds = grpc.credentials.createFromGoogleCredential( |
+ fakeSuccessfulGoogleCredentials); |
+ var combined_creds = grpc.credentials.combineChannelCredentials( |
+ client_ssl_creds, creds); |
+ var client = new Client('localhost:' + port, combined_creds, |
+ client_options); |
+ var call = client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ }); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('authorization'), ['success']); |
+ done(); |
+ }); |
+ }); |
+ it('Should not add metadata with just SSL credentials', function(done) { |
+ // Tests idempotency of credentials composition |
+ var metadataUpdater = function(service_url, callback) { |
+ var metadata = new grpc.Metadata(); |
+ metadata.set('plugin_key', 'plugin_value'); |
+ callback(null, metadata); |
+ }; |
+ var creds = grpc.credentials.createFromMetadataGenerator(metadataUpdater); |
+ grpc.credentials.combineChannelCredentials(client_ssl_creds, creds); |
+ var client = new Client('localhost:' + port, client_ssl_creds, |
+ client_options); |
+ var call = client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ }); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), []); |
+ done(); |
+ }); |
+ }); |
+ it.skip('should get an error from a Google credential', function(done) { |
+ var creds = grpc.credentials.createFromGoogleCredential( |
+ fakeFailingGoogleCredentials); |
+ var combined_creds = grpc.credentials.combineChannelCredentials( |
+ client_ssl_creds, creds); |
+ var client = new Client('localhost:' + port, combined_creds, |
+ client_options); |
+ client.unary({}, function(err, data) { |
+ assert(err); |
+ assert.strictEqual(err.message, 'Authentication failure'); |
+ done(); |
+ }); |
+ }); |
+ describe('Per-rpc creds', function() { |
+ var client; |
+ var updater_creds; |
+ before(function() { |
+ client = new Client('localhost:' + port, client_ssl_creds, |
+ client_options); |
+ var metadataUpdater = function(service_url, callback) { |
+ var metadata = new grpc.Metadata(); |
+ metadata.set('plugin_key', 'plugin_value'); |
+ callback(null, metadata); |
+ }; |
+ updater_creds = grpc.credentials.createFromMetadataGenerator( |
+ metadataUpdater); |
+ }); |
+ it('Should update metadata on a unary call', function(done) { |
+ var call = client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ }, null, {credentials: updater_creds}); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ done(); |
+ }); |
+ }); |
+ it('should update metadata on a client streaming call', function(done) { |
+ var call = client.clientStream(function(err, data) { |
+ assert.ifError(err); |
+ }, null, {credentials: updater_creds}); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ done(); |
+ }); |
+ call.end(); |
+ }); |
+ it('should update metadata on a server streaming call', function(done) { |
+ var call = client.serverStream({}, null, {credentials: updater_creds}); |
+ call.on('data', function() {}); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ done(); |
+ }); |
+ }); |
+ it('should update metadata on a bidi streaming call', function(done) { |
+ var call = client.bidiStream(null, {credentials: updater_creds}); |
+ call.on('data', function() {}); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ done(); |
+ }); |
+ call.end(); |
+ }); |
+ it('should be able to use multiple plugin credentials', function(done) { |
+ var altMetadataUpdater = function(service_url, callback) { |
+ var metadata = new grpc.Metadata(); |
+ metadata.set('other_plugin_key', 'other_plugin_value'); |
+ callback(null, metadata); |
+ }; |
+ var alt_updater_creds = grpc.credentials.createFromMetadataGenerator( |
+ altMetadataUpdater); |
+ var combined_updater = grpc.credentials.combineCallCredentials( |
+ updater_creds, alt_updater_creds); |
+ var call = client.unary({}, function(err, data) { |
+ assert.ifError(err); |
+ }, null, {credentials: combined_updater}); |
+ call.on('metadata', function(metadata) { |
+ assert.deepEqual(metadata.get('plugin_key'), ['plugin_value']); |
+ assert.deepEqual(metadata.get('other_plugin_key'), |
+ ['other_plugin_value']); |
+ done(); |
+ }); |
+ }); |
+ }); |
+}); |