mirror of
https://github.com/mattermost/mattermost.git
synced 2026-02-03 20:40:00 -05:00
efaa6264cc
It was a good decision in hindsight to keep the public module as 0.x because this would have been a breaking change again. https://mattermost.atlassian.net/browse/MM-53032 ```release-note Changed the Go module path from github.com/mattermost/mattermost-server/server/v8 to github.com/mattermost/mattermost/server/v8. For the public facing module, it's path is also changed from github.com/mattermost/mattermost-server/server/public to github.com/mattermost/mattermost/server/public ```
51 lines
1.3 KiB
Go
51 lines
1.3 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package utils
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"crypto/elliptic"
|
|
"crypto/rand"
|
|
"crypto/sha256"
|
|
"encoding/asn1"
|
|
"encoding/base64"
|
|
"math/big"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"net/url"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/mattermost/mattermost/server/public/model"
|
|
)
|
|
|
|
func TestRenderWebError(t *testing.T) {
|
|
r := httptest.NewRequest("GET", "http://foo", nil)
|
|
w := httptest.NewRecorder()
|
|
key, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
require.NoError(t, err)
|
|
RenderWebError(&model.Config{}, w, r, http.StatusTemporaryRedirect, url.Values{
|
|
"foo": []string{"bar"},
|
|
}, key)
|
|
|
|
resp := w.Result()
|
|
location, err := url.Parse(resp.Header.Get("Location"))
|
|
require.NoError(t, err)
|
|
require.NotEmpty(t, location.Query().Get("s"))
|
|
|
|
type ecdsaSignature struct {
|
|
R, S *big.Int
|
|
}
|
|
var rs ecdsaSignature
|
|
s, err := base64.URLEncoding.DecodeString(location.Query().Get("s"))
|
|
require.NoError(t, err)
|
|
_, err = asn1.Unmarshal(s, &rs)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "bar", location.Query().Get("foo"))
|
|
h := sha256.Sum256([]byte("/error?foo=bar"))
|
|
assert.True(t, ecdsa.Verify(&key.PublicKey, h[:], rs.R, rs.S))
|
|
}
|