Mercurial > hg > nginx-tests
view secure_link.t @ 572:ca54b445d982
Tests: masked nginx bug in proxy next upstream.
When iterating through several next upstreams per a worker cycle,
a previously reported event about upstream connection error may
be improperly applied to the next upstream, thus leading to the
invalid connection error. E.g., in kqueue, where the problem is
visible, this is caused by "ev->instance" that does not tolerate
more than one next upstream at once, and kevents placed on the
kqueue separately for read and write events.
The change is to limit test case to the only one next upstream.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Thu, 14 May 2015 11:54:24 +0300 |
parents | 07c600de2f90 |
children | dc2f8aac0553 |
line wrap: on
line source
#!/usr/bin/perl # (C) Maxim Dounin # Tests for nginx secure_link module. ############################################################################### use warnings; use strict; use Test::More; use Digest::MD5 qw/ md5 md5_hex /; use MIME::Base64 qw/ encode_base64 /; BEGIN { use FindBin; chdir($FindBin::Bin); } use lib 'lib'; use Test::Nginx; ############################################################################### select STDERR; $| = 1; select STDOUT; $| = 1; my $t = Test::Nginx->new()->has(qw/http secure_link rewrite/)->plan(9); $t->write_file_expand('nginx.conf', <<'EOF'); %%TEST_GLOBALS%% daemon off; events { } http { %%TEST_GLOBALS_HTTP%% server { listen 127.0.0.1:8080; server_name localhost; location / { # new style # /test.html?hash=BASE64URL secure_link $arg_hash; secure_link_md5 secret$uri; # invalid hash if ($secure_link = "") { return 403; } # expired if ($secure_link = "0") { return 403; } # $secure_link = "1" } location = /expires.html { # new style with expires # /test.html?hash=BASE64URL&expires=12345678 secure_link $arg_hash,$arg_expires; secure_link_md5 secret$uri$arg_expires; # invalid hash if ($secure_link = "") { return 403; } # expired if ($secure_link = "0") { return 403; } # $secure_link = "1" } location /p/ { # old style # /p/d8e8fca2dc0f896fd7cb4cb0031ba249/test.html secure_link_secret secret; if ($secure_link = "") { return 403; } rewrite ^ /$secure_link break; } location /inheritance/ { secure_link_secret secret; location = /inheritance/test { secure_link Xr4ilOzQ4PCOq3aQ0qbuaQ==; secure_link_md5 secret; if ($secure_link = "1") { rewrite ^ /test.html break; } return 403; } } } } EOF $t->write_file('test.html', 'PASSED'); $t->write_file('expires.html', 'PASSED'); $t->run(); ############################################################################### # new style like(http_get('/test.html?hash=q-5vpkjBkRXXtkUMXiJVHA=='), qr/PASSED/, 'request md5'); like(http_get('/test.html?hash=q-5vpkjBkRXXtkUMXiJVHA'), qr/PASSED/, 'request md5 no padding'); like(http_get('/test.html'), qr/^HTTP.*403/, 'request no hash'); # new style with expires my ($expires, $hash); $expires = time() + 86400; $hash = encode_base64url(md5("secret/expires.html$expires")); like(http_get('/expires.html?hash=' . $hash . '&expires=' . $expires), qr/PASSED/, 'request md5 not expired'); $expires = time() - 86400; $hash = encode_base64url(md5("secret/expires.html$expires")); like(http_get('/expires.html?hash=' . $hash . '&expires=' . $expires), qr/^HTTP.*403/, 'request md5 expired'); # old style like(http_get('/p/' . md5_hex('test.html' . 'secret') . '/test.html'), qr/PASSED/, 'request old style'); like(http_get('/p/' . md5_hex('fake') . '/test.html'), qr/^HTTP.*403/, 'request old style fake hash'); like(http_get('/p/test.html'), qr/^HTTP.*403/, 'request old style no hash'); like(http_get('/inheritance/test'), qr/PASSED/, 'inheritance'); ############################################################################### sub encode_base64url { my $e = encode_base64(shift, ""); $e =~ s/=+\z//; $e =~ tr[+/][-_]; return $e; } ###############################################################################