235 lines
10 KiB
JavaScript
235 lines
10 KiB
JavaScript
/* global it:false */
|
|
/* global describe:false */
|
|
/* global before:false */
|
|
/* global after:false */
|
|
|
|
'use strict';
|
|
|
|
var ssh = require('../../ssh.js'),
|
|
async = require('async'),
|
|
config = require('../../config.js'),
|
|
database = require('../../database.js'),
|
|
expect = require('expect.js'),
|
|
superagent = require('superagent'),
|
|
server = require('../../server.js');
|
|
|
|
var SERVER_URL = 'http://localhost:' + config.get('port');
|
|
|
|
var USERNAME = 'superadmin', PASSWORD = 'Foobar?1337', EMAIL ='silly@me.com';
|
|
|
|
var INVALID_KEY_TYPE = 'ssh-foobar AAAAB3NzaC1yc2EAAAADAQABAAABAQCibC8G04mZy3o3AVMxjUMQoEQj0HSsl6AMVZDQK9A0e8qVRWft4HaRZdw0dW3iFDsEdny7s1zSAc5Kp5y38kJdSyEHGKxvcR8TaghUa8jpmu0sEVOTn+X4UtoonkNuJ0Jnl2tjPYsq5BtJmAeYUa1bKH5CjomCYi5OSfXRtnuZV6SiYX0A1OnZPXFWa/iFwwOUJQvDLGbFkgtJxqhxpc7yvzwFK5B9MNs7LJxA8+kRibJ9LTN1OKWNxb0oSk/PE6PFo9M2Q/SL9uj2IRXRipGj2XcOtZlqcAK5i+aq3UjjAGekztK2srQPcBkWbnI3Oim2N8l2purCfe0AoCCQHK7N nebulon@nebulon';
|
|
var INVALID_KEY_VALUE = 'ssh-rsa foobar nebulon@nebulon';
|
|
var INVALID_KEY_IDENTIFIER = 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCibC8G04mZy3o3AVMxjUMQoEQj0HSsl6AMVZDQK9A0e8qVRWft4HaRZdw0dW3iFDsEdny7s1zSAc5Kp5y38kJdSyEHGKxvcR8TaghUa8jpmu0sEVOTn+X4UtoonkNuJ0Jnl2tjPYsq5BtJmAeYUa1bKH5CjomCYi5OSfXRtnuZV6SiYX0A1OnZPXFWa/iFwwOUJQvDLGbFkgtJxqhxpc7yvzwFK5B9MNs7LJxA8+kRibJ9LTN1OKWNxb0oSk/PE6PFo9M2Q/SL9uj2IRXRipGj2XcOtZlqcAK5i+aq3UjjAGekztK2srQPcBkWbnI3Oim2N8l2purCfe0AoCCQHK7N';
|
|
var VALID_KEY = 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCibC8G04mZy3o3AVMxjUMQoEQj0HSsl6AMVZDQK9A0e8qVRWft4HaRZdw0dW3iFDsEdny7s1zSAc5Kp5y38kJdSyEHGKxvcR8TaghUa8jpmu0sEVOTn+X4UtoonkNuJ0Jnl2tjPYsq5BtJmAeYUa1bKH5CjomCYi5OSfXRtnuZV6SiYX0A1OnZPXFWa/iFwwOUJQvDLGbFkgtJxqhxpc7yvzwFK5B9MNs7LJxA8+kRibJ9LTN1OKWNxb0oSk/PE6PFo9M2Q/SL9uj2IRXRipGj2XcOtZlqcAK5i+aq3UjjAGekztK2srQPcBkWbnI3Oim2N8l2purCfe0AoCCQHK7N nebulon@nebulon';
|
|
var VALID_KEY_1 = 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCibC8G04mZy3o3AVMxjUMQoEQj0HSsl6AMVZDQK9A0e8qVRWft4HaRZdw0dW3iFDsEdny7s1zSAc5Kp5y38kJdSyEHGKxvcR8TaghUa8jpmu0sEVOTn+X4UtoonkNuJ0Jnl2tjPYsq5BtJmAeYUa1bKH5CjomCYi5OSfXRtnuZV6SiYX0A1OnZPXFWa/iFwwOUJQvDLGbFkgtJxqhxpc7yvzwFK5B9MNs7LJxA8+kRibJ9LTN1OKWNxb0oSk/PE6PFo9M2Q/SL9uj2IRXRipGj2XcOtZlqcAK5i+aq3UjjAGekztK2srQPcBkWbnI3Oim2N8l2purCfe0AoCCQHK7N muchmore';
|
|
|
|
var token = null;
|
|
|
|
function setup(done) {
|
|
config._reset();
|
|
config.setFqdn('example-ssh-test.com');
|
|
|
|
async.series([
|
|
server.start.bind(server),
|
|
|
|
ssh._clear,
|
|
database._clear,
|
|
|
|
function createAdmin(callback) {
|
|
superagent.post(SERVER_URL + '/api/v1/cloudron/activate')
|
|
.query({ setupToken: 'somesetuptoken' })
|
|
.send({ username: USERNAME, password: PASSWORD, email: EMAIL })
|
|
.end(function (error, result) {
|
|
expect(result).to.be.ok();
|
|
expect(result.statusCode).to.eql(201);
|
|
|
|
// stash token for further use
|
|
token = result.body.token;
|
|
|
|
callback();
|
|
});
|
|
}
|
|
], done);
|
|
}
|
|
|
|
function cleanup(done) {
|
|
database._clear(function (error) {
|
|
expect(!error).to.be.ok();
|
|
|
|
server.stop(done);
|
|
});
|
|
}
|
|
|
|
describe('SSH API', function () {
|
|
this.timeout(10000);
|
|
|
|
before(setup);
|
|
after(cleanup);
|
|
|
|
describe('add authorized_keys', function () {
|
|
it('fails due to missing key', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to empty key', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.send({ key: '' })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to invalid key', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.send({ key: 'foobar' })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to invalid key type', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.send({ key: INVALID_KEY_TYPE })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to invalid key value', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.send({ key: INVALID_KEY_VALUE })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to invalid key identifier', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.send({ key: INVALID_KEY_IDENTIFIER })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('succeeds', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.send({ key: VALID_KEY })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(201);
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
|
|
describe('get authorized_keys', function () {
|
|
it('fails for non existing key', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys/foobar')
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(404);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('succeeds', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys/' + VALID_KEY.split(' ')[2])
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(200);
|
|
expect(res.body).to.be.an('object');
|
|
expect(res.body.identifier).to.be.a('string');
|
|
expect(res.body.identifier).to.equal(VALID_KEY.split(' ')[2]);
|
|
expect(res.body.key).to.equal(VALID_KEY);
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
|
|
describe('list authorized_keys', function () {
|
|
it('succeeds', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(200);
|
|
expect(res.body).to.be.an('object');
|
|
expect(res.body.keys).to.be.an('array');
|
|
expect(res.body.keys.length).to.equal(1);
|
|
expect(res.body.keys[0]).to.be.an('object');
|
|
expect(res.body.keys[0].identifier).to.be.a('string');
|
|
expect(res.body.keys[0].identifier).to.equal(VALID_KEY.split(' ')[2]);
|
|
expect(res.body.keys[0].key).to.equal(VALID_KEY);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('succeeds with two keys', function (done) {
|
|
superagent.put(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.send({ key: VALID_KEY_1 })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(201);
|
|
|
|
superagent.get(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys')
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(200);
|
|
expect(res.body).to.be.an('object');
|
|
expect(res.body.keys).to.be.an('array');
|
|
expect(res.body.keys.length).to.equal(2);
|
|
expect(res.body.keys[0]).to.be.an('object');
|
|
expect(res.body.keys[0].identifier).to.be.a('string');
|
|
expect(res.body.keys[0].identifier).to.equal(VALID_KEY_1.split(' ')[2]);
|
|
expect(res.body.keys[0].key).to.equal(VALID_KEY_1);
|
|
expect(res.body.keys[1]).to.be.an('object');
|
|
expect(res.body.keys[1].identifier).to.be.a('string');
|
|
expect(res.body.keys[1].identifier).to.equal(VALID_KEY.split(' ')[2]);
|
|
expect(res.body.keys[1].key).to.equal(VALID_KEY);
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
describe('delete authorized_keys', function () {
|
|
it('fails for non existing key', function (done) {
|
|
superagent.del(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys/foobar')
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(404);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('succeeds', function (done) {
|
|
superagent.del(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys/' + VALID_KEY.split(' ')[2])
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(202);
|
|
|
|
superagent.get(SERVER_URL + '/api/v1/cloudron/ssh/authorized_keys/' + VALID_KEY.split(' ')[2])
|
|
.query({ access_token: token })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(404);
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
});
|