appcore-gateway 2.0.0-alpha.2

Multi-tenant Gateway capability for the AppCore Runtime.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

// =============================================================================
//        #######
//     ###       ###     F: service_tests.rs
//    ##   ## ##   ##    P: AppCore-Runtime
//         ## ##
//                       C: 2026/08/26 00:00:00 by dnettoRaw
//    ##   ## ##   ##    U: 2026/08/26 00:00:00 by dnettoRaw
//      ###########      S: 1.0.2-rc
// =============================================================================
// appcore-norm: test

use super::*;
use crate::{GatewayConfig, GatewayState};
use appcore_security::HashTokenProvider;

fn state() -> GatewayState {
    GatewayState::new(
        GatewayConfig::new(([127, 0, 0, 1], 0).into(), "gateway.test"),
        HashTokenProvider::from_secret(vec![9; 32]).unwrap(),
    )
    .unwrap()
}

fn params(token: Option<&str>) -> ConnectionParams {
    ConnectionParams {
        tenant: None,
        cluster: None,
        installation: None,
        core: None,
        device: None,
        token: token.map(str::to_string),
        capabilities: None,
    }
}

#[test]
fn missing_and_query_credentials_increment_only_redacted_auth_counter() {
    let state = state();
    let headers = HeaderMap::new();

    assert!(matches!(
        authenticate_upgrade(&state, &headers, &params(None), "request-hash"),
        Err(UpgradeError::Missing)
    ));
    assert!(matches!(
        authenticate_upgrade(
            &state,
            &headers,
            &params(Some("must-not-appear")),
            "request-hash"
        ),
        Err(UpgradeError::QueryNotAllowed)
    ));

    let telemetry = state.metrics.telemetry_snapshot();
    assert_eq!(telemetry.authentication_failures, 2);
    assert!(!format!("{telemetry:?}").contains("must-not-appear"));
    assert!(telemetry.capabilities.is_empty());
}

#[test]
fn capability_parser_deduplicates_one_owned_copy_at_the_limit() {
    let values = (0..MAX_GATEWAY_CAPABILITIES)
        .map(|index| format!("runtime.capability-{index:02}"))
        .collect::<Vec<_>>();
    let input = values.join(",");
    let parsed = parse_capabilities(Some(&input)).unwrap();

    assert_eq!(parsed.len(), MAX_GATEWAY_CAPABILITIES);
    assert_eq!(parsed[0].as_str(), "runtime.capability-00");
    assert_eq!(
        parse_capabilities(Some(" runtime.a, runtime.a ,runtime.b"))
            .unwrap()
            .iter()
            .map(CapabilityName::as_str)
            .collect::<Vec<_>>(),
        ["runtime.a", "runtime.b"]
    );
    assert_eq!(
        parse_capabilities(Some(&format!("{input},runtime.too-many"))),
        Err("Too many capabilities")
    );
    assert_eq!(
        parse_capabilities(Some("runtime.valid,")),
        Err("Invalid capability")
    );
}