assay-lua 0.15.4

General-purpose enhanced Lua runtime. Batteries-included scripting, automation, and web services.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135

mod common;

use common::run_lua;

#[tokio::test]
async fn test_require_url() {
    let script = r#"
        local url = require("assay.url")
        assert.not_nil(url)
        assert.not_nil(url.encode)
        assert.not_nil(url.encode_form)
        assert.not_nil(url.decode)
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_encode_space_is_percent_20() {
    let script = r#"
        local url = require("assay.url")
        assert.eq(url.encode("hello world"), "hello%20world")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_encode_unreserved_passthrough() {
    let script = r#"
        local url = require("assay.url")
        assert.eq(url.encode("AZaz09-_.~"), "AZaz09-_.~")
    "#;
    run_lua(script).await.unwrap();
}

// Secrets containing &=+% are the original Tailscale footgun.
#[tokio::test]
async fn test_url_encode_form_footgun_chars() {
    let script = r#"
        local url = require("assay.url")
        local s = url.encode("a&b=c+d%e")
        assert.contains(s, "%26")
        assert.contains(s, "%3D")
        assert.contains(s, "%2B")
        assert.contains(s, "%25")
        -- raw chars must NOT remain
        assert.eq(string.find(s, "&", 1, true), nil)
        assert.eq(string.find(s, "=", 1, true), nil)
        assert.eq(string.find(s, "+", 1, true), nil)
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_round_trip_ascii() {
    let script = r#"
        local url = require("assay.url")
        local cases = { "hello world", "a&b=c+d%e", "x/y?z=1" }
        for _, s in ipairs(cases) do
            assert.eq(url.decode(url.encode(s)), s)
        end
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_round_trip_unicode() {
    let script = r#"
        local url = require("assay.url")
        local s = "café"
        assert.eq(url.decode(url.encode(s)), s)
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_encode_form_basic() {
    let script = r#"
        local url = require("assay.url")
        local body = url.encode_form({ grant_type = "client_credentials", scope = "read write" })
        assert.contains(body, "grant_type=client_credentials")
        assert.contains(body, "scope=read%20write")
        assert.contains(body, "&")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_encode_form_escapes_secret_chars() {
    let script = r#"
        local url = require("assay.url")
        local body = url.encode_form({ client_secret = "a&b=c+d%e" })
        assert.contains(body, "client_secret=a%26b%3Dc%2Bd%25e")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_encode_form_deterministic_order() {
    let script = r#"
        local url = require("assay.url")
        local body = url.encode_form({ b = "2", a = "1", c = "3" })
        assert.eq(body, "a=1&b=2&c=3")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_encode_form_stringifies_values() {
    let script = r#"
        local url = require("assay.url")
        local body = url.encode_form({ n = 42, b = true, f = false })
        assert.contains(body, "n=42")
        assert.contains(body, "b=true")
        assert.contains(body, "f=false")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_decode_plus_to_space() {
    let script = r#"
        local url = require("assay.url")
        assert.eq(url.decode("hello+world"), "hello world")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_url_decode_percent_sequences() {
    let script = r#"
        local url = require("assay.url")
        assert.eq(url.decode("a%26b%3Dc"), "a&b=c")
    "#;
    run_lua(script).await.unwrap();
}