assay-lua 0.16.4

General-purpose enhanced Lua runtime. Batteries-included scripting, automation, and web services.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114

mod common;

use common::run_lua;

#[tokio::test]
async fn test_require_sigv4() {
    let script = r#"
        local sigv4 = require("assay.aws.sigv4")
        assert.not_nil(sigv4)
        assert.not_nil(sigv4.sign)
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_sigv4_sign_produces_authorization_header() {
    let script = r#"
        local sigv4 = require("assay.aws.sigv4")
        local headers = sigv4.sign({
            access_key = "AKIAIOSFODNN7EXAMPLE",
            secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
            service = "ecr",
            region = "us-east-1",
            method = "POST",
            host = "api.ecr.us-east-1.amazonaws.com",
            payload = "{}",
        })
        assert.not_nil(headers.authorization)
        assert.not_nil(headers["x-amz-date"])
        assert.not_nil(headers["x-amz-content-sha256"])
        assert.eq(headers.host, "api.ecr.us-east-1.amazonaws.com")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_sigv4_sign_includes_session_token() {
    let script = r#"
        local sigv4 = require("assay.aws.sigv4")
        local headers = sigv4.sign({
            access_key = "AKIAIOSFODNN7EXAMPLE",
            secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
            session_token = "IQoJb3JpZ2luX2VjEJ",
            service = "ec2",
            region = "eu-west-1",
            method = "GET",
            host = "ec2.eu-west-1.amazonaws.com",
            payload = "",
        })
        assert.eq(headers["x-amz-security-token"], "IQoJb3JpZ2luX2VjEJ")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_sigv4_sign_with_custom_headers() {
    let script = r#"
        local sigv4 = require("assay.aws.sigv4")
        local headers = sigv4.sign({
            access_key = "AKIAIOSFODNN7EXAMPLE",
            secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
            service = "ecr",
            region = "us-east-1",
            method = "POST",
            host = "api.ecr.us-east-1.amazonaws.com",
            payload = "{}",
            headers = {
                ["content-type"] = "application/x-amz-json-1.1",
                ["x-amz-target"] = "AmazonEC2ContainerRegistry_V20150921.GetAuthorizationToken",
            },
        })
        assert.eq(headers["content-type"], "application/x-amz-json-1.1")
        assert.eq(headers["x-amz-target"], "AmazonEC2ContainerRegistry_V20150921.GetAuthorizationToken")
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_sigv4_sign_query_params() {
    let script = r#"
        local sigv4 = require("assay.aws.sigv4")
        local headers = sigv4.sign({
            access_key = "AKIAIOSFODNN7EXAMPLE",
            secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
            service = "ecr",
            region = "us-east-1",
            method = "GET",
            host = "api.ecr.us-east-1.amazonaws.com",
            path = "/",
            query = "Action=DescribeRepositories&Version=2015-09-21",
            payload = "",
        })
        assert.not_nil(headers.authorization)
    "#;
    run_lua(script).await.unwrap();
}

#[tokio::test]
async fn test_sigv4_sign_defaults_method_to_get() {
    let script = r#"
        local sigv4 = require("assay.aws.sigv4")
        local headers = sigv4.sign({
            access_key = "AKIAIOSFODNN7EXAMPLE",
            secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
            service = "ecr",
            region = "us-east-1",
            host = "api.ecr.us-east-1.amazonaws.com",
            payload = "",
        })
        -- Default method is GET, path is /
        assert.not_nil(headers.authorization)
    "#;
    run_lua(script).await.unwrap();
}