catalyst 0.2.6

A lightweight API testing tool
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125

use crate::utils::string::replace_variables;
use serde_json::Value;
use std::collections::HashMap;
use std::fs;
use std::path::Path;

pub fn load_body_from_file(
    file_path: &str,
    test_file_dir: &Path,
    vars: &HashMap<String, String>,
) -> Result<Value, String> {
    // Security check - ensure path doesn't contain path traversal
    if file_path.contains("..") {
        return Err("File path cannot escape test directory".to_string());
    }

    // Resolve path relative to test file directory
    let full_path = test_file_dir.join(file_path);

    if !full_path.exists() {
        return Err(format!("File '{}' does not exist", file_path));
    }

    if !full_path.is_file() {
        return Err(format!("'{}' is not a file", file_path));
    }

    let content = fs::read_to_string(&full_path)
        .map_err(|e| format!("Cannot read file '{}': {}", file_path, e))?;

    let processed_content = replace_variables(&content, vars);

    if file_path.ends_with(".json") {
        serde_json::from_str(&processed_content)
            .map_err(|e| format!("Invalid JSON in file '{}': {}", file_path, e))
    } else {
        Ok(Value::String(processed_content))
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use std::fs;
    use std::path::Path;

    #[test]
    fn test_load_json_file() {
        let test_dir = Path::new(".catalyst");
        if !test_dir.exists() {
            fs::create_dir_all(test_dir).unwrap();
        }

        let test_file = test_dir.join("test.json");
        fs::write(&test_file, r#"{"name": "test", "value": 42}"#).unwrap();

        let vars = HashMap::new();
        let result = load_body_from_file("test.json", test_dir, &vars).unwrap();

        assert_eq!(result["name"], "test");
        assert_eq!(result["value"], 42);

        fs::remove_file(test_file).unwrap();
    }

    #[test]
    fn test_load_text_file() {
        let test_dir = Path::new(".catalyst");
        if !test_dir.exists() {
            fs::create_dir_all(test_dir).unwrap();
        }

        let test_file = test_dir.join("test.txt");
        fs::write(&test_file, "Hello, World!").unwrap();

        let vars = HashMap::new();
        let result = load_body_from_file("test.txt", test_dir, &vars).unwrap();

        assert_eq!(result, Value::String("Hello, World!".to_string()));

        fs::remove_file(test_file).unwrap();
    }

    #[test]
    fn test_variable_substitution() {
        let test_dir = Path::new(".catalyst");
        if !test_dir.exists() {
            fs::create_dir_all(test_dir).unwrap();
        }

        let test_file = test_dir.join("test_vars.json");
        fs::write(&test_file, r#"{"user": "{{username}}", "id": {{user_id}}}"#).unwrap();

        let mut vars = HashMap::new();
        vars.insert("username".to_string(), "john_doe".to_string());
        vars.insert("user_id".to_string(), "123".to_string());

        let result = load_body_from_file("test_vars.json", test_dir, &vars).unwrap();

        assert_eq!(result["user"], "john_doe");
        assert_eq!(result["id"], 123);

        fs::remove_file(test_file).unwrap();
    }

    #[test]
    fn test_security_path_traversal() {
        let test_dir = Path::new(".catalyst");
        let vars = HashMap::new();
        let result = load_body_from_file("../secret.json", test_dir, &vars);

        assert!(result.is_err());
        assert!(result.unwrap_err().contains("escape test directory"));
    }

    #[test]
    fn test_file_not_found() {
        let test_dir = Path::new(".catalyst");
        let vars = HashMap::new();
        let result = load_body_from_file("nonexistent.json", test_dir, &vars);

        assert!(result.is_err());
        assert!(result.unwrap_err().contains("does not exist"));
    }
}