durable-actors 0.2.4

Standalone regional durable-object control plane, host, and durability runtime
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

use super::*;

#[test]
fn replica_capabilities_bind_operation_expiry_and_stream() -> Result<()> {
    let access = ReplicaAccess::new("secret", Arc::new(crate::clock::SystemClock));
    let grant = ReplicaGrant {
        stream: None,
        operation: "GET".into(),
        object: "little-actors/v3/snapshots/aa/test/1.json".into(),
        region: "us-east".into(),
        host_id: "replica".into(),
        expires_at_ms: u64::MAX,
    };
    let url = access.url("http://replica", &grant)?;
    let token = url.split("token=").nth(1).unwrap();
    access.verify(token, "GET")?;
    assert!(access.verify(token, "PUT").is_err());
    assert!(
        ReplicaAccess::new("other-secret", Arc::new(crate::clock::SystemClock))
            .verify(token, "GET")
            .is_err()
    );
    for invalid in [
        ReplicaGrant {
            expires_at_ms: 0,
            ..grant.clone()
        },
        ReplicaGrant {
            object: "outside/runtime.json".into(),
            ..grant.clone()
        },
        ReplicaGrant {
            stream: Some(super::super::ReplicaStream {
                prefix: "another-object".into(),
                session: "little-actors/v3/hosts/host/sessions/one/".into(),
                owner_epoch: 1,
                base_version: 0,
            }),
            ..grant.clone()
        },
    ] {
        let url = access.url("http://replica", &invalid)?;
        assert!(
            access
                .verify(url.split("token=").nth(1).unwrap(), "GET")
                .is_err()
        );
    }
    Ok(())
}