orchestra/internal/federation/federation_test.go

package federation

import (
	"testing"
	"time"
)

func TestCursorIsMonotonicAndAuthenticationIsRequired(t *testing.T) {
	r := &Registry{}
	if err := r.Register(Worker{ID: "workpc", Token: "secret"}, ""); err != nil {
		t.Fatal(err)
	}
	if err := r.Authenticate("workpc", "wrong"); err != ErrUnauthorized {
		t.Fatalf("got %v", err)
	}
	if err := r.Authenticate("workpc", "secret"); err != nil {
		t.Fatal(err)
	}
	if err := r.Ack("workpc", 7); err != nil {
		t.Fatal(err)
	}
	if err := r.Ack("workpc", 6); err == nil {
		t.Fatal("backwards cursor accepted")
	}
	if got, _ := r.Cursor("workpc"); got != 7 {
		t.Fatalf("cursor = %d", got)
	}
}

func TestRegisterRequiresAdmitTokenAndOwnToken(t *testing.T) {
	r := &Registry{AdmitToken: "admit-secret"}
	if err := r.Register(Worker{ID: "workpc", Token: "secret"}, "wrong"); err != ErrUnauthorized {
		t.Fatalf("wrong admit token: got %v", err)
	}
	if err := r.Register(Worker{ID: "workpc", Token: "secret"}, "admit-secret"); err != nil {
		t.Fatal(err)
	}
	// Re-registering the same id with a different token is a hijack
	// attempt (S10), not a legitimate re-registration, and must be refused
	// even with a valid admit token.
	if err := r.Register(Worker{ID: "workpc", Token: "different"}, "admit-secret"); err != ErrUnauthorized {
		t.Fatalf("hijack with different token: got %v", err)
	}
	// The same worker re-registering with its own token (e.g. after a
	// restart) must still succeed.
	if err := r.Register(Worker{ID: "workpc", Token: "secret"}, "admit-secret"); err != nil {
		t.Fatalf("legitimate re-registration: %v", err)
	}
}

func TestOfflineHookRunsOnceOnTransition(t *testing.T) {
	called := make(chan Worker, 1)
	r := &Registry{TTL: time.Millisecond, OnOffline: func(w Worker) { called <- w }}
	if err := r.Register(Worker{ID: "workpc", Token: "secret"}, ""); err != nil {
		t.Fatal(err)
	}
	r.mu.Lock()
	w := r.workers["workpc"]
	w.LastSeen = time.Now().Add(-time.Second)
	r.workers["workpc"] = w
	r.mu.Unlock()
	r.Snapshot()
	select {
	case got := <-called:
		if got.ID != "workpc" {
			t.Fatal(got.ID)
		}
	case <-time.After(time.Second):
		t.Fatal("offline hook not called")
	}
	r.Snapshot()
	select {
	case <-called:
		t.Fatal("offline hook called twice")
	case <-time.After(10 * time.Millisecond):
	}
}

func TestCaptureRevisionAndCommandQueue(t *testing.T) {
	r := &Registry{}
	if err := r.Register(Worker{ID: "w", Token: "t"}, ""); err != nil {
		t.Fatal(err)
	}
	c, err := r.PutCapture("w", Capture{TaskID: "task", PaneID: "pane", Text: "Permission required\n$ ls"})
	if err != nil || c.Revision != 1 {
		t.Fatalf("capture=%#v err=%v", c, err)
	}
	again, err := r.PutCapture("w", Capture{TaskID: "task", PaneID: "pane", Text: c.Text})
	if err != nil || again.Revision != 1 {
		t.Fatalf("same capture=%#v err=%v", again, err)
	}
	cmd, err := r.Queue("w", Command{TaskID: "task", Kind: "grant_approval", PaneID: "pane", CaptureRevision: 1})
	if err != nil {
		t.Fatal(err)
	}
	commands, err := r.Commands("w")
	if err != nil || len(commands) != 1 || commands[0].ID != cmd.ID {
		t.Fatalf("commands=%#v err=%v", commands, err)
	}
	if err := r.CompleteCommand("w", cmd.ID, "acknowledged", ""); err != nil {
		t.Fatal(err)
	}
	commands, _ = r.Commands("w")
	if len(commands) != 0 {
		t.Fatalf("pending=%#v", commands)
	}
}

func TestResolvedCommandsArePrunedButPendingOnesSurvive(t *testing.T) {
	r := &Registry{}
	if err := r.Register(Worker{ID: "w", Token: "t"}, ""); err != nil {
		t.Fatal(err)
	}
	old, err := r.Queue("w", Command{TaskID: "task", Kind: "grant_approval", PaneID: "pane", CaptureRevision: 1})
	if err != nil {
		t.Fatal(err)
	}
	if err := r.CompleteCommand("w", old.ID, "acknowledged", ""); err != nil {
		t.Fatal(err)
	}
	pending, err := r.Queue("w", Command{TaskID: "task", Kind: "deny_approval", PaneID: "pane", CaptureRevision: 2})
	if err != nil {
		t.Fatal(err)
	}
	// Age both past the retention window; only the resolved one may go.
	r.mu.Lock()
	for i := range r.commands["w"] {
		r.commands["w"][i].CreatedAt = time.Now().UTC().Add(-2 * CommandRetention)
	}
	r.mu.Unlock()
	if _, err := r.Commands("w"); err != nil {
		t.Fatal(err)
	}
	if _, ok := r.Command("w", old.ID); ok {
		t.Fatal("resolved command past retention was not pruned")
	}
	if c, ok := r.Command("w", pending.ID); !ok || c.Status != "pending" {
		t.Fatalf("pending command was pruned: %#v ok=%v", c, ok)
	}
}