feat: establish Orbit models, migrations and development baseline

sdk/go/client_test.go

@@ -0,0 +1,70 @@
+package orbit_test
+
+import (
+	"context"
+	"errors"
+	orbit "git.yuntuo.hk/k2safe/orbit/sdk/go"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+)
+
+func TestHealthContract(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != "GET" || r.Header.Get("Accept") != "application/json" {
+			t.Error("incorrect request")
+		}
+		if r.URL.Path == "/health/live" {
+			_, _ = w.Write([]byte(`{"status":"alive"}`))
+			return
+		}
+		w.WriteHeader(http.StatusServiceUnavailable)
+		_, _ = w.Write([]byte(`{"secret":"must not appear in error"}`))
+	}))
+	defer server.Close()
+	client, err := orbit.NewClient(server.URL, orbit.Options{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	live, err := client.Liveness(context.Background())
+	if err != nil || live.Status != "alive" {
+		t.Fatalf("%+v %v", live, err)
+	}
+	_, err = client.Readiness(context.Background())
+	var status *orbit.HTTPError
+	if !errors.As(err, &status) || status.StatusCode != 503 || strings.Contains(err.Error(), "secret") {
+		t.Fatalf("unsafe status error: %v", err)
+	}
+	ctx, cancel := context.WithCancel(context.Background())
+	cancel()
+	if _, err := client.Liveness(ctx); !errors.Is(err, context.Canceled) {
+		t.Fatalf("context ignored: %v", err)
+	}
+}
+func TestRejectsUnsafeURLsRedirectsAndOversizedResponses(t *testing.T) {
+	for _, url := range []string{"", "file:///tmp/x", "http://user:pass@example.org", "http://example.org?token=x"} {
+		if _, err := orbit.NewClient(url, orbit.Options{}); err == nil {
+			t.Fatalf("accepted %q", url)
+		}
+	}
+	for _, scenario := range []string{"redirect", "oversize"} {
+		t.Run(scenario, func(t *testing.T) {
+			server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				if scenario == "redirect" {
+					http.Redirect(w, r, "/other", http.StatusFound)
+					return
+				}
+				_, _ = w.Write([]byte(strings.Repeat("x", 17000)))
+			}))
+			defer server.Close()
+			client, err := orbit.NewClient(server.URL, orbit.Options{})
+			if err != nil {
+				t.Fatal(err)
+			}
+			if _, err := client.Liveness(context.Background()); err == nil {
+				t.Fatal("accepted unsafe response")
+			}
+		})
+	}
+}