package orbit_test import ( "context" "errors" orbit "git.yuntuo.hk/k2safe/orbit/sdk/go" "net/http" "net/http/httptest" "strings" "testing" ) func TestHealthContract(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if r.Method != "GET" || r.Header.Get("Accept") != "application/json" { t.Error("incorrect request") } if r.URL.Path == "/health/live" { _, _ = w.Write([]byte(`{"status":"alive"}`)) return } w.WriteHeader(http.StatusServiceUnavailable) _, _ = w.Write([]byte(`{"secret":"must not appear in error"}`)) })) defer server.Close() client, err := orbit.NewClient(server.URL, orbit.Options{}) if err != nil { t.Fatal(err) } live, err := client.Liveness(context.Background()) if err != nil || live.Status != "alive" { t.Fatalf("%+v %v", live, err) } _, err = client.Readiness(context.Background()) var status *orbit.HTTPError if !errors.As(err, &status) || status.StatusCode != 503 || strings.Contains(err.Error(), "secret") { t.Fatalf("unsafe status error: %v", err) } ctx, cancel := context.WithCancel(context.Background()) cancel() if _, err := client.Liveness(ctx); !errors.Is(err, context.Canceled) { t.Fatalf("context ignored: %v", err) } } func TestRejectsUnsafeURLsRedirectsAndOversizedResponses(t *testing.T) { for _, url := range []string{"", "file:///tmp/x", "http://user:pass@example.org", "http://example.org?token=x"} { if _, err := orbit.NewClient(url, orbit.Options{}); err == nil { t.Fatalf("accepted %q", url) } } for _, scenario := range []string{"redirect", "oversize"} { t.Run(scenario, func(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if scenario == "redirect" { http.Redirect(w, r, "/other", http.StatusFound) return } _, _ = w.Write([]byte(strings.Repeat("x", 17000))) })) defer server.Close() client, err := orbit.NewClient(server.URL, orbit.Options{}) if err != nil { t.Fatal(err) } if _, err := client.Liveness(context.Background()); err == nil { t.Fatal("accepted unsafe response") } }) } }