package orbit_test import ( "context" "errors" orbit "git.yuntuo.hk/k2safe/orbit/sdk/go" "net/http" "net/http/httptest" "strings" "testing" ) func TestHealthContract(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if r.Method != "GET" || r.Header.Get("Accept") != "application/json" { t.Error("incorrect request") } if r.URL.Path == "/version" { _, _ = w.Write([]byte(`{"version":"1.2.3","revision":"abc","built_at":"now","go_version":"go1.27.1","http_protocol_version":"1","worker_protocol_version":"1","event_protocol_version":"1","workflow_schema_version":1}`)) return } if r.URL.Path == "/health/live" { _, _ = w.Write([]byte(`{"status":"alive"}`)) return } w.WriteHeader(http.StatusServiceUnavailable) _, _ = w.Write([]byte(`{"secret":"must not appear in error"}`)) })) defer server.Close() client, err := orbit.NewClient(server.URL, orbit.Options{}) if err != nil { t.Fatal(err) } live, err := client.Liveness(context.Background()) if err != nil || live.Status != "alive" { t.Fatalf("%+v %v", live, err) } info, err := client.Version(context.Background()) if err != nil || info.Version != "1.2.3" || info.Revision != "abc" || info.WorkflowSchemaVersion != 1 { t.Fatalf("version=%+v err=%v", info, err) } _, err = client.Readiness(context.Background()) var status *orbit.HTTPError if !errors.As(err, &status) || status.StatusCode != 503 || strings.Contains(err.Error(), "secret") { t.Fatalf("unsafe status error: %v", err) } ctx, cancel := context.WithCancel(context.Background()) cancel() if _, err := client.Liveness(ctx); !errors.Is(err, context.Canceled) { t.Fatalf("context ignored: %v", err) } } func TestRejectsUnsafeURLsRedirectsAndOversizedResponses(t *testing.T) { for _, url := range []string{"", "file:///tmp/x", "http://user:pass@example.org", "http://example.org?token=x"} { if _, err := orbit.NewClient(url, orbit.Options{}); err == nil { t.Fatalf("accepted %q", url) } } for _, scenario := range []string{"redirect", "oversize"} { t.Run(scenario, func(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if scenario == "redirect" { http.Redirect(w, r, "/other", http.StatusFound) return } _, _ = w.Write([]byte(strings.Repeat("x", 17000))) })) defer server.Close() client, err := orbit.NewClient(server.URL, orbit.Options{}) if err != nil { t.Fatal(err) } if _, err := client.Liveness(context.Background()); err == nil { t.Fatal("accepted unsafe response") } }) } } func TestVersionRejectsHTTPErrorAndOversizedResponse(t *testing.T) { for _, scenario := range []string{"status", "oversize"} { t.Run(scenario, func(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if r.URL.Path != "/version" { t.Fatalf("unexpected path %s", r.URL.Path) } if scenario == "status" { w.WriteHeader(http.StatusServiceUnavailable) _, _ = w.Write([]byte(`{"secret":"must not appear"}`)) return } _, _ = w.Write([]byte(strings.Repeat("x", 17000))) })) defer server.Close() client, err := orbit.NewClient(server.URL, orbit.Options{}) if err != nil { t.Fatal(err) } _, err = client.Version(context.Background()) if err == nil || strings.Contains(err.Error(), "secret") { t.Fatalf("unsafe version error: %v", err) } if scenario == "status" { var status *orbit.HTTPError if !errors.As(err, &status) || status.StatusCode != http.StatusServiceUnavailable { t.Fatalf("status error=%v", err) } } }) } }