Files
osmedeus/pkg/cli/api_client_test.go
T
j3ssie f5840272c5 feat: add run cancellation, event enhancements, and performance optimizations
Major features:
- Add run registry for tracking active runs with PID management
- Add API-based run cancellation with process termination
- Add event trigger input vars syntax for multi-variable extraction
- Add filter_functions with utility function support in triggers
- Add event envelope injection for full event context in workflows
- Add write coordinator for batched database operations

API improvements:
- Add logout endpoint and diffs endpoints for assets/vulnerabilities
- Add step-results listing endpoint
- Update schedule model with target, workspace, params fields
- Change run_id to run_uuid across API responses

Performance:
- Add compiled JS program caching for 60-80% faster loop conditions
- Add parallel shard rendering for 20-40% faster workflow startup
- Add memory-mapped I/O for large file line counting
- Add efficient output buffer combining in runners
- Add mtime-based cache invalidation for workflow loader

Other changes:
- Rename trigger field from trigger to triggers in workflow YAML
- Disable pongo2 HTML autoescape for shell command templates
- Update JWT expiration default to 1440 minutes (1 day)
- Change CORS default to reflect-origin for credentials support
- Add source_type field to events (run, eval, api)
- Skip copying core Unix tools to external-binaries
2026-01-24 01:11:33 +08:00

162 lines
4.5 KiB
Go

package cli
import (
"context"
"encoding/json"
"net/http"
"net/http/httptest"
"testing"
"github.com/j3ssie/osmedeus/v5/internal/config"
"github.com/j3ssie/osmedeus/v5/internal/core"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
)
func TestNewScheduleClient(t *testing.T) {
cfg := &config.Config{
Server: config.ServerConfig{
Host: "localhost",
Port: 8002,
AuthAPIKey: "test-api-key",
},
}
client := NewScheduleClient(cfg)
assert.NotNil(t, client)
assert.Equal(t, "http://localhost:8002", client.baseURL)
assert.Equal(t, "test-api-key", client.apiKey)
}
func TestScheduleClient_SetBaseURL(t *testing.T) {
client := &ScheduleClient{}
client.SetBaseURL("http://custom:9000")
assert.Equal(t, "http://custom:9000", client.baseURL)
}
func TestScheduleClient_IsServerAvailable(t *testing.T) {
t.Run("server available", func(t *testing.T) {
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
assert.Equal(t, "/osm/server-info", r.URL.Path)
w.WriteHeader(http.StatusOK)
}))
defer server.Close()
client := &ScheduleClient{
baseURL: server.URL,
client: http.DefaultClient,
}
assert.True(t, client.IsServerAvailable())
})
t.Run("server unavailable", func(t *testing.T) {
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.WriteHeader(http.StatusInternalServerError)
}))
defer server.Close()
client := &ScheduleClient{
baseURL: server.URL,
client: http.DefaultClient,
}
assert.False(t, client.IsServerAvailable())
})
t.Run("empty baseURL", func(t *testing.T) {
client := &ScheduleClient{
baseURL: "",
client: http.DefaultClient,
}
assert.False(t, client.IsServerAvailable())
})
}
func TestScheduleClient_RegisterCronTrigger(t *testing.T) {
workflow := &core.Workflow{
Name: "test-workflow",
Kind: core.KindModule,
}
trigger := &core.Trigger{
Name: "daily-scan",
Schedule: "0 0 * * *",
Enabled: true,
}
t.Run("success - 201 created", func(t *testing.T) {
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
assert.Equal(t, "/osm/api/schedules", r.URL.Path)
assert.Equal(t, "POST", r.Method)
assert.Equal(t, "application/json", r.Header.Get("Content-Type"))
assert.Equal(t, "test-key", r.Header.Get("x-osm-api-key"))
var req scheduleRequest
err := json.NewDecoder(r.Body).Decode(&req)
require.NoError(t, err)
assert.Equal(t, "test-workflow-daily-scan", req.Name)
assert.Equal(t, "test-workflow", req.WorkflowName)
assert.Equal(t, "module", req.WorkflowKind)
assert.Equal(t, "example.com", req.Target)
assert.Equal(t, "0 0 * * *", req.Schedule)
assert.True(t, req.Enabled)
w.WriteHeader(http.StatusCreated)
_, _ = w.Write([]byte(`{"data": {"id": "sch_123"}}`))
}))
defer server.Close()
client := &ScheduleClient{
baseURL: server.URL,
apiKey: "test-key",
client: http.DefaultClient,
}
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", map[string]string{"tactic": "default"})
assert.NoError(t, err)
})
t.Run("success - 409 conflict (schedule exists)", func(t *testing.T) {
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.WriteHeader(http.StatusConflict)
_, _ = w.Write([]byte(`{"error": true, "message": "schedule already exists"}`))
}))
defer server.Close()
client := &ScheduleClient{
baseURL: server.URL,
client: http.DefaultClient,
}
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", nil)
assert.NoError(t, err) // 409 is treated as success
})
t.Run("failure - 400 bad request", func(t *testing.T) {
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
w.WriteHeader(http.StatusBadRequest)
_, _ = w.Write([]byte(`{"error": true, "message": "invalid request"}`))
}))
defer server.Close()
client := &ScheduleClient{
baseURL: server.URL,
client: http.DefaultClient,
}
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", nil)
assert.Error(t, err)
assert.Contains(t, err.Error(), "400")
})
t.Run("failure - empty baseURL", func(t *testing.T) {
client := &ScheduleClient{
baseURL: "",
client: http.DefaultClient,
}
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", nil)
assert.Error(t, err)
assert.Contains(t, err.Error(), "server URL not configured")
})
}