mirror of
https://github.com/j3ssie/osmedeus.git
synced 2026-08-21 23:22:30 +02:00
Major features: - Add run registry for tracking active runs with PID management - Add API-based run cancellation with process termination - Add event trigger input vars syntax for multi-variable extraction - Add filter_functions with utility function support in triggers - Add event envelope injection for full event context in workflows - Add write coordinator for batched database operations API improvements: - Add logout endpoint and diffs endpoints for assets/vulnerabilities - Add step-results listing endpoint - Update schedule model with target, workspace, params fields - Change run_id to run_uuid across API responses Performance: - Add compiled JS program caching for 60-80% faster loop conditions - Add parallel shard rendering for 20-40% faster workflow startup - Add memory-mapped I/O for large file line counting - Add efficient output buffer combining in runners - Add mtime-based cache invalidation for workflow loader Other changes: - Rename trigger field from trigger to triggers in workflow YAML - Disable pongo2 HTML autoescape for shell command templates - Update JWT expiration default to 1440 minutes (1 day) - Change CORS default to reflect-origin for credentials support - Add source_type field to events (run, eval, api) - Skip copying core Unix tools to external-binaries
162 lines
4.5 KiB
Go
162 lines
4.5 KiB
Go
package cli
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/j3ssie/osmedeus/v5/internal/config"
|
|
"github.com/j3ssie/osmedeus/v5/internal/core"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestNewScheduleClient(t *testing.T) {
|
|
cfg := &config.Config{
|
|
Server: config.ServerConfig{
|
|
Host: "localhost",
|
|
Port: 8002,
|
|
AuthAPIKey: "test-api-key",
|
|
},
|
|
}
|
|
|
|
client := NewScheduleClient(cfg)
|
|
assert.NotNil(t, client)
|
|
assert.Equal(t, "http://localhost:8002", client.baseURL)
|
|
assert.Equal(t, "test-api-key", client.apiKey)
|
|
}
|
|
|
|
func TestScheduleClient_SetBaseURL(t *testing.T) {
|
|
client := &ScheduleClient{}
|
|
client.SetBaseURL("http://custom:9000")
|
|
assert.Equal(t, "http://custom:9000", client.baseURL)
|
|
}
|
|
|
|
func TestScheduleClient_IsServerAvailable(t *testing.T) {
|
|
t.Run("server available", func(t *testing.T) {
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
assert.Equal(t, "/osm/server-info", r.URL.Path)
|
|
w.WriteHeader(http.StatusOK)
|
|
}))
|
|
defer server.Close()
|
|
|
|
client := &ScheduleClient{
|
|
baseURL: server.URL,
|
|
client: http.DefaultClient,
|
|
}
|
|
assert.True(t, client.IsServerAvailable())
|
|
})
|
|
|
|
t.Run("server unavailable", func(t *testing.T) {
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusInternalServerError)
|
|
}))
|
|
defer server.Close()
|
|
|
|
client := &ScheduleClient{
|
|
baseURL: server.URL,
|
|
client: http.DefaultClient,
|
|
}
|
|
assert.False(t, client.IsServerAvailable())
|
|
})
|
|
|
|
t.Run("empty baseURL", func(t *testing.T) {
|
|
client := &ScheduleClient{
|
|
baseURL: "",
|
|
client: http.DefaultClient,
|
|
}
|
|
assert.False(t, client.IsServerAvailable())
|
|
})
|
|
}
|
|
|
|
func TestScheduleClient_RegisterCronTrigger(t *testing.T) {
|
|
workflow := &core.Workflow{
|
|
Name: "test-workflow",
|
|
Kind: core.KindModule,
|
|
}
|
|
trigger := &core.Trigger{
|
|
Name: "daily-scan",
|
|
Schedule: "0 0 * * *",
|
|
Enabled: true,
|
|
}
|
|
|
|
t.Run("success - 201 created", func(t *testing.T) {
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
assert.Equal(t, "/osm/api/schedules", r.URL.Path)
|
|
assert.Equal(t, "POST", r.Method)
|
|
assert.Equal(t, "application/json", r.Header.Get("Content-Type"))
|
|
assert.Equal(t, "test-key", r.Header.Get("x-osm-api-key"))
|
|
|
|
var req scheduleRequest
|
|
err := json.NewDecoder(r.Body).Decode(&req)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "test-workflow-daily-scan", req.Name)
|
|
assert.Equal(t, "test-workflow", req.WorkflowName)
|
|
assert.Equal(t, "module", req.WorkflowKind)
|
|
assert.Equal(t, "example.com", req.Target)
|
|
assert.Equal(t, "0 0 * * *", req.Schedule)
|
|
assert.True(t, req.Enabled)
|
|
|
|
w.WriteHeader(http.StatusCreated)
|
|
_, _ = w.Write([]byte(`{"data": {"id": "sch_123"}}`))
|
|
}))
|
|
defer server.Close()
|
|
|
|
client := &ScheduleClient{
|
|
baseURL: server.URL,
|
|
apiKey: "test-key",
|
|
client: http.DefaultClient,
|
|
}
|
|
|
|
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", map[string]string{"tactic": "default"})
|
|
assert.NoError(t, err)
|
|
})
|
|
|
|
t.Run("success - 409 conflict (schedule exists)", func(t *testing.T) {
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusConflict)
|
|
_, _ = w.Write([]byte(`{"error": true, "message": "schedule already exists"}`))
|
|
}))
|
|
defer server.Close()
|
|
|
|
client := &ScheduleClient{
|
|
baseURL: server.URL,
|
|
client: http.DefaultClient,
|
|
}
|
|
|
|
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", nil)
|
|
assert.NoError(t, err) // 409 is treated as success
|
|
})
|
|
|
|
t.Run("failure - 400 bad request", func(t *testing.T) {
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
_, _ = w.Write([]byte(`{"error": true, "message": "invalid request"}`))
|
|
}))
|
|
defer server.Close()
|
|
|
|
client := &ScheduleClient{
|
|
baseURL: server.URL,
|
|
client: http.DefaultClient,
|
|
}
|
|
|
|
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", nil)
|
|
assert.Error(t, err)
|
|
assert.Contains(t, err.Error(), "400")
|
|
})
|
|
|
|
t.Run("failure - empty baseURL", func(t *testing.T) {
|
|
client := &ScheduleClient{
|
|
baseURL: "",
|
|
client: http.DefaultClient,
|
|
}
|
|
|
|
err := client.RegisterCronTrigger(context.Background(), workflow, trigger, "example.com", nil)
|
|
assert.Error(t, err)
|
|
assert.Contains(t, err.Error(), "server URL not configured")
|
|
})
|
|
}
|