owl-blogs/cmd/owl/web/webmention_test.go

package web_test

import (
	"h4kor/owl-blogs"
	main "h4kor/owl-blogs/cmd/owl/web"
	"h4kor/owl-blogs/test/assertions"
	"net/http"
	"net/http/httptest"
	"net/url"
	"os"
	"strconv"
	"strings"
	"testing"
)

func setupWebmentionTest(repo owl.Repository, user owl.User, target string, source string) (*httptest.ResponseRecorder, error) {

	data := url.Values{}
	data.Set("target", target)
	data.Set("source", source)

	// Create Request and Response
	req, err := http.NewRequest("POST", user.UrlPath()+"webmention/", strings.NewReader(data.Encode()))
	req.Header.Add("Content-Type", "application/x-www-form-urlencoded")
	req.Header.Add("Content-Length", strconv.Itoa(len(data.Encode())))

	if err != nil {
		return nil, err
	}

	rr := httptest.NewRecorder()
	router := main.Router(&repo)
	router.ServeHTTP(rr, req)

	return rr, nil
}

func TestWebmentionHandleAccepts(t *testing.T) {
	repo := getTestRepo(owl.RepoConfig{})
	user, _ := repo.CreateUser("test-1")
	post, _ := user.CreateNewPost("post-1", false)

	target := post.FullUrl()
	source := "https://example.com"

	rr, err := setupWebmentionTest(repo, user, target, source)
	assertions.AssertNoError(t, err, "Error setting up webmention test")

	assertions.AssertStatus(t, rr, http.StatusAccepted)

}

func TestWebmentionWrittenToPost(t *testing.T) {

	repo := getTestRepo(owl.RepoConfig{})
	user, _ := repo.CreateUser("test-1")
	post, _ := user.CreateNewPost("post-1", false)

	target := post.FullUrl()
	source := "https://example.com"

	rr, err := setupWebmentionTest(repo, user, target, source)
	assertions.AssertNoError(t, err, "Error setting up webmention test")

	assertions.AssertStatus(t, rr, http.StatusAccepted)
	assertions.AssertLen(t, post.IncomingWebmentions(), 1)
}

//
// https://www.w3.org/TR/webmention/#h-request-verification
//

// The receiver MUST check that source and target are valid URLs [URL]
// and are of schemes that are supported by the receiver.
// (Most commonly this means checking that the source and target schemes are http or https).
func TestWebmentionSourceValidation(t *testing.T) {

	repo := getTestRepo(owl.RepoConfig{})
	user, _ := repo.CreateUser("test-1")
	post, _ := user.CreateNewPost("post-1", false)

	target := post.FullUrl()
	source := "ftp://example.com"

	rr, err := setupWebmentionTest(repo, user, target, source)
	assertions.AssertNoError(t, err, "Error setting up webmention test")

	assertions.AssertStatus(t, rr, http.StatusBadRequest)
}

func TestWebmentionTargetValidation(t *testing.T) {

	repo := getTestRepo(owl.RepoConfig{})
	user, _ := repo.CreateUser("test-1")
	post, _ := user.CreateNewPost("post-1", false)

	target := "ftp://example.com"
	source := post.FullUrl()

	rr, err := setupWebmentionTest(repo, user, target, source)
	assertions.AssertNoError(t, err, "Error setting up webmention test")

	assertions.AssertStatus(t, rr, http.StatusBadRequest)
}

// The receiver MUST reject the request if the source URL is the same as the target URL.

func TestWebmentionSameTargetAndSource(t *testing.T) {

	repo := getTestRepo(owl.RepoConfig{})
	user, _ := repo.CreateUser("test-1")
	post, _ := user.CreateNewPost("post-1", false)

	target := post.FullUrl()
	source := post.FullUrl()

	rr, err := setupWebmentionTest(repo, user, target, source)
	assertions.AssertNoError(t, err, "Error setting up webmention test")

	assertions.AssertStatus(t, rr, http.StatusBadRequest)
}

// The receiver SHOULD check that target is a valid resource for which it can accept Webmentions.
// This check SHOULD happen synchronously to reject invalid Webmentions before more in-depth verification begins.
// What a "valid resource" means is up to the receiver.
func TestValidationOfTarget(t *testing.T) {
	repo := getTestRepo(owl.RepoConfig{})
	user, _ := repo.CreateUser("test-1")
	post, _ := user.CreateNewPost("post-1", false)

	target := post.FullUrl()
	target = target[:len(target)-1] + "invalid"
	source := post.FullUrl()

	rr, err := setupWebmentionTest(repo, user, target, source)
	assertions.AssertNoError(t, err, "Error setting up webmention test")

	assertions.AssertStatus(t, rr, http.StatusBadRequest)
}

func TestAcceptWebmentionForAlias(t *testing.T) {
	repo := getTestRepo(owl.RepoConfig{})
	user, _ := repo.CreateUser("test-1")
	post, _ := user.CreateNewPost("post-1", false)

	content := "---\n"
	content += "title: Test\n"
	content += "aliases: \n"
	content += "  - /foo/bar\n"
	content += "  - /foo/baz\n"
	content += "---\n"
	content += "This is a test"
	os.WriteFile(post.ContentFile(), []byte(content), 0644)

	target := "https://example.com/foo/bar"
	source := "https://example.com"

	rr, err := setupWebmentionTest(repo, user, target, source)
	assertions.AssertNoError(t, err, "Error setting up webmention test")

	assertions.AssertStatus(t, rr, http.StatusAccepted)
}