bastion 0.60.0

2026-11-02 00:10:58 +00:00
parent 4a5c310482
commit 4f8285ef18
100 changed files with 11537 additions and 840 deletions
@@ -0,0 +1,111 @@
+package main
+
+import (
+	"net/url"
+	"strings"
+	"testing"
+	"time"
+)
+
+// settingsWorld: the bastion runs for the whole machine, the owner's code is
+// set up, and one Host is connected. The Host's name is invented.
+func settingsWorld(t *testing.T, whole bool) (*uiServer, string) {
+	t.Helper()
+	uiTestPairing(t, "member.host.privatae.ai")
+	d, err := machineFactorDir()
+	if err != nil {
+		t.Fatal(err)
+	}
+	enrolFactorAt(t, d, machineTestSecret)
+	prev := machineAuthorityHeld
+	t.Cleanup(func() { machineAuthorityHeld = prev })
+	machineAuthorityHeld = func() bool { return whole }
+	u := uiTestServer(t)
+	return u, uiSignedIn(t, u)
+}
+
+func TestSettingsSaysWhatThisComputerIsInPlainWords(t *testing.T) {
+	u, cookie := settingsWorld(t, true)
+	body := uiGet(t, u.handler(), "/setup", cookie).Body.String()
+	for _, want := range []string{"Your own computer: one Host at most", "for the whole machine",
+		"Connected Hosts", "member.host.privatae.ai", "Disconnect", "Set the owner name"} {
+		if !strings.Contains(body, want) {
+			t.Errorf("Settings does not say %q", want)
+		}
+	}
+	for _, gone := range []string{"<dt>Mode</dt>", "<dt>Anchor</dt>"} {
+		if strings.Contains(body, gone) {
+			t.Errorf("Settings still says %q", gone)
+		}
+	}
+}
+
+func TestTheOwnerNameIsSetHereWithTheCode(t *testing.T) {
+	u, cookie := settingsWorld(t, true)
+	h := u.handler()
+	w := uiPost(t, h, "/setup/owner/name", url.Values{"owner": {"Sam"}, "code": {codeFor(t, hostTestSecret)}}, cookie)
+	if !strings.Contains(w.Body.String(), "code refused") {
+		t.Errorf("a wrong code: %s", firstLines(w.Body.String()))
+	}
+	if o := currentOwnerClaim(); o != nil {
+		t.Fatalf("a name was set with a wrong code: %q", o.Owner)
+	}
+	w = uiPost(t, h, "/setup/owner/name", url.Values{"owner": {"Sam"}, "code": {codeFor(t, machineTestSecret)}}, cookie)
+	if o := currentOwnerClaim(); o == nil || o.Owner != "Sam" {
+		t.Fatalf("the owner's code did not set the name: %s", firstLines(w.Body.String()))
+	}
+}
+
+func TestDisconnectingAHostTakesATickNotACode(t *testing.T) {
+	u, cookie := settingsWorld(t, true)
+	h := u.handler()
+	if w := uiPost(t, h, "/setup/host/disconnect", url.Values{"host": {"member.host.privatae.ai"}}, cookie); !strings.Contains(w.Body.String(), "Tick the box") {
+		t.Errorf("no tick: %s", firstLines(w.Body.String()))
+	}
+	if cfgs, _ := loadPairings(); len(cfgs) != 1 {
+		t.Fatal("disconnected without the tick")
+	}
+	uiPost(t, h, "/setup/host/disconnect", url.Values{"host": {"member.host.privatae.ai"}, "confirm": {"1"}}, cookie)
+	if cfgs, _ := loadPairings(); len(cfgs) != 0 {
+		t.Fatal("the Host is still connected")
+	}
+	if items := collectActivity(time.Now().Add(-time.Hour)); len(items) == 0 || !strings.Contains(items[0].What, "Host removed member.host.privatae.ai") {
+		t.Errorf("Activity does not show the disconnect: %+v", items)
+	}
+}
+
+func TestReleasingAHostFromQuarantineTakesTheCode(t *testing.T) {
+	u, cookie := settingsWorld(t, true)
+	f := quarantineLoad()
+	if f.Pairing == nil {
+		f.Pairing = map[string]*quarantineEntry{}
+	}
+	f.Pairing["member.host.privatae.ai"] = &quarantineEntry{Until: time.Now().Add(time.Hour).UTC().Format(time.RFC3339)}
+	if err := quarantineSave(f); err != nil {
+		t.Fatal(err)
+	}
+	h := u.handler()
+	if body := uiGet(t, h, "/setup", cookie).Body.String(); !strings.Contains(body, "Release from quarantine") {
+		t.Fatal("a quarantined Host offers no release")
+	}
+	uiPost(t, h, "/setup/host/release", url.Values{"host": {"member.host.privatae.ai"}}, cookie)
+	if quarantinedUntil("member.host.privatae.ai", time.Now()).IsZero() {
+		t.Fatal("released with no code")
+	}
+	uiPost(t, h, "/setup/host/release", url.Values{"host": {"member.host.privatae.ai"}, "code": {codeFor(t, machineTestSecret)}}, cookie)
+	if !quarantinedUntil("member.host.privatae.ai", time.Now()).IsZero() {
+		t.Fatal("the owner's code did not release it")
+	}
+}
+
+// In the person's own account the page does not offer acts it cannot do.
+func TestAPerAccountBastionOffersNoAdministratorActs(t *testing.T) {
+	u, cookie := settingsWorld(t, false)
+	body := uiGet(t, u.handler(), "/setup", cookie).Body.String()
+	if strings.Contains(body, `hx-post="/setup/host/disconnect"`) || strings.Contains(body, "Set the owner name") {
+		t.Error("a per-account bastion offered an administrator's act")
+	}
+	if !strings.Contains(body, "agents running as you can stop it") {
+		t.Error("the page does not say what a per-account install costs")
+	}
+}