ReachableCEO
54cc5f7308
- Implements Apache APISIX packaging for Cloudron platform. - Includes Dockerfile, CloudronManifest.json, and start.sh. - Configured to use Cloudron's etcd addon. 🤖 Generated with Gemini CLI Co-Authored-By: Gemini <noreply@google.com>
614 lines
17 KiB
Perl
614 lines
17 KiB
Perl
#
|
|
# Licensed to the Apache Software Foundation (ASF) under one or more
|
|
# contributor license agreements. See the NOTICE file distributed with
|
|
# this work for additional information regarding copyright ownership.
|
|
# The ASF licenses this file to You under the Apache License, Version 2.0
|
|
# (the "License"); you may not use this file except in compliance with
|
|
# the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
use t::APISIX 'no_plan';
|
|
|
|
repeat_each(2);
|
|
no_long_string();
|
|
no_root_location();
|
|
no_shuffle();
|
|
run_tests;
|
|
|
|
__DATA__
|
|
|
|
=== TEST 1: add consumer with basic-auth and key-auth plugins
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/consumers',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"username": "foo",
|
|
"plugins": {
|
|
"basic-auth": {
|
|
"username": "foo",
|
|
"password": "bar"
|
|
},
|
|
"key-auth": {
|
|
"key": "auth-one"
|
|
}
|
|
}
|
|
}]]
|
|
)
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.say(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- response_body
|
|
passed
|
|
|
|
|
|
|
|
=== TEST 2: enable multi auth plugin using admin api
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"plugins": {
|
|
"multi-auth": {
|
|
"auth_plugins": [
|
|
{
|
|
"basic-auth": {}
|
|
},
|
|
{
|
|
"key-auth": {
|
|
"query": "apikey",
|
|
"hide_credentials": true,
|
|
"header": "apikey"
|
|
}
|
|
},
|
|
{
|
|
"jwt-auth": {
|
|
"cookie": "jwt",
|
|
"query": "jwt",
|
|
"hide_credentials": true,
|
|
"header": "authorization"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"uri": "/hello"
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.say(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- response_body
|
|
passed
|
|
|
|
|
|
|
|
=== TEST 3: verify, missing authorization
|
|
--- request
|
|
GET /hello
|
|
--- error_code: 401
|
|
--- response_body
|
|
{"message":"Authorization Failed"}
|
|
|
|
|
|
|
|
=== TEST 4: verify basic-auth
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
Authorization: Basic Zm9vOmJhcg==
|
|
--- response_body
|
|
hello world
|
|
--- error_log
|
|
find consumer foo
|
|
|
|
|
|
|
|
=== TEST 5: verify key-auth
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
apikey: auth-one
|
|
--- response_body
|
|
hello world
|
|
|
|
|
|
|
|
=== TEST 6: verify, invalid basic credentials
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
Authorization: Basic YmFyOmJhcgo=
|
|
--- error_code: 401
|
|
--- response_body
|
|
{"message":"Authorization Failed"}
|
|
|
|
|
|
|
|
=== TEST 7: verify, invalid api key
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
apikey: auth-two
|
|
--- error_code: 401
|
|
--- response_body
|
|
{"message":"Authorization Failed"}
|
|
|
|
|
|
|
|
=== TEST 8: enable multi auth plugin with invalid plugin conf in first auth_plugin
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"plugins": {
|
|
"multi-auth": {
|
|
"auth_plugins": [
|
|
{
|
|
"basic-auth": {
|
|
"hide_credentials": "false"
|
|
}
|
|
},
|
|
{
|
|
"key-auth": {}
|
|
},
|
|
{
|
|
"jwt-auth": {}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"uri": "/hello"
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.print(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- error_code: 400
|
|
--- response_body
|
|
{"error_msg":"failed to check the configuration of plugin multi-auth err: plugin basic-auth check schema failed: property \"hide_credentials\" validation failed: wrong type: expected boolean, got string"}
|
|
|
|
|
|
|
|
=== TEST 9: enable multi auth plugin with invalid plugin conf in second auth_plugins
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"plugins": {
|
|
"multi-auth": {
|
|
"auth_plugins": [
|
|
{
|
|
"key-auth": {}
|
|
},
|
|
{
|
|
"basic-auth": "blah"
|
|
},
|
|
{
|
|
"jwt-auth": {}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"uri": "/hello"
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.print(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- error_code: 400
|
|
--- response_body
|
|
{"error_msg":"failed to check the configuration of plugin multi-auth err: plugin basic-auth check schema failed: wrong type: expected object, got string"}
|
|
|
|
|
|
|
|
=== TEST 10: enable multi auth plugin with invalid plugin conf in third auth_plugins
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"plugins": {
|
|
"multi-auth": {
|
|
"auth_plugins": [
|
|
{
|
|
"key-auth": {}
|
|
},
|
|
{
|
|
"basic-auth": {}
|
|
},
|
|
{
|
|
"jwt-auth": {
|
|
"header": 123
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"uri": "/hello"
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.print(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- error_code: 400
|
|
--- response_body
|
|
{"error_msg":"failed to check the configuration of plugin multi-auth err: plugin jwt-auth check schema failed: property \"header\" validation failed: wrong type: expected string, got number"}
|
|
|
|
|
|
|
|
=== TEST 11: enable multi auth plugin with default plugin conf
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"plugins": {
|
|
"multi-auth": {
|
|
"auth_plugins": [
|
|
{
|
|
"basic-auth": {}
|
|
},
|
|
{
|
|
"key-auth": {}
|
|
},
|
|
{
|
|
"jwt-auth": {}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"uri": "/hello"
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.say(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- response_body
|
|
passed
|
|
|
|
|
|
|
|
=== TEST 12: verify, missing authorization
|
|
--- request
|
|
GET /hello
|
|
--- error_code: 401
|
|
--- response_body
|
|
{"message":"Authorization Failed"}
|
|
|
|
|
|
|
|
=== TEST 13: verify basic-auth
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
Authorization: Basic Zm9vOmJhcg==
|
|
--- response_body
|
|
hello world
|
|
--- error_log
|
|
find consumer foo
|
|
|
|
|
|
|
|
=== TEST 14: verify key-auth
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
apikey: auth-one
|
|
--- response_body
|
|
hello world
|
|
|
|
|
|
|
|
=== TEST 15: verify, invalid basic credentials
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
Authorization: Basic YmFyOmJhcgo=
|
|
--- error_code: 401
|
|
--- response_body
|
|
{"message":"Authorization Failed"}
|
|
|
|
|
|
|
|
=== TEST 16: verify, invalid api key
|
|
--- request
|
|
GET /hello
|
|
--- more_headers
|
|
apikey: auth-two
|
|
--- error_code: 401
|
|
--- response_body
|
|
{"message":"Authorization Failed"}
|
|
|
|
|
|
|
|
=== TEST 17: enable multi auth plugin using admin api, without any auth_plugins configuration
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"plugins": {
|
|
"multi-auth": { }
|
|
},
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"uri": "/hello"
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.say(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- error_code: 400
|
|
--- response_body_like eval
|
|
qr/\{"error_msg":"failed to check the configuration of plugin multi-auth err: property \\"auth_plugins\\" is required"\}/
|
|
|
|
|
|
|
|
=== TEST 18: enable multi auth plugin using admin api, with auth_plugins configuration but with one authorization plugin
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"plugins": {
|
|
"multi-auth": {
|
|
"auth_plugins": [
|
|
{
|
|
"basic-auth": {}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"uri": "/hello"
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.say(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- error_code: 400
|
|
--- response_body_like eval
|
|
qr/\{"error_msg":"failed to check the configuration of plugin multi-auth err: property \\"auth_plugins\\" validation failed: expect array to have at least 2 items"\}/
|
|
|
|
|
|
|
|
=== TEST 19: add consumer with username and jwt-auth plugins
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
local code, body = t('/apisix/admin/consumers',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"username": "jack",
|
|
"plugins": {
|
|
"jwt-auth": {
|
|
"key": "user-key",
|
|
"secret": "my-secret-key"
|
|
}
|
|
}
|
|
}]]
|
|
)
|
|
|
|
if code >= 300 then
|
|
ngx.status = code
|
|
end
|
|
ngx.say(body)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- response_body
|
|
passed
|
|
|
|
|
|
|
|
=== TEST 20: sign / verify jwt-auth
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
|
|
local sign = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJrZXkiOiJ1c2VyLWtleSIsIm5iZiI6MTcyNzI3NDk4M30.N6ebc4U5ms976pwKZ_iQ88w_uJKqUVNtTYZ_nXhRpWo"
|
|
local code, _, res = t('/hello?jwt=' .. sign,
|
|
ngx.HTTP_GET
|
|
)
|
|
|
|
ngx.status = code
|
|
ngx.print(res)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- response_body
|
|
hello world
|
|
|
|
|
|
|
|
=== TEST 21: verify multi-auth with plugin config will cause the conf_version change
|
|
--- config
|
|
location /t {
|
|
content_by_lua_block {
|
|
local t = require("lib.test_admin").test
|
|
|
|
local code, err = t('/apisix/admin/plugin_configs/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"desc": "Multiple Authentication",
|
|
"plugins": {
|
|
"multi-auth": {
|
|
"auth_plugins": [
|
|
{
|
|
"basic-auth": {}
|
|
},
|
|
{
|
|
"key-auth": {
|
|
"query": "apikey",
|
|
"hide_credentials": true,
|
|
"header": "apikey"
|
|
}
|
|
},
|
|
{
|
|
"jwt-auth": {
|
|
"cookie": "jwt",
|
|
"query": "jwt",
|
|
"hide_credentials": true,
|
|
"header": "authorization"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}]]
|
|
)
|
|
if code > 300 then
|
|
ngx.log(ngx.ERR, err)
|
|
return
|
|
end
|
|
|
|
local code, err = t('/apisix/admin/routes/1',
|
|
ngx.HTTP_PUT,
|
|
[[{
|
|
"uri": "/hello",
|
|
"upstream": {
|
|
"nodes": {
|
|
"127.0.0.1:1980": 1
|
|
},
|
|
"type": "roundrobin"
|
|
},
|
|
"plugin_config_id": 1
|
|
}]]
|
|
)
|
|
if code > 300 then
|
|
ngx.log(ngx.ERR, err)
|
|
return
|
|
end
|
|
ngx.sleep(0.1)
|
|
|
|
local sign = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJrZXkiOiJ1c2VyLWtleSIsIm5iZiI6MTcyNzI3NDk4M30.N6ebc4U5ms976pwKZ_iQ88w_uJKqUVNtTYZ_nXhRpWo"
|
|
local code, _, res = t('/hello?jwt=' .. sign,
|
|
ngx.HTTP_GET
|
|
)
|
|
|
|
ngx.status = code
|
|
ngx.print(res)
|
|
}
|
|
}
|
|
--- request
|
|
GET /t
|
|
--- response_body
|
|
hello world
|