mirror of
https://github.com/facebook/sapling.git
synced 2024-10-11 09:17:30 +03:00
764023bc99
Summary: The changes to server/context, gotham_ext and the code that depends on them are the only reminding places where aclchecker is used directly and it is not easy to split this diff to convert them separately. Reviewed By: krallin Differential Revision: D21067809 fbshipit-source-id: a041ab141caa6fe6871e1fda6013e33f1f09bc56
48 lines
1.7 KiB
Raku
48 lines
1.7 KiB
Raku
# Copyright (c) Facebook, Inc. and its affiliates.
|
|
#
|
|
# This software may be used and distributed according to the terms of the
|
|
# GNU General Public License found in the LICENSE file in the root
|
|
# directory of this source tree.
|
|
|
|
$ . "${TEST_FIXTURES}/library.sh"
|
|
|
|
# Create a repository
|
|
$ setup_mononoke_config
|
|
$ REPOID=1 FILESTORE=1 FILESTORE_CHUNK_SIZE=10 setup_mononoke_repo_config repo1
|
|
|
|
# Start an LFS server for this repository
|
|
$ SCUBA="$TESTTMP/scuba.json"
|
|
$ LFS_LOG="$TESTTMP/lfs.log"
|
|
$ LFS_URI="$(
|
|
> lfs_server --log "$LFS_LOG" --tls --scuba-log-file \
|
|
> "$SCUBA" --trusted-proxy-identity USER:myusername0)/repo1"
|
|
|
|
# Setup constants
|
|
$ ALLOWED_IDENT="x-fb-validated-client-encoded-identity: %7B%22ai%22%3A%20%22%22%2C%20%22ch%22%3A%20%22%22%2C%20%22it%22%3A%20%22user%22%2C%20%22id%22%3A%20%22test%22%7D"
|
|
$ DOWNLOAD_URL="$LFS_URI/download/d28548bc21aabf04d143886d717d72375e3deecd0dafb3d110676b70a192cb5d"
|
|
|
|
# Upload a blob
|
|
$ yes A 2>/dev/null | head -c 2KiB | ssldebuglfssend "$LFS_URI"
|
|
ab02c2a1923c8eb11cb3ddab70320746d71d32ad63f255698dc67c3295757746 2048
|
|
|
|
# Wait until the batch + upload show up in the logs
|
|
$ wait_for_json_record_count "$SCUBA" 2
|
|
$ jq -S .normvector.client_identities < "$SCUBA"
|
|
null
|
|
null
|
|
$ truncate -s 0 "$SCUBA"
|
|
|
|
# Make a request with a valid encoded client identity header
|
|
# NOTE: The LFS Server trusts the identity sslcurl passes as a trusted proxy
|
|
$ sslcurl -fsSL -o /dev/null -w "%{http_code}\n" "$DOWNLOAD_URL" --header "$ALLOWED_IDENT"
|
|
200
|
|
|
|
# Check for identities from header
|
|
$ wait_for_json_record_count "$SCUBA" 1
|
|
$ jq -S .normvector.client_identities < "$SCUBA"
|
|
[
|
|
"MACHINE:",
|
|
"MACHINE_TIER:",
|
|
"USER:test"
|
|
]
|