WangShen007
20fef2b9f3
One word everywhere: ReplyPier in UI copy, package and image names, the replypier.site domains (app/api/docs/help), REPLYPIER_* settings and the --rp-* design tokens. - public widget API is window.ReplyPier with replypierId / replypierBaseUrl / replypierConfig / replypierToken, loader at webclient/replypier.min.js; both bundles rebuilt from source - NOTICE, llms.txt, CONTRIBUTING, HELP_CENTER_INFRA and the demo runtime config rewritten; the demo config ships no third-party keys - migration adds the ReplyPier managed model value to the AI model enum - local compose project, database, role, volume and Docker network carry the same name
104 lines
3.1 KiB
Python
104 lines
3.1 KiB
Python
"""
|
|
Copyright 2024-2026 ReplyPier
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
"""
|
|
|
|
import pytest
|
|
|
|
import app.core.oauth_state as oauth_state
|
|
|
|
|
|
class FakeRedis:
|
|
"""Just the calls the state store makes, with real get-then-delete semantics."""
|
|
|
|
def __init__(self):
|
|
self.data = {}
|
|
self.ttls = {}
|
|
|
|
def set(self, key, value, ex=None):
|
|
self.data[key] = value
|
|
self.ttls[key] = ex
|
|
|
|
def pipeline(self):
|
|
return FakePipeline(self)
|
|
|
|
|
|
class FakePipeline:
|
|
def __init__(self, redis):
|
|
self.redis = redis
|
|
self.ops = []
|
|
|
|
def get(self, key):
|
|
self.ops.append(lambda: self.redis.data.get(key))
|
|
|
|
def delete(self, key):
|
|
self.ops.append(lambda: int(self.redis.data.pop(key, None) is not None))
|
|
|
|
def execute(self):
|
|
return [op() for op in self.ops]
|
|
|
|
|
|
@pytest.fixture
|
|
def no_redis(monkeypatch):
|
|
monkeypatch.setattr(oauth_state, "get_redis", lambda: None)
|
|
oauth_state._fallback.clear()
|
|
|
|
|
|
@pytest.fixture
|
|
def redis(monkeypatch):
|
|
fake = FakeRedis()
|
|
monkeypatch.setattr(oauth_state, "get_redis", lambda: fake)
|
|
return fake
|
|
|
|
|
|
def test_redis_state_is_shared_and_single_use(redis):
|
|
oauth_state.store_state("jira", "s1", "org-1")
|
|
assert redis.ttls["jira_oauth_state:s1"] == oauth_state.STATE_TTL_SECONDS
|
|
assert oauth_state.pop_state("jira", "s1") == "org-1"
|
|
assert oauth_state.pop_state("jira", "s1") is None
|
|
|
|
|
|
def test_kinds_do_not_redeem_each_others_states(redis):
|
|
oauth_state.store_state("slack", "s1", "org-1")
|
|
assert oauth_state.pop_state("jira", "s1") is None
|
|
assert oauth_state.pop_state("slack", "s1") == "org-1"
|
|
|
|
|
|
def test_fallback_is_single_use_and_per_kind(no_redis):
|
|
oauth_state.store_state("crm", "s1", "org-1:hubspot")
|
|
assert oauth_state.pop_state("jira", "s1") is None
|
|
assert oauth_state.pop_state("crm", "s1") == "org-1:hubspot"
|
|
assert oauth_state.pop_state("crm", "s1") is None
|
|
|
|
|
|
def test_fallback_state_expires(no_redis, monkeypatch):
|
|
now = 1_000_000.0
|
|
monkeypatch.setattr(oauth_state.time, "time", lambda: now)
|
|
oauth_state.store_state("jira", "s1", "org-1")
|
|
now += oauth_state.STATE_TTL_SECONDS + 1
|
|
assert oauth_state.pop_state("jira", "s1") is None
|
|
|
|
|
|
def test_fallback_prunes_expired_states(no_redis, monkeypatch):
|
|
now = 1_000_000.0
|
|
monkeypatch.setattr(oauth_state.time, "time", lambda: now)
|
|
oauth_state.store_state("jira", "abandoned", "org-1")
|
|
now += oauth_state.STATE_TTL_SECONDS + 1
|
|
oauth_state.store_state("jira", "fresh", "org-1")
|
|
assert ("jira", "abandoned") not in oauth_state._fallback
|
|
|
|
|
|
def test_empty_state_is_never_valid(no_redis):
|
|
assert oauth_state.pop_state("jira", "") is None
|