mirror of
https://github.com/binwiederhier/ntfy.git
synced 2026-07-30 15:39:35 -04:00
36 lines
1.2 KiB
Go
36 lines
1.2 KiB
Go
package server_test
|
|
|
|
import (
|
|
"github.com/stretchr/testify/assert"
|
|
"heckel.io/ntfy/v2/server"
|
|
"heckel.io/ntfy/v2/user"
|
|
"testing"
|
|
)
|
|
|
|
func TestConfig_New(t *testing.T) {
|
|
c := server.NewConfig()
|
|
assert.Equal(t, ":80", c.ListenHTTP)
|
|
assert.Equal(t, server.DefaultKeepaliveInterval, c.KeepaliveInterval)
|
|
}
|
|
|
|
func TestConfig_HashExcludesSecrets(t *testing.T) {
|
|
// The config hash is served to browsers (ConfigHash, for webapp change detection), so
|
|
// secret material must not feed it: a weak secret would otherwise be offline-brute-forceable
|
|
// against a publicly visible hash.
|
|
conf1 := server.NewConfig()
|
|
conf2 := server.NewConfig()
|
|
conf2.StripeSecretKey = "sk_live_topsecret"
|
|
conf2.StripeWebhookKey = "whsec_topsecret"
|
|
conf2.TwilioAuthToken = "twilio-auth-token"
|
|
conf2.UpstreamAccessToken = "tk_upstream"
|
|
conf2.WebPushPrivateKey = "web-push-private-key"
|
|
conf2.SMTPSenderPass = "hunter2"
|
|
conf2.AuthUsers = []*user.User{{Name: "phil", Hash: "$2a$10$somebcrypthash"}}
|
|
conf2.AuthTokens = map[string][]*user.Token{"phil": {{Value: "tk_secrettoken"}}}
|
|
assert.Equal(t, conf1.Hash(), conf2.Hash())
|
|
// Non-secret fields must still change the hash
|
|
conf3 := server.NewConfig()
|
|
conf3.BaseURL = "https://ntfy.example.com"
|
|
assert.NotEqual(t, conf1.Hash(), conf3.Hash())
|
|
}
|