Add projects
This commit is contained in:
parent
2d3a9ad623
commit
8b607dd700
SSH key fingerprint:
SHA256:GBzT2DXvAuGV9XIV5W3WrzVpjU54FThmxHXdbz95J24
1802 changed files with 503346 additions and 2 deletions
65
backend/internal/safemode/example_api_keys.go
Normal file
65
backend/internal/safemode/example_api_keys.go
Normal file
|
|
@ -0,0 +1,65 @@
|
|||
package safemode
|
||||
|
||||
import (
|
||||
"html"
|
||||
"strings"
|
||||
)
|
||||
|
||||
var exampleAPIKeys = map[string]struct{}{
|
||||
"your-api-key-1": {},
|
||||
"your-api-key-2": {},
|
||||
"your-api-key-3": {},
|
||||
}
|
||||
|
||||
// ExampleAPIKeys returns configured top-level API keys that still use template values.
|
||||
func ExampleAPIKeys(keys []string) []string {
|
||||
if len(keys) == 0 {
|
||||
return nil
|
||||
}
|
||||
|
||||
matches := make([]string, 0, len(keys))
|
||||
seen := make(map[string]struct{}, len(exampleAPIKeys))
|
||||
for _, key := range keys {
|
||||
trimmed := strings.TrimSpace(key)
|
||||
if _, ok := exampleAPIKeys[trimmed]; !ok {
|
||||
continue
|
||||
}
|
||||
if _, exists := seen[trimmed]; exists {
|
||||
continue
|
||||
}
|
||||
seen[trimmed] = struct{}{}
|
||||
matches = append(matches, trimmed)
|
||||
}
|
||||
if len(matches) == 0 {
|
||||
return nil
|
||||
}
|
||||
return matches
|
||||
}
|
||||
|
||||
// HasExampleAPIKeys reports whether any configured top-level API key is a template value.
|
||||
func HasExampleAPIKeys(keys []string) bool {
|
||||
return len(ExampleAPIKeys(keys)) > 0
|
||||
}
|
||||
|
||||
// ExampleAPIKeyWarningPageHTML returns the setup warning page HTML.
|
||||
func ExampleAPIKeyWarningPageHTML(keys []string, managementPath string) string {
|
||||
var b strings.Builder
|
||||
b.WriteString(`<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Example API key detected</title><style>body{margin:0;font-family:Arial,sans-serif;background:#f6f8fa;color:#1f2328}.wrap{max-width:760px;margin:12vh auto;padding:0 24px}.panel{background:#fff;border:1px solid #d0d7de;border-radius:8px;padding:28px;box-shadow:0 8px 24px rgba(140,149,159,.2)}h1{margin:0 0 12px;font-size:28px;line-height:1.25}p{font-size:16px;line-height:1.55}code{background:#f6f8fa;border:1px solid #d0d7de;border-radius:4px;padding:2px 5px}.keys{margin:16px 0;padding-left:22px}.actions{margin-top:24px}.button{display:inline-block;border-radius:6px;background:#0969da;color:#fff;text-decoration:none;font-weight:600;padding:10px 16px}.button:hover{background:#0759b8}</style></head><body><main class="wrap"><section class="panel"><h1>Example API key detected</h1><p>Proxy API endpoints are disabled because the top-level <code>api-keys</code> configuration still contains template values.</p>`)
|
||||
if len(keys) > 0 {
|
||||
b.WriteString(`<p>Replace these values before using the proxy:</p><ul class="keys">`)
|
||||
for _, key := range keys {
|
||||
b.WriteString(`<li><code>`)
|
||||
b.WriteString(html.EscapeString(key))
|
||||
b.WriteString(`</code></li>`)
|
||||
}
|
||||
b.WriteString(`</ul>`)
|
||||
}
|
||||
b.WriteString(`<p>Set strong random API keys, then retry the proxy endpoint.</p>`)
|
||||
if trimmed := strings.TrimSpace(managementPath); trimmed != "" {
|
||||
b.WriteString(`<div class="actions"><a class="button" href="`)
|
||||
b.WriteString(html.EscapeString(trimmed))
|
||||
b.WriteString(`">Open Management</a></div>`)
|
||||
}
|
||||
b.WriteString(`</section></main></body></html>`)
|
||||
return b.String()
|
||||
}
|
||||
51
backend/internal/safemode/example_api_keys_test.go
Normal file
51
backend/internal/safemode/example_api_keys_test.go
Normal file
|
|
@ -0,0 +1,51 @@
|
|||
package safemode
|
||||
|
||||
import (
|
||||
"strings"
|
||||
"testing"
|
||||
)
|
||||
|
||||
func TestExampleAPIKeysDetectsOnlyTemplateValues(t *testing.T) {
|
||||
keys := []string{
|
||||
" real-key ",
|
||||
" your-api-key-1 ",
|
||||
"your-api-key",
|
||||
"change-me",
|
||||
"your-api-key-2",
|
||||
"your-api-key-2",
|
||||
"your-api-key-3",
|
||||
}
|
||||
|
||||
got := ExampleAPIKeys(keys)
|
||||
want := []string{"your-api-key-1", "your-api-key-2", "your-api-key-3"}
|
||||
if len(got) != len(want) {
|
||||
t.Fatalf("ExampleAPIKeys() = %#v, want %#v", got, want)
|
||||
}
|
||||
for i := range want {
|
||||
if got[i] != want[i] {
|
||||
t.Fatalf("ExampleAPIKeys()[%d] = %q, want %q (all: %#v)", i, got[i], want[i], got)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func TestExampleAPIKeysIgnoresSimilarValues(t *testing.T) {
|
||||
keys := []string{"your-api-key", "change-me", "changeme", "your-api-key-4", "my-your-api-key-1"}
|
||||
if got := ExampleAPIKeys(keys); len(got) != 0 {
|
||||
t.Fatalf("ExampleAPIKeys() = %#v, want empty", got)
|
||||
}
|
||||
if HasExampleAPIKeys(keys) {
|
||||
t.Fatal("HasExampleAPIKeys() = true, want false")
|
||||
}
|
||||
}
|
||||
|
||||
func TestExampleAPIKeyWarningPageIncludesManagementButton(t *testing.T) {
|
||||
body := ExampleAPIKeyWarningPageHTML([]string{"your-api-key-1"}, "/management.html?safe-mode=configure")
|
||||
for _, want := range []string{"Example API key detected", "your-api-key-1", "Open Management", `href="/management.html?safe-mode=configure"`, "Proxy API endpoints are disabled"} {
|
||||
if !strings.Contains(body, want) {
|
||||
t.Fatalf("warning page missing %q: %s", want, body)
|
||||
}
|
||||
}
|
||||
if strings.Contains(body, `class="path"`) {
|
||||
t.Fatalf("warning page should not include a local config path: %s", body)
|
||||
}
|
||||
}
|
||||
Loading…
Reference in a new issue