mirror of
https://github.com/livekit/livekit.git
synced 2026-10-23 15:12:43 +00:00
* service: enforce metadata size limit in CreateRoom, bump default to 512 KiB CreateRoom previously accepted any metadata size; only UpdateRoomMetadata rejected oversized payloads. Mirror the same CheckMetadataSize check at the CreateRoom API boundary so both entrypoints are bounded. Default MaxMetadataSize moves from 64000 to 512 * 1024 to match the practical needs of customers using room metadata for richer state. The limit remains configurable via the existing limits.max_metadata_size knob. * service: split room vs. participant metadata limit, enforce on join + agent dispatch LimitConfig.MaxMetadataSize was shared between room metadata and participant metadata. Last commit's bump to 512 KiB lifted both ceilings; this restores the participant ceiling to 64 KB and introduces a separate MaxRoomMetadataSize (default 512 KiB) for room metadata. Additional enforcement: - RoomManager.StartSession rejects joins whose JWT-grants metadata or attributes exceed the participant/attributes limits. The check was missing entirely from this path. - AgentDispatchService.CreateDispatch and the embedded CreateRoomRequest.Agents path now validate metadata and attributes against the common 64 KB ceilings (previously unbounded). NewAgentDispatchService gains a LimitConfig parameter; the two wire_gen callsites are updated. * service: collapse metadata size limit to single 512 KiB knob Reverts the LimitConfig split introduced in the previous commit: MaxRoomMetadataSize, CheckRoomMetadataSize, and the max_room_metadata_size yaml key are removed. MaxMetadataSize moves back to 512 * 1024 and gates all metadata uniformly — room (CreateRoom, UpdateRoomMetadata), participant (UpdateParticipant, signal UpdateMetadata, JWT grants on join), and agent dispatch (CreateDispatch + embedded RoomAgentDispatch). MaxAttributesSize stays at 64 KB and continues to gate participant and agent-dispatch attributes separately. Test cases consolidated under the single knob. * kb -> kib
210 lines
6.3 KiB
Go
210 lines
6.3 KiB
Go
// Copyright 2023 LiveKit, Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package service_test
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
"github.com/twitchtv/twirp"
|
|
|
|
"github.com/livekit/protocol/auth"
|
|
"github.com/livekit/protocol/livekit"
|
|
"github.com/livekit/protocol/rpc"
|
|
"github.com/livekit/protocol/rpc/rpcfakes"
|
|
|
|
"github.com/livekit/livekit-server/pkg/config"
|
|
"github.com/livekit/livekit-server/pkg/routing/routingfakes"
|
|
"github.com/livekit/livekit-server/pkg/service"
|
|
"github.com/livekit/livekit-server/pkg/service/servicefakes"
|
|
)
|
|
|
|
func TestDeleteRoom(t *testing.T) {
|
|
t.Run("missing permissions", func(t *testing.T) {
|
|
svc := newTestRoomService(config.LimitConfig{})
|
|
grant := &auth.ClaimGrants{
|
|
Video: &auth.VideoGrant{},
|
|
}
|
|
ctx := service.WithGrants(context.Background(), grant, "")
|
|
_, err := svc.DeleteRoom(ctx, &livekit.DeleteRoomRequest{
|
|
Room: "testroom",
|
|
})
|
|
require.Error(t, err)
|
|
})
|
|
}
|
|
|
|
func TestMetaDataLimits(t *testing.T) {
|
|
adminCtx := func() context.Context {
|
|
return service.WithGrants(context.Background(), &auth.ClaimGrants{Video: &auth.VideoGrant{}}, "")
|
|
}
|
|
createCtx := func() context.Context {
|
|
return service.WithGrants(context.Background(), &auth.ClaimGrants{Video: &auth.VideoGrant{RoomCreate: true}}, "")
|
|
}
|
|
requireInvalidArg := func(t *testing.T, err error) {
|
|
t.Helper()
|
|
terr, ok := err.(twirp.Error)
|
|
require.True(t, ok, "expected twirp error, got %T (%v)", err, err)
|
|
require.Equal(t, twirp.InvalidArgument, terr.Code())
|
|
}
|
|
|
|
t.Run("metadata exceeds limit", func(t *testing.T) {
|
|
svc := newTestRoomService(config.LimitConfig{MaxMetadataSize: 5})
|
|
|
|
_, err := svc.UpdateParticipant(adminCtx(), &livekit.UpdateParticipantRequest{
|
|
Room: "testroom",
|
|
Identity: "123",
|
|
Metadata: "abcdefg",
|
|
})
|
|
requireInvalidArg(t, err)
|
|
|
|
_, err = svc.UpdateRoomMetadata(adminCtx(), &livekit.UpdateRoomMetadataRequest{
|
|
Room: "testroom",
|
|
Metadata: "abcdefg",
|
|
})
|
|
requireInvalidArg(t, err)
|
|
|
|
_, err = svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
|
|
Name: "testroom",
|
|
Metadata: "abcdefg",
|
|
})
|
|
requireInvalidArg(t, err)
|
|
|
|
_, err = svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
|
|
Name: "testroom",
|
|
Agents: []*livekit.RoomAgentDispatch{
|
|
{AgentName: "bot", Metadata: "abcdefg"},
|
|
},
|
|
})
|
|
requireInvalidArg(t, err)
|
|
})
|
|
|
|
t.Run("embedded agent dispatch in CreateRoom exceeds attributes limit", func(t *testing.T) {
|
|
svc := newTestRoomService(config.LimitConfig{MaxAttributesSize: 5})
|
|
_, err := svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
|
|
Name: "testroom",
|
|
Agents: []*livekit.RoomAgentDispatch{
|
|
{AgentName: "bot", Attributes: map[string]string{"key": "abcdefg"}},
|
|
},
|
|
})
|
|
requireInvalidArg(t, err)
|
|
})
|
|
|
|
notExceedsLimitsSvc := map[string]*TestRoomService{
|
|
"metadata exceeds limits": newTestRoomService(config.LimitConfig{
|
|
MaxMetadataSize: 5,
|
|
MaxAttributesSize: 5,
|
|
}),
|
|
"metadata no limits": newTestRoomService(config.LimitConfig{}),
|
|
}
|
|
|
|
for n, svc := range notExceedsLimitsSvc {
|
|
t.Run(n, func(t *testing.T) {
|
|
_, err := svc.UpdateParticipant(adminCtx(), &livekit.UpdateParticipantRequest{
|
|
Room: "testroom",
|
|
Identity: "123",
|
|
Metadata: "abc",
|
|
})
|
|
terr, ok := err.(twirp.Error)
|
|
require.True(t, ok)
|
|
require.NotEqual(t, twirp.InvalidArgument, terr.Code())
|
|
|
|
_, err = svc.UpdateRoomMetadata(adminCtx(), &livekit.UpdateRoomMetadataRequest{
|
|
Room: "testroom",
|
|
Metadata: "abc",
|
|
})
|
|
terr, ok = err.(twirp.Error)
|
|
require.True(t, ok)
|
|
require.NotEqual(t, twirp.InvalidArgument, terr.Code())
|
|
|
|
_, err = svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
|
|
Name: "testroom",
|
|
Metadata: "abc",
|
|
Agents: []*livekit.RoomAgentDispatch{
|
|
{AgentName: "bot", Metadata: "abc", Attributes: map[string]string{"k": "v"}},
|
|
},
|
|
})
|
|
if err != nil {
|
|
terr, ok = err.(twirp.Error)
|
|
require.True(t, ok)
|
|
require.NotEqual(t, twirp.InvalidArgument, terr.Code())
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestAgentDispatchMetadataLimits(t *testing.T) {
|
|
ctx := service.WithGrants(context.Background(), &auth.ClaimGrants{
|
|
Video: &auth.VideoGrant{Room: "testroom", RoomAdmin: true},
|
|
}, "")
|
|
|
|
t.Run("metadata exceeds limits", func(t *testing.T) {
|
|
svc := newTestAgentDispatchService(config.LimitConfig{MaxMetadataSize: 5})
|
|
_, err := svc.CreateDispatch(ctx, &livekit.CreateAgentDispatchRequest{
|
|
Room: "testroom",
|
|
Metadata: "abcdefg",
|
|
})
|
|
require.ErrorIs(t, err, service.ErrMetadataExceedsLimits)
|
|
})
|
|
|
|
t.Run("attributes exceeds limits", func(t *testing.T) {
|
|
svc := newTestAgentDispatchService(config.LimitConfig{MaxAttributesSize: 5})
|
|
_, err := svc.CreateDispatch(ctx, &livekit.CreateAgentDispatchRequest{
|
|
Room: "testroom",
|
|
Attributes: map[string]string{"key": "abcdefg"},
|
|
})
|
|
require.ErrorIs(t, err, service.ErrAttributeExceedsLimits)
|
|
})
|
|
}
|
|
|
|
func newTestAgentDispatchService(limitConf config.LimitConfig) *service.AgentDispatchService {
|
|
allocator := &servicefakes.FakeRoomAllocator{}
|
|
allocator.AutoCreateEnabledReturns(false)
|
|
return service.NewAgentDispatchService(limitConf, nil, rpc.NewTopicFormatter(), allocator, &routingfakes.FakeRouter{})
|
|
}
|
|
|
|
func newTestRoomService(limitConf config.LimitConfig) *TestRoomService {
|
|
router := &routingfakes.FakeRouter{}
|
|
allocator := &servicefakes.FakeRoomAllocator{}
|
|
store := &servicefakes.FakeServiceStore{}
|
|
svc, err := service.NewRoomService(
|
|
limitConf,
|
|
config.APIConfig{ExecutionTimeout: 2},
|
|
router,
|
|
allocator,
|
|
store,
|
|
nil,
|
|
rpc.NewTopicFormatter(),
|
|
&rpcfakes.FakeTypedRoomClient{},
|
|
&rpcfakes.FakeTypedParticipantClient{},
|
|
)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
return &TestRoomService{
|
|
RoomService: *svc,
|
|
router: router,
|
|
allocator: allocator,
|
|
store: store,
|
|
}
|
|
}
|
|
|
|
type TestRoomService struct {
|
|
service.RoomService
|
|
router *routingfakes.FakeRouter
|
|
allocator *servicefakes.FakeRoomAllocator
|
|
store *servicefakes.FakeServiceStore
|
|
}
|