Files
livekit/pkg/service/roomservice_test.go
Paul Wells b882ccc86d service: cap all metadata at 512 KiB; enforce on join, agent dispatch, and embedded agents (#4602)
* service: enforce metadata size limit in CreateRoom, bump default to 512 KiB

CreateRoom previously accepted any metadata size; only UpdateRoomMetadata
rejected oversized payloads. Mirror the same CheckMetadataSize check at
the CreateRoom API boundary so both entrypoints are bounded.

Default MaxMetadataSize moves from 64000 to 512 * 1024 to match the
practical needs of customers using room metadata for richer state. The
limit remains configurable via the existing limits.max_metadata_size knob.

* service: split room vs. participant metadata limit, enforce on join + agent dispatch

LimitConfig.MaxMetadataSize was shared between room metadata and
participant metadata. Last commit's bump to 512 KiB lifted both ceilings;
this restores the participant ceiling to 64 KB and introduces a separate
MaxRoomMetadataSize (default 512 KiB) for room metadata.

Additional enforcement:

- RoomManager.StartSession rejects joins whose JWT-grants metadata or
  attributes exceed the participant/attributes limits. The check was
  missing entirely from this path.
- AgentDispatchService.CreateDispatch and the embedded
  CreateRoomRequest.Agents path now validate metadata and attributes
  against the common 64 KB ceilings (previously unbounded).

NewAgentDispatchService gains a LimitConfig parameter; the two wire_gen
callsites are updated.

* service: collapse metadata size limit to single 512 KiB knob

Reverts the LimitConfig split introduced in the previous commit:
MaxRoomMetadataSize, CheckRoomMetadataSize, and the max_room_metadata_size
yaml key are removed. MaxMetadataSize moves back to 512 * 1024 and gates
all metadata uniformly — room (CreateRoom, UpdateRoomMetadata), participant
(UpdateParticipant, signal UpdateMetadata, JWT grants on join), and agent
dispatch (CreateDispatch + embedded RoomAgentDispatch).

MaxAttributesSize stays at 64 KB and continues to gate participant and
agent-dispatch attributes separately.

Test cases consolidated under the single knob.

* kb -> kib
2026-06-17 12:35:59 -07:00

210 lines
6.3 KiB
Go

// Copyright 2023 LiveKit, Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package service_test
import (
"context"
"testing"
"github.com/stretchr/testify/require"
"github.com/twitchtv/twirp"
"github.com/livekit/protocol/auth"
"github.com/livekit/protocol/livekit"
"github.com/livekit/protocol/rpc"
"github.com/livekit/protocol/rpc/rpcfakes"
"github.com/livekit/livekit-server/pkg/config"
"github.com/livekit/livekit-server/pkg/routing/routingfakes"
"github.com/livekit/livekit-server/pkg/service"
"github.com/livekit/livekit-server/pkg/service/servicefakes"
)
func TestDeleteRoom(t *testing.T) {
t.Run("missing permissions", func(t *testing.T) {
svc := newTestRoomService(config.LimitConfig{})
grant := &auth.ClaimGrants{
Video: &auth.VideoGrant{},
}
ctx := service.WithGrants(context.Background(), grant, "")
_, err := svc.DeleteRoom(ctx, &livekit.DeleteRoomRequest{
Room: "testroom",
})
require.Error(t, err)
})
}
func TestMetaDataLimits(t *testing.T) {
adminCtx := func() context.Context {
return service.WithGrants(context.Background(), &auth.ClaimGrants{Video: &auth.VideoGrant{}}, "")
}
createCtx := func() context.Context {
return service.WithGrants(context.Background(), &auth.ClaimGrants{Video: &auth.VideoGrant{RoomCreate: true}}, "")
}
requireInvalidArg := func(t *testing.T, err error) {
t.Helper()
terr, ok := err.(twirp.Error)
require.True(t, ok, "expected twirp error, got %T (%v)", err, err)
require.Equal(t, twirp.InvalidArgument, terr.Code())
}
t.Run("metadata exceeds limit", func(t *testing.T) {
svc := newTestRoomService(config.LimitConfig{MaxMetadataSize: 5})
_, err := svc.UpdateParticipant(adminCtx(), &livekit.UpdateParticipantRequest{
Room: "testroom",
Identity: "123",
Metadata: "abcdefg",
})
requireInvalidArg(t, err)
_, err = svc.UpdateRoomMetadata(adminCtx(), &livekit.UpdateRoomMetadataRequest{
Room: "testroom",
Metadata: "abcdefg",
})
requireInvalidArg(t, err)
_, err = svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
Name: "testroom",
Metadata: "abcdefg",
})
requireInvalidArg(t, err)
_, err = svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
Name: "testroom",
Agents: []*livekit.RoomAgentDispatch{
{AgentName: "bot", Metadata: "abcdefg"},
},
})
requireInvalidArg(t, err)
})
t.Run("embedded agent dispatch in CreateRoom exceeds attributes limit", func(t *testing.T) {
svc := newTestRoomService(config.LimitConfig{MaxAttributesSize: 5})
_, err := svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
Name: "testroom",
Agents: []*livekit.RoomAgentDispatch{
{AgentName: "bot", Attributes: map[string]string{"key": "abcdefg"}},
},
})
requireInvalidArg(t, err)
})
notExceedsLimitsSvc := map[string]*TestRoomService{
"metadata exceeds limits": newTestRoomService(config.LimitConfig{
MaxMetadataSize: 5,
MaxAttributesSize: 5,
}),
"metadata no limits": newTestRoomService(config.LimitConfig{}),
}
for n, svc := range notExceedsLimitsSvc {
t.Run(n, func(t *testing.T) {
_, err := svc.UpdateParticipant(adminCtx(), &livekit.UpdateParticipantRequest{
Room: "testroom",
Identity: "123",
Metadata: "abc",
})
terr, ok := err.(twirp.Error)
require.True(t, ok)
require.NotEqual(t, twirp.InvalidArgument, terr.Code())
_, err = svc.UpdateRoomMetadata(adminCtx(), &livekit.UpdateRoomMetadataRequest{
Room: "testroom",
Metadata: "abc",
})
terr, ok = err.(twirp.Error)
require.True(t, ok)
require.NotEqual(t, twirp.InvalidArgument, terr.Code())
_, err = svc.CreateRoom(createCtx(), &livekit.CreateRoomRequest{
Name: "testroom",
Metadata: "abc",
Agents: []*livekit.RoomAgentDispatch{
{AgentName: "bot", Metadata: "abc", Attributes: map[string]string{"k": "v"}},
},
})
if err != nil {
terr, ok = err.(twirp.Error)
require.True(t, ok)
require.NotEqual(t, twirp.InvalidArgument, terr.Code())
}
})
}
}
func TestAgentDispatchMetadataLimits(t *testing.T) {
ctx := service.WithGrants(context.Background(), &auth.ClaimGrants{
Video: &auth.VideoGrant{Room: "testroom", RoomAdmin: true},
}, "")
t.Run("metadata exceeds limits", func(t *testing.T) {
svc := newTestAgentDispatchService(config.LimitConfig{MaxMetadataSize: 5})
_, err := svc.CreateDispatch(ctx, &livekit.CreateAgentDispatchRequest{
Room: "testroom",
Metadata: "abcdefg",
})
require.ErrorIs(t, err, service.ErrMetadataExceedsLimits)
})
t.Run("attributes exceeds limits", func(t *testing.T) {
svc := newTestAgentDispatchService(config.LimitConfig{MaxAttributesSize: 5})
_, err := svc.CreateDispatch(ctx, &livekit.CreateAgentDispatchRequest{
Room: "testroom",
Attributes: map[string]string{"key": "abcdefg"},
})
require.ErrorIs(t, err, service.ErrAttributeExceedsLimits)
})
}
func newTestAgentDispatchService(limitConf config.LimitConfig) *service.AgentDispatchService {
allocator := &servicefakes.FakeRoomAllocator{}
allocator.AutoCreateEnabledReturns(false)
return service.NewAgentDispatchService(limitConf, nil, rpc.NewTopicFormatter(), allocator, &routingfakes.FakeRouter{})
}
func newTestRoomService(limitConf config.LimitConfig) *TestRoomService {
router := &routingfakes.FakeRouter{}
allocator := &servicefakes.FakeRoomAllocator{}
store := &servicefakes.FakeServiceStore{}
svc, err := service.NewRoomService(
limitConf,
config.APIConfig{ExecutionTimeout: 2},
router,
allocator,
store,
nil,
rpc.NewTopicFormatter(),
&rpcfakes.FakeTypedRoomClient{},
&rpcfakes.FakeTypedParticipantClient{},
)
if err != nil {
panic(err)
}
return &TestRoomService{
RoomService: *svc,
router: router,
allocator: allocator,
store: store,
}
}
type TestRoomService struct {
service.RoomService
router *routingfakes.FakeRouter
allocator *servicefakes.FakeRoomAllocator
store *servicefakes.FakeServiceStore
}