mirror of
https://github.com/agessaman/meshcore-bot.git
synced 2026-09-15 12:25:34 +00:00
agessaman
bf70594b41
A flood_scopes of "*" alone leaves scope_keys empty while setting flood_scope_allow_global, and the loader already logs that as an active allowlist. The handler gated on scope_keys alone, so that configuration skipped authorisation entirely and admitted absent, uncorrelated and TRANSPORT_FLOOD traffic. The gate now fires when either is set, so "*" means global-only rather than everything. The scheduled-message duplicate check ran outside the write lock inside update_ini_values, so two concurrent creates for the same schedule could both pass and the second silently replace the first instead of getting the 409. Check and write are now one critical section, and delete is too. Repaired the delete path's error handling while moving it, so an OSError during the write is still a 500 rather than escaping.
559 lines
21 KiB
Python
559 lines
21 KiB
Python
"""Integration tests: TC_FLOOD scope matching → reply sent with matched scope.
|
|
|
|
These tests verify the full chain:
|
|
incoming RF data with TC_FLOOD transport code
|
|
→ _match_scope identifies scope
|
|
→ MeshMessage.reply_scope set
|
|
→ send_response passes scope to send_channel_message
|
|
"""
|
|
|
|
import configparser
|
|
import hmac as hmac_mod
|
|
from hashlib import sha256
|
|
from unittest.mock import AsyncMock, MagicMock, Mock
|
|
|
|
import pytest
|
|
|
|
from modules.command_manager import CommandManager
|
|
from modules.message_handler import MessageHandler
|
|
from modules.models import MeshMessage
|
|
|
|
# ── helpers ──────────────────────────────────────────────────────────────────
|
|
|
|
PAYLOAD_TYPE = 0x05 # GRP_TXT (channel message flood)
|
|
PKT_PAYLOAD = b"\xde\xad\xbe\xef\x01\x02\x03\x04"
|
|
|
|
|
|
def _scope_key(name: str) -> bytes:
|
|
return sha256(name.encode()).digest()[:16]
|
|
|
|
|
|
def make_transport_code(scope_name: str, payload_type: int, pkt_payload: bytes) -> int:
|
|
key = _scope_key(scope_name)
|
|
data = bytes([payload_type]) + pkt_payload
|
|
digest = hmac_mod.new(key, data, sha256).digest()
|
|
code = int.from_bytes(digest[:2], "little")
|
|
if code == 0:
|
|
code = 1
|
|
elif code == 0xFFFF:
|
|
code = 0xFFFE
|
|
return code
|
|
|
|
|
|
def _tc_hex(scope_name: str, payload_type: int, pkt_payload: bytes) -> str:
|
|
"""Build the 4-byte transport_code hex string as stored in RF data (tc1 + 0000)."""
|
|
tc1 = make_transport_code(scope_name, payload_type, pkt_payload)
|
|
return tc1.to_bytes(2, "little").hex() + "0000"
|
|
|
|
|
|
def make_config(flood_scopes: str = "", outgoing_flood_scope_override: str = "") -> configparser.ConfigParser:
|
|
config = configparser.ConfigParser()
|
|
config.add_section("Bot")
|
|
config.set("Bot", "bot_name", "TestBot")
|
|
config.add_section("Channels")
|
|
config.set("Channels", "monitor_channels", "general")
|
|
if flood_scopes:
|
|
config.set("Channels", "flood_scopes", flood_scopes)
|
|
if outgoing_flood_scope_override:
|
|
config.set("Channels", "outgoing_flood_scope_override", outgoing_flood_scope_override)
|
|
return config
|
|
|
|
|
|
# ── _match_scope unit-level integration ──────────────────────────────────────
|
|
|
|
class TestMatchScopeIntegration:
|
|
"""_match_scope with realistic scope_keys dict from CommandManager._load_flood_scope_keys."""
|
|
|
|
def _make_scope_keys(self, *names: str) -> dict[str, bytes]:
|
|
return {name: _scope_key(name) for name in names}
|
|
|
|
def test_west_scope_matched(self):
|
|
scope_keys = self._make_scope_keys("#west")
|
|
tc = make_transport_code("#west", PAYLOAD_TYPE, PKT_PAYLOAD)
|
|
assert MessageHandler._match_scope(tc, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys) == "#west"
|
|
|
|
def test_east_scope_matched_from_multiple(self):
|
|
scope_keys = self._make_scope_keys("#west", "#east", "#north")
|
|
tc = make_transport_code("#east", PAYLOAD_TYPE, PKT_PAYLOAD)
|
|
assert MessageHandler._match_scope(tc, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys) == "#east"
|
|
|
|
def test_unknown_scope_returns_none(self):
|
|
scope_keys = self._make_scope_keys("#west")
|
|
tc = make_transport_code("#other", PAYLOAD_TYPE, PKT_PAYLOAD)
|
|
assert MessageHandler._match_scope(tc, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys) is None
|
|
|
|
def test_global_flood_no_transport_code(self):
|
|
scope_keys = self._make_scope_keys("#west")
|
|
assert MessageHandler._match_scope(None, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys) is None
|
|
|
|
|
|
# ── CommandManager.flood_scope_keys loading ──────────────────────────────────
|
|
|
|
class TestFloodScopeKeysLoading:
|
|
def _make_bot(self, flood_scopes: str) -> MagicMock:
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes=flood_scopes)
|
|
bot.command_manager = MagicMock()
|
|
# Minimal stubs so CommandManager.__init__ can call load_* methods without crashing
|
|
bot.config.has_section = bot.config.has_section
|
|
bot.config.has_option = bot.config.has_option
|
|
bot.config.get = bot.config.get
|
|
return bot
|
|
|
|
def test_scope_keys_loaded_for_hash_names(self):
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes="#west, #east")
|
|
# Call _load_flood_scope_keys directly (bypasses full __init__)
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
result = cm._load_flood_scope_keys()
|
|
assert "#west" in result
|
|
assert "#east" in result
|
|
assert result["#west"] == _scope_key("#west")
|
|
|
|
def test_bare_names_normalized_on_load(self):
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes="west, east")
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
result = cm._load_flood_scope_keys()
|
|
assert "#west" in result
|
|
assert "#east" in result
|
|
assert "west" not in result
|
|
|
|
def test_empty_flood_scopes_returns_empty_dict(self):
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config()
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
result = cm._load_flood_scope_keys()
|
|
assert result == {}
|
|
|
|
def test_flood_scopes_in_bot_section_fallback(self):
|
|
config = configparser.ConfigParser()
|
|
config.add_section("Bot")
|
|
config.set("Bot", "bot_name", "TestBot")
|
|
config.set("Bot", "flood_scopes", "w-wa, *")
|
|
config.add_section("Channels")
|
|
config.set("Channels", "monitor_channels", "general")
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = config
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
result = cm._load_flood_scope_keys()
|
|
assert "#w-wa" in result
|
|
assert cm.flood_scope_allow_global is True
|
|
cm.logger.warning.assert_called_once()
|
|
|
|
def test_star_excluded_from_scope_keys(self):
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes="#west, *")
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
result = cm._load_flood_scope_keys()
|
|
assert "*" not in result
|
|
assert "#west" in result
|
|
|
|
def test_star_sets_allow_global(self):
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes="#west, *")
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
cm._load_flood_scope_keys()
|
|
assert cm.flood_scope_allow_global is True
|
|
|
|
def test_named_only_allow_global_stays_false(self):
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes="#west, #east")
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
cm._load_flood_scope_keys()
|
|
assert cm.flood_scope_allow_global is False
|
|
|
|
|
|
# ── Allowlist gate logic ──────────────────────────────────────────────────────
|
|
|
|
class TestAllowlistGate:
|
|
"""The allowlist gate suppresses replies when flood_scope_keys is active
|
|
and the incoming message does not match any configured scope."""
|
|
|
|
def _gate(self, scope_keys: dict, allow_global: bool, reply_scope, rt: int) -> bool:
|
|
"""Mirror the gate logic in message_handler.py."""
|
|
should_suppress = False
|
|
if scope_keys and reply_scope is None:
|
|
if rt == 0:
|
|
should_suppress = True # TC_FLOOD, unknown scope
|
|
elif not allow_global:
|
|
should_suppress = True # FLOOD, no * in allowlist
|
|
return should_suppress
|
|
|
|
def test_flood_suppressed_when_allowlist_active_no_star(self):
|
|
"""Regular FLOOD with unrecognized scope is suppressed when allow_global is False."""
|
|
scope_keys = {"#west": _scope_key("#west")}
|
|
allow_global = False
|
|
rt = 1 # FLOOD
|
|
# _match_scope would return None because it's a plain FLOOD (no tc_code1)
|
|
reply_scope = MessageHandler._match_scope(None, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys)
|
|
assert reply_scope is None
|
|
assert self._gate(scope_keys, allow_global, reply_scope, rt) is True
|
|
|
|
def test_flood_allowed_when_star_in_allowlist(self):
|
|
"""Regular FLOOD with unrecognized scope is allowed when allow_global is True."""
|
|
scope_keys = {"#west": _scope_key("#west")}
|
|
allow_global = True
|
|
rt = 1 # FLOOD
|
|
reply_scope = MessageHandler._match_scope(None, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys)
|
|
assert reply_scope is None
|
|
assert self._gate(scope_keys, allow_global, reply_scope, rt) is False
|
|
|
|
def test_tc_flood_suppressed_unknown_scope(self):
|
|
"""TC_FLOOD with a scope not in allowlist is suppressed."""
|
|
scope_keys = {"#west": _scope_key("#west")}
|
|
allow_global = False
|
|
rt = 0 # TC_FLOOD
|
|
tc = make_transport_code("#other", PAYLOAD_TYPE, PKT_PAYLOAD)
|
|
reply_scope = MessageHandler._match_scope(tc, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys)
|
|
assert reply_scope is None
|
|
assert self._gate(scope_keys, allow_global, reply_scope, rt) is True
|
|
|
|
def test_tc_flood_allowed_known_scope(self):
|
|
"""TC_FLOOD with a matching scope is allowed (gate does not suppress)."""
|
|
scope_keys = {"#west": _scope_key("#west")}
|
|
allow_global = False
|
|
rt = 0 # TC_FLOOD
|
|
tc = make_transport_code("#west", PAYLOAD_TYPE, PKT_PAYLOAD)
|
|
reply_scope = MessageHandler._match_scope(tc, PAYLOAD_TYPE, PKT_PAYLOAD, scope_keys)
|
|
assert reply_scope == "#west"
|
|
assert self._gate(scope_keys, allow_global, reply_scope, rt) is False
|
|
|
|
def test_no_scope_keys_allows_everything(self):
|
|
"""Empty scope_keys dict means no allowlist is active — nothing is suppressed."""
|
|
scope_keys = {}
|
|
allow_global = False
|
|
rt = 1 # FLOOD
|
|
reply_scope = None
|
|
assert self._gate(scope_keys, allow_global, reply_scope, rt) is False
|
|
|
|
|
|
# ── send_response passes reply_scope to send_channel_message ─────────────────
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_send_response_passes_reply_scope_to_channel_send():
|
|
"""MeshMessage.reply_scope is forwarded as scope= to send_channel_message."""
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config()
|
|
bot.connected = True
|
|
bot.meshcore = MagicMock()
|
|
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = bot.logger
|
|
|
|
# Patch send_channel_message to capture args
|
|
cm.send_channel_message = AsyncMock(return_value=True)
|
|
|
|
msg = MeshMessage(
|
|
content="hello",
|
|
channel="general",
|
|
is_dm=False,
|
|
sender_id="Alice",
|
|
reply_scope="#west",
|
|
)
|
|
await cm.send_response(msg, "reply text")
|
|
|
|
cm.send_channel_message.assert_awaited_once()
|
|
_, kwargs = cm.send_channel_message.call_args
|
|
assert kwargs.get("scope") == "#west"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_send_response_passes_none_scope_when_unset():
|
|
"""MeshMessage without reply_scope → scope=None (global flood)."""
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config()
|
|
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = bot.logger
|
|
cm.send_channel_message = AsyncMock(return_value=True)
|
|
|
|
msg = MeshMessage(content="hello", channel="general", is_dm=False, sender_id="Alice")
|
|
await cm.send_response(msg, "reply text")
|
|
|
|
_, kwargs = cm.send_channel_message.call_args
|
|
assert kwargs.get("scope") is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_send_response_forwards_command_id_to_channel_send():
|
|
"""Optional command_id is passed to send_channel_message for repeat tracking."""
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config()
|
|
bot.connected = True
|
|
bot.meshcore = MagicMock()
|
|
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = bot.logger
|
|
cm.send_channel_message = AsyncMock(return_value=True)
|
|
cm.get_rate_limit_key = Mock(return_value="rk")
|
|
|
|
msg = MeshMessage(content="hello", channel="general", is_dm=False, sender_id="Alice")
|
|
await cm.send_response(msg, "reply text", command_id="keyword_foo_1")
|
|
|
|
cm.send_channel_message.assert_awaited_once()
|
|
args, kwargs = cm.send_channel_message.call_args
|
|
assert args[2] == "keyword_foo_1"
|
|
assert kwargs.get("scope") is None
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_send_response_forwards_command_id_to_dm():
|
|
"""Optional command_id is passed to send_dm for repeat tracking."""
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config()
|
|
bot.connected = True
|
|
bot.meshcore = MagicMock()
|
|
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = bot.logger
|
|
cm.send_dm = AsyncMock(return_value=True)
|
|
cm.get_rate_limit_key = Mock(return_value="rk")
|
|
|
|
msg = MeshMessage(content="hello", channel=None, is_dm=True, sender_id="Bob")
|
|
await cm.send_response(msg, "reply text", command_id="keyword_bar_2")
|
|
|
|
cm.send_dm.assert_awaited_once()
|
|
args, kwargs = cm.send_dm.call_args
|
|
assert args[2] == "keyword_bar_2"
|
|
|
|
|
|
# ── scope normalization in send_channel_message ───────────────────────────────
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_send_channel_message_normalizes_bare_scope():
|
|
"""scope='west' passed in is normalized to '#west' before set_flood_scope call."""
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config()
|
|
bot.connected = True
|
|
bot.meshcore = MagicMock()
|
|
bot.is_radio_zombie = False
|
|
bot.is_radio_offline = False
|
|
bot.channel_manager = MagicMock()
|
|
bot.channel_manager.get_channel_number = Mock(return_value=0)
|
|
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = bot.logger
|
|
|
|
set_flood_scope = AsyncMock(return_value=MagicMock(type="OK"))
|
|
send_chan_msg = AsyncMock(return_value=MagicMock(type="OK", payload={}))
|
|
bot.meshcore.commands.set_flood_scope = set_flood_scope
|
|
bot.meshcore.commands.send_chan_msg = send_chan_msg
|
|
|
|
# Stub out rate limiters and other helpers so the method runs end-to-end
|
|
cm._check_rate_limits = AsyncMock(return_value=(True, None))
|
|
cm._is_no_event_received = Mock(return_value=False)
|
|
cm._handle_send_result = Mock(return_value=True)
|
|
|
|
await cm.send_channel_message("general", "hi", scope="west")
|
|
|
|
# set_flood_scope should have been called with "#west", not "west"
|
|
calls = set_flood_scope.await_args_list
|
|
scope_set = [c.args[0] for c in calls if c.args]
|
|
assert "#west" in scope_set
|
|
|
|
|
|
# ── Production #snoco scoped ping regression (2026-05-16) ─────────────────────
|
|
|
|
# Captured from live TC_FLOOD channel ping on #bot: tc_code1=30332, GRP_TXT type 5.
|
|
SNOCO_SCOPED_PING_PAYLOAD = bytes.fromhex(
|
|
"ca06625f8e52006332d36687f6499583e61e32753b17ade613e3a648adf8cbf7c1b03b"
|
|
)
|
|
SNOCO_SCOPED_PING_TC_CODE1 = 30332
|
|
|
|
|
|
class TestSnocoScopedPingRegression:
|
|
"""Regression for scoped ping → reply_scope #snoco → outbound send scope."""
|
|
|
|
def _load_user_style_scope_keys(self) -> dict[str, bytes]:
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes="*,wa,w-wa,sea,snoco,pnw,west")
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = Mock()
|
|
cm.flood_scope_allow_global = False
|
|
return cm._load_flood_scope_keys()
|
|
|
|
def _production_rf_cache(self) -> dict:
|
|
return {
|
|
"route_type_int": 0,
|
|
"transport_code1": SNOCO_SCOPED_PING_TC_CODE1,
|
|
"payload_type_int": PAYLOAD_TYPE,
|
|
"scope_payload_hex": SNOCO_SCOPED_PING_PAYLOAD.hex(),
|
|
"raw_hex": (
|
|
"30dd147c76000040ca06625f8e52006332d36687f6499583e61e32753b17ade613e3a648adf8cbf7c1b03b"
|
|
),
|
|
}
|
|
|
|
def _production_packet_info(self) -> dict:
|
|
return {
|
|
"route_type": 0,
|
|
"transport_codes": {"code1": SNOCO_SCOPED_PING_TC_CODE1, "code2": 0},
|
|
"payload_type": PAYLOAD_TYPE,
|
|
"payload_hex": SNOCO_SCOPED_PING_PAYLOAD.hex(),
|
|
}
|
|
|
|
def test_production_hmac_matches_snoco_not_w_wa(self):
|
|
scope_keys = self._load_user_style_scope_keys()
|
|
assert "#snoco" in scope_keys
|
|
assert MessageHandler._match_scope(
|
|
SNOCO_SCOPED_PING_TC_CODE1,
|
|
PAYLOAD_TYPE,
|
|
SNOCO_SCOPED_PING_PAYLOAD,
|
|
scope_keys,
|
|
) == "#snoco"
|
|
assert MessageHandler._match_scope(
|
|
SNOCO_SCOPED_PING_TC_CODE1,
|
|
PAYLOAD_TYPE,
|
|
SNOCO_SCOPED_PING_PAYLOAD,
|
|
{"#w-wa": scope_keys["#w-wa"]},
|
|
) is None
|
|
|
|
def test_rf_cache_resolves_reply_scope_snoco(self):
|
|
mh = object.__new__(MessageHandler)
|
|
mh.logger = Mock()
|
|
scope_keys = self._load_user_style_scope_keys()
|
|
reply_scope = mh._resolve_reply_scope_from_rf_data(
|
|
self._production_rf_cache(),
|
|
self._production_packet_info(),
|
|
scope_keys,
|
|
)
|
|
assert reply_scope == "#snoco"
|
|
|
|
def test_stale_flood_cache_plus_decode_still_resolves_snoco(self):
|
|
"""Correlated RF row said FLOOD but decode says TC_FLOOD (pre-fix failure mode)."""
|
|
mh = object.__new__(MessageHandler)
|
|
mh.logger = Mock()
|
|
scope_keys = self._load_user_style_scope_keys()
|
|
stale_cache = {
|
|
"route_type_int": 1,
|
|
"transport_code1": None,
|
|
"payload_type_int": PAYLOAD_TYPE,
|
|
"scope_payload_hex": "",
|
|
}
|
|
assert (
|
|
mh._resolve_reply_scope_from_rf_data(
|
|
stale_cache,
|
|
self._production_packet_info(),
|
|
scope_keys,
|
|
)
|
|
== "#snoco"
|
|
)
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_ping_reply_send_response_forwards_snoco_scope(self):
|
|
"""MeshMessage built after scope match must pass scope=#snoco to send_channel_message."""
|
|
mh = object.__new__(MessageHandler)
|
|
mh.logger = Mock()
|
|
scope_keys = self._load_user_style_scope_keys()
|
|
reply_scope = mh._resolve_reply_scope_from_rf_data(
|
|
self._production_rf_cache(),
|
|
self._production_packet_info(),
|
|
scope_keys,
|
|
)
|
|
assert reply_scope == "#snoco"
|
|
|
|
bot = MagicMock()
|
|
bot.logger = Mock()
|
|
bot.config = make_config(flood_scopes="*,wa,w-wa,sea,snoco,pnw,west")
|
|
bot.connected = True
|
|
bot.meshcore = MagicMock()
|
|
|
|
cm = object.__new__(CommandManager)
|
|
cm.bot = bot
|
|
cm.logger = bot.logger
|
|
cm.flood_scope_keys = scope_keys
|
|
cm.flood_scope_allow_global = True
|
|
cm.send_channel_message = AsyncMock(return_value=True)
|
|
|
|
msg = MeshMessage(
|
|
content="Ping",
|
|
channel="#bot",
|
|
is_dm=False,
|
|
sender_id="HOWL",
|
|
reply_scope=reply_scope,
|
|
)
|
|
await cm.send_response(msg, "Pong!")
|
|
|
|
cm.send_channel_message.assert_awaited_once()
|
|
_, kwargs = cm.send_channel_message.call_args
|
|
assert kwargs.get("scope") == "#snoco"
|
|
|
|
|
|
class TestWildcardOnlyAllowlist:
|
|
"""flood_scopes = "*" leaves scope_keys empty but still configures an allowlist
|
|
(global only). Gating on scope_keys alone let that configuration skip
|
|
authorisation entirely."""
|
|
|
|
@staticmethod
|
|
def _cmd_mgr(raw):
|
|
from unittest.mock import Mock
|
|
|
|
from modules.command_manager import CommandManager
|
|
|
|
mgr = object.__new__(CommandManager)
|
|
mgr.logger = Mock()
|
|
mgr._flood_scopes_config_raw = lambda: raw
|
|
mgr.flood_scope_allow_global = False
|
|
keys = mgr._load_flood_scope_keys()
|
|
return keys, mgr.flood_scope_allow_global
|
|
|
|
def test_wildcard_only_yields_no_keys_but_allows_global(self):
|
|
keys, allow_global = self._cmd_mgr("*")
|
|
assert keys == {}
|
|
assert allow_global is True
|
|
|
|
def test_wildcard_only_still_counts_as_a_configured_allowlist(self):
|
|
"""The gate condition the handler uses must be true here, or '*' bypasses it."""
|
|
keys, allow_global = self._cmd_mgr("*")
|
|
assert bool(keys or allow_global) is True
|
|
|
|
def test_named_scope_plus_wildcard(self):
|
|
keys, allow_global = self._cmd_mgr("#west, *")
|
|
assert list(keys) == ["#west"]
|
|
assert allow_global is True
|
|
|
|
def test_unset_config_configures_no_allowlist(self):
|
|
keys, allow_global = self._cmd_mgr("")
|
|
assert bool(keys or allow_global) is False
|