mirror of
https://github.com/BigBodyCobain/Shadowbroker.git
synced 2026-07-12 15:06:37 +02:00
BigBodyCobain
105 lines
3.2 KiB
Python
105 lines
3.2 KiB
Python
import time
|
|
|
|
from services.mesh import mesh_hashchain
|
|
from services.mesh.mesh_signed_events import (
|
|
PreparedSignedWrite,
|
|
SignedWriteKind,
|
|
_SignedWriteAbort,
|
|
_apply_signed_write_freshness_policy,
|
|
)
|
|
|
|
|
|
def test_infonet_sequence_domains_are_independent(tmp_path, monkeypatch):
|
|
monkeypatch.setattr(mesh_hashchain, "DATA_DIR", tmp_path)
|
|
monkeypatch.setattr(mesh_hashchain, "CHAIN_FILE", tmp_path / "infonet.json")
|
|
monkeypatch.setattr(mesh_hashchain, "WAL_FILE", tmp_path / "infonet.wal")
|
|
|
|
inf = mesh_hashchain.Infonet()
|
|
|
|
assert inf.validate_and_set_sequence("node-a", 1, domain="dm_poll") == (True, "ok")
|
|
assert inf.validate_and_set_sequence("node-a", 1, domain="dm_send") == (True, "ok")
|
|
|
|
ok, reason = inf.validate_and_set_sequence("node-a", 1, domain="dm_poll")
|
|
assert ok is False
|
|
assert "Replay detected" in reason
|
|
|
|
assert inf.node_sequences == {}
|
|
assert inf.sequence_domains["node-a|dm_poll"] == 1
|
|
assert inf.sequence_domains["node-a|dm_send"] == 1
|
|
|
|
|
|
def test_private_signed_sequence_helper_falls_back_for_legacy_infonet():
|
|
import main
|
|
|
|
class LegacyInfonet:
|
|
def __init__(self):
|
|
self.sequences = {}
|
|
|
|
def validate_and_set_sequence(self, node_id, sequence):
|
|
last = self.sequences.get(node_id, 0)
|
|
if sequence <= last:
|
|
return False, f"Replay detected: sequence {sequence} <= last {last}"
|
|
self.sequences[node_id] = sequence
|
|
return True, "OK"
|
|
|
|
inf = LegacyInfonet()
|
|
|
|
assert main._validate_private_signed_sequence(
|
|
inf,
|
|
"node-a",
|
|
1,
|
|
domain="dm_poll",
|
|
) == (True, "OK")
|
|
assert main._validate_private_signed_sequence(
|
|
inf,
|
|
"node-a",
|
|
1,
|
|
domain="dm_send",
|
|
) == (True, "OK")
|
|
|
|
ok, reason = main._validate_private_signed_sequence(
|
|
inf,
|
|
"node-a",
|
|
1,
|
|
domain="dm_poll",
|
|
)
|
|
assert ok is False
|
|
assert "Replay detected" in reason
|
|
assert inf.sequences["node-a|dm_poll"] == 1
|
|
assert inf.sequences["node-a|dm_send"] == 1
|
|
|
|
|
|
def _prepared_timestamped_write(timestamp: int) -> PreparedSignedWrite:
|
|
return PreparedSignedWrite(
|
|
kind=SignedWriteKind.DM_SEND,
|
|
event_type="dm_message",
|
|
body={},
|
|
node_id="node-a",
|
|
sequence=1,
|
|
public_key="pub",
|
|
public_key_algo="Ed25519",
|
|
signature="sig",
|
|
protocol_version="1",
|
|
payload={"timestamp": timestamp},
|
|
)
|
|
|
|
|
|
def test_signed_write_freshness_rejects_ancient_timestamp(monkeypatch):
|
|
monkeypatch.setenv("MESH_SIGNED_WRITE_MAX_AGE_S", "60")
|
|
|
|
stale = int(time.time()) - 61
|
|
try:
|
|
_apply_signed_write_freshness_policy(_prepared_timestamped_write(stale))
|
|
except _SignedWriteAbort as exc:
|
|
assert exc.response["ok"] is False
|
|
assert exc.response["max_age_s"] == 60
|
|
assert "freshness window" in exc.response["detail"]
|
|
else:
|
|
raise AssertionError("stale signed write was accepted")
|
|
|
|
|
|
def test_signed_write_freshness_accepts_current_timestamp(monkeypatch):
|
|
monkeypatch.setenv("MESH_SIGNED_WRITE_MAX_AGE_S", "60")
|
|
|
|
_apply_signed_write_freshness_policy(_prepared_timestamped_write(int(time.time())))
|