Send full host metadata on managed startup

cmd/cli/metadata_scope_test.go

@@ -0,0 +1,82 @@
+package cli
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	"github.com/miekg/dns"
+
+	"github.com/Control-D-Inc/ctrld/internal/controld"
+)
+
+// requireRuntimeMetadata asserts the runtime half of the startup-versus-runtime
+// wire contract in docs/username-detection.md: no username discovery and no
+// hostname hints.
+func requireRuntimeMetadata(t *testing.T, caller string, req *controld.ResolverConfigRequest) {
+	t.Helper()
+	if req == nil {
+		t.Fatalf("%s did not send a resolver config request", caller)
+	}
+	if _, ok := req.Metadata["username"]; ok {
+		t.Errorf("%s request included username", caller)
+	}
+	if req.IncludeHostnameHints {
+		t.Errorf("%s request asked for hostname hints", caller)
+	}
+}
+
+func TestDeactivationPinRefreshUsesRuntimeMetadata(t *testing.T) {
+	oldFetch, oldUID := fetchResolverConfig, cdUID
+	oldPin, oldKnown := cdDeactivationPin.Load(), deactivationPinKnown.Load()
+	t.Cleanup(func() {
+		fetchResolverConfig, cdUID = oldFetch, oldUID
+		cdDeactivationPin.Store(oldPin)
+		deactivationPinKnown.Store(oldKnown)
+		deactivationLockedUntil.Store(0)
+	})
+	cdUID = "test-uid"
+	deactivationLockedUntil.Store(0)
+
+	var captured *controld.ResolverConfigRequest
+	fetchResolverConfig = func(_ context.Context, req *controld.ResolverConfigRequest, _ bool) (*controld.ResolverConfig, error) {
+		captured = req
+		return &controld.ResolverConfig{}, nil
+	}
+
+	p := &prog{cs: &controlServer{mux: http.NewServeMux()}, pinCodeValidCh: make(chan struct{}, 1)}
+	p.logger.Store(discardLogger())
+	p.registerControlServerHandler()
+	body, _ := json.Marshal(&deactivationRequest{Pin: defaultDeactivationPin})
+	req := httptest.NewRequest(http.MethodPost, deactivationPath, strings.NewReader(string(body)))
+	p.cs.mux.ServeHTTP(httptest.NewRecorder(), req)
+
+	requireRuntimeMetadata(t, "deactivation-PIN refresh", captured)
+}
+
+func TestSelfUninstallCheckUsesRuntimeMetadata(t *testing.T) {
+	oldFetch, oldUID := fetchResolverConfig, cdUID
+	t.Cleanup(func() { fetchResolverConfig, cdUID = oldFetch, oldUID })
+	cdUID = "test-uid"
+
+	var captured *controld.ResolverConfigRequest
+	fetchResolverConfig = func(_ context.Context, req *controld.ResolverConfigRequest, _ bool) (*controld.ResolverConfig, error) {
+		captured = req
+		// A generic failure is not a device-deleted answer, so no uninstall runs.
+		return nil, errors.New("stop after capturing metadata")
+	}
+
+	p := &prog{}
+	p.logger.Store(discardLogger())
+	p.canSelfUninstall.Store(true)
+	p.refusedQueryCount = selfUninstallMaxQueries + 1
+	refused := new(dns.Msg)
+	refused.SetRcode(newDnsMsgWithHostname("example.com.", dns.TypeA), dns.RcodeRefused)
+	p.doSelfUninstall(&proxyResponse{answer: refused})
+
+	requireRuntimeMetadata(t, "self-uninstall check", captured)
+}