libhttpserver/test/integ/native_linkage_test.cpp at v3 · etr/libhttpserver

Repository navigation

History

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

282

283

284

285

286

287

288

289

290

291

292

293

294

295

296

297

298

299

300

301

302

303

304

305

306

307

308

309

310

311

This file is part of libhttpserver

This library is free software; you can redistribute it and/or

modify it under the terms of the GNU Lesser General Public

License as published by the Free Software Foundation; either

version 2.1 of the License, or (at your option) any later version.

This library is distributed in the hope that it will be useful,

but WITHOUT ANY WARRANTY; without even the implied warranty of

MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU

Lesser General Public License for more details.

You should have received a copy of the GNU Lesser General Public

License along with this library; if not, write to the file

LICENSE in the distribution; if not, write to the Free Software

Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA

02110-1301 USA

// TASK-108 step 10 (PRD-V3N-REQ-001/002): the link-surface audit.

// This program links libhttpserver_v3core.la -- the v3 native engine

// objects and NOTHING else: no microhttpd, no gnutls, no curl. It

// constructs a native_server, registers a lambda route, and asserts

// validate-shaped behavior; it NEVER listens. LINKING IS THE AUDIT:

// if any part of the native TLS-off surface grew a third-party

// dependency, this translation unit stops compiling or linking. The

// companion scripts/audit-v3-native-linkage.sh inspects the built

// binary's dynamic dependencies for the banned libraries and scans

// the sources for banned includes.

#include <chrono>

#include <cstdint>

#include <string>

#include <utility>

#include <httpserver/websocket/session.hpp>

#include <httpserver/detail/websocket_driver.hpp>

#include <httpserver/detail/http1_websocket_handshake.hpp>

#include "./digest_client.hpp"

#include <httpserver/auth/basic_auth.hpp>

#include <httpserver/auth/digest_auth.hpp>

#include <httpserver/forms/multipart.hpp>

#include <httpserver/forms/urlencoded.hpp>

#include <httpserver/exchange.hpp>

#include <httpserver/http/fields.hpp>

#include <httpserver/http/method.hpp>

#include <httpserver/http/outcome.hpp>

#include <httpserver/http/request_head.hpp>

#include <httpserver/server/hooks.hpp>

#include <httpserver/server/options.hpp>

#include <httpserver/features.hpp>

#include <httpserver/server/server.hpp>

namespace {

namespace srv = httpserver::server;

namespace http = httpserver::http;

using httpserver::exchange;

using httpserver::task;

int audit_link_surface() {

httpserver::detail::websocket_driver driver;

auto ws = driver.take_session();

if (!ws.try_send(httpserver::websocket::message_kind::text, {}).status.ok()) return 1;

std::byte output[2];

if (driver.copy_output(output) != 2 || !driver.consume_output(2).ok()) return 1;

driver.eof();

srv::server_options options;

srv::listener_options listener;

listener.address = "127.0.0.1";

listener.port = 0;

options.add_listener(listener);

options.timeouts().header = std::chrono::milliseconds(30000);

srv::native_server server(std::move(options));

const http::outcome routed = server.route(

http::method::known(http::method_id::get), "/health",

[](exchange&) -> task<void> { co_return; });

if (!routed.ok()) return 1;

// The REQ-016 gate: a configuration with a listener validates; the

// same server is never asked to listen (this audit owns no ports).

// A second listener index stays unbound: get_bound_port reports 0.

const std::uint16_t unbound = server.get_bound_port(1);

const bool quiet = !server.is_running();

server.request_stop();

server.stop();

return quiet && unbound == 0 ? 0 : 1;

}

// TASK-114: the Basic auth policy is part of the v3core surface

// (detail/auth_basic.cpp). Constructing it and classifying one head

// here forces the audit binary to link the auth object, keeping the

// in-tree-only claim (no openssl/gnutls) executable for this area too.

int audit_basic_auth_link() {

httpserver::auth::basic_auth_policy policy;

const http::outcome created = httpserver::auth::basic_auth_policy::create(

"transcript", "alice", "wonderland", policy);

if (!created.ok()) return 1;

http::request_head head;

head.request_method = http::method::known(http::method_id::get);

head.head_fields.append("Authorization",

"Basic YWxpY2U6d29uZGVybGFuZA==");

const httpserver::auth::basic_auth_verdict verdict =

policy.check(head);

return verdict.allowed() ? 0 : 1;

}

// TASK-115: the Digest auth policy is part of the v3core surface

// (detail/auth_digest.cpp). Constructing it and driving one full

// challenge/response round here forces the audit binary to link the

// digest object AND its in-tree hash/entropy dependencies -- the

// no-MHD/no-TLS-library claim, executable for this area too. The

// client side is the self-contained test helper (inline reference

// MD5/SHA-256, no library dependency), so the audit binary still

// links libhttpserver_v3core.la and nothing else.

int audit_digest_auth_link() {

using httpserver::auth::digest_auth_policy;

using httpserver::auth::digest_auth_verdict;

digest_auth_policy policy;

const http::outcome created = digest_auth_policy::create(

"transcript", "bob", "builder", {}, policy);

if (!created.ok()) return 1;

http::request_head head;

head.raw_target = "/audit";

head.request_method = http::method::known(http::method_id::get);

const digest_auth_verdict offered = policy.check(head);

if (offered.allowed()) return 1;

const auto challenge =

httpserver_test::parse_www_authenticate(offered.challenge);

if (!challenge.has_value()) return 1;

const std::string response =

httpserver_test::compute_response_cleartext(

*challenge, httpserver_test::digest_hash::md5, "GET",

"/audit", "bob", "builder", "audit-cnonce", "00000001");

head.head_fields.append(

"Authorization",

httpserver_test::build_authorization_header(

*challenge, "bob", "/audit", "audit-cnonce", "00000001",

response));

const digest_auth_verdict verdict = policy.check(head);

return verdict.allowed() ? 0 : 1;

}

// TASK-116: the urlencoded form surface is part of the v3core surface

// (detail/forms_urlencoded.cpp). Decoding one bounded body and

// exercising the rejection vocabulary here forces the audit binary to

// link the forms object, keeping the in-tree-only claim (no

// microhttpd, no TLS library) executable for this area too.

int audit_forms_link() {

using httpserver::forms::form_fields;

using httpserver::forms::urlencoded_limits;

urlencoded_limits limits;

const http::outcome created =

urlencoded_limits::create(16, 4, limits);

if (!created.ok()) return 1;

const std::string body = "a=1&b=%2F";

const std::span<const std::byte> raw(

reinterpret_cast<const std::byte*>(body.data()), body.size());

form_fields fields;

const http::outcome decoded =

httpserver::forms::decode_urlencoded(raw, limits, fields);

if (!decoded.ok()) return 1;

if (fields.value("b").value_or("") != "/") return 1;

httpserver::forms::form_read malformed;

malformed.status = http::outcome(

http::outcome_code::invalid_argument, "probe");

return malformed.reject_status().code() == 400

&& malformed.reject_fields().first("content-length")

.value_or("")

== "0"

? 0

: 1;

}

// TASK-117: the multipart form surface is part of the v3core surface

// (detail/forms_multipart.cpp and detail/forms_multipart_files.cpp).

// Decoding one bounded body AND constructing the temp-file sink here

// forces the audit binary to link both form objects -- the file-I/O

// uses only std::fstream and remove(), so the no-microhttpd /

// no-TLS-library claim stays executable for this area too.

int audit_multipart_link() {

using httpserver::forms::multipart_limits;

using httpserver::forms::multipart_read;

using httpserver::forms::part_descriptor;

using httpserver::forms::part_sink;

using httpserver::forms::temp_file_part_sink;

class drop_all final : public part_sink {

public:

http::outcome on_part_begin(const part_descriptor&) override {

return http::outcome::okay();

}

http::outcome on_part_data(std::span<const std::byte>) override {

return http::outcome::okay();

}

http::outcome on_part_end() override {

return http::outcome::okay();

}

void on_part_abort(http::outcome) override { }

};

const std::string body =

"--AUDITB\r\nContent-Disposition: form-data; name=\"q\"\r\n"

"\r\nok\r\n--AUDITB--\r\n";

drop_all sink;

multipart_read read;

const http::outcome decoded = httpserver::forms::decode_multipart(

std::span<const std::byte>(

reinterpret_cast<const std::byte*>(body.data()), body.size()),

std::optional<std::string_view>(

"multipart/form-data; boundary=AUDITB"),

multipart_limits{}, sink, read);

if (!decoded.ok()) return 1;

if (read.parts_completed != 1) return 1;

// The temp-file sink's construction and destruction run the

// file-I/O members (no file survives: the default removes).

temp_file_part_sink files;

return 0;

}

// TASK-118: the lifecycle hook bus and the error-page factories are

// part of the v3core surface (detail/server_hooks.cpp and the

// dispatcher's page plumbing). Registering a hook, probing the phase

// emptiness, and setting both factories here forces the audit binary

// to link those objects, keeping the in-tree-only claim executable for

// the routing/hook area too.

int audit_hooks_link() {

srv::server_options options;

options.not_found_response([](const http::request_head&) {

srv::hook_response page;

page.status = http::status::from_code(404);

return page;

});

options.method_not_allowed_response([](const http::request_head&) {

srv::hook_response page;

page.status = http::status::from_code(405);

return page;

});

srv::listener_options listener;

listener.address = "127.0.0.1";

listener.port = 0;

options.add_listener(listener);

srv::native_server server(std::move(options));

srv::hook_bus& bus = server.hooks();

if (bus.any_hooks(srv::hook_phase::request_received)) return 1;

srv::hook_handle handle = bus.add<srv::hook_phase::request_received>(

[](srv::request_received_ctx&) -> srv::hook_action {

return srv::hook_action::pass();

});

if (!bus.any_hooks(srv::hook_phase::request_received)) return 1;

handle.remove();

if (bus.any_hooks(srv::hook_phase::request_received)) return 1;

// The route-family registrations ride the same linkage claim.

http::method_set get;

get.set(http::method_id::get);

if (!server.route(get, "/health",

[](httpserver::exchange&) -> httpserver::task<void> {

co_return;

})

.ok()) {

return 1;

}

if (!server.route_prefix(get, "/",

[](httpserver::exchange&)

-> httpserver::task<void> {

co_return;

})

.ok()) {

return 1;

}

server.request_stop();

server.stop();

return 0;

}

} // namespace

int audit_websocket_upgrade_link() {

http::request_head head;

head.request_method = http::method::known(http::method_id::get);

head.request_protocol = http::protocol::http_1_1;

head.head_fields.append("Host", "example.com");

head.head_fields.append("Connection", "Upgrade");

head.head_fields.append("Upgrade", "websocket");

head.head_fields.append("Sec-WebSocket-Version", "13");

head.head_fields.append("Sec-WebSocket-Key", "dGhlIHNhbXBsZSBub25jZQ==");

auto plan = httpserver::detail::negotiate_http1_websocket(head, {});

return !plan.status.ok() || plan.accept != "s3pPLMBiTxaQ9kYGzzhZRbK+xOo=";

}

// All audits always run: plain | does not short-circuit.

int main() {

const auto features = httpserver::query_features();

if (features.tcp_tls != features.tls_provider || features.http2 != features.tls_provider

|| features.http3 != features.tls_provider) return 1;

return audit_link_surface() | audit_basic_auth_link()

| audit_digest_auth_link() | audit_forms_link()

| audit_multipart_link() | audit_hooks_link() | audit_websocket_upgrade_link();

}

FilesExpand file tree

native_linkage_test.cpp

Latest commit

History

native_linkage_test.cpp

File metadata and controls