|
| 1 | +package ucan |
| 2 | + |
| 3 | +import ( |
| 4 | + "bytes" |
| 5 | + "io" |
| 6 | + "net/http" |
| 7 | + "testing" |
| 8 | + |
| 9 | + logging "github.com/ipfs/go-log/v2" |
| 10 | + "github.com/multiformats/go-multihash" |
| 11 | + blobcaps "github.com/storacha/go-libstoracha/capabilities/blob" |
| 12 | + "github.com/storacha/go-libstoracha/capabilities/space/content" |
| 13 | + "github.com/storacha/go-libstoracha/testutil" |
| 14 | + "github.com/storacha/go-ucanto/client" |
| 15 | + rclient "github.com/storacha/go-ucanto/client/retrieval" |
| 16 | + "github.com/storacha/go-ucanto/core/delegation" |
| 17 | + "github.com/storacha/go-ucanto/core/invocation" |
| 18 | + "github.com/storacha/go-ucanto/core/ipld" |
| 19 | + "github.com/storacha/go-ucanto/core/receipt" |
| 20 | + "github.com/storacha/go-ucanto/core/result" |
| 21 | + fdm "github.com/storacha/go-ucanto/core/result/failure/datamodel" |
| 22 | + "github.com/storacha/go-ucanto/principal" |
| 23 | + "github.com/storacha/go-ucanto/server/retrieval" |
| 24 | + "github.com/storacha/go-ucanto/transport/headercar" |
| 25 | + "github.com/storacha/go-ucanto/ucan" |
| 26 | + "github.com/storacha/piri/pkg/store/blobstore" |
| 27 | + "github.com/stretchr/testify/require" |
| 28 | +) |
| 29 | + |
| 30 | +type blobRetrievalService struct { |
| 31 | + id principal.Signer |
| 32 | + blobs blobstore.BlobGetter |
| 33 | +} |
| 34 | + |
| 35 | +func (brs *blobRetrievalService) ID() principal.Signer { |
| 36 | + return brs.id |
| 37 | +} |
| 38 | + |
| 39 | +func (brs *blobRetrievalService) Blobs() blobstore.BlobGetter { |
| 40 | + return brs.blobs |
| 41 | +} |
| 42 | + |
| 43 | +func TestBlobRetrieve(t *testing.T) { |
| 44 | + logging.SetLogLevel("retrieval/ucan", "DEBUG") |
| 45 | + alice := testutil.Alice |
| 46 | + proof, err := delegation.Delegate( |
| 47 | + testutil.Service, |
| 48 | + alice, |
| 49 | + []ucan.Capability[ucan.NoCaveats]{ |
| 50 | + ucan.NewCapability( |
| 51 | + blobcaps.RetrieveAbility, |
| 52 | + testutil.Service.DID().String(), |
| 53 | + ucan.NoCaveats{}, |
| 54 | + ), |
| 55 | + }, |
| 56 | + ) |
| 57 | + require.NoError(t, err) |
| 58 | + |
| 59 | + randBytes := testutil.RandomBytes(t, 32) |
| 60 | + blob := struct { |
| 61 | + bytes []byte |
| 62 | + digest multihash.Multihash |
| 63 | + }{randBytes, testutil.MultihashFromBytes(t, randBytes)} |
| 64 | + |
| 65 | + testCases := []struct { |
| 66 | + name string |
| 67 | + agent ucan.Signer |
| 68 | + resource ucan.Resource |
| 69 | + proof delegation.Delegation |
| 70 | + blobs [][]byte |
| 71 | + caveats blobcaps.RetrieveCaveats |
| 72 | + expectStatus int |
| 73 | + expectHeaders http.Header |
| 74 | + expectBody []byte |
| 75 | + assertError func(ipld.Node) |
| 76 | + }{ |
| 77 | + { |
| 78 | + name: "not found when missing blob", |
| 79 | + agent: alice, |
| 80 | + resource: testutil.Service.DID().String(), |
| 81 | + proof: proof, |
| 82 | + blobs: [][]byte{}, |
| 83 | + caveats: blobcaps.RetrieveCaveats{ |
| 84 | + Blob: blobcaps.Blob{Digest: blob.digest}, |
| 85 | + }, |
| 86 | + expectStatus: http.StatusNotFound, |
| 87 | + expectBody: []byte{}, |
| 88 | + assertError: func(n ipld.Node) { |
| 89 | + x, err := ipld.Rebind[content.NotFoundError](n, content.NotFoundErrorType()) |
| 90 | + require.NoError(t, err) |
| 91 | + require.Equal(t, content.NotFoundErrorName, x.Name()) |
| 92 | + }, |
| 93 | + }, |
| 94 | + { |
| 95 | + name: "bad proof", |
| 96 | + agent: alice, |
| 97 | + resource: testutil.Service.DID().String(), |
| 98 | + proof: testutil.Must( |
| 99 | + delegation.Delegate( |
| 100 | + testutil.Bob, |
| 101 | + alice, |
| 102 | + []ucan.Capability[ucan.NoCaveats]{ |
| 103 | + ucan.NewCapability( |
| 104 | + blobcaps.RetrieveAbility, |
| 105 | + testutil.Service.DID().String(), |
| 106 | + ucan.NoCaveats{}, |
| 107 | + ), |
| 108 | + }, |
| 109 | + ), |
| 110 | + )(t), |
| 111 | + blobs: [][]byte{blob.bytes}, |
| 112 | + caveats: blobcaps.RetrieveCaveats{ |
| 113 | + Blob: blobcaps.Blob{Digest: blob.digest}, |
| 114 | + }, |
| 115 | + expectStatus: http.StatusOK, |
| 116 | + expectBody: []byte{}, |
| 117 | + assertError: func(n ipld.Node) { |
| 118 | + x, err := ipld.Rebind[fdm.FailureModel](n, fdm.FailureType()) |
| 119 | + require.NoError(t, err) |
| 120 | + require.Equal(t, "Unauthorized", *x.Name) |
| 121 | + }, |
| 122 | + }, |
| 123 | + { |
| 124 | + name: "wrong resource", |
| 125 | + agent: alice, |
| 126 | + resource: testutil.Mallory.DID().String(), |
| 127 | + proof: testutil.Must( |
| 128 | + delegation.Delegate( |
| 129 | + testutil.Mallory, |
| 130 | + alice, |
| 131 | + []ucan.Capability[ucan.NoCaveats]{ |
| 132 | + ucan.NewCapability( |
| 133 | + blobcaps.RetrieveAbility, |
| 134 | + testutil.Mallory.DID().String(), |
| 135 | + ucan.NoCaveats{}, |
| 136 | + ), |
| 137 | + }, |
| 138 | + ), |
| 139 | + )(t), |
| 140 | + blobs: [][]byte{blob.bytes}, |
| 141 | + caveats: blobcaps.RetrieveCaveats{ |
| 142 | + Blob: blobcaps.Blob{Digest: blob.digest}, |
| 143 | + }, |
| 144 | + expectStatus: http.StatusOK, |
| 145 | + expectBody: []byte{}, |
| 146 | + assertError: func(n ipld.Node) { |
| 147 | + x, err := ipld.Rebind[fdm.FailureModel](n, fdm.FailureType()) |
| 148 | + require.NoError(t, err) |
| 149 | + require.Equal(t, InvalidResourceErrorName, *x.Name) |
| 150 | + }, |
| 151 | + }, |
| 152 | + } |
| 153 | + |
| 154 | + for _, tc := range testCases { |
| 155 | + t.Run(tc.name, func(t *testing.T) { |
| 156 | + blobs := blobstore.NewMapBlobstore() |
| 157 | + for _, b := range tc.blobs { |
| 158 | + digest, err := multihash.Sum(b, multihash.SHA2_256, -1) |
| 159 | + require.NoError(t, err) |
| 160 | + err = blobs.Put(t.Context(), digest, uint64(len(b)), bytes.NewReader(b)) |
| 161 | + require.NoError(t, err) |
| 162 | + } |
| 163 | + |
| 164 | + service := blobRetrievalService{testutil.Service, blobs} |
| 165 | + server, err := retrieval.NewServer(testutil.Service, BlobRetrieve(&service)) |
| 166 | + require.NoError(t, err) |
| 167 | + |
| 168 | + inv, err := invocation.Invoke( |
| 169 | + tc.agent, |
| 170 | + testutil.Service, |
| 171 | + blobcaps.Retrieve.New(tc.resource, tc.caveats), |
| 172 | + delegation.WithProof(delegation.FromDelegation(tc.proof)), |
| 173 | + ) |
| 174 | + require.NoError(t, err) |
| 175 | + |
| 176 | + codecOpt := client.WithOutboundCodec(headercar.NewOutboundCodec()) |
| 177 | + conn, err := client.NewConnection(testutil.Service, server, codecOpt) |
| 178 | + require.NoError(t, err) |
| 179 | + |
| 180 | + xres, hres, err := rclient.Execute(t.Context(), inv, conn) |
| 181 | + require.NoError(t, err) |
| 182 | + |
| 183 | + require.Equal(t, tc.expectStatus, hres.Status()) |
| 184 | + for k, v := range tc.expectHeaders { |
| 185 | + require.Equal(t, v, hres.Headers().Values(k)) |
| 186 | + } |
| 187 | + require.Equal(t, tc.expectBody, testutil.Must(io.ReadAll(hres.Body()))(t)) |
| 188 | + |
| 189 | + rcptLink, ok := xres.Get(inv.Link()) |
| 190 | + require.True(t, ok) |
| 191 | + |
| 192 | + rcpt, err := receipt.NewAnyReceiptReader().Read(rcptLink, xres.Blocks()) |
| 193 | + require.NoError(t, err) |
| 194 | + |
| 195 | + _, x := result.Unwrap(rcpt.Out()) |
| 196 | + if tc.assertError != nil { |
| 197 | + tc.assertError(x) |
| 198 | + } else { |
| 199 | + require.Nil(t, x) |
| 200 | + } |
| 201 | + }) |
| 202 | + } |
| 203 | +} |
0 commit comments