mirror of
https://gitea.com/gitea/tea.git
synced 2026-10-26 19:11:25 +01:00
bircni
88b91faa54
- `internal/auth`: credentials in the OS keyring or a private file, OAuth login with token refresh, SSH HTTP-signature signers (key files with passphrase prompt, ssh-agent keys and certificates), and the Git credential helper protocol. - `internal/git`: cancellable Git subprocesses, repository and remote discovery (tracked remote via `branch.<name>.remote`), PR checkout by full ref, AGit push, branch cleanup. Nothing imports these packages yet. Reviewed-on: https://gitea.com/gitea/tea/pulls/1123 Reviewed-by: TheFox0x7 <95654+thefox0x7@noreply.gitea.com>
54 lines
1.4 KiB
Go
54 lines
1.4 KiB
Go
// Copyright 2026 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
//go:build !windows
|
|
|
|
package auth
|
|
|
|
import (
|
|
"crypto/ed25519"
|
|
"crypto/rand"
|
|
"net"
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
"golang.org/x/crypto/ssh/agent"
|
|
)
|
|
|
|
func TestAgentConnectionClosesWhenNoKeyMatches(t *testing.T) {
|
|
// t.TempDir can exceed the length limit of Unix socket paths.
|
|
dir, err := os.MkdirTemp("", "tea-agent")
|
|
require.NoError(t, err)
|
|
t.Cleanup(func() { _ = os.RemoveAll(dir) })
|
|
socket := filepath.Join(dir, "agent.sock")
|
|
listener, err := net.Listen("unix", socket)
|
|
require.NoError(t, err)
|
|
defer listener.Close()
|
|
_, key, err := ed25519.GenerateKey(rand.Reader)
|
|
require.NoError(t, err)
|
|
keyring := agent.NewKeyring()
|
|
require.NoError(t, keyring.Add(agent.AddedKey{PrivateKey: key}))
|
|
closed := make(chan struct{})
|
|
go func() {
|
|
defer close(closed)
|
|
conn, err := listener.Accept()
|
|
if err != nil {
|
|
return
|
|
}
|
|
defer conn.Close()
|
|
// ServeAgent returns once the client closes its connection.
|
|
_ = agent.ServeAgent(keyring, conn)
|
|
}()
|
|
t.Setenv("SSH_AUTH_SOCK", socket)
|
|
_, err = newHTTPSign("", false, "SHA256:missing", nil)
|
|
require.ErrorContains(t, err, "no public key found in ssh-agent")
|
|
select {
|
|
case <-closed:
|
|
case <-time.After(5 * time.Second):
|
|
t.Fatal("ssh-agent connection stayed open after the lookup failed")
|
|
}
|
|
}
|