mirror of
https://github.com/langbot-app/LangBot.git
synced 2026-07-21 11:56:09 +00:00
Junyan Qin
95 lines
3.8 KiB
Python
95 lines
3.8 KiB
Python
from __future__ import annotations
|
|
|
|
from types import SimpleNamespace
|
|
from unittest.mock import AsyncMock
|
|
|
|
import pytest
|
|
import quart
|
|
|
|
from langbot.pkg.api.http.controller.groups.extensions import ExtensionsRouterGroup
|
|
from langbot.pkg.workspace.errors import WorkspaceNotFoundError
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_extensions_route_hides_runtime_bound_to_another_workspace():
|
|
account = SimpleNamespace(uuid='account-a', user='owner@example.com')
|
|
connector = SimpleNamespace(
|
|
is_enable_plugin=True,
|
|
require_workspace_context=AsyncMock(side_effect=WorkspaceNotFoundError('Plugin resource not found')),
|
|
list_plugins=AsyncMock(return_value=[]),
|
|
)
|
|
ap = SimpleNamespace(
|
|
user_service=SimpleNamespace(
|
|
get_authenticated_account=AsyncMock(return_value=account),
|
|
),
|
|
workspace_collaboration_service=SimpleNamespace(
|
|
resolve_account_workspace=AsyncMock(
|
|
return_value=SimpleNamespace(
|
|
workspace=SimpleNamespace(uuid='workspace-a'),
|
|
membership=SimpleNamespace(uuid='membership-a', role='owner', projection_revision=0),
|
|
execution=SimpleNamespace(instance_uuid='instance-a', placement_generation=2),
|
|
)
|
|
)
|
|
),
|
|
plugin_connector=connector,
|
|
mcp_service=SimpleNamespace(get_mcp_servers=AsyncMock(return_value=[])),
|
|
skill_service=SimpleNamespace(list_skills=AsyncMock(return_value=[])),
|
|
)
|
|
quart_app = quart.Quart(__name__)
|
|
router = ExtensionsRouterGroup(ap, quart_app)
|
|
await router.initialize()
|
|
|
|
response = await quart_app.test_client().get(
|
|
'/api/v1/extensions',
|
|
headers={'Authorization': 'Bearer token'},
|
|
)
|
|
|
|
assert response.status_code == 404
|
|
connector.list_plugins.assert_not_awaited()
|
|
ap.mcp_service.get_mcp_servers.assert_not_awaited()
|
|
ap.skill_service.list_skills.assert_not_awaited()
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_extensions_route_redacts_plugin_secrets_without_mutating_runtime_data():
|
|
account = SimpleNamespace(uuid='account-a', user='viewer@example.com')
|
|
raw_plugin = {
|
|
'plugin_config': {'apiKey': 'plugin-secret', 'nested': {'token': 'nested-secret'}},
|
|
'debug': {'plugin_debug_key': 'debug-secret'},
|
|
}
|
|
connector = SimpleNamespace(
|
|
is_enable_plugin=True,
|
|
require_workspace_context=AsyncMock(),
|
|
list_plugins=AsyncMock(return_value=[raw_plugin]),
|
|
)
|
|
ap = SimpleNamespace(
|
|
user_service=SimpleNamespace(get_authenticated_account=AsyncMock(return_value=account)),
|
|
workspace_collaboration_service=SimpleNamespace(
|
|
resolve_account_workspace=AsyncMock(
|
|
return_value=SimpleNamespace(
|
|
workspace=SimpleNamespace(uuid='workspace-a'),
|
|
membership=SimpleNamespace(uuid='membership-a', role='viewer', projection_revision=0),
|
|
execution=SimpleNamespace(instance_uuid='instance-a', placement_generation=2),
|
|
)
|
|
)
|
|
),
|
|
plugin_connector=connector,
|
|
mcp_service=SimpleNamespace(get_mcp_servers=AsyncMock(return_value=[])),
|
|
skill_service=SimpleNamespace(list_skills=AsyncMock(return_value=[])),
|
|
)
|
|
quart_app = quart.Quart(__name__)
|
|
router = ExtensionsRouterGroup(ap, quart_app)
|
|
await router.initialize()
|
|
|
|
response = await quart_app.test_client().get(
|
|
'/api/v1/extensions',
|
|
headers={'Authorization': 'Bearer token', 'X-Workspace-Id': 'workspace-a'},
|
|
)
|
|
|
|
assert response.status_code == 200
|
|
plugin = (await response.get_json())['data']['extensions'][0]['plugin']
|
|
assert plugin['plugin_config']['apiKey'] == '***'
|
|
assert plugin['plugin_config']['nested']['token'] == '***'
|
|
assert plugin['debug']['plugin_debug_key'] == '***'
|
|
assert raw_plugin['plugin_config']['apiKey'] == 'plugin-secret'
|