mirror of
https://github.com/langbot-app/LangBot.git
synced 2026-08-09 20:50:58 +00:00
e1ac5e0fc8
* Document multi-tenant workspace architecture * Add OSS and commercial workspace boundaries * docs: redesign multi-tenant workspace architecture * feat(tenancy): implement workspace isolation * docs(tenancy): record verification evidence * docs(tenancy): revise single-instance SaaS topology * docs(tenancy): refine architecture options * docs: finalize cloud v2 multi-tenant decisions * feat(tenancy): establish cloud isolation foundations * feat(tenancy): harden shared cloud runtime boundaries * docs(tenancy): record final isolation verification * fix(tenancy): close isolation and permission gaps * docs(tenancy): record final isolation verification * feat(tenancy): connect cloud workspace control plane * fix(build): install git for pinned SDK * docs(cloud): update control plane verification * chore: update multi-tenant SDK pin * fix(cloud): skip legacy model sync during startup * test(cloud): preserve minimal model manager fixtures * fix(cloud): preserve authenticated account context * fix(cloud): reuse authenticated account for user info * feat(cloud): complete Workspace settings navigation * test(web): cover Workspace dropdown menu * feat(web): place workspace controls in sidebar * refactor(web): streamline workspace controls * style(web): format workspace layout test * fix(cloud): surface runtime and workspace plan status * fix(plugin): keep runtime identity stable across restarts * fix(ui): widen and center workspace switcher * fix(ui): hide roles from workspace switcher * fix(ui): align workspace switcher with sidebar entries * feat(workspace): add in-product collaboration and direct Cloud launch * style: format collaboration changes * fix(workspace): bind collaboration APIs to tenant UoW * fix(cloud): preserve Core-owned collaboration state * test(cloud): require Space identity for invite registration * feat(cloud): complete secure invitation experience * style(web): format invitation flows * fix(cloud): recover box runtime without unscoped skill reload * feat(oss): enforce invitation account and owner billing flows * style: format OSS account service * test(oss): cover invitation logout handoff * fix(oss): resolve workspace owner in scoped session * feat(cloud): harden multi-tenant runtime resources * fix(cloud): bound runtime restart storms * fix(cloud): eliminate periodic runtime CPU spikes * fix(cloud): enforce instance capacity ceilings * fix(cloud): scope public login capability discovery * fix(cloud): bound tenant maintenance and monitoring work * fix(runtime): bound tenant resource amplification * fix(deps): pin green multi-tenant plugin SDK * fix(cloud): handle unavailable skill capability * fix(security): require authentication for image file endpoint (H-2) - Changed /api/v1/files/image from AuthType.NONE to USER_TOKEN_OR_API_KEY - Added Permission.RESOURCE_VIEW requirement - Prevents unauthenticated cross-tenant file access via leaked keys - Fixes HIGH severity finding from multi-tenant security review docs: add comprehensive database migration guide - Complete migration steps for OSS → multi-tenant - Backup, execution, verification procedures - Rollback scenarios and recovery plans - Performance tuning recommendations * test: add comprehensive cross-tenant isolation tests Added 7 critical test scenarios for multi-tenant boundaries: - Cross-tenant bot access prevention - Viewer role read-only enforcement - Removed member immediate access revocation - Model provider credential isolation - WebSocket message isolation - Invitation token workspace scoping - Multi-workspace context validation These tests address P0-2 coverage gaps for: - workspaces.py (membership & invitation flows) - user.py (authentication & authorization) - websocket_chat.py (real-time isolation) - plugins.py (resource access control) docs: finalize database migration guide * fix(security): resolve M-1, M-2, M-3 security findings M-1: WebSocket authorization TOCTOU race (FIXED) - Changed _revalidate_websocket_authorization to return RequestContext - Ensures validated context is used immediately without race window - Prevents removed members from sending messages during revalidation gap M-2: Model Manager cache workspace isolation (VERIFIED) - Confirmed _CacheKey already uses 4-tuple: (instance, workspace, generation, resource) - Cache is properly scoped per workspace, no cross-tenant leakage possible - No code change needed, documented as working correctly M-3: Invitation lock workspace scoping (FIXED) - Changed lock key from token_digest to workspace_uuid:token_digest - Prevents DoS where attacker locks token in Workspace A to block Workspace B - Locks now isolated per workspace All MEDIUM severity findings from security review now resolved. * fix(cloud): unblock tenant CI and enforce knowledge quotas * fix(tenancy): scope rerank model sync --------- Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
355 lines
12 KiB
Python
355 lines
12 KiB
Python
"""Unit tests for S3StorageProvider.
|
|
|
|
Tests cover:
|
|
- S3 client initialization with bucket creation
|
|
- CRUD operations (save, load, exists, delete, size)
|
|
- Recursive directory deletion
|
|
- Error handling for various S3 errors
|
|
|
|
Uses moto library to mock AWS S3 service.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import pytest
|
|
from unittest.mock import Mock
|
|
from importlib import import_module
|
|
|
|
|
|
def get_s3storage_module():
|
|
"""Lazy import to avoid circular import issues."""
|
|
return import_module('langbot.pkg.storage.providers.s3storage')
|
|
|
|
|
|
@pytest.fixture
|
|
def mock_app_with_s3_config():
|
|
"""Create mock app with S3 configuration."""
|
|
mock_app = Mock()
|
|
mock_app.instance_config = Mock()
|
|
mock_app.instance_config.data = {
|
|
'storage': {
|
|
's3': {
|
|
'endpoint_url': '',
|
|
'access_key_id': 'testing',
|
|
'secret_access_key': 'testing',
|
|
'region': 'us-east-1',
|
|
'bucket': 'test-langbot-storage',
|
|
}
|
|
}
|
|
}
|
|
mock_app.logger = Mock()
|
|
return mock_app
|
|
|
|
|
|
@pytest.fixture
|
|
def s3_mock():
|
|
"""Set up moto S3 mock context."""
|
|
from moto import mock_aws
|
|
|
|
with mock_aws():
|
|
import boto3
|
|
|
|
# Create bucket for tests that need pre-existing bucket
|
|
s3 = boto3.client('s3', region_name='us-east-1')
|
|
yield s3
|
|
|
|
|
|
class TestS3StorageProviderInit:
|
|
"""Tests for S3StorageProvider initialization."""
|
|
|
|
def test_init_stores_app_reference(self):
|
|
"""Test that __init__ stores the Application reference."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
mock_app = Mock()
|
|
provider = s3storage.S3StorageProvider(mock_app)
|
|
assert provider.ap is mock_app
|
|
|
|
def test_init_s3_client_none(self):
|
|
"""Test that s3_client starts as None."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
mock_app = Mock()
|
|
provider = s3storage.S3StorageProvider(mock_app)
|
|
assert provider.s3_client is None
|
|
assert provider.bucket_name is None
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_shutdown_closes_client_once(self):
|
|
s3storage = get_s3storage_module()
|
|
provider = s3storage.S3StorageProvider(Mock())
|
|
client = Mock()
|
|
provider.s3_client = client
|
|
|
|
await provider.shutdown()
|
|
await provider.shutdown()
|
|
|
|
client.close.assert_called_once_with()
|
|
assert provider.s3_client is None
|
|
|
|
|
|
class TestS3StorageProviderWithMoto:
|
|
"""Tests using moto to mock AWS S3."""
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_initialize_creates_bucket_when_not_exists(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that initialize creates bucket when it doesn't exist."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
assert provider.s3_client is not None
|
|
assert provider.bucket_name == 'test-langbot-storage'
|
|
mock_app_with_s3_config.logger.info.assert_called()
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_initialize_uses_existing_bucket(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that initialize uses existing bucket without creating."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
# Pre-create bucket in mock
|
|
s3_mock.create_bucket(Bucket='test-langbot-storage')
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
assert provider.s3_client is not None
|
|
# Bucket creation log should not be called since bucket exists
|
|
# Note: moto may still call head_bucket successfully
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_save_and_load_bytes(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that save and load work correctly."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save data
|
|
test_data = b'Hello, S3!'
|
|
await provider.save('test/file.txt', test_data)
|
|
|
|
# Load data
|
|
loaded_data = await provider.load('test/file.txt')
|
|
assert loaded_data == test_data
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_bounded_load_rejects_oversized_object(self, mock_app_with_s3_config, s3_mock):
|
|
s3storage = get_s3storage_module()
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
await provider.save('test/oversized.bin', b'12345')
|
|
|
|
with pytest.raises(ValueError, match='4-byte read limit'):
|
|
await provider.load_bounded('test/oversized.bin', max_bytes=4)
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_exists_returns_true_for_existing_object(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that exists returns True for existing object."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save data
|
|
await provider.save('test/file.txt', b'data')
|
|
|
|
# Check existence
|
|
result = await provider.exists('test/file.txt')
|
|
assert result is True
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_exists_returns_false_for_nonexistent_object(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that exists returns False for nonexistent object."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Check existence without saving
|
|
result = await provider.exists('nonexistent/file.txt')
|
|
assert result is False
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_delete_removes_object(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that delete removes object."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save data
|
|
await provider.save('test/file.txt', b'data')
|
|
|
|
# Delete
|
|
await provider.delete('test/file.txt')
|
|
|
|
# Check existence
|
|
result = await provider.exists('test/file.txt')
|
|
assert result is False
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_size_returns_content_length(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that size returns correct content length."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save data
|
|
test_data = b'12345' # 5 bytes
|
|
await provider.save('test/file.txt', test_data)
|
|
|
|
# Get size
|
|
size = await provider.size('test/file.txt')
|
|
assert size == 5
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_delete_dir_recursive_removes_all_objects(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that delete_dir_recursive removes all objects with prefix."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save multiple objects in directory
|
|
await provider.save('testdir/file1.txt', b'data1')
|
|
await provider.save('testdir/file2.txt', b'data2')
|
|
await provider.save('testdir/subdir/file3.txt', b'data3')
|
|
await provider.save('otherdir/file.txt', b'data4')
|
|
|
|
# Delete directory
|
|
await provider.delete_dir_recursive('testdir')
|
|
|
|
# Verify testdir objects are deleted
|
|
assert await provider.exists('testdir/file1.txt') is False
|
|
assert await provider.exists('testdir/file2.txt') is False
|
|
assert await provider.exists('testdir/subdir/file3.txt') is False
|
|
|
|
# Verify other directory is intact
|
|
assert await provider.exists('otherdir/file.txt') is True
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_delete_dir_recursive_handles_trailing_slash(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that delete_dir_recursive handles path without trailing slash."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save object
|
|
await provider.save('mydir/file.txt', b'data')
|
|
|
|
# Delete without trailing slash
|
|
await provider.delete_dir_recursive('mydir')
|
|
|
|
# Verify deleted
|
|
assert await provider.exists('mydir/file.txt') is False
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_delete_dir_recursive_empty_directory(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that delete_dir_recursive handles empty directory."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Delete non-existent directory should not raise
|
|
await provider.delete_dir_recursive('emptydir')
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_multiple_saves_and_loads(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test multiple save/load operations."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save multiple files
|
|
files = {
|
|
'file1.txt': b'content1',
|
|
'file2.txt': b'content2',
|
|
'dir/file3.txt': b'content3',
|
|
}
|
|
|
|
for key, data in files.items():
|
|
await provider.save(key, data)
|
|
|
|
# Load and verify all
|
|
for key, expected in files.items():
|
|
loaded = await provider.load(key)
|
|
assert loaded == expected
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_overwrite_existing_object(self, mock_app_with_s3_config, s3_mock):
|
|
"""Test that save overwrites existing object."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app_with_s3_config)
|
|
await provider.initialize()
|
|
|
|
# Save initial data
|
|
await provider.save('file.txt', b'initial')
|
|
|
|
# Overwrite
|
|
await provider.save('file.txt', b'overwritten')
|
|
|
|
# Verify new content
|
|
loaded = await provider.load('file.txt')
|
|
assert loaded == b'overwritten'
|
|
|
|
|
|
class TestS3StorageProviderErrorHandling:
|
|
"""Tests for error handling scenarios."""
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_load_nonexistent_raises_error(self, s3_mock):
|
|
"""Test that load raises error for nonexistent object."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
mock_app = Mock()
|
|
mock_app.instance_config = Mock()
|
|
mock_app.instance_config.data = {
|
|
'storage': {
|
|
's3': {
|
|
'bucket': 'test-bucket',
|
|
'access_key_id': 'testing',
|
|
'secret_access_key': 'testing',
|
|
'region': 'us-east-1',
|
|
}
|
|
}
|
|
}
|
|
mock_app.logger = Mock()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app)
|
|
await provider.initialize()
|
|
|
|
with pytest.raises(Exception):
|
|
await provider.load('nonexistent.txt')
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_size_nonexistent_raises_error(self, s3_mock):
|
|
"""Test that size raises error for nonexistent object."""
|
|
s3storage = get_s3storage_module()
|
|
|
|
mock_app = Mock()
|
|
mock_app.instance_config = Mock()
|
|
mock_app.instance_config.data = {
|
|
'storage': {
|
|
's3': {
|
|
'bucket': 'test-bucket',
|
|
'access_key_id': 'testing',
|
|
'secret_access_key': 'testing',
|
|
'region': 'us-east-1',
|
|
}
|
|
}
|
|
}
|
|
mock_app.logger = Mock()
|
|
|
|
provider = s3storage.S3StorageProvider(mock_app)
|
|
await provider.initialize()
|
|
|
|
with pytest.raises(Exception):
|
|
await provider.size('nonexistent.txt')
|