aerie/knotserver/testdata/l2/ at main · solpbc.org/aerie · Tangled

solpbc.org / aerie

22

cloudflare-native port of the tangled knot server

22

aerie / knotserver / testdata / l2 /

at main 3 files

Jer Miller knotserver: fail closed on unknown routes 12d ago

info_refs_upload_pack.txt

knotserver: fail closed on unknown routes Unknown single-segment paths were entering the DID/handle resolver through the bare /{did} route, so scanner probes such as /wp-login.php could pay identity lookup work and return 500. Mount only the concrete git smart-HTTP route shapes under the resolver so unsupported paths use the router's fast 404 instead. Pin scanner-path regressions and keep the existing git discovery fixture stable across local Git agent string lengths. Patch category: upstreamable-core Signed-off-by: Jer Miller <jeremie.miller@gmail.com>

1 week ago

reject_push.txt

knotserver: add HTTPS push test surface + 23-handler parity matrix Adds handler-level tests for the new HTTPS push path (all 15 L2e cases including auth/RBAC denial, flag-off rejection, phantom-emission guard, fire-and-forget post-receive semantics, edge cases), pkt-line parser unit tests, the 25-XRPC-binding parity matrix to catch silent drift in inherited handler shapes, and a boundary lint test asserting Router() does not mount /hooks/post-receive externally. No live git push, no spun-up binary -- all tests use httptest and a fake git on PATH for deterministic receive-pack output. Patch category: upstreamable-core Signed-off-by: Jer Miller <jeremie.miller@gmail.com>

1 month ago

reject_push_owner.txt

knotserver: add HTTPS push test surface + 23-handler parity matrix Adds handler-level tests for the new HTTPS push path (all 15 L2e cases including auth/RBAC denial, flag-off rejection, phantom-emission guard, fire-and-forget post-receive semantics, edge cases), pkt-line parser unit tests, the 25-XRPC-binding parity matrix to catch silent drift in inherited handler shapes, and a boundary lint test asserting Router() does not mount /hooks/post-receive externally. No live git push, no spun-up binary -- all tests use httptest and a fake git on PATH for deterministic receive-pack output. Patch category: upstreamable-core Signed-off-by: Jer Miller <jeremie.miller@gmail.com>

1 month ago