Function TestEnvRequest

internal/security/handler_session_test.go:15–44

(t *testing.T)

)

func TestEnvRequest(t *testing.T) {
	session := &sessionHandler{
		config: config.SecurityConfig{
			Env: config.SecurityEnvConfig{
				Allow: []string{"ALLOW_ME"},
				Deny:  []string{"DENY_ME"},
			},
		},
		backend: &dummyBackend{},
		sshConnection: &sshConnectionHandler{
			lock: &sync.Mutex{},
		},
		logger: log.NewTestLogger(t),
	}

	session.config.Env.Mode = config.ExecutionPolicyEnable
	assert.NoError(t, session.OnEnvRequest(1, "ALLOW_ME", "bar"))
	assert.NoError(t, session.OnEnvRequest(2, "OTHER", "bar"))
	assert.Error(t, session.OnEnvRequest(3, "DENY_ME", "bar"))

	session.config.Env.Mode = config.ExecutionPolicyFilter
	assert.NoError(t, session.OnEnvRequest(4, "ALLOW_ME", "bar"))
	assert.Error(t, session.OnEnvRequest(5, "OTHER", "bar"))
	assert.Error(t, session.OnEnvRequest(6, "DENY_ME", "bar"))

	session.config.Env.Mode = config.ExecutionPolicyDisable
	assert.Error(t, session.OnEnvRequest(7, "ALLOW_ME", "bar"))
	assert.Error(t, session.OnEnvRequest(8, "OTHER", "bar"))
	assert.Error(t, session.OnEnvRequest(9, "DENY_ME", "bar"))
}

func TestPTYRequest(t *testing.T) {
	session := &sessionHandler{