Current File : /home/opti/workflow/node_modules/aws-sdk/test/signers/s3.spec.coffee
AWS = require('../helpers').AWS
describe 'AWS.Signers.S3', ->
# these can be overriden in tests
method = null
path = null
headers = null
body = null
date = null
virtualHostedBucket = null
accessKeyId = null
secretAccessKey = null
sessionToken = null
# reset the overriden variable before each test
beforeEach ->
method = 'POST'
path = '/'
virtualHostedBucket = null
date = new Date(0)
headers = {}
body = null
accessKeyId = 'akid'
secretAccessKey = 'secret'
sessionToken = null
buildRequest = () ->
req = new AWS.HttpRequest('https://s3.amazonaws.com')
req.method = method
req.path = path
req.headers = headers
req.body = body
req.virtualHostedBucket = virtualHostedBucket
req
credentials = () ->
creds = {}
creds.accessKeyId = accessKeyId
creds.secretAccessKey = secretAccessKey
creds.sessionToken = sessionToken if (sessionToken)
creds
addAuth = (req) ->
signer = new AWS.Signers.S3(req || buildRequest())
signer.addAuthorization(credentials(), date)
signer.request
stringToSign = (req) ->
signer = new AWS.Signers.S3(req || buildRequest())
signer.stringToSign()
describe 'addAuthorization', ->
it 'sets the date header when not present', ->
req = buildRequest()
addAuth(req)
expect(req.headers['X-Amz-Date']).toEqual(AWS.util.date.rfc822(date))
it 'overwrites Date if present', ->
req = buildRequest()
req.headers['X-Amz-Date'] = 'date-string'
addAuth(req)
expect(req.headers['X-Amz-Date']).toEqual(AWS.util.date.rfc822(date))
it 'omits the security token header when session token is blank', ->
sessionToken = null
req = addAuth()
expect(req.headers['x-amz-security-token']).toEqual(undefined)
it 'adds a security token header when session token available', ->
sessionToken = 'session'
req = addAuth()
expect(req.headers['x-amz-security-token']).toEqual('session')
it 'adds an Authorization header which contains akid and signature', ->
creds = { accessKeyId: 'AKID', secretAccessKey: 'secret' }
req = buildRequest()
signer = new AWS.Signers.S3(req)
spyOn(signer, 'stringToSign')
signer.stringToSign.andReturn('string-to-sign')
signer.addAuthorization(creds, date)
expect(req.headers['Authorization']).toEqual('AWS AKID:Gg5WLabTOvH0WMd15wv7lWe4zK0=')
it 'properly signs special characters', ->
creds = { accessKeyId: 'AKID', secretAccessKey: 'secret' }
req = buildRequest()
signer = new AWS.Signers.S3(req)
spyOn(signer, 'stringToSign')
signer.stringToSign.andReturn('!@#$%^&*();\':"{}[],./?`~')
signer.addAuthorization(creds, date)
expect(req.headers['Authorization']).toEqual('AWS AKID:2E04i7QCa0uZTYtxue9dEqto3dg=')
describe 'stringToSign', ->
beforeEach ->
headers['X-Amz-Date'] = 'DATE-STRING'
it 'builds a basic string to sign', ->
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/
""")
it 'includes content md5 and content type when present', ->
headers['Content-Type'] = 'CONTENT-TYPE'
headers['Content-MD5'] = 'CONTENT-MD5'
expect(stringToSign()).toEqual("""
POST
CONTENT-MD5
CONTENT-TYPE
x-amz-date:DATE-STRING
/
""")
it 'includes the http method, whatever it is', ->
method = 'VERB'
expect(stringToSign()).toEqual("""
VERB
x-amz-date:DATE-STRING
/
""")
it 'includes any x-amz- style headers, but not others', ->
headers['X-Amz-Abc'] = 'abc'
headers['X-Amz-Xyz'] = 'xyz'
headers['random-header'] = 'random'
expect(stringToSign()).toEqual("""
POST
x-amz-abc:abc
x-amz-date:DATE-STRING
x-amz-xyz:xyz
/
""")
it 'includes x-amz- headers that are lower-cased', ->
headers['x-amz-Abc'] = 'abc'
headers['x-amz-Xyz'] = 'xyz'
headers['random-header'] = 'random'
expect(stringToSign()).toEqual("""
POST
x-amz-abc:abc
x-amz-date:DATE-STRING
x-amz-xyz:xyz
/
""")
it 'sorts headers by their name', ->
headers['x-amz-mno'] = 'mno'
headers['x-amz-Xyz'] = 'xyz'
headers['x-amz-Abc'] = 'abc'
expect(stringToSign()).toEqual("""
POST
x-amz-abc:abc
x-amz-date:DATE-STRING
x-amz-mno:mno
x-amz-xyz:xyz
/
""")
it 'builds a canonical resource from the path', ->
path = '/bucket_name/key'
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/bucket_name/key
""")
it 'appends the bucket to the path when it is part of the hostname', ->
path = '/'
virtualHostedBucket = 'bucket-name'
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/bucket-name/
""")
it 'appends the subresource portion of the path querystring', ->
path = '/?acl'
virtualHostedBucket = 'bucket-name'
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/bucket-name/?acl
""")
it 'includes the sub resource value when present', ->
path = '/bucket_name/key?versionId=123'
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/bucket_name/key?versionId=123
""")
it 'omits non-sub-resource querystring params from the resource string', ->
path = '/?versionId=abc&next-marker=xyz'
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/?versionId=abc
""")
it 'sorts sub resources by name', ->
path = '/?logging&acl&website&torrent=123' # made up example
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/?acl&logging&torrent=123&website
""")
it 'sorts sub resources by name', ->
path = '/?logging&acl&website&torrent=123' # made up example
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/?acl&logging&torrent=123&website
""")
it 'includes the un-decoded query string param for sub resources', ->
path = '/?versionId=a%2Bb' # a+b
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/?versionId=a%2Bb
""")
it 'includes the non-encoded query string get header overrides', ->
path = '/?response-content-type=a%2Bb' # a+b
expect(stringToSign()).toEqual("""
POST
x-amz-date:DATE-STRING
/?response-content-type=a+b
""")
it 'omits the date header when not present', ->
delete headers['X-Amz-Date']
expect(stringToSign()).toEqual("""
POST
/
""")
Mini Shell