Pulse/pkg/pbs/client_security_test.go
2026-03-18 16:06:30 +00:00

36 lines
903 B
Go

package pbs
import (
"context"
"net/http"
"net/http/httptest"
"strings"
"testing"
)
func TestGetVersionRejectsOversizedErrorBody(t *testing.T) {
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
if r.URL.Path != "/api2/json/version" {
t.Fatalf("unexpected path: %s", r.URL.Path)
}
http.Error(w, strings.Repeat("x", int(maxResponseBodyBytes)+1), http.StatusInternalServerError)
}))
defer server.Close()
client, err := NewClient(ClientConfig{
Host: server.URL,
TokenName: "root@pbs!pulse-token",
TokenValue: "secret",
})
if err != nil {
t.Fatalf("NewClient() error = %v", err)
}
_, err = client.GetVersion(context.Background())
if err == nil {
t.Fatal("expected oversized body error, got nil")
}
if !strings.Contains(err.Error(), "response body exceeds") {
t.Fatalf("expected size-limit error, got: %v", err)
}
}