rewrite for eet 2.0 api version v4

2026-10-13 23:28:55 +02:00
parent c926a173ba
commit 3f8e4796b3
55 changed files with 3698 additions and 1611 deletions
@@ -0,0 +1,150 @@
+#include "eetca.h"
+
+#include <QFile>
+#include <QProcess>
+#include <QRegularExpression>
+#include <QSslCertificate>
+#include <QSslKey>
+#include <QSslServer>
+#include <QTemporaryDir>
+#include <QtTest>
+
+namespace
+{
+class MockCaServer : public QSslServer
+{
+public:
+    explicit MockCaServer(const QByteArray &pkcs12)
+        : m_pkcs12(pkcs12)
+    {
+        connect(this, &QSslServer::pendingConnectionAvailable, this, [this] {
+            QSslSocket *socket = qobject_cast<QSslSocket *>(nextPendingConnection());
+            if (socket == nullptr)
+            {
+                return;
+            }
+            connect(socket, &QSslSocket::readyRead, this, [this, socket] {
+                const QByteArray request = socket->readAll();
+                const QByteArray firstLine = request.left(request.indexOf("\r\n"));
+                const QList<QByteArray> parts = firstLine.split(' ');
+                if (parts.size() < 2 || !request.contains("Authorization: Bearer "))
+                {
+                    socket->disconnectFromHost();
+                    return;
+                }
+                QByteArray body;
+                int status = 200;
+                if (parts.at(1) == "/api/request/renew")
+                {
+                    body = "{\"reqId\":\"123e4567-e89b-42d3-a456-426614174000\"}";
+                    status = 201;
+                }
+                else if (parts.at(1) == "/api/request/123e4567-e89b-42d3-a456-426614174000/status")
+                {
+                    body = "{\"reqId\":\"123e4567-e89b-42d3-a456-426614174000\","
+                           "\"state\":\"ISSUED\"}";
+                }
+                else if (parts.at(1) == "/api/request/not-finished")
+                {
+                    body = "{\"count\":1,\"data\":[\"123e4567-e89b-42d3-a456-426614174000\"]}";
+                }
+                else if (parts.at(1) == "/api/request/123e4567-e89b-42d3-a456-426614174000/claim-download")
+                {
+                    body = "{\"pkcs12\":\"" + m_pkcs12.toBase64() +
+                           "\",\"password\":\"ABcd1234\",\"certificate\":{"
+                           "\"sn\":\"12345\",\"validFrom\":\"2026-01-01T00:00:00+00:00\","
+                           "\"validTo\":\"2027-01-01T00:00:00+00:00\",\"state\":\"VALID\"}}";
+                }
+                else if (parts.at(1) == "/api/request/123e4567-e89b-42d3-a456-426614174000/ack-download")
+                {
+                    status = 204;
+                }
+                else
+                {
+                    status = 404;
+                    body = "{\"code\":4,\"message\":\"Unknown object.\"}";
+                }
+                const QByteArray response =
+                    "HTTP/1.1 " + QByteArray::number(status) + " OK\r\n"
+                    "Content-Type: application/json\r\nContent-Length: " +
+                    QByteArray::number(body.size()) + "\r\nConnection: close\r\n\r\n" + body;
+                socket->write(response);
+                socket->disconnectFromHost();
+            });
+        });
+    }
+
+private:
+    QByteArray m_pkcs12;
+};
+}
+
+class EetCaIntegrationTest : public QObject
+{
+    Q_OBJECT
+
+private slots:
+    void runsCertificateWorkflow();
+};
+
+void EetCaIntegrationTest::runsCertificateWorkflow()
+{
+    QTemporaryDir directory;
+    QVERIFY(directory.isValid());
+    const QString keyPath = directory.filePath(QStringLiteral("key.pem"));
+    const QString certPath = directory.filePath(QStringLiteral("certificate.pem"));
+    const QString p12Path = directory.filePath(QStringLiteral("certificate.p12"));
+    auto runOpenSsl = [](const QStringList &arguments) {
+        QProcess process;
+        process.start(QStringLiteral("openssl"), arguments);
+        QVERIFY2(process.waitForFinished(30000), qPrintable(process.errorString()));
+        QVERIFY2(process.exitStatus() == QProcess::NormalExit && process.exitCode() == 0,
+                 process.readAllStandardError().constData());
+    };
+    runOpenSsl({QStringLiteral("req"), QStringLiteral("-x509"), QStringLiteral("-newkey"),
+                QStringLiteral("rsa:2048"), QStringLiteral("-nodes"), QStringLiteral("-subj"),
+                QStringLiteral("/CN=localhost"), QStringLiteral("-keyout"), keyPath,
+                QStringLiteral("-out"), certPath, QStringLiteral("-days"), QStringLiteral("1")});
+    runOpenSsl({QStringLiteral("pkcs12"), QStringLiteral("-export"), QStringLiteral("-out"),
+                p12Path, QStringLiteral("-inkey"), keyPath, QStringLiteral("-in"), certPath,
+                QStringLiteral("-passout"), QStringLiteral("pass:test")});
+    QFile p12File(p12Path);
+    QVERIFY(p12File.open(QIODevice::ReadOnly));
+    const QByteArray p12 = p12File.readAll();
+
+    MockCaServer server(p12);
+    QSslConfiguration ssl = QSslConfiguration::defaultConfiguration();
+    QFile keyFile(keyPath);
+    QFile certificateFile(certPath);
+    QVERIFY(keyFile.open(QIODevice::ReadOnly));
+    QVERIFY(certificateFile.open(QIODevice::ReadOnly));
+    ssl.setPrivateKey(QSslKey(keyFile.readAll(), QSsl::Rsa, QSsl::Pem));
+    ssl.setLocalCertificate(QSslCertificate(certificateFile.readAll(), QSsl::Pem));
+    server.setSslConfiguration(ssl);
+    QVERIFY(server.listen(QHostAddress::LocalHost));
+
+    QSslConfiguration clientSsl = QSslConfiguration::defaultConfiguration();
+    clientSsl.setCaCertificates({ssl.localCertificate()});
+    EetCaClient client({
+        QUrl(QStringLiteral("https://localhost:%1/api").arg(server.serverPort())),
+        p12Path, QByteArrayLiteral("test"), 5000, clientSsl
+    });
+    QString error;
+    QUuid requestId;
+    QVERIFY2(client.requestRenewal(&requestId, &error), qPrintable(error));
+    QCOMPARE(requestId, QUuid(QStringLiteral("123e4567-e89b-42d3-a456-426614174000")));
+    EetCaRequestStatus status;
+    QVERIFY2(client.requestStatus(requestId, &status, &error), qPrintable(error));
+    QCOMPARE(status.state, QStringLiteral("ISSUED"));
+    QList<QUuid> unfinished;
+    QVERIFY2(client.listUnfinished(&unfinished, &error), qPrintable(error));
+    QCOMPARE(unfinished, QList<QUuid>{requestId});
+    EetCaPkcs12 package;
+    QVERIFY2(client.claimDownload(requestId, &package, &error), qPrintable(error));
+    QCOMPARE(package.pkcs12, p12);
+    QCOMPARE(package.password, QByteArrayLiteral("ABcd1234"));
+    QVERIFY2(client.acknowledgeDownload(requestId, &error), qPrintable(error));
+}
+
+QTEST_MAIN(EetCaIntegrationTest)
+#include "eetca_integration_test.moc"