rubygems-update 3.4.22 → 3.5.1

data/test/rubygems/test_rubygems.rb

@@ -1,76 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "helper"
-
-class GemTest < Gem::TestCase
-  def test_rubygems_normal_behaviour
-    _ = Gem::Util.popen(*ruby_with_rubygems_in_load_path, "-e", "'require \"rubygems\"'", { :err => [:child, :out] }).strip
-    assert $?.success?
-  end
-
-  def test_operating_system_other_exceptions
-    pend "does not apply to truffleruby" if RUBY_ENGINE == "truffleruby"
-
-    path = util_install_operating_system_rb <<-RUBY
-      intentionally_not_implemented_method
-    RUBY
-
-    output = Gem::Util.popen(*ruby_with_rubygems_and_fake_operating_system_in_load_path(path), "-e", "'require \"rubygems\"'", { :err => [:child, :out] }).strip
-    assert !$?.success?
-    assert_includes output, "undefined local variable or method `intentionally_not_implemented_method'"
-    assert_includes output, "Loading the #{operating_system_rb_at(path)} file caused an error. " \
-    "This file is owned by your OS, not by rubygems upstream. " \
-    "Please find out which OS package this file belongs to and follow the guidelines from your OS to report " \
-    "the problem and ask for help."
-  end
-
-  def test_operating_system_customizing_default_dir
-    pend "does not apply to truffleruby" if RUBY_ENGINE == "truffleruby"
-    pend "loads a custom defaults/jruby file that gets in the middle" if RUBY_ENGINE == "jruby"
-
-    # On a non existing default dir, there should be no gems
-
-    path = util_install_operating_system_rb <<-RUBY
-      module Gem
-        def self.default_dir
-          File.expand_path("foo")
-        end
-      end
-    RUBY
-
-    output = Gem::Util.popen(
-      *ruby_with_rubygems_and_fake_operating_system_in_load_path(path),
-      "-e",
-      "require \"rubygems\"; puts Gem::Specification.stubs.map(&:full_name)",
-      { :err => [:child, :out] }
-    ).strip
-    begin
-      assert_empty output
-    rescue Test::Unit::AssertionFailedError
-      pend "Temporary pending custom default_dir test"
-    end
-  end
-
-  private
-
-  def util_install_operating_system_rb(content)
-    dir_lib = Dir.mktmpdir("test_operating_system_lib", @tempdir)
-    dir_lib_arg = File.join dir_lib, "lib"
-
-    operating_system_rb = operating_system_rb_at(dir_lib_arg)
-
-    FileUtils.mkdir_p File.dirname(operating_system_rb)
-
-    File.open(operating_system_rb, "w") {|f| f.write content }
-
-    dir_lib_arg
-  end
-
-  def operating_system_rb_at(dir)
-    File.join dir, "rubygems", "defaults", "operating_system.rb"
-  end
-
-  def ruby_with_rubygems_and_fake_operating_system_in_load_path(operating_system_path)
-    [Gem.ruby, "-I", operating_system_path, "-I" , $LOAD_PATH.find {|p| p == File.dirname($LOADED_FEATURES.find {|f| f.end_with?("/rubygems.rb") }) }]
-  end
-end

data/test/rubygems/test_webauthn_listener.rb

@@ -1,143 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "helper"
-require "rubygems/gemcutter_utilities/webauthn_listener"
-require "rubygems/gemcutter_utilities"
-
-class WebauthnListenerTest < Gem::TestCase
-  def setup
-    super
-    @server = TCPServer.new 0
-    @port = @server.addr[1].to_s
-  end
-
-  def teardown
-    @thread.kill.join if @thread
-    @server&.close
-    super
-  end
-
-  def test_listener_thread_retreives_otp_code
-    thread = Gem::GemcutterUtilities::WebauthnListener.listener_thread(Gem.host, @server)
-    Gem::MockBrowser.get URI("http://localhost:#{@port}?code=xyz")
-
-    thread.join
-    assert_equal "xyz", thread[:otp]
-  end
-
-  def test_listener_thread_sets_error
-    thread = Gem::GemcutterUtilities::WebauthnListener.listener_thread(Gem.host, @server)
-    Gem::MockBrowser.post URI("http://localhost:#{@port}?code=xyz")
-
-    thread.join
-    assert_equal "Security device verification failed: Invalid HTTP method POST received.", thread[:error].message
-  end
-
-  def test_wait_for_otp_code_get_follows_options
-    wait_for_otp_code
-    assert Gem::MockBrowser.options(URI("http://localhost:#{@port}?code=xyz")).is_a? Net::HTTPNoContent
-    assert Gem::MockBrowser.get(URI("http://localhost:#{@port}?code=xyz")).is_a? Net::HTTPOK
-  end
-
-  def test_wait_for_otp_code_options_request
-    wait_for_otp_code
-    response = Gem::MockBrowser.options URI("http://localhost:#{@port}?code=xyz")
-
-    assert response.is_a? Net::HTTPNoContent
-    assert_equal Gem.host, response["access-control-allow-origin"]
-    assert_equal "POST", response["access-control-allow-methods"]
-    assert_equal "Content-Type, Authorization, x-csrf-token", response["access-control-allow-headers"]
-    assert_equal "close", response["Connection"]
-  end
-
-  def test_wait_for_otp_code_get_request
-    wait_for_otp_code
-    response = Gem::MockBrowser.get URI("http://localhost:#{@port}?code=xyz")
-
-    assert response.is_a? Net::HTTPOK
-    assert_equal "text/plain; charset=utf-8", response["Content-Type"]
-    assert_equal "7", response["Content-Length"]
-    assert_equal Gem.host, response["access-control-allow-origin"]
-    assert_equal "POST", response["access-control-allow-methods"]
-    assert_equal "Content-Type, Authorization, x-csrf-token", response["access-control-allow-headers"]
-    assert_equal "close", response["Connection"]
-    assert_equal "success", response.body
-
-    @thread.join
-    assert_equal "xyz", @thread[:otp]
-  end
-
-  def test_wait_for_otp_code_invalid_post_req_method
-    wait_for_otp_code_expect_error_with_message("Security device verification failed: Invalid HTTP method POST received.")
-    response = Gem::MockBrowser.post URI("http://localhost:#{@port}?code=xyz")
-
-    assert response
-    assert response.is_a? Net::HTTPMethodNotAllowed
-    assert_equal "GET, OPTIONS", response["allow"]
-    assert_equal "close", response["Connection"]
-
-    @thread.join
-    assert_nil @thread[:otp]
-  end
-
-  def test_wait_for_otp_code_incorrect_path
-    wait_for_otp_code_expect_error_with_message("Security device verification failed: Page at /path not found.")
-    response = Gem::MockBrowser.post URI("http://localhost:#{@port}/path?code=xyz")
-
-    assert response.is_a? Net::HTTPNotFound
-    assert_equal "close", response["Connection"]
-
-    @thread.join
-    assert_nil @thread[:otp]
-  end
-
-  def test_wait_for_otp_code_no_params_response
-    wait_for_otp_code_expect_error_with_message("Security device verification failed: Did not receive OTP from https://rubygems.org.")
-    response = Gem::MockBrowser.get URI("http://localhost:#{@port}")
-
-    assert response.is_a? Net::HTTPBadRequest
-    assert_equal "text/plain; charset=utf-8", response["Content-Type"]
-    assert_equal "22", response["Content-Length"]
-    assert_equal "close", response["Connection"]
-    assert_equal "missing code parameter", response.body
-
-    @thread.join
-    assert_nil @thread[:otp]
-  end
-
-  def test_wait_for_otp_code_incorrect_params
-    wait_for_otp_code_expect_error_with_message("Security device verification failed: Did not receive OTP from https://rubygems.org.")
-    response = Gem::MockBrowser.get URI("http://localhost:#{@port}?param=xyz")
-
-    assert response.is_a? Net::HTTPBadRequest
-    assert_equal "text/plain; charset=utf-8", response["Content-Type"]
-    assert_equal "22", response["Content-Length"]
-    assert_equal "close", response["Connection"]
-    assert_equal "missing code parameter", response.body
-
-    @thread.join
-    assert_nil @thread[:otp]
-  end
-
-  private
-
-  def wait_for_otp_code
-    @thread = Thread.new do
-      Thread.current[:otp] = Gem::GemcutterUtilities::WebauthnListener.new(Gem.host).wait_for_otp_code(@server)
-    end
-    @thread.abort_on_exception = true
-    @thread.report_on_exception = false
-  end
-
-  def wait_for_otp_code_expect_error_with_message(message)
-    @thread = Thread.new do
-      error = assert_raise Gem::WebauthnVerificationError do
-        Thread.current[:otp] = Gem::GemcutterUtilities::WebauthnListener.new(Gem.host).wait_for_otp_code(@server)
-      end
-
-      assert_equal message, error.message
-    end
-    @thread.abort_on_exception = true
-    @thread.report_on_exception = false
-  end
-end

data/test/rubygems/test_webauthn_listener_response.rb

@@ -1,93 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "helper"
-require "rubygems/gemcutter_utilities/webauthn_listener/response"
-
-class WebauthnListenerResponseTest < Gem::TestCase
-  def setup
-    super
-    @host = "rubygems.example"
-  end
-
-  def test_ok_response_to_s
-    to_s = Gem::GemcutterUtilities::WebauthnListener::OkResponse.new(@host).to_s
-
-    expected_to_s = <<~RESPONSE
-      HTTP/1.1 200 OK\r
-      connection: close\r
-      access-control-allow-origin: rubygems.example\r
-      access-control-allow-methods: POST\r
-      access-control-allow-headers: Content-Type, Authorization, x-csrf-token\r
-      content-type: text/plain; charset=utf-8\r
-      content-length: 7\r
-      \r
-      success
-    RESPONSE
-
-    assert_equal expected_to_s, to_s
-  end
-
-  def test_no_to_s_response_to_s
-    to_s = Gem::GemcutterUtilities::WebauthnListener::NoContentResponse.new(@host).to_s
-
-    expected_to_s = <<~RESPONSE
-      HTTP/1.1 204 No Content\r
-      connection: close\r
-      access-control-allow-origin: rubygems.example\r
-      access-control-allow-methods: POST\r
-      access-control-allow-headers: Content-Type, Authorization, x-csrf-token\r
-      \r
-    RESPONSE
-
-    assert_equal expected_to_s, to_s
-  end
-
-  def test_method_not_allowed_response_to_s
-    to_s = Gem::GemcutterUtilities::WebauthnListener::MethodNotAllowedResponse.new(@host).to_s
-
-    expected_to_s = <<~RESPONSE
-      HTTP/1.1 405 Method Not Allowed\r
-      connection: close\r
-      access-control-allow-origin: rubygems.example\r
-      access-control-allow-methods: POST\r
-      access-control-allow-headers: Content-Type, Authorization, x-csrf-token\r
-      allow: GET, OPTIONS\r
-      \r
-    RESPONSE
-
-    assert_equal expected_to_s, to_s
-  end
-
-  def test_method_not_found_response_to_s
-    to_s = Gem::GemcutterUtilities::WebauthnListener::NotFoundResponse.new(@host).to_s
-
-    expected_to_s = <<~RESPONSE
-      HTTP/1.1 404 Not Found\r
-      connection: close\r
-      access-control-allow-origin: rubygems.example\r
-      access-control-allow-methods: POST\r
-      access-control-allow-headers: Content-Type, Authorization, x-csrf-token\r
-      \r
-    RESPONSE
-
-    assert_equal expected_to_s, to_s
-  end
-
-  def test_bad_request_response_to_s
-    to_s = Gem::GemcutterUtilities::WebauthnListener::BadRequestResponse.new(@host).to_s
-
-    expected_to_s = <<~RESPONSE
-      HTTP/1.1 400 Bad Request\r
-      connection: close\r
-      access-control-allow-origin: rubygems.example\r
-      access-control-allow-methods: POST\r
-      access-control-allow-headers: Content-Type, Authorization, x-csrf-token\r
-      content-type: text/plain; charset=utf-8\r
-      content-length: 22\r
-      \r
-      missing code parameter
-    RESPONSE
-
-    assert_equal expected_to_s, to_s
-  end
-end

data/test/rubygems/test_webauthn_poller.rb

@@ -1,124 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "helper"
-require "rubygems/gemcutter_utilities/webauthn_poller"
-require "rubygems/gemcutter_utilities"
-
-class WebauthnPollerTest < Gem::TestCase
-  def setup
-    super
-
-    @host = Gem.host
-    @webauthn_url = "#{@host}/api/v1/webauthn_verification/odow34b93t6aPCdY"
-    @fetcher = Gem::FakeFetcher.new
-    Gem::RemoteFetcher.fetcher = @fetcher
-    @credentials = {
-      email: "email@example.com",
-      password: "password",
-    }
-  end
-
-  def test_poll_thread_success
-    @fetcher.data["#{@webauthn_url}/status.json"] = Gem::HTTPResponseFactory.create(
-      body: "{\"status\":\"success\",\"code\":\"Uvh6T57tkWuUnWYo\"}",
-      code: 200,
-      msg: "OK"
-    )
-
-    thread = Gem::GemcutterUtilities::WebauthnPoller.poll_thread({}, @host, @webauthn_url, @credentials)
-    thread.join
-
-    assert_equal thread[:otp], "Uvh6T57tkWuUnWYo"
-  end
-
-  def test_poll_thread_webauthn_verification_error
-    @fetcher.data["#{@webauthn_url}/status.json"] = Gem::HTTPResponseFactory.create(
-      body: "HTTP Basic: Access denied.",
-      code: 401,
-      msg: "Unauthorized"
-    )
-
-    thread = Gem::GemcutterUtilities::WebauthnPoller.poll_thread({}, @host, @webauthn_url, @credentials)
-    thread.join
-
-    assert_equal thread[:error].message, "Security device verification failed: Unauthorized"
-  end
-
-  def test_poll_thread_timeout_error
-    raise_error = ->(*_args) { raise Timeout::Error, "execution expired" }
-    Timeout.stub(:timeout, raise_error) do
-      thread = Gem::GemcutterUtilities::WebauthnPoller.poll_thread({}, @host, @webauthn_url, @credentials)
-      thread.join
-      assert_equal thread[:error].message, "execution expired"
-    end
-  end
-
-  def test_poll_for_otp_success
-    @fetcher.data["#{@webauthn_url}/status.json"] = Gem::HTTPResponseFactory.create(
-      body: "{\"status\":\"success\",\"code\":\"Uvh6T57tkWuUnWYo\"}",
-      code: 200,
-      msg: "OK"
-    )
-
-    otp = Gem::GemcutterUtilities::WebauthnPoller.new({}, @host).poll_for_otp(@webauthn_url, @credentials)
-
-    assert_equal otp, "Uvh6T57tkWuUnWYo"
-  end
-
-  def test_poll_for_otp_pending_sleeps
-    @fetcher.data["#{@webauthn_url}/status.json"] = Gem::HTTPResponseFactory.create(
-      body: "{\"status\":\"pending\",\"message\":\"Security device authentication is still pending.\"}",
-      code: 200,
-      msg: "OK"
-    )
-
-    assert_raise Timeout::Error do
-      Timeout.timeout(0.1) do
-        Gem::GemcutterUtilities::WebauthnPoller.new({}, @host).poll_for_otp(@webauthn_url, @credentials)
-      end
-    end
-  end
-
-  def test_poll_for_otp_not_http_success
-    @fetcher.data["#{@webauthn_url}/status.json"] = Gem::HTTPResponseFactory.create(
-      body: "HTTP Basic: Access denied.",
-      code: 401,
-      msg: "Unauthorized"
-    )
-
-    error = assert_raise Gem::WebauthnVerificationError do
-      Gem::GemcutterUtilities::WebauthnPoller.new({}, @host).poll_for_otp(@webauthn_url, @credentials)
-    end
-
-    assert_equal error.message, "Security device verification failed: Unauthorized"
-  end
-
-  def test_poll_for_otp_invalid_format
-    @fetcher.data["#{@webauthn_url}/status.json"] = Gem::HTTPResponseFactory.create(
-      body: "{}",
-      code: 200,
-      msg: "OK"
-    )
-
-    error = assert_raise Gem::WebauthnVerificationError do
-      Gem::GemcutterUtilities::WebauthnPoller.new({}, @host).poll_for_otp(@webauthn_url, @credentials)
-    end
-
-    assert_equal error.message, "Security device verification failed: Invalid response from server"
-  end
-
-  def test_poll_for_otp_invalid_status
-    @fetcher.data["#{@webauthn_url}/status.json"] = Gem::HTTPResponseFactory.create(
-      body: "{\"status\":\"expired\",\"message\":\"The token in the link you used has either expired or been used already.\"}",
-      code: 200,
-      msg: "OK"
-    )
-
-    error = assert_raise Gem::WebauthnVerificationError do
-      Gem::GemcutterUtilities::WebauthnPoller.new({}, @host).poll_for_otp(@webauthn_url, @credentials)
-    end
-
-    assert_equal error.message,
-      "Security device verification failed: The token in the link you used has either expired or been used already."
-  end
-end