mirror of
https://github.com/lukaszraczylo/graphql-monitoring-proxy.git
synced 2026-10-11 05:27:47 +00:00
lukaszraczylo
5dec954632
The read-error path in loadBannedUsers returned while it held the shared file lock. One transient read failure blocked every later ban write for the process lifetime. The reload also applied a stale snapshot over a ban that landed between the read and the replace. Acquire bannedUsersMu first, then the file lock, for the whole read and replace. Release both locks with defer on every path. A deterministic test proves the lock is released after a read error.
301 lines
8.5 KiB
Go
301 lines
8.5 KiB
Go
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"sync"
|
|
"testing"
|
|
|
|
"github.com/gofrs/flock"
|
|
libpack_logger "github.com/lukaszraczylo/graphql-monitoring-proxy/logging"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func (suite *Tests) Test_PeriodicallyReloadBannedUsers() {
|
|
// Setup
|
|
cfg = &config{}
|
|
parseConfig()
|
|
cfg.Logger = libpack_logger.New()
|
|
cfg.Api.BannedUsersFile = filepath.Join(os.TempDir(), "banned_users_reload_test.json")
|
|
|
|
// Initial empty banned users
|
|
replaceBannedUsers(map[string]string{})
|
|
|
|
// Create a test version of periodicallyReloadBannedUsers that executes once and signals completion
|
|
done := make(chan bool)
|
|
testPeriodicallyReloadBannedUsers := func() {
|
|
// Just call loadBannedUsers once
|
|
loadBannedUsers()
|
|
done <- true
|
|
}
|
|
|
|
// Run the test with initial empty banned users file
|
|
suite.Run("reload with empty file", func() {
|
|
// Clear existing file if any
|
|
_ = os.Remove(cfg.Api.BannedUsersFile)
|
|
_ = os.Remove(fmt.Sprintf("%s.lock", cfg.Api.BannedUsersFile))
|
|
|
|
// Ensure banned users map is empty
|
|
replaceBannedUsers(map[string]string{})
|
|
|
|
// Execute reloader once
|
|
go testPeriodicallyReloadBannedUsers()
|
|
<-done
|
|
|
|
// Verify file was created
|
|
_, err := os.Stat(cfg.Api.BannedUsersFile)
|
|
assert.NoError(suite.T(), err)
|
|
|
|
// Safely check the map
|
|
mapSize := len(snapshotBannedUsers())
|
|
|
|
// Verify map is still empty
|
|
assert.Equal(suite.T(), 0, mapSize)
|
|
})
|
|
|
|
// Run the test with a populated banned users file
|
|
suite.Run("reload with populated file", func() {
|
|
// Create file with test data
|
|
testData := map[string]string{
|
|
"test-user-reload-1": "reason reload 1",
|
|
"test-user-reload-2": "reason reload 2",
|
|
}
|
|
data, _ := json.Marshal(testData)
|
|
err := os.WriteFile(cfg.Api.BannedUsersFile, data, 0o644)
|
|
assert.NoError(suite.T(), err)
|
|
|
|
// Clear the banned users map
|
|
replaceBannedUsers(map[string]string{})
|
|
|
|
// Execute reloader once
|
|
go testPeriodicallyReloadBannedUsers()
|
|
<-done
|
|
|
|
// Safely check the map
|
|
snap := snapshotBannedUsers()
|
|
mapSize := len(snap)
|
|
value1 := snap["test-user-reload-1"]
|
|
value2 := snap["test-user-reload-2"]
|
|
|
|
// Verify banned users map was loaded
|
|
assert.Equal(suite.T(), 2, mapSize)
|
|
assert.Equal(suite.T(), "reason reload 1", value1)
|
|
assert.Equal(suite.T(), "reason reload 2", value2)
|
|
})
|
|
|
|
// Test updating banned users file while reloader is running
|
|
suite.Run("reload with updated file", func() {
|
|
// Start with initial data
|
|
initialData := map[string]string{
|
|
"test-user-initial": "initial reason",
|
|
}
|
|
data, _ := json.Marshal(initialData)
|
|
err := os.WriteFile(cfg.Api.BannedUsersFile, data, 0o644)
|
|
assert.NoError(suite.T(), err)
|
|
|
|
// Clear the banned users map
|
|
replaceBannedUsers(map[string]string{})
|
|
|
|
// Execute reloader once to load initial data
|
|
go testPeriodicallyReloadBannedUsers()
|
|
<-done
|
|
|
|
// Safely check the map
|
|
snap := snapshotBannedUsers()
|
|
mapSize := len(snap)
|
|
initialValue := snap["test-user-initial"]
|
|
|
|
// Verify initial data was loaded
|
|
assert.Equal(suite.T(), 1, mapSize)
|
|
assert.Equal(suite.T(), "initial reason", initialValue)
|
|
|
|
// Update the file with new data
|
|
updatedData := map[string]string{
|
|
"test-user-updated-1": "updated reason 1",
|
|
"test-user-updated-2": "updated reason 2",
|
|
}
|
|
data, _ = json.Marshal(updatedData)
|
|
err = os.WriteFile(cfg.Api.BannedUsersFile, data, 0o644)
|
|
assert.NoError(suite.T(), err)
|
|
|
|
// Execute reloader again to load updated data
|
|
go testPeriodicallyReloadBannedUsers()
|
|
<-done
|
|
|
|
// Safely check the map
|
|
snap = snapshotBannedUsers()
|
|
mapSize = len(snap)
|
|
value1 := snap["test-user-updated-1"]
|
|
value2 := snap["test-user-updated-2"]
|
|
_, exists := snap["test-user-initial"]
|
|
|
|
// Verify updated data was loaded
|
|
assert.Equal(suite.T(), 2, mapSize)
|
|
assert.Equal(suite.T(), "updated reason 1", value1)
|
|
assert.Equal(suite.T(), "updated reason 2", value2)
|
|
assert.False(suite.T(), exists)
|
|
})
|
|
|
|
// Cleanup
|
|
_ = os.Remove(cfg.Api.BannedUsersFile)
|
|
_ = os.Remove(fmt.Sprintf("%s.lock", cfg.Api.BannedUsersFile))
|
|
}
|
|
|
|
// This is a better approach instead of the ticker-based test
|
|
func (suite *Tests) Test_LoadUnloadBannedUsers() {
|
|
// Setup
|
|
cfg = &config{}
|
|
parseConfig()
|
|
cfg.Logger = libpack_logger.New()
|
|
cfg.Api.BannedUsersFile = filepath.Join(os.TempDir(), "banned_users_update_test.json")
|
|
|
|
// Create a test banned users file with initial content
|
|
initialData := map[string]string{
|
|
"user1": "reason1",
|
|
"user2": "reason2",
|
|
}
|
|
data, _ := json.Marshal(initialData)
|
|
err := os.WriteFile(cfg.Api.BannedUsersFile, data, 0o644)
|
|
assert.NoError(suite.T(), err)
|
|
defer func() { _ = os.Remove(cfg.Api.BannedUsersFile) }()
|
|
defer func() { _ = os.Remove(fmt.Sprintf("%s.lock", cfg.Api.BannedUsersFile)) }()
|
|
|
|
// Test loading banned users
|
|
suite.Run("load banned users", func() {
|
|
// Clear the banned users map
|
|
replaceBannedUsers(map[string]string{})
|
|
|
|
// Load banned users
|
|
loadBannedUsers()
|
|
|
|
// Check the banned users map
|
|
snap := snapshotBannedUsers()
|
|
count := len(snap)
|
|
reason1 := snap["user1"]
|
|
reason2 := snap["user2"]
|
|
|
|
assert.Equal(suite.T(), 2, count)
|
|
assert.Equal(suite.T(), "reason1", reason1)
|
|
assert.Equal(suite.T(), "reason2", reason2)
|
|
})
|
|
|
|
// Test updating banned users
|
|
suite.Run("update banned users", func() {
|
|
// Update the banned users map
|
|
replaceBannedUsers(map[string]string{
|
|
"user3": "reason3",
|
|
"user4": "reason4",
|
|
})
|
|
|
|
// Store the updated banned users
|
|
err := storeBannedUsers()
|
|
assert.NoError(suite.T(), err)
|
|
|
|
// Clear the banned users map
|
|
replaceBannedUsers(map[string]string{})
|
|
|
|
// Load banned users again
|
|
loadBannedUsers()
|
|
|
|
// Check the banned users map
|
|
snap := snapshotBannedUsers()
|
|
count := len(snap)
|
|
reason3 := snap["user3"]
|
|
reason4 := snap["user4"]
|
|
_, user1Exists := snap["user1"]
|
|
|
|
assert.Equal(suite.T(), 2, count)
|
|
assert.Equal(suite.T(), "reason3", reason3)
|
|
assert.Equal(suite.T(), "reason4", reason4)
|
|
assert.False(suite.T(), user1Exists)
|
|
})
|
|
}
|
|
|
|
func TestBannedUsersConcurrentModifyAndReload(t *testing.T) {
|
|
// Regression for the banned-users race: an admin ban (bannedUsersIDs.Store
|
|
// + storeBannedUsers) must be atomic against periodic reloads
|
|
// (loadBannedUsers -> replaceBannedUsers). Concurrent modify+reload must
|
|
// not lose a persisted ban and must be memory-race free (-race).
|
|
dir := t.TempDir()
|
|
file := filepath.Join(dir, "banned.json")
|
|
|
|
origCfg := cfg
|
|
cfg = &config{Logger: libpack_logger.New()}
|
|
cfg.Api.BannedUsersFile = file
|
|
defer func() { cfg = origCfg }()
|
|
|
|
bannedUsersIDs = sync.Map{}
|
|
if err := os.WriteFile(file, []byte("{}"), 0o644); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
var wg sync.WaitGroup
|
|
// Admin-like writers: ban kept-user and persist, under bannedUsersMu.
|
|
for range 4 {
|
|
wg.Add(1)
|
|
go func() {
|
|
defer wg.Done()
|
|
for range 50 {
|
|
bannedUsersMu.Lock()
|
|
bannedUsersIDs.Store("kept-user", "reason")
|
|
_ = storeBannedUsers()
|
|
bannedUsersMu.Unlock()
|
|
}
|
|
}()
|
|
}
|
|
// Reloading goroutines.
|
|
for range 2 {
|
|
wg.Add(1)
|
|
go func() {
|
|
defer wg.Done()
|
|
for range 50 {
|
|
loadBannedUsers()
|
|
}
|
|
}()
|
|
}
|
|
wg.Wait()
|
|
|
|
// A final reload must reflect the persisted (still-banned) user.
|
|
loadBannedUsers()
|
|
if _, ok := bannedUsersIDs.Load("kept-user"); !ok {
|
|
t.Fatal("kept-user ban was lost after concurrent modify + reload")
|
|
}
|
|
}
|
|
|
|
// TestLoadBannedUsersReleasesLockOnReadError is a regression test for the
|
|
// file-lock leak: a read error inside loadBannedUsers (after the shared file
|
|
// lock is taken) must still release the lock. Before the fix, the error
|
|
// return at the os.ReadFile check skipped the unlock, so the flock's open fd
|
|
// stayed shared-locked for the process lifetime, and every later
|
|
// storeBannedUsers (which needs the exclusive lock) would block and fail.
|
|
func TestLoadBannedUsersReleasesLockOnReadError(t *testing.T) {
|
|
dir := t.TempDir()
|
|
// A directory in place of the banned-users file makes os.Stat report the
|
|
// path exists (skipping the create-file branch) while os.ReadFile fails.
|
|
file := filepath.Join(dir, "banned.json")
|
|
if err := os.Mkdir(file, 0o755); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
origCfg := cfg
|
|
cfg = &config{Logger: libpack_logger.New()}
|
|
cfg.Api.BannedUsersFile = file
|
|
defer func() { cfg = origCfg }()
|
|
|
|
loadBannedUsers() // must hit the os.ReadFile error path and return
|
|
|
|
// If the shared read lock leaked, a fresh non-blocking exclusive TryLock
|
|
// on the same lock file fails instead of succeeding immediately.
|
|
fileLock := flock.New(fmt.Sprintf("%s.lock", file))
|
|
locked, err := fileLock.TryLock()
|
|
if err != nil {
|
|
t.Fatalf("TryLock returned an error: %v", err)
|
|
}
|
|
if !locked {
|
|
t.Fatal("exclusive lock unavailable after loadBannedUsers read error - shared lock leaked")
|
|
}
|
|
_ = fileLock.Unlock()
|
|
}
|