mirror of
https://github.com/CopilotKit/CopilotKit.git
synced 2026-09-14 16:26:20 +08:00
Jordan Ritter
914dbc5855
bearer_for ended with a blanket `rescue StandardError => nil` plus `return nil if status >= 400`. Now that bearer_for ALWAYS performs the /token exchange (even when a token is present), that swallow masked real failures: a non-2xx /token response, a malformed JSON body, or a transport error all collapsed to nil, after which manifest_exists issued the manifest HEAD anonymously (no Authorization). That silently violated manifest_exists's documented raise-on-transport/5xx contract and conflated "no token supplied" with "supplied token failed to exchange". bearer_for now: - raises GHCR::Error on a >=400 /token response WHEN a token was supplied (token absent still returns nil — the legitimate anonymous-public fallback); - raises GHCR::Error on JSON::ParserError for an unparseable 200 body; - no longer swallows StandardError, so transport exceptions (Errno::ECONNREFUSED, Net::ReadTimeout, ...) propagate. Call-site enumeration (bearer_for is called only by manifest_exists and resolve_digest): - manifest_exists: documents "Raises GHCR::Error on 5xx or transport failure", so a raised exchange error is consistent with — and strengthens — its own contract. Assumption holds. - resolve_digest: already raises GHCR::Error on its own manifest HEAD >=400 and does not rescue bearer_for, so a raised exchange error propagates exactly as its other failures do. Assumption holds. Neither caller is broken by bearer_for raising; both already propagate GHCR::Error to their callers. Tests: add 3 red-green cases in test_ghcr_bearer.rb (token-present 401 raises; token-present malformed body raises; token-present exchange failure issues NO anonymous manifest HEAD). The existing manifest_exists/digest fakes were only green because the old swallow masked the fake's "no fake response" error — they never modeled the mandatory /token exchange; added a successful /token fake to each so they exercise the real path. Renumbered the snapshot-ivar-lint allowlist (+13 lines) to track the bin/railway line drift.
64 lines
2.6 KiB
Ruby
64 lines
2.6 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require_relative "spec_helper"
|
|
|
|
class GHCRManifestExistsTest < Minitest::Test
|
|
class FakeHTTP
|
|
def initialize(responses)
|
|
@responses = responses
|
|
end
|
|
|
|
def call(method:, url:, headers: {})
|
|
key = [method, url]
|
|
r = @responses[key] || @responses[url]
|
|
raise "no fake response for #{key.inspect}" unless r
|
|
r
|
|
end
|
|
end
|
|
|
|
DIGEST = "sha256:cafef00dcafef00dcafef00dcafef00dcafef00dcafef00dcafef00dcafef00d"
|
|
REF = "ghcr.io/copilotkit/showcase-shell@#{DIGEST}"
|
|
URL = "https://ghcr.io/v2/copilotkit/showcase-shell/manifests/#{DIGEST}"
|
|
TOKEN_URL = "https://ghcr.io/token?service=ghcr.io&scope=repository:copilotkit/showcase-shell:pull"
|
|
|
|
# bearer_for ALWAYS performs the /token exchange now, so every fake that
|
|
# reaches a manifest HEAD must also model a successful exchange.
|
|
def token_ok
|
|
{ TOKEN_URL => { status: 200, headers: {}, body: %({"token":"minted"}) } }
|
|
end
|
|
|
|
def test_manifest_exists_returns_exists_on_200
|
|
fake = FakeHTTP.new(token_ok.merge(URL => { status: 200, headers: {}, body: "" }))
|
|
g = Railway::GHCR.new(token: "x", http: fake)
|
|
assert_equal :exists, g.manifest_exists(REF)
|
|
end
|
|
|
|
def test_manifest_exists_returns_missing_on_404
|
|
fake = FakeHTTP.new(token_ok.merge(URL => { status: 404, headers: {}, body: "" }))
|
|
g = Railway::GHCR.new(token: "x", http: fake)
|
|
assert_equal :missing, g.manifest_exists(REF)
|
|
end
|
|
|
|
def test_manifest_exists_returns_auth_failed_on_401_403
|
|
fake401 = FakeHTTP.new(token_ok.merge(URL => { status: 401, headers: {}, body: "" }))
|
|
fake403 = FakeHTTP.new(token_ok.merge(URL => { status: 403, headers: {}, body: "" }))
|
|
assert_equal :auth_failed, Railway::GHCR.new(token: "x", http: fake401).manifest_exists(REF)
|
|
assert_equal :auth_failed, Railway::GHCR.new(token: "x", http: fake403).manifest_exists(REF)
|
|
end
|
|
|
|
def test_manifest_exists_raises_on_5xx
|
|
fake = FakeHTTP.new(token_ok.merge(URL => { status: 500, headers: {}, body: "boom" }))
|
|
g = Railway::GHCR.new(token: "x", http: fake)
|
|
assert_raises(Railway::GHCR::Error) { g.manifest_exists(REF) }
|
|
end
|
|
|
|
def test_manifest_exists_requires_pinned_digest
|
|
# An unpinned tag is a programmer error here — we are verifying the
|
|
# CONCRETE digest we are about to promote, not resolving a tag.
|
|
g = Railway::GHCR.new(token: "x")
|
|
assert_raises(ArgumentError) do
|
|
g.manifest_exists("ghcr.io/copilotkit/showcase-shell:latest")
|
|
end
|
|
end
|
|
end
|