mirror of https://github.com/hyperledger/besu
Sally MacFarlane
10 months ago
committed by
GitHub
commit
5d2361ecc2
@ -0,0 +1,206 @@ |
||||
/* |
||||
* Copyright Hyperledger Besu Contributors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with |
||||
* the License. You may obtain a copy of the License at |
||||
* |
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on |
||||
* an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the |
||||
* specific language governing permissions and limitations under the License. |
||||
* |
||||
* SPDX-License-Identifier: Apache-2.0 |
||||
*/ |
||||
package org.hyperledger.besu.cli.options.stable; |
||||
|
||||
import org.hyperledger.besu.cli.DefaultCommandValues; |
||||
import org.hyperledger.besu.datatypes.Address; |
||||
import org.hyperledger.besu.ethereum.api.jsonrpc.RpcApis; |
||||
import org.hyperledger.besu.ethereum.p2p.peers.EnodeDnsConfiguration; |
||||
import org.hyperledger.besu.ethereum.permissioning.LocalPermissioningConfiguration; |
||||
import org.hyperledger.besu.ethereum.permissioning.PermissioningConfiguration; |
||||
import org.hyperledger.besu.ethereum.permissioning.PermissioningConfigurationBuilder; |
||||
import org.hyperledger.besu.ethereum.permissioning.SmartContractPermissioningConfiguration; |
||||
|
||||
import java.nio.file.Path; |
||||
import java.util.Optional; |
||||
|
||||
import org.slf4j.Logger; |
||||
import picocli.CommandLine; |
||||
|
||||
/** Handles configuration options for permissions in Besu. */ |
||||
public class PermissionsOptions { |
||||
@CommandLine.Option( |
||||
names = {"--permissions-nodes-config-file-enabled"}, |
||||
description = "Enable node level permissions (default: ${DEFAULT-VALUE})") |
||||
private final Boolean permissionsNodesEnabled = false; |
||||
|
||||
@SuppressWarnings({"FieldCanBeFinal", "FieldMayBeFinal"}) // PicoCLI requires non-final Strings.
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-nodes-config-file"}, |
||||
description = |
||||
"Node permissioning config TOML file (default: a file named \"permissions_config.toml\" in the Besu data folder)") |
||||
private String nodePermissionsConfigFile = null; |
||||
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-accounts-config-file-enabled"}, |
||||
description = "Enable account level permissions (default: ${DEFAULT-VALUE})") |
||||
private final Boolean permissionsAccountsEnabled = false; |
||||
|
||||
@SuppressWarnings({"FieldCanBeFinal", "FieldMayBeFinal"}) // PicoCLI requires non-final Strings.
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-accounts-config-file"}, |
||||
description = |
||||
"Account permissioning config TOML file (default: a file named \"permissions_config.toml\" in the Besu data folder)") |
||||
private String accountPermissionsConfigFile = null; |
||||
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-nodes-contract-address"}, |
||||
description = "Address of the node permissioning smart contract", |
||||
arity = "1") |
||||
private final Address permissionsNodesContractAddress = null; |
||||
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-nodes-contract-version"}, |
||||
description = "Version of the EEA Node Permissioning interface (default: ${DEFAULT-VALUE})") |
||||
private final Integer permissionsNodesContractVersion = 1; |
||||
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-nodes-contract-enabled"}, |
||||
description = "Enable node level permissions via smart contract (default: ${DEFAULT-VALUE})") |
||||
private final Boolean permissionsNodesContractEnabled = false; |
||||
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-accounts-contract-address"}, |
||||
description = "Address of the account permissioning smart contract", |
||||
arity = "1") |
||||
private final Address permissionsAccountsContractAddress = null; |
||||
|
||||
@CommandLine.Option( |
||||
names = {"--permissions-accounts-contract-enabled"}, |
||||
description = |
||||
"Enable account level permissions via smart contract (default: ${DEFAULT-VALUE})") |
||||
private final Boolean permissionsAccountsContractEnabled = false; |
||||
|
||||
/** |
||||
* Creates a PermissioningConfiguration based on the provided options. |
||||
* |
||||
* @param jsonRpcHttpOptions The JSON-RPC HTTP options |
||||
* @param rpcWebsocketOptions The RPC websocket options |
||||
* @param enodeDnsConfiguration The enode DNS configuration |
||||
* @param dataPath The data path |
||||
* @param logger The logger |
||||
* @param commandLine The command line |
||||
* @return An Optional PermissioningConfiguration instance |
||||
* @throws Exception If an error occurs while creating the configuration |
||||
*/ |
||||
public Optional<PermissioningConfiguration> permissioningConfiguration( |
||||
final JsonRpcHttpOptions jsonRpcHttpOptions, |
||||
final RpcWebsocketOptions rpcWebsocketOptions, |
||||
final EnodeDnsConfiguration enodeDnsConfiguration, |
||||
final Path dataPath, |
||||
final Logger logger, |
||||
final CommandLine commandLine) |
||||
throws Exception { |
||||
if (!(localPermissionsEnabled() || contractPermissionsEnabled())) { |
||||
if (jsonRpcHttpOptions.getRpcHttpApis().contains(RpcApis.PERM.name()) |
||||
|| rpcWebsocketOptions.getRpcWsApis().contains(RpcApis.PERM.name())) { |
||||
logger.warn( |
||||
"Permissions are disabled. Cannot enable PERM APIs when not using Permissions."); |
||||
} |
||||
return Optional.empty(); |
||||
} |
||||
|
||||
final Optional<LocalPermissioningConfiguration> localPermissioningConfigurationOptional; |
||||
if (localPermissionsEnabled()) { |
||||
final Optional<String> nodePermissioningConfigFile = |
||||
Optional.ofNullable(nodePermissionsConfigFile); |
||||
final Optional<String> accountPermissioningConfigFile = |
||||
Optional.ofNullable(accountPermissionsConfigFile); |
||||
|
||||
final LocalPermissioningConfiguration localPermissioningConfiguration = |
||||
PermissioningConfigurationBuilder.permissioningConfiguration( |
||||
permissionsNodesEnabled, |
||||
enodeDnsConfiguration, |
||||
nodePermissioningConfigFile.orElse(getDefaultPermissioningFilePath(dataPath)), |
||||
permissionsAccountsEnabled, |
||||
accountPermissioningConfigFile.orElse(getDefaultPermissioningFilePath(dataPath))); |
||||
|
||||
localPermissioningConfigurationOptional = Optional.of(localPermissioningConfiguration); |
||||
} else { |
||||
if (nodePermissionsConfigFile != null && !permissionsNodesEnabled) { |
||||
logger.warn( |
||||
"Node permissioning config file set {} but no permissions enabled", |
||||
nodePermissionsConfigFile); |
||||
} |
||||
|
||||
if (accountPermissionsConfigFile != null && !permissionsAccountsEnabled) { |
||||
logger.warn( |
||||
"Account permissioning config file set {} but no permissions enabled", |
||||
accountPermissionsConfigFile); |
||||
} |
||||
localPermissioningConfigurationOptional = Optional.empty(); |
||||
} |
||||
|
||||
final SmartContractPermissioningConfiguration smartContractPermissioningConfiguration = |
||||
SmartContractPermissioningConfiguration.createDefault(); |
||||
|
||||
if (Boolean.TRUE.equals(permissionsNodesContractEnabled)) { |
||||
if (permissionsNodesContractAddress == null) { |
||||
throw new CommandLine.ParameterException( |
||||
commandLine, |
||||
"No node permissioning contract address specified. Cannot enable smart contract based node permissioning."); |
||||
} else { |
||||
smartContractPermissioningConfiguration.setSmartContractNodeAllowlistEnabled( |
||||
permissionsNodesContractEnabled); |
||||
smartContractPermissioningConfiguration.setNodeSmartContractAddress( |
||||
permissionsNodesContractAddress); |
||||
smartContractPermissioningConfiguration.setNodeSmartContractInterfaceVersion( |
||||
permissionsNodesContractVersion); |
||||
} |
||||
} else if (permissionsNodesContractAddress != null) { |
||||
logger.warn( |
||||
"Node permissioning smart contract address set {} but smart contract node permissioning is disabled.", |
||||
permissionsNodesContractAddress); |
||||
} |
||||
|
||||
if (Boolean.TRUE.equals(permissionsAccountsContractEnabled)) { |
||||
if (permissionsAccountsContractAddress == null) { |
||||
throw new CommandLine.ParameterException( |
||||
commandLine, |
||||
"No account permissioning contract address specified. Cannot enable smart contract based account permissioning."); |
||||
} else { |
||||
smartContractPermissioningConfiguration.setSmartContractAccountAllowlistEnabled( |
||||
permissionsAccountsContractEnabled); |
||||
smartContractPermissioningConfiguration.setAccountSmartContractAddress( |
||||
permissionsAccountsContractAddress); |
||||
} |
||||
} else if (permissionsAccountsContractAddress != null) { |
||||
logger.warn( |
||||
"Account permissioning smart contract address set {} but smart contract account permissioning is disabled.", |
||||
permissionsAccountsContractAddress); |
||||
} |
||||
|
||||
final PermissioningConfiguration permissioningConfiguration = |
||||
new PermissioningConfiguration( |
||||
localPermissioningConfigurationOptional, |
||||
Optional.of(smartContractPermissioningConfiguration)); |
||||
|
||||
return Optional.of(permissioningConfiguration); |
||||
} |
||||
|
||||
private boolean localPermissionsEnabled() { |
||||
return permissionsAccountsEnabled || permissionsNodesEnabled; |
||||
} |
||||
|
||||
private boolean contractPermissionsEnabled() { |
||||
return permissionsNodesContractEnabled || permissionsAccountsContractEnabled; |
||||
} |
||||
|
||||
private String getDefaultPermissioningFilePath(final Path dataPath) { |
||||
return dataPath |
||||
+ System.getProperty("file.separator") |
||||
+ DefaultCommandValues.PERMISSIONING_CONFIG_LOCATION; |
||||
} |
||||
} |
||||
@ -0,0 +1,453 @@ |
||||
/* |
||||
* Copyright Hyperledger Besu Contributors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with |
||||
* the License. You may obtain a copy of the License at |
||||
* |
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on |
||||
* an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the |
||||
* specific language governing permissions and limitations under the License. |
||||
* |
||||
* SPDX-License-Identifier: Apache-2.0 |
||||
*/ |
||||
package org.hyperledger.besu.cli.options; |
||||
|
||||
import static java.nio.charset.StandardCharsets.UTF_8; |
||||
import static org.assertj.core.api.Assertions.assertThat; |
||||
import static org.mockito.Mockito.verify; |
||||
|
||||
import org.hyperledger.besu.cli.CommandTestAbstract; |
||||
import org.hyperledger.besu.datatypes.Address; |
||||
import org.hyperledger.besu.ethereum.p2p.peers.EnodeURLImpl; |
||||
import org.hyperledger.besu.ethereum.permissioning.LocalPermissioningConfiguration; |
||||
import org.hyperledger.besu.ethereum.permissioning.PermissioningConfiguration; |
||||
import org.hyperledger.besu.ethereum.permissioning.SmartContractPermissioningConfiguration; |
||||
import org.hyperledger.besu.plugin.data.EnodeURL; |
||||
|
||||
import java.io.IOException; |
||||
import java.net.URL; |
||||
import java.nio.file.Files; |
||||
import java.nio.file.Path; |
||||
import java.util.Collections; |
||||
import java.util.List; |
||||
import java.util.stream.Collectors; |
||||
|
||||
import com.google.common.collect.Lists; |
||||
import com.google.common.io.Resources; |
||||
import org.junit.jupiter.api.Test; |
||||
import org.junit.jupiter.api.extension.ExtendWith; |
||||
import org.junit.jupiter.api.io.TempDir; |
||||
import org.mockito.Mockito; |
||||
import org.mockito.junit.jupiter.MockitoExtension; |
||||
|
||||
@ExtendWith(MockitoExtension.class) |
||||
public class PermissionsOptionsTest extends CommandTestAbstract { |
||||
private static final String PERMISSIONING_CONFIG_TOML = "/permissioning_config.toml"; |
||||
|
||||
@Test |
||||
public void errorIsRaisedIfStaticNodesAreNotAllowed(final @TempDir Path testFolder) |
||||
throws IOException { |
||||
final Path staticNodesFile = testFolder.resolve("static-nodes.json"); |
||||
final Path permissioningConfig = testFolder.resolve("permissioning.json"); |
||||
|
||||
final EnodeURL staticNodeURI = |
||||
EnodeURLImpl.builder() |
||||
.nodeId( |
||||
"50203c6bfca6874370e71aecc8958529fd723feb05013dc1abca8fc1fff845c5259faba05852e9dfe5ce172a7d6e7c2a3a5eaa8b541c8af15ea5518bbff5f2fa") |
||||
.ipAddress("127.0.0.1") |
||||
.useDefaultPorts() |
||||
.build(); |
||||
|
||||
final EnodeURL allowedNode = |
||||
EnodeURLImpl.builder() |
||||
.nodeId( |
||||
"50203c6bfca6874370e71aecc8958529fd723feb05013dc1abca8fc1fff845c5259faba05852e9dfe5ce172a7d6e7c2a3a5eaa8b541c8af15ea5518bbff5f2fa") |
||||
.useDefaultPorts() |
||||
.ipAddress("127.0.0.1") |
||||
.listeningPort(30304) |
||||
.build(); |
||||
|
||||
Files.write(staticNodesFile, ("[\"" + staticNodeURI.toString() + "\"]").getBytes(UTF_8)); |
||||
Files.write( |
||||
permissioningConfig, |
||||
("nodes-allowlist=[\"" + allowedNode.toString() + "\"]").getBytes(UTF_8)); |
||||
|
||||
parseCommand( |
||||
"--data-path=" + testFolder, |
||||
"--bootnodes", |
||||
"--permissions-nodes-config-file-enabled=true", |
||||
"--permissions-nodes-config-file=" + permissioningConfig); |
||||
assertThat(commandErrorOutput.toString(UTF_8)) |
||||
.contains(staticNodeURI.toString(), "not in nodes-allowlist"); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissionsSmartContractWithoutOptionMustError() { |
||||
parseCommand("--permissions-nodes-contract-address"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)) |
||||
.startsWith("Missing required parameter for option '--permissions-nodes-contract-address'"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissionsEnabledWithoutContractAddressMustError() { |
||||
parseCommand("--permissions-nodes-contract-enabled"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)) |
||||
.contains("No node permissioning contract address specified"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissionsEnabledWithInvalidContractAddressMustError() { |
||||
parseCommand( |
||||
"--permissions-nodes-contract-enabled", |
||||
"--permissions-nodes-contract-address", |
||||
"invalid-smart-contract-address"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).contains("Invalid value"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissionsEnabledWithTooShortContractAddressMustError() { |
||||
parseCommand( |
||||
"--permissions-nodes-contract-enabled", "--permissions-nodes-contract-address", "0x1234"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).contains("Invalid value"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissionsSmartContractMustUseOption() { |
||||
|
||||
final String smartContractAddress = "0x0000000000000000000000000000000000001234"; |
||||
|
||||
parseCommand( |
||||
"--permissions-nodes-contract-enabled", |
||||
"--permissions-nodes-contract-address", |
||||
smartContractAddress); |
||||
final SmartContractPermissioningConfiguration smartContractPermissioningConfiguration = |
||||
new SmartContractPermissioningConfiguration(); |
||||
smartContractPermissioningConfiguration.setNodeSmartContractAddress( |
||||
Address.fromHexString(smartContractAddress)); |
||||
smartContractPermissioningConfiguration.setSmartContractNodeAllowlistEnabled(true); |
||||
|
||||
verify(mockRunnerBuilder) |
||||
.permissioningConfiguration(permissioningConfigurationArgumentCaptor.capture()); |
||||
verify(mockRunnerBuilder).build(); |
||||
|
||||
final PermissioningConfiguration config = |
||||
permissioningConfigurationArgumentCaptor.getValue().get(); |
||||
assertThat(config.getSmartContractConfig().get()) |
||||
.usingRecursiveComparison() |
||||
.isEqualTo(smartContractPermissioningConfiguration); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissionsContractVersionDefaultValue() { |
||||
final SmartContractPermissioningConfiguration expectedConfig = |
||||
new SmartContractPermissioningConfiguration(); |
||||
expectedConfig.setNodeSmartContractAddress( |
||||
Address.fromHexString("0x0000000000000000000000000000000000001234")); |
||||
expectedConfig.setSmartContractNodeAllowlistEnabled(true); |
||||
expectedConfig.setNodeSmartContractInterfaceVersion(1); |
||||
|
||||
parseCommand( |
||||
"--permissions-nodes-contract-enabled", |
||||
"--permissions-nodes-contract-address", |
||||
"0x0000000000000000000000000000000000001234"); |
||||
|
||||
verify(mockRunnerBuilder) |
||||
.permissioningConfiguration(permissioningConfigurationArgumentCaptor.capture()); |
||||
verify(mockRunnerBuilder).build(); |
||||
|
||||
final PermissioningConfiguration config = |
||||
permissioningConfigurationArgumentCaptor.getValue().get(); |
||||
assertThat(config.getSmartContractConfig().get()) |
||||
.usingRecursiveComparison() |
||||
.isEqualTo(expectedConfig); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissionsContractVersionSetsValue() { |
||||
final SmartContractPermissioningConfiguration expectedConfig = |
||||
new SmartContractPermissioningConfiguration(); |
||||
expectedConfig.setNodeSmartContractAddress( |
||||
Address.fromHexString("0x0000000000000000000000000000000000001234")); |
||||
expectedConfig.setSmartContractNodeAllowlistEnabled(true); |
||||
expectedConfig.setNodeSmartContractInterfaceVersion(2); |
||||
|
||||
parseCommand( |
||||
"--permissions-nodes-contract-enabled", |
||||
"--permissions-nodes-contract-address", |
||||
"0x0000000000000000000000000000000000001234", |
||||
"--permissions-nodes-contract-version", |
||||
"2"); |
||||
|
||||
verify(mockRunnerBuilder) |
||||
.permissioningConfiguration(permissioningConfigurationArgumentCaptor.capture()); |
||||
verify(mockRunnerBuilder).build(); |
||||
|
||||
final PermissioningConfiguration config = |
||||
permissioningConfigurationArgumentCaptor.getValue().get(); |
||||
assertThat(config.getSmartContractConfig().get()) |
||||
.usingRecursiveComparison() |
||||
.isEqualTo(expectedConfig); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissionsSmartContractWithoutOptionMustError() { |
||||
parseCommand("--permissions-accounts-contract-address"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)) |
||||
.startsWith( |
||||
"Missing required parameter for option '--permissions-accounts-contract-address'"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissionsEnabledWithoutContractAddressMustError() { |
||||
parseCommand("--permissions-accounts-contract-enabled"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)) |
||||
.contains("No account permissioning contract address specified"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissionsEnabledWithInvalidContractAddressMustError() { |
||||
parseCommand( |
||||
"--permissions-accounts-contract-enabled", |
||||
"--permissions-accounts-contract-address", |
||||
"invalid-smart-contract-address"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).contains("Invalid value"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissionsEnabledWithTooShortContractAddressMustError() { |
||||
parseCommand( |
||||
"--permissions-accounts-contract-enabled", |
||||
"--permissions-accounts-contract-address", |
||||
"0x1234"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).contains("Invalid value"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissionsSmartContractMustUseOption() { |
||||
final String smartContractAddress = "0x0000000000000000000000000000000000001234"; |
||||
|
||||
parseCommand( |
||||
"--permissions-accounts-contract-enabled", |
||||
"--permissions-accounts-contract-address", |
||||
smartContractAddress); |
||||
final SmartContractPermissioningConfiguration smartContractPermissioningConfiguration = |
||||
new SmartContractPermissioningConfiguration(); |
||||
smartContractPermissioningConfiguration.setAccountSmartContractAddress( |
||||
Address.fromHexString(smartContractAddress)); |
||||
smartContractPermissioningConfiguration.setSmartContractAccountAllowlistEnabled(true); |
||||
|
||||
verify(mockRunnerBuilder) |
||||
.permissioningConfiguration(permissioningConfigurationArgumentCaptor.capture()); |
||||
final PermissioningConfiguration permissioningConfiguration = |
||||
permissioningConfigurationArgumentCaptor.getValue().get(); |
||||
assertThat(permissioningConfiguration.getSmartContractConfig()).isPresent(); |
||||
|
||||
final SmartContractPermissioningConfiguration effectiveSmartContractConfig = |
||||
permissioningConfiguration.getSmartContractConfig().get(); |
||||
assertThat(effectiveSmartContractConfig.isSmartContractAccountAllowlistEnabled()).isTrue(); |
||||
assertThat(effectiveSmartContractConfig.getAccountSmartContractAddress()) |
||||
.isEqualTo(Address.fromHexString(smartContractAddress)); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissioningTomlPathWithoutOptionMustDisplayUsage() { |
||||
parseCommand("--permissions-nodes-config-file"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)) |
||||
.startsWith("Missing required parameter for option '--permissions-nodes-config-file'"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissioningTomlPathWithoutOptionMustDisplayUsage() { |
||||
parseCommand("--permissions-accounts-config-file"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)) |
||||
.startsWith("Missing required parameter for option '--permissions-accounts-config-file'"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissioningEnabledWithNonexistentConfigFileMustError() { |
||||
parseCommand( |
||||
"--permissions-nodes-config-file-enabled", |
||||
"--permissions-nodes-config-file", |
||||
"file-does-not-exist"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).contains("Configuration file does not exist"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissioningEnabledWithNonexistentConfigFileMustError() { |
||||
parseCommand( |
||||
"--permissions-accounts-config-file-enabled", |
||||
"--permissions-accounts-config-file", |
||||
"file-does-not-exist"); |
||||
|
||||
Mockito.verifyNoInteractions(mockRunnerBuilder); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).contains("Configuration file does not exist"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissioningTomlFileWithNoPermissionsEnabledMustNotError() throws IOException { |
||||
|
||||
final URL configFile = this.getClass().getResource(PERMISSIONING_CONFIG_TOML); |
||||
final Path permToml = createTempFile("toml", Resources.toByteArray(configFile)); |
||||
parseCommand("--permissions-nodes-config-file", permToml.toString()); |
||||
|
||||
verify(mockRunnerBuilder).build(); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissioningTomlFileWithNoPermissionsEnabledMustNotError() |
||||
throws IOException { |
||||
|
||||
final URL configFile = this.getClass().getResource(PERMISSIONING_CONFIG_TOML); |
||||
final Path permToml = createTempFile("toml", Resources.toByteArray(configFile)); |
||||
parseCommand("--permissions-accounts-config-file", permToml.toString()); |
||||
|
||||
verify(mockRunnerBuilder).build(); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void defaultPermissionsTomlFileWithNoPermissionsEnabledMustNotError() { |
||||
parseCommand("--p2p-enabled", "false"); |
||||
|
||||
verify(mockRunnerBuilder).build(); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).doesNotContain("no permissions enabled"); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void nodePermissioningTomlPathMustUseOption() throws IOException { |
||||
final List<EnodeURL> allowedNodes = |
||||
Lists.newArrayList( |
||||
EnodeURLImpl.fromString( |
||||
"enode://6f8a80d14311c39f35f516fa664deaaaa13e85b2f7493f37f6144d86991ec012937307647bd3b9a82abe2974e1407241d54947bbb39763a4cac9f77166ad92a0@192.168.0.9:4567"), |
||||
EnodeURLImpl.fromString( |
||||
"enode://6f8a80d14311c39f35f516fa664deaaaa13e85b2f7493f37f6144d86991ec012937307647bd3b9a82abe2974e1407241d54947bbb39763a4cac9f77166ad92a0@192.169.0.9:4568")); |
||||
|
||||
final URL configFile = this.getClass().getResource(PERMISSIONING_CONFIG_TOML); |
||||
final Path permToml = createTempFile("toml", Resources.toByteArray(configFile)); |
||||
|
||||
final String allowedNodesString = |
||||
allowedNodes.stream().map(Object::toString).collect(Collectors.joining(",")); |
||||
parseCommand( |
||||
"--permissions-nodes-config-file-enabled", |
||||
"--permissions-nodes-config-file", |
||||
permToml.toString(), |
||||
"--bootnodes", |
||||
allowedNodesString); |
||||
final LocalPermissioningConfiguration localPermissioningConfiguration = |
||||
LocalPermissioningConfiguration.createDefault(); |
||||
localPermissioningConfiguration.setNodePermissioningConfigFilePath(permToml.toString()); |
||||
localPermissioningConfiguration.setNodeAllowlist(allowedNodes); |
||||
|
||||
verify(mockRunnerBuilder) |
||||
.permissioningConfiguration(permissioningConfigurationArgumentCaptor.capture()); |
||||
verify(mockRunnerBuilder).build(); |
||||
|
||||
final PermissioningConfiguration config = |
||||
permissioningConfigurationArgumentCaptor.getValue().get(); |
||||
assertThat(config.getLocalConfig().get()) |
||||
.usingRecursiveComparison() |
||||
.isEqualTo(localPermissioningConfiguration); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
|
||||
@Test |
||||
public void accountPermissioningTomlPathMustUseOption() throws IOException { |
||||
|
||||
final URL configFile = this.getClass().getResource(PERMISSIONING_CONFIG_TOML); |
||||
final Path permToml = createTempFile("toml", Resources.toByteArray(configFile)); |
||||
|
||||
parseCommand( |
||||
"--permissions-accounts-config-file-enabled", |
||||
"--permissions-accounts-config-file", |
||||
permToml.toString()); |
||||
final LocalPermissioningConfiguration localPermissioningConfiguration = |
||||
LocalPermissioningConfiguration.createDefault(); |
||||
localPermissioningConfiguration.setAccountPermissioningConfigFilePath(permToml.toString()); |
||||
localPermissioningConfiguration.setAccountAllowlist( |
||||
Collections.singletonList("0x0000000000000000000000000000000000000009")); |
||||
|
||||
verify(mockRunnerBuilder) |
||||
.permissioningConfiguration(permissioningConfigurationArgumentCaptor.capture()); |
||||
final PermissioningConfiguration permissioningConfiguration = |
||||
permissioningConfigurationArgumentCaptor.getValue().get(); |
||||
assertThat(permissioningConfiguration.getLocalConfig()).isPresent(); |
||||
|
||||
final LocalPermissioningConfiguration effectiveLocalPermissioningConfig = |
||||
permissioningConfiguration.getLocalConfig().get(); |
||||
assertThat(effectiveLocalPermissioningConfig.isAccountAllowlistEnabled()).isTrue(); |
||||
assertThat(effectiveLocalPermissioningConfig.getAccountPermissioningConfigFilePath()) |
||||
.isEqualTo(permToml.toString()); |
||||
|
||||
assertThat(commandErrorOutput.toString(UTF_8)).isEmpty(); |
||||
assertThat(commandOutput.toString(UTF_8)).isEmpty(); |
||||
} |
||||
} |
||||
Loading…
Reference in new issue