mirror of
https://github.com/NNTmux/newznab-tmux.git
synced 2026-08-29 01:08:56 +00:00
Add cloudflare ip refresh
This commit is contained in:
DariusIII
@@ -0,0 +1,168 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace Tests\Feature\Console;
|
||||
|
||||
use Illuminate\Contracts\Console\Kernel;
|
||||
use Illuminate\Support\Facades\Http;
|
||||
use Illuminate\Support\Str;
|
||||
use PDO;
|
||||
use Tests\TestCase;
|
||||
|
||||
class CloudflareReloadCommandTest extends TestCase
|
||||
{
|
||||
private string $databasePath;
|
||||
|
||||
private string $manifestPath;
|
||||
|
||||
private string $resolvedManifestPath;
|
||||
|
||||
/**
|
||||
* @var array<string, string|false>
|
||||
*/
|
||||
private array $originalEnvironment = [];
|
||||
|
||||
public function createApplication()
|
||||
{
|
||||
$this->databasePath = sys_get_temp_dir().'/nntmux-cloudflare-command-test.sqlite';
|
||||
|
||||
$this->originalEnvironment = [
|
||||
'APP_ENV' => getenv('APP_ENV'),
|
||||
'DB_CONNECTION' => getenv('DB_CONNECTION'),
|
||||
'DB_DATABASE' => getenv('DB_DATABASE'),
|
||||
];
|
||||
|
||||
if (file_exists($this->databasePath)) {
|
||||
unlink($this->databasePath);
|
||||
}
|
||||
|
||||
$pdo = new PDO('sqlite:'.$this->databasePath);
|
||||
$pdo->exec('CREATE TABLE settings (name VARCHAR PRIMARY KEY, value TEXT NULL)');
|
||||
$pdo->exec("INSERT INTO settings (name, value) VALUES
|
||||
('categorizeforeign', '0'),
|
||||
('catwebdl', '0')");
|
||||
|
||||
$this->setEnvironmentValue('APP_ENV', 'testing');
|
||||
$this->setEnvironmentValue('DB_CONNECTION', 'sqlite');
|
||||
$this->setEnvironmentValue('DB_DATABASE', $this->databasePath);
|
||||
|
||||
$app = require __DIR__.'/../../../bootstrap/app.php';
|
||||
|
||||
$app->make(Kernel::class)->bootstrap();
|
||||
|
||||
return $app;
|
||||
}
|
||||
|
||||
protected function setUp(): void
|
||||
{
|
||||
parent::setUp();
|
||||
|
||||
$this->manifestPath = 'storage/framework/testing/cloudflare-'.Str::uuid()->toString().'.json';
|
||||
$this->resolvedManifestPath = base_path($this->manifestPath);
|
||||
|
||||
config([
|
||||
'trustedproxy.proxies' => null,
|
||||
'database.default' => 'sqlite',
|
||||
'database.connections.sqlite.database' => $this->databasePath,
|
||||
'trustedproxy.cloudflare.storage_path' => $this->manifestPath,
|
||||
'trustedproxy.cloudflare.ipv4_url' => 'https://www.cloudflare.com/ips-v4',
|
||||
'trustedproxy.cloudflare.ipv6_url' => 'https://www.cloudflare.com/ips-v6',
|
||||
'trustedproxy.cloudflare.fallback_to_remote_addr' => false,
|
||||
]);
|
||||
}
|
||||
|
||||
protected function tearDown(): void
|
||||
{
|
||||
if (is_file($this->resolvedManifestPath)) {
|
||||
unlink($this->resolvedManifestPath);
|
||||
}
|
||||
|
||||
if ($this->databasePath !== '' && file_exists($this->databasePath)) {
|
||||
unlink($this->databasePath);
|
||||
}
|
||||
|
||||
$directory = dirname($this->resolvedManifestPath);
|
||||
|
||||
if (is_dir($directory)) {
|
||||
@rmdir($directory);
|
||||
}
|
||||
|
||||
parent::tearDown();
|
||||
|
||||
foreach ($this->originalEnvironment as $key => $value) {
|
||||
$this->setEnvironmentValue($key, $value === false ? null : $value);
|
||||
}
|
||||
}
|
||||
|
||||
public function test_it_refreshes_and_persists_cloudflare_ip_ranges(): void
|
||||
{
|
||||
Http::fake([
|
||||
'https://www.cloudflare.com/ips-v4' => Http::response("173.245.48.0/20\n104.16.0.0/13\n", 200),
|
||||
'https://www.cloudflare.com/ips-v6' => Http::response("2400:cb00::/32\n2a06:98c0::/29\n", 200),
|
||||
]);
|
||||
|
||||
$this->artisan('cloudflare:reload')
|
||||
->expectsOutputToContain('Cloudflare IPv4 ranges: 2')
|
||||
->expectsOutputToContain('Cloudflare IPv6 ranges: 2')
|
||||
->expectsOutputToContain('Combined Cloudflare proxy count: 4')
|
||||
->expectsOutputToContain('Stored Cloudflare manifest: '.base_path($this->manifestPath))
|
||||
->assertExitCode(0);
|
||||
|
||||
$this->assertFileExists($this->resolvedManifestPath);
|
||||
|
||||
$manifest = json_decode((string) file_get_contents($this->resolvedManifestPath), true, 512, JSON_THROW_ON_ERROR);
|
||||
|
||||
$this->assertSame(['173.245.48.0/20', '104.16.0.0/13'], $manifest['ipv4']);
|
||||
$this->assertSame(['2400:cb00::/32', '2a06:98c0::/29'], $manifest['ipv6']);
|
||||
$this->assertCount(4, $manifest['proxies']);
|
||||
Http::assertSentCount(2);
|
||||
}
|
||||
|
||||
public function test_it_preserves_the_existing_manifest_when_refresh_fails(): void
|
||||
{
|
||||
$existingManifest = [
|
||||
'version' => 1,
|
||||
'updated_at' => '2026-03-30T00:00:00+00:00',
|
||||
'ipv4' => ['173.245.48.0/20'],
|
||||
'ipv6' => [],
|
||||
'proxies' => ['173.245.48.0/20'],
|
||||
];
|
||||
|
||||
if (! is_dir(dirname($this->resolvedManifestPath))) {
|
||||
mkdir(dirname($this->resolvedManifestPath), 0777, true);
|
||||
}
|
||||
|
||||
file_put_contents(
|
||||
$this->resolvedManifestPath,
|
||||
json_encode($existingManifest, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_THROW_ON_ERROR)
|
||||
);
|
||||
|
||||
Http::fake([
|
||||
'https://www.cloudflare.com/ips-v4' => Http::response('upstream failure', 500),
|
||||
'https://www.cloudflare.com/ips-v6' => Http::response("2400:cb00::/32\n", 200),
|
||||
]);
|
||||
|
||||
$this->artisan('cloudflare:reload')
|
||||
->expectsOutputToContain('Failed to refresh Cloudflare IP ranges:')
|
||||
->assertExitCode(1);
|
||||
|
||||
$manifest = json_decode((string) file_get_contents($this->resolvedManifestPath), true, 512, JSON_THROW_ON_ERROR);
|
||||
|
||||
$this->assertSame($existingManifest, $manifest);
|
||||
}
|
||||
|
||||
private function setEnvironmentValue(string $key, ?string $value): void
|
||||
{
|
||||
if ($value === null) {
|
||||
putenv($key);
|
||||
unset($_ENV[$key], $_SERVER[$key]);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
putenv($key.'='.$value);
|
||||
$_ENV[$key] = $value;
|
||||
$_SERVER[$key] = $value;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,105 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace Tests\Unit\Http\Middleware;
|
||||
|
||||
use App\Http\Middleware\TrustProxies;
|
||||
use Illuminate\Http\Request;
|
||||
use Symfony\Component\HttpFoundation\Request as SymfonyRequest;
|
||||
use Tests\TestCase;
|
||||
|
||||
class TrustProxiesTest extends TestCase
|
||||
{
|
||||
private string $manifestPath;
|
||||
|
||||
private string $resolvedManifestPath;
|
||||
|
||||
protected function setUp(): void
|
||||
{
|
||||
parent::setUp();
|
||||
|
||||
$this->manifestPath = 'storage/framework/testing/trusted-proxies-test.json';
|
||||
$this->resolvedManifestPath = base_path($this->manifestPath);
|
||||
|
||||
config([
|
||||
'trustedproxy.proxies' => null,
|
||||
'trustedproxy.cloudflare.storage_path' => $this->manifestPath,
|
||||
'trustedproxy.cloudflare.enabled' => true,
|
||||
'trustedproxy.cloudflare.fallback_to_remote_addr' => true,
|
||||
]);
|
||||
}
|
||||
|
||||
protected function tearDown(): void
|
||||
{
|
||||
TrustProxies::flushState();
|
||||
SymfonyRequest::setTrustedProxies([], SymfonyRequest::HEADER_X_FORWARDED_FOR);
|
||||
|
||||
if (is_file($this->resolvedManifestPath)) {
|
||||
unlink($this->resolvedManifestPath);
|
||||
}
|
||||
|
||||
$directory = dirname($this->resolvedManifestPath);
|
||||
|
||||
if (is_dir($directory)) {
|
||||
@rmdir($directory);
|
||||
}
|
||||
|
||||
parent::tearDown();
|
||||
}
|
||||
|
||||
public function test_it_trusts_manual_and_cloudflare_proxies(): void
|
||||
{
|
||||
config([
|
||||
'trustedproxy.proxies' => '10.0.0.1/32, REMOTE_ADDR',
|
||||
'trustedproxy.cloudflare.fallback_to_remote_addr' => false,
|
||||
]);
|
||||
|
||||
$this->writeManifest([
|
||||
'version' => 1,
|
||||
'updated_at' => now()->toIso8601String(),
|
||||
'ipv4' => ['173.245.48.0/20'],
|
||||
'ipv6' => ['2400:cb00::/32'],
|
||||
'proxies' => ['173.245.48.0/20', '2400:cb00::/32'],
|
||||
]);
|
||||
|
||||
$middleware = new TrustProxies;
|
||||
$request = Request::create('/', 'GET', [], [], [], ['REMOTE_ADDR' => '203.0.113.9']);
|
||||
|
||||
$middleware->handle($request, static fn (Request $request) => response('ok'));
|
||||
|
||||
$this->assertSame([
|
||||
'10.0.0.1/32',
|
||||
'203.0.113.9',
|
||||
'173.245.48.0/20',
|
||||
'2400:cb00::/32',
|
||||
], SymfonyRequest::getTrustedProxies());
|
||||
}
|
||||
|
||||
public function test_it_falls_back_to_the_calling_ip_when_no_manifest_exists(): void
|
||||
{
|
||||
$middleware = new TrustProxies;
|
||||
$request = Request::create('/', 'GET', [], [], [], ['REMOTE_ADDR' => '198.51.100.7']);
|
||||
|
||||
$middleware->handle($request, static fn (Request $request) => response('ok'));
|
||||
|
||||
$this->assertSame(['198.51.100.7'], SymfonyRequest::getTrustedProxies());
|
||||
}
|
||||
|
||||
/**
|
||||
* @param array<string, mixed> $manifest
|
||||
*/
|
||||
private function writeManifest(array $manifest): void
|
||||
{
|
||||
$directory = dirname($this->resolvedManifestPath);
|
||||
|
||||
if (! is_dir($directory)) {
|
||||
mkdir($directory, 0777, true);
|
||||
}
|
||||
|
||||
file_put_contents(
|
||||
$this->resolvedManifestPath,
|
||||
json_encode($manifest, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_THROW_ON_ERROR)
|
||||
);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user