wehub-resource-sync
f3d80b4628
Auto Release / auto-release (push) Failing after 1s
CI / lint (push) Failing after 0s
CI / screenshot-quality (push) Failing after 3s
CI / pr-policy (push) Has been skipped
CI / test (3.11) (push) Failing after 0s
CI / test (3.12) (push) Failing after 0s
CI / test (3.13) (push) Failing after 3s
CI / coverage (push) Failing after 1s
Legibility / legibility (push) Failing after 3s
100 lines
3.1 KiB
Python
100 lines
3.1 KiB
Python
"""Tests for proxy path allowlist filtering."""
|
|
|
|
import pytest
|
|
|
|
from claude_tap.proxy import _is_allowed_path
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"path",
|
|
[
|
|
"/v1/messages",
|
|
"/v1/messages?stream=true",
|
|
"/v1/complete",
|
|
"/v1/responses",
|
|
"/v1/chat/completions",
|
|
"/v1/completions",
|
|
"/v1/models",
|
|
"/v1/models/claude-3",
|
|
"/v1/embeddings",
|
|
"/v1/files",
|
|
"/responses",
|
|
"/chat/completions",
|
|
"/completions",
|
|
"/models",
|
|
"/embeddings",
|
|
"/files",
|
|
"/v1beta/models/gemini-2.5-pro:streamGenerateContent",
|
|
"/v1beta/models/gemini-2.5-flash:generateContent",
|
|
"/v1alpha/models/gemini-test:generateContent",
|
|
"/v1internal:loadCodeAssist",
|
|
"/v1internal:streamGenerateContent?alt=sse",
|
|
"/search",
|
|
"/fetch",
|
|
"/usages",
|
|
"/feedback",
|
|
# AWS Bedrock paths
|
|
"/model/anthropic.claude-sonnet-4-20250514-v1:0/invoke",
|
|
"/model/anthropic.claude-sonnet-4-20250514-v1:0/invoke-with-response-stream",
|
|
"/model/us.anthropic.claude-sonnet-4-20250514-v1:0/messages",
|
|
# Claude Code through Google Vertex AI pass-through gateways
|
|
"/v1/projects/test-project/locations/us-east5/publishers/anthropic/models/claude-opus-4-7:rawPredict",
|
|
"/v1/projects/test-project/locations/us-east5/publishers/anthropic/models/claude-opus-4-7:streamRawPredict",
|
|
"/v1/projects/test-project/locations/us-east5/publishers/anthropic/models/claude-opus-4-7/count-tokens:rawPredict",
|
|
],
|
|
)
|
|
def test_allowed_paths(path: str):
|
|
assert _is_allowed_path(path) is True
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"path",
|
|
[
|
|
"/etc/passwd",
|
|
"/swagger/",
|
|
"/swagger-ui.html",
|
|
"/login.html",
|
|
"/metrics",
|
|
"/nacos/",
|
|
"/nexus/",
|
|
"/zabbix",
|
|
"/vnc.html",
|
|
"/",
|
|
"/admin",
|
|
"/wp-admin",
|
|
"/.env",
|
|
"/actuator/health",
|
|
"/api/v1/hack",
|
|
"/v1/projects/test-project/locations/us-east5/publishers/google/models/gemini-2.5-pro:rawPredict",
|
|
"/v1/projects/test-project/locations/us-east5/publishers/anthropic/models/claude-opus-4-7:predict",
|
|
"/v1/projects/test-project/locations/us-east5/endpoints/endpoint-id:predict",
|
|
],
|
|
)
|
|
def test_blocked_paths(path: str):
|
|
assert _is_allowed_path(path) is False
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"path,extra_prefixes",
|
|
[
|
|
("/custom/api/v1/messages", ("/custom/api",)),
|
|
("/custom/api/v1/completions", ("/custom/api",)),
|
|
("/my/api/endpoint", ("/my/api",)),
|
|
("/api/v2/models", ("/api/v2",)),
|
|
],
|
|
)
|
|
def test_extra_prefixes_allowed(path: str, extra_prefixes: tuple[str, ...]):
|
|
assert _is_allowed_path(path, extra_prefixes) is True
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"path,extra_prefixes",
|
|
[
|
|
("/etc/passwd", ("/custom/api",)),
|
|
("/swagger/", ("/custom/api",)),
|
|
("/api/v1/hack", ("/custom/api",)),
|
|
],
|
|
)
|
|
def test_extra_prefixes_blocked_when_not_matching(path: str, extra_prefixes: tuple[str, ...]):
|
|
assert _is_allowed_path(path, extra_prefixes) is False
|