wehub-resource-sync
e071084ebe
govulncheck / govulncheck (push) Has been cancelled
Lint / golangci-lint (push) Has been cancelled
Run Tests / Unit Tests (push) Has been cancelled
Run Tests / Etcd Integration Tests (push) Has been cancelled
Harness (E2E) / Harnesses (mock LLM) (push) Has been cancelled
Harness (E2E) / Provider harnesses (live LLM conformance) (push) Has been cancelled
79 lines
2.7 KiB
Go
79 lines
2.7 KiB
Go
package a2a
|
|
|
|
import (
|
|
"crypto/ed25519"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
func testAP2Key(t *testing.T) (ed25519.PublicKey, ed25519.PrivateKey) {
|
|
t.Helper()
|
|
pub, priv, err := NewAP2Keypair()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
return pub, priv
|
|
}
|
|
|
|
func TestAP2CheckoutMandateSignAttachAndVerify(t *testing.T) {
|
|
pub, priv := testAP2Key(t)
|
|
msg := Message{Role: "user", Kind: "message", TaskID: "task-1", ContextID: "ctx-1", Parts: []Part{{Kind: "text", Text: "buy"}}}
|
|
mandate := AP2BindMandateToMessage(AP2Mandate{ID: "checkout-1", Kind: AP2CheckoutMandate, Subject: "alice", Merchant: "store", Amount: "10.00", Currency: "USD", Description: "demo", IssuedAt: time.Unix(1, 0).UTC()}, msg)
|
|
signed, err := SignAP2Mandate(mandate, "test-key", priv)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
msg = AP2AttachMandate(msg, signed)
|
|
task := taskFromReplyWithIDs(msg, "ok", stateCompleted, msg.TaskID, msg.ContextID)
|
|
|
|
if len(task.AP2Mandates) != 1 {
|
|
t.Fatalf("expected mandate carried on task, got %d", len(task.AP2Mandates))
|
|
}
|
|
got := VerifyAP2ForTask(task.AP2Mandates[0], pub, *task, nil)
|
|
if !got.Verified || got.Error != "" {
|
|
t.Fatalf("expected verified mandate, got %+v", got)
|
|
}
|
|
}
|
|
|
|
func TestAP2PaymentMandateX402RailReference(t *testing.T) {
|
|
pub, priv := testAP2Key(t)
|
|
rail := X402AP2Rail("payreq_123")
|
|
task := Task{ID: "task-2", ContextID: "ctx-2"}
|
|
signed, err := SignAP2Mandate(AP2Mandate{ID: "payment-1", Kind: AP2PaymentMandate, TaskID: task.ID, ContextID: task.ContextID, Rail: &rail, IssuedAt: time.Unix(1, 0).UTC()}, "test-key", priv)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
got := VerifyAP2ForTask(signed, pub, task, &rail)
|
|
if !got.Verified {
|
|
t.Fatalf("expected x402 rail to verify, got %+v", got)
|
|
}
|
|
}
|
|
|
|
func TestAP2TamperCasesFailDistinctly(t *testing.T) {
|
|
pub, priv := testAP2Key(t)
|
|
rail := X402AP2Rail("payreq_123")
|
|
task := Task{ID: "task-3", ContextID: "ctx-3"}
|
|
signed, err := SignAP2Mandate(AP2Mandate{ID: "payment-2", Kind: AP2PaymentMandate, TaskID: task.ID, ContextID: task.ContextID, Rail: &rail, IssuedAt: time.Unix(1, 0).UTC()}, "test-key", priv)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
tampered := signed
|
|
tampered.Mandate.Amount = "999.00"
|
|
if got := VerifyAP2ForTask(tampered, pub, task, &rail); got.Verified || !strings.Contains(got.Error, "signature") {
|
|
t.Fatalf("expected signature failure, got %+v", got)
|
|
}
|
|
|
|
wrongTask := task
|
|
wrongTask.ID = "other-task"
|
|
if got := VerifyAP2ForTask(signed, pub, wrongTask, &rail); got.Verified || !strings.Contains(got.Error, "task binding") {
|
|
t.Fatalf("expected task binding failure, got %+v", got)
|
|
}
|
|
|
|
otherRail := X402AP2Rail("payreq_other")
|
|
if got := VerifyAP2ForTask(signed, pub, task, &otherRail); got.Verified || !strings.Contains(got.Error, "rail reference") {
|
|
t.Fatalf("expected rail reference failure, got %+v", got)
|
|
}
|
|
}
|