tests.py 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431
  1. # -*- coding: utf-8 -*-
  2. from __future__ import absolute_import, print_function
  3. import os
  4. import datetime
  5. import json
  6. import logging
  7. import mock
  8. import zlib
  9. from django.conf import settings
  10. from django.core.urlresolvers import reverse
  11. from django.test.utils import override_settings
  12. from django.utils import timezone
  13. from gzip import GzipFile
  14. from exam import fixture
  15. from raven import Client
  16. from sentry.models import Group, Event
  17. from sentry.testutils import TestCase, TransactionTestCase
  18. from sentry.testutils.helpers import get_auth_header
  19. from sentry.utils.compat import StringIO
  20. from sentry.utils.settings import (
  21. validate_settings, ConfigurationError, import_string)
  22. DEPENDENCY_TEST_DATA = {
  23. "postgresql": ('DATABASES', 'psycopg2.extensions', "database engine", "django.db.backends.postgresql_psycopg2", {
  24. 'default': {
  25. 'ENGINE': "django.db.backends.postgresql_psycopg2",
  26. 'NAME': 'test',
  27. 'USER': 'root',
  28. 'PASSWORD': '',
  29. 'HOST': 'localhost',
  30. 'PORT': ''
  31. }
  32. }),
  33. "mysql": ('DATABASES', 'MySQLdb', "database engine", "django.db.backends.mysql", {
  34. 'default': {
  35. 'ENGINE': "django.db.backends.mysql",
  36. 'NAME': 'test',
  37. 'USER': 'root',
  38. 'PASSWORD': '',
  39. 'HOST': 'localhost',
  40. 'PORT': ''
  41. }
  42. }),
  43. "oracle": ('DATABASES', 'cx_Oracle', "database engine", "django.db.backends.oracle", {
  44. 'default': {
  45. 'ENGINE': "django.db.backends.oracle",
  46. 'NAME': 'test',
  47. 'USER': 'root',
  48. 'PASSWORD': '',
  49. 'HOST': 'localhost',
  50. 'PORT': ''
  51. }
  52. }),
  53. "memcache": ('CACHES', 'memcache', "caching backend", "django.core.cache.backends.memcached.MemcachedCache", {
  54. 'default': {
  55. 'BACKEND': "django.core.cache.backends.memcached.MemcachedCache",
  56. 'LOCATION': '127.0.0.1:11211',
  57. }
  58. }),
  59. "pylibmc": ('CACHES', 'pylibmc', "caching backend", "django.core.cache.backends.memcached.PyLibMCCache", {
  60. 'default': {
  61. 'BACKEND': "django.core.cache.backends.memcached.PyLibMCCache",
  62. 'LOCATION': '127.0.0.1:11211',
  63. }
  64. }),
  65. }
  66. def get_fixture_path(name):
  67. return os.path.join(os.path.dirname(__file__), 'fixtures', name)
  68. def load_fixture(name):
  69. with open(get_fixture_path(name)) as fp:
  70. return fp.read()
  71. class AssertHandler(logging.Handler):
  72. def emit(self, entry):
  73. raise AssertionError(entry.message)
  74. class RavenIntegrationTest(TransactionTestCase):
  75. """
  76. This mocks the test server and specifically tests behavior that would
  77. happen between Raven <--> Sentry over HTTP communication.
  78. """
  79. def setUp(self):
  80. self.user = self.create_user('coreapi@example.com')
  81. self.project = self.create_project()
  82. self.pm = self.project.team.member_set.get_or_create(user=self.user)[0]
  83. self.pk = self.project.key_set.get_or_create()[0]
  84. self.configure_sentry_errors()
  85. def configure_sentry_errors(self):
  86. assert_handler = AssertHandler()
  87. sentry_errors = logging.getLogger('sentry.errors')
  88. sentry_errors.addHandler(assert_handler)
  89. sentry_errors.setLevel(logging.DEBUG)
  90. def remove_handler():
  91. sentry_errors.handlers.pop(sentry_errors.handlers.index(assert_handler))
  92. self.addCleanup(remove_handler)
  93. def sendRemote(self, url, data, headers={}):
  94. content_type = headers.pop('Content-Type', None)
  95. headers = dict(('HTTP_' + k.replace('-', '_').upper(), v) for k, v in headers.iteritems())
  96. resp = self.client.post(
  97. reverse('sentry-api-store', args=[self.pk.project_id]),
  98. data=data,
  99. content_type=content_type,
  100. **headers)
  101. assert resp.status_code == 200, resp.content
  102. @mock.patch('raven.base.Client.send_remote')
  103. def test_basic(self, send_remote):
  104. send_remote.side_effect = self.sendRemote
  105. client = Client(
  106. dsn='http://%s:%s@localhost:8000/%s' % (
  107. self.pk.public_key, self.pk.secret_key, self.pk.project_id)
  108. )
  109. with self.tasks():
  110. client.capture('Message', message='foo')
  111. assert send_remote.call_count is 1
  112. assert Group.objects.count() == 1
  113. group = Group.objects.get()
  114. assert group.event_set.count() == 1
  115. instance = group.event_set.get()
  116. assert instance.message == 'foo'
  117. class SentryRemoteTest(TestCase):
  118. @fixture
  119. def path(self):
  120. return reverse('sentry-api-store')
  121. def test_minimal(self):
  122. kwargs = {'message': 'hello'}
  123. resp = self._postWithHeader(kwargs)
  124. assert resp.status_code == 200, resp.content
  125. event_id = json.loads(resp.content)['id']
  126. instance = Event.objects.get(event_id=event_id)
  127. assert instance.message == 'hello'
  128. def test_timestamp(self):
  129. timestamp = timezone.now().replace(microsecond=0, tzinfo=timezone.utc) - datetime.timedelta(hours=1)
  130. kwargs = {u'message': 'hello', 'timestamp': timestamp.strftime('%s.%f')}
  131. resp = self._postWithSignature(kwargs)
  132. assert resp.status_code == 200, resp.content
  133. instance = Event.objects.get()
  134. assert instance.message == 'hello'
  135. assert instance.datetime == timestamp
  136. group = instance.group
  137. assert group.first_seen == timestamp
  138. assert group.last_seen == timestamp
  139. def test_timestamp_as_iso(self):
  140. timestamp = timezone.now().replace(microsecond=0, tzinfo=timezone.utc) - datetime.timedelta(hours=1)
  141. kwargs = {u'message': 'hello', 'timestamp': timestamp.strftime('%Y-%m-%dT%H:%M:%S.%f')}
  142. resp = self._postWithSignature(kwargs)
  143. assert resp.status_code == 200, resp.content
  144. instance = Event.objects.get()
  145. assert instance.message == 'hello'
  146. assert instance.datetime == timestamp
  147. group = instance.group
  148. assert group.first_seen == timestamp
  149. assert group.last_seen == timestamp
  150. def test_ungzipped_data(self):
  151. kwargs = {'message': 'hello'}
  152. resp = self._postWithSignature(kwargs)
  153. assert resp.status_code == 200
  154. instance = Event.objects.get()
  155. assert instance.message == 'hello'
  156. @override_settings(SENTRY_ALLOW_ORIGIN='getsentry.com')
  157. def test_correct_data_with_get(self):
  158. kwargs = {'message': 'hello'}
  159. resp = self._getWithReferer(kwargs)
  160. assert resp.status_code == 200, resp.content
  161. instance = Event.objects.get()
  162. assert instance.message == 'hello'
  163. @override_settings(SENTRY_ALLOW_ORIGIN='getsentry.com')
  164. def test_get_without_referer(self):
  165. self.project.update_option('sentry:origins', '')
  166. kwargs = {'message': 'hello'}
  167. resp = self._getWithReferer(kwargs, referer=None, protocol='4')
  168. assert resp.status_code == 403, (resp.status_code, resp.get('X-Sentry-Error'))
  169. @override_settings(SENTRY_ALLOW_ORIGIN='*')
  170. def test_get_without_referer_allowed(self):
  171. self.project.update_option('sentry:origins', '')
  172. kwargs = {'message': 'hello'}
  173. resp = self._getWithReferer(kwargs, referer=None, protocol='4')
  174. assert resp.status_code == 200, (resp.status_code, resp.get('X-Sentry-Error'))
  175. def test_signature(self):
  176. kwargs = {'message': 'hello'}
  177. resp = self._postWithSignature(kwargs)
  178. assert resp.status_code == 200, resp.content
  179. instance = Event.objects.get()
  180. assert instance.message == 'hello'
  181. def test_content_encoding_deflate(self):
  182. kwargs = {'message': 'hello'}
  183. message = zlib.compress(json.dumps(kwargs))
  184. key = self.projectkey.public_key
  185. secret = self.projectkey.secret_key
  186. with self.tasks():
  187. resp = self.client.post(
  188. self.path, message,
  189. content_type='application/octet-stream',
  190. HTTP_CONTENT_ENCODING='deflate',
  191. HTTP_X_SENTRY_AUTH=get_auth_header('_postWithHeader', key, secret),
  192. )
  193. assert resp.status_code == 200, resp.content
  194. event_id = json.loads(resp.content)['id']
  195. instance = Event.objects.get(event_id=event_id)
  196. assert instance.message == 'hello'
  197. def test_content_encoding_gzip(self):
  198. kwargs = {'message': 'hello'}
  199. message = json.dumps(kwargs)
  200. fp = StringIO()
  201. try:
  202. f = GzipFile(fileobj=fp, mode='w')
  203. f.write(message)
  204. finally:
  205. f.close()
  206. key = self.projectkey.public_key
  207. secret = self.projectkey.secret_key
  208. with self.tasks():
  209. resp = self.client.post(
  210. self.path, fp.getvalue(),
  211. content_type='application/octet-stream',
  212. HTTP_CONTENT_ENCODING='gzip',
  213. HTTP_X_SENTRY_AUTH=get_auth_header('_postWithHeader', key, secret),
  214. )
  215. assert resp.status_code == 200, resp.content
  216. event_id = json.loads(resp.content)['id']
  217. instance = Event.objects.get(event_id=event_id)
  218. assert instance.message == 'hello'
  219. def test_protocol_v2_0_without_secret_key(self):
  220. kwargs = {'message': 'hello'}
  221. resp = self._postWithHeader(
  222. data=kwargs,
  223. key=self.projectkey.public_key,
  224. protocol='2.0',
  225. )
  226. assert resp.status_code == 200, resp.content
  227. event_id = json.loads(resp.content)['id']
  228. instance = Event.objects.get(event_id=event_id)
  229. assert instance.message == 'hello'
  230. def test_protocol_v3(self):
  231. kwargs = {'message': 'hello'}
  232. resp = self._postWithHeader(
  233. data=kwargs,
  234. key=self.projectkey.public_key,
  235. secret=self.projectkey.secret_key,
  236. protocol='3',
  237. )
  238. assert resp.status_code == 200, resp.content
  239. event_id = json.loads(resp.content)['id']
  240. instance = Event.objects.get(event_id=event_id)
  241. assert instance.message == 'hello'
  242. def test_protocol_v4(self):
  243. kwargs = {'message': 'hello'}
  244. resp = self._postWithHeader(
  245. data=kwargs,
  246. key=self.projectkey.public_key,
  247. secret=self.projectkey.secret_key,
  248. protocol='4',
  249. )
  250. assert resp.status_code == 200, resp.content
  251. event_id = json.loads(resp.content)['id']
  252. instance = Event.objects.get(event_id=event_id)
  253. assert instance.message == 'hello'
  254. def test_protocol_v5(self):
  255. kwargs = {'message': 'hello'}
  256. resp = self._postWithHeader(
  257. data=kwargs,
  258. key=self.projectkey.public_key,
  259. secret=self.projectkey.secret_key,
  260. protocol='5',
  261. )
  262. assert resp.status_code == 200, resp.content
  263. event_id = json.loads(resp.content)['id']
  264. instance = Event.objects.get(event_id=event_id)
  265. assert instance.message == 'hello'
  266. def test_protocol_v6(self):
  267. kwargs = {'message': 'hello'}
  268. resp = self._postWithHeader(
  269. data=kwargs,
  270. key=self.projectkey.public_key,
  271. secret=self.projectkey.secret_key,
  272. protocol='6',
  273. )
  274. assert resp.status_code == 200, resp.content
  275. event_id = json.loads(resp.content)['id']
  276. instance = Event.objects.get(event_id=event_id)
  277. assert instance.message == 'hello'
  278. class DepdendencyTest(TestCase):
  279. def raise_import_error(self, package):
  280. def callable(package_name):
  281. if package_name != package:
  282. return import_string(package_name)
  283. raise ImportError("No module named %s" % (package,))
  284. return callable
  285. @mock.patch('django.conf.settings', mock.Mock())
  286. @mock.patch('sentry.utils.settings.import_string')
  287. def validate_dependency(self, key, package, dependency_type, dependency,
  288. setting_value, import_string):
  289. import_string.side_effect = self.raise_import_error(package)
  290. with self.settings(**{key: setting_value}):
  291. with self.assertRaises(ConfigurationError):
  292. validate_settings(settings)
  293. def test_validate_fails_on_postgres(self):
  294. self.validate_dependency(*DEPENDENCY_TEST_DATA['postgresql'])
  295. def test_validate_fails_on_mysql(self):
  296. self.validate_dependency(*DEPENDENCY_TEST_DATA['mysql'])
  297. def test_validate_fails_on_oracle(self):
  298. self.validate_dependency(*DEPENDENCY_TEST_DATA['oracle'])
  299. def test_validate_fails_on_memcache(self):
  300. self.validate_dependency(*DEPENDENCY_TEST_DATA['memcache'])
  301. def test_validate_fails_on_pylibmc(self):
  302. self.validate_dependency(*DEPENDENCY_TEST_DATA['pylibmc'])
  303. def get_fixtures(name):
  304. path = os.path.join(os.path.dirname(__file__), 'fixtures/csp', name)
  305. try:
  306. with open(path + '_input.json', 'rb') as fp1:
  307. input = fp1.read()
  308. except IOError:
  309. input = None
  310. try:
  311. with open(path + '_output.json', 'rb') as fp2:
  312. output = json.load(fp2)
  313. except IOError:
  314. output = None
  315. return input, output
  316. class CspReportTest(TestCase):
  317. def assertReportCreated(self, input, output):
  318. resp = self._postCspWithHeader(input)
  319. assert resp.status_code == 201, resp.content
  320. assert Event.objects.count() == 1
  321. e = Event.objects.all()[0]
  322. Event.objects.bind_nodes([e], 'data')
  323. assert e.message == output['message']
  324. self.assertDictContainsSubset(output['data'], e.data.data, e.data.data)
  325. def assertReportRejected(self, input):
  326. resp = self._postCspWithHeader(input)
  327. assert resp.status_code == 403, resp.content
  328. def test_chrome_blocked_asset(self):
  329. self.assertReportCreated(*get_fixtures('chrome_blocked_asset'))
  330. def test_firefox_missing_effective_uri(self):
  331. input, _ = get_fixtures('firefox_blocked_asset')
  332. self.assertReportRejected(input)