mirror of
https://github.com/fatedier/frp.git
synced 2024-12-15 03:01:43 +01:00
603 lines
13 KiB
Go
603 lines
13 KiB
Go
// Copyright 2013 The Gorilla WebSocket Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package websocket
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
"encoding/base64"
|
|
"encoding/binary"
|
|
"io"
|
|
"io/ioutil"
|
|
"net"
|
|
"net/http"
|
|
"net/http/cookiejar"
|
|
"net/http/httptest"
|
|
"net/url"
|
|
"reflect"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
var cstUpgrader = Upgrader{
|
|
Subprotocols: []string{"p0", "p1"},
|
|
ReadBufferSize: 1024,
|
|
WriteBufferSize: 1024,
|
|
EnableCompression: true,
|
|
Error: func(w http.ResponseWriter, r *http.Request, status int, reason error) {
|
|
http.Error(w, reason.Error(), status)
|
|
},
|
|
}
|
|
|
|
var cstDialer = Dialer{
|
|
Subprotocols: []string{"p1", "p2"},
|
|
ReadBufferSize: 1024,
|
|
WriteBufferSize: 1024,
|
|
HandshakeTimeout: 30 * time.Second,
|
|
}
|
|
|
|
type cstHandler struct{ *testing.T }
|
|
|
|
type cstServer struct {
|
|
*httptest.Server
|
|
URL string
|
|
}
|
|
|
|
const (
|
|
cstPath = "/a/b"
|
|
cstRawQuery = "x=y"
|
|
cstRequestURI = cstPath + "?" + cstRawQuery
|
|
)
|
|
|
|
func newServer(t *testing.T) *cstServer {
|
|
var s cstServer
|
|
s.Server = httptest.NewServer(cstHandler{t})
|
|
s.Server.URL += cstRequestURI
|
|
s.URL = makeWsProto(s.Server.URL)
|
|
return &s
|
|
}
|
|
|
|
func newTLSServer(t *testing.T) *cstServer {
|
|
var s cstServer
|
|
s.Server = httptest.NewTLSServer(cstHandler{t})
|
|
s.Server.URL += cstRequestURI
|
|
s.URL = makeWsProto(s.Server.URL)
|
|
return &s
|
|
}
|
|
|
|
func (t cstHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
|
|
if r.URL.Path != cstPath {
|
|
t.Logf("path=%v, want %v", r.URL.Path, cstPath)
|
|
http.Error(w, "bad path", 400)
|
|
return
|
|
}
|
|
if r.URL.RawQuery != cstRawQuery {
|
|
t.Logf("query=%v, want %v", r.URL.RawQuery, cstRawQuery)
|
|
http.Error(w, "bad path", 400)
|
|
return
|
|
}
|
|
subprotos := Subprotocols(r)
|
|
if !reflect.DeepEqual(subprotos, cstDialer.Subprotocols) {
|
|
t.Logf("subprotols=%v, want %v", subprotos, cstDialer.Subprotocols)
|
|
http.Error(w, "bad protocol", 400)
|
|
return
|
|
}
|
|
ws, err := cstUpgrader.Upgrade(w, r, http.Header{"Set-Cookie": {"sessionID=1234"}})
|
|
if err != nil {
|
|
t.Logf("Upgrade: %v", err)
|
|
return
|
|
}
|
|
defer ws.Close()
|
|
|
|
if ws.Subprotocol() != "p1" {
|
|
t.Logf("Subprotocol() = %s, want p1", ws.Subprotocol())
|
|
ws.Close()
|
|
return
|
|
}
|
|
op, rd, err := ws.NextReader()
|
|
if err != nil {
|
|
t.Logf("NextReader: %v", err)
|
|
return
|
|
}
|
|
wr, err := ws.NextWriter(op)
|
|
if err != nil {
|
|
t.Logf("NextWriter: %v", err)
|
|
return
|
|
}
|
|
if _, err = io.Copy(wr, rd); err != nil {
|
|
t.Logf("NextWriter: %v", err)
|
|
return
|
|
}
|
|
if err := wr.Close(); err != nil {
|
|
t.Logf("Close: %v", err)
|
|
return
|
|
}
|
|
}
|
|
|
|
func makeWsProto(s string) string {
|
|
return "ws" + strings.TrimPrefix(s, "http")
|
|
}
|
|
|
|
func sendRecv(t *testing.T, ws *Conn) {
|
|
const message = "Hello World!"
|
|
if err := ws.SetWriteDeadline(time.Now().Add(time.Second)); err != nil {
|
|
t.Fatalf("SetWriteDeadline: %v", err)
|
|
}
|
|
if err := ws.WriteMessage(TextMessage, []byte(message)); err != nil {
|
|
t.Fatalf("WriteMessage: %v", err)
|
|
}
|
|
if err := ws.SetReadDeadline(time.Now().Add(time.Second)); err != nil {
|
|
t.Fatalf("SetReadDeadline: %v", err)
|
|
}
|
|
_, p, err := ws.ReadMessage()
|
|
if err != nil {
|
|
t.Fatalf("ReadMessage: %v", err)
|
|
}
|
|
if string(p) != message {
|
|
t.Fatalf("message=%s, want %s", p, message)
|
|
}
|
|
}
|
|
|
|
func TestProxyDial(t *testing.T) {
|
|
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
surl, _ := url.Parse(s.Server.URL)
|
|
|
|
cstDialer := cstDialer // make local copy for modification on next line.
|
|
cstDialer.Proxy = http.ProxyURL(surl)
|
|
|
|
connect := false
|
|
origHandler := s.Server.Config.Handler
|
|
|
|
// Capture the request Host header.
|
|
s.Server.Config.Handler = http.HandlerFunc(
|
|
func(w http.ResponseWriter, r *http.Request) {
|
|
if r.Method == "CONNECT" {
|
|
connect = true
|
|
w.WriteHeader(200)
|
|
return
|
|
}
|
|
|
|
if !connect {
|
|
t.Log("connect not received")
|
|
http.Error(w, "connect not received", 405)
|
|
return
|
|
}
|
|
origHandler.ServeHTTP(w, r)
|
|
})
|
|
|
|
ws, _, err := cstDialer.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestProxyAuthorizationDial(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
surl, _ := url.Parse(s.Server.URL)
|
|
surl.User = url.UserPassword("username", "password")
|
|
|
|
cstDialer := cstDialer // make local copy for modification on next line.
|
|
cstDialer.Proxy = http.ProxyURL(surl)
|
|
|
|
connect := false
|
|
origHandler := s.Server.Config.Handler
|
|
|
|
// Capture the request Host header.
|
|
s.Server.Config.Handler = http.HandlerFunc(
|
|
func(w http.ResponseWriter, r *http.Request) {
|
|
proxyAuth := r.Header.Get("Proxy-Authorization")
|
|
expectedProxyAuth := "Basic " + base64.StdEncoding.EncodeToString([]byte("username:password"))
|
|
if r.Method == "CONNECT" && proxyAuth == expectedProxyAuth {
|
|
connect = true
|
|
w.WriteHeader(200)
|
|
return
|
|
}
|
|
|
|
if !connect {
|
|
t.Log("connect with proxy authorization not received")
|
|
http.Error(w, "connect with proxy authorization not received", 405)
|
|
return
|
|
}
|
|
origHandler.ServeHTTP(w, r)
|
|
})
|
|
|
|
ws, _, err := cstDialer.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestDial(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
ws, _, err := cstDialer.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestDialCookieJar(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
jar, _ := cookiejar.New(nil)
|
|
d := cstDialer
|
|
d.Jar = jar
|
|
|
|
u, _ := url.Parse(s.URL)
|
|
|
|
switch u.Scheme {
|
|
case "ws":
|
|
u.Scheme = "http"
|
|
case "wss":
|
|
u.Scheme = "https"
|
|
}
|
|
|
|
cookies := []*http.Cookie{{Name: "gorilla", Value: "ws", Path: "/"}}
|
|
d.Jar.SetCookies(u, cookies)
|
|
|
|
ws, _, err := d.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
|
|
var gorilla string
|
|
var sessionID string
|
|
for _, c := range d.Jar.Cookies(u) {
|
|
if c.Name == "gorilla" {
|
|
gorilla = c.Value
|
|
}
|
|
|
|
if c.Name == "sessionID" {
|
|
sessionID = c.Value
|
|
}
|
|
}
|
|
if gorilla != "ws" {
|
|
t.Error("Cookie not present in jar.")
|
|
}
|
|
|
|
if sessionID != "1234" {
|
|
t.Error("Set-Cookie not received from the server.")
|
|
}
|
|
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestDialTLS(t *testing.T) {
|
|
s := newTLSServer(t)
|
|
defer s.Close()
|
|
|
|
certs := x509.NewCertPool()
|
|
for _, c := range s.TLS.Certificates {
|
|
roots, err := x509.ParseCertificates(c.Certificate[len(c.Certificate)-1])
|
|
if err != nil {
|
|
t.Fatalf("error parsing server's root cert: %v", err)
|
|
}
|
|
for _, root := range roots {
|
|
certs.AddCert(root)
|
|
}
|
|
}
|
|
|
|
d := cstDialer
|
|
d.TLSClientConfig = &tls.Config{RootCAs: certs}
|
|
ws, _, err := d.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func xTestDialTLSBadCert(t *testing.T) {
|
|
// This test is deactivated because of noisy logging from the net/http package.
|
|
s := newTLSServer(t)
|
|
defer s.Close()
|
|
|
|
ws, _, err := cstDialer.Dial(s.URL, nil)
|
|
if err == nil {
|
|
ws.Close()
|
|
t.Fatalf("Dial: nil")
|
|
}
|
|
}
|
|
|
|
func TestDialTLSNoVerify(t *testing.T) {
|
|
s := newTLSServer(t)
|
|
defer s.Close()
|
|
|
|
d := cstDialer
|
|
d.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
|
|
ws, _, err := d.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestDialTimeout(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
d := cstDialer
|
|
d.HandshakeTimeout = -1
|
|
ws, _, err := d.Dial(s.URL, nil)
|
|
if err == nil {
|
|
ws.Close()
|
|
t.Fatalf("Dial: nil")
|
|
}
|
|
}
|
|
|
|
func TestDialBadScheme(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
ws, _, err := cstDialer.Dial(s.Server.URL, nil)
|
|
if err == nil {
|
|
ws.Close()
|
|
t.Fatalf("Dial: nil")
|
|
}
|
|
}
|
|
|
|
func TestDialBadOrigin(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
ws, resp, err := cstDialer.Dial(s.URL, http.Header{"Origin": {"bad"}})
|
|
if err == nil {
|
|
ws.Close()
|
|
t.Fatalf("Dial: nil")
|
|
}
|
|
if resp == nil {
|
|
t.Fatalf("resp=nil, err=%v", err)
|
|
}
|
|
if resp.StatusCode != http.StatusForbidden {
|
|
t.Fatalf("status=%d, want %d", resp.StatusCode, http.StatusForbidden)
|
|
}
|
|
}
|
|
|
|
func TestDialBadHeader(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
for _, k := range []string{"Upgrade",
|
|
"Connection",
|
|
"Sec-Websocket-Key",
|
|
"Sec-Websocket-Version",
|
|
"Sec-Websocket-Protocol"} {
|
|
h := http.Header{}
|
|
h.Set(k, "bad")
|
|
ws, _, err := cstDialer.Dial(s.URL, http.Header{"Origin": {"bad"}})
|
|
if err == nil {
|
|
ws.Close()
|
|
t.Errorf("Dial with header %s returned nil", k)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestBadMethod(t *testing.T) {
|
|
s := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
ws, err := cstUpgrader.Upgrade(w, r, nil)
|
|
if err == nil {
|
|
t.Errorf("handshake succeeded, expect fail")
|
|
ws.Close()
|
|
}
|
|
}))
|
|
defer s.Close()
|
|
|
|
req, err := http.NewRequest("POST", s.URL, strings.NewReader(""))
|
|
if err != nil {
|
|
t.Fatalf("NewRequest returned error %v", err)
|
|
}
|
|
req.Header.Set("Connection", "upgrade")
|
|
req.Header.Set("Upgrade", "websocket")
|
|
req.Header.Set("Sec-Websocket-Version", "13")
|
|
|
|
resp, err := http.DefaultClient.Do(req)
|
|
if err != nil {
|
|
t.Fatalf("Do returned error %v", err)
|
|
}
|
|
resp.Body.Close()
|
|
if resp.StatusCode != http.StatusMethodNotAllowed {
|
|
t.Errorf("Status = %d, want %d", resp.StatusCode, http.StatusMethodNotAllowed)
|
|
}
|
|
}
|
|
|
|
func TestHandshake(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
ws, resp, err := cstDialer.Dial(s.URL, http.Header{"Origin": {s.URL}})
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
|
|
var sessionID string
|
|
for _, c := range resp.Cookies() {
|
|
if c.Name == "sessionID" {
|
|
sessionID = c.Value
|
|
}
|
|
}
|
|
if sessionID != "1234" {
|
|
t.Error("Set-Cookie not received from the server.")
|
|
}
|
|
|
|
if ws.Subprotocol() != "p1" {
|
|
t.Errorf("ws.Subprotocol() = %s, want p1", ws.Subprotocol())
|
|
}
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestRespOnBadHandshake(t *testing.T) {
|
|
const expectedStatus = http.StatusGone
|
|
const expectedBody = "This is the response body."
|
|
|
|
s := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(expectedStatus)
|
|
io.WriteString(w, expectedBody)
|
|
}))
|
|
defer s.Close()
|
|
|
|
ws, resp, err := cstDialer.Dial(makeWsProto(s.URL), nil)
|
|
if err == nil {
|
|
ws.Close()
|
|
t.Fatalf("Dial: nil")
|
|
}
|
|
|
|
if resp == nil {
|
|
t.Fatalf("resp=nil, err=%v", err)
|
|
}
|
|
|
|
if resp.StatusCode != expectedStatus {
|
|
t.Errorf("resp.StatusCode=%d, want %d", resp.StatusCode, expectedStatus)
|
|
}
|
|
|
|
p, err := ioutil.ReadAll(resp.Body)
|
|
if err != nil {
|
|
t.Fatalf("ReadFull(resp.Body) returned error %v", err)
|
|
}
|
|
|
|
if string(p) != expectedBody {
|
|
t.Errorf("resp.Body=%s, want %s", p, expectedBody)
|
|
}
|
|
}
|
|
|
|
// TestHostHeader confirms that the host header provided in the call to Dial is
|
|
// sent to the server.
|
|
func TestHostHeader(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
specifiedHost := make(chan string, 1)
|
|
origHandler := s.Server.Config.Handler
|
|
|
|
// Capture the request Host header.
|
|
s.Server.Config.Handler = http.HandlerFunc(
|
|
func(w http.ResponseWriter, r *http.Request) {
|
|
specifiedHost <- r.Host
|
|
origHandler.ServeHTTP(w, r)
|
|
})
|
|
|
|
ws, _, err := cstDialer.Dial(s.URL, http.Header{"Host": {"testhost"}})
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
|
|
if gotHost := <-specifiedHost; gotHost != "testhost" {
|
|
t.Fatalf("gotHost = %q, want \"testhost\"", gotHost)
|
|
}
|
|
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestDialCompression(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
dialer := cstDialer
|
|
dialer.EnableCompression = true
|
|
ws, _, err := dialer.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
sendRecv(t, ws)
|
|
}
|
|
|
|
func TestSocksProxyDial(t *testing.T) {
|
|
s := newServer(t)
|
|
defer s.Close()
|
|
|
|
proxyListener, err := net.Listen("tcp", "127.0.0.1:0")
|
|
if err != nil {
|
|
t.Fatalf("listen failed: %v", err)
|
|
}
|
|
defer proxyListener.Close()
|
|
go func() {
|
|
c1, err := proxyListener.Accept()
|
|
if err != nil {
|
|
t.Errorf("proxy accept failed: %v", err)
|
|
return
|
|
}
|
|
defer c1.Close()
|
|
|
|
c1.SetDeadline(time.Now().Add(30 * time.Second))
|
|
|
|
buf := make([]byte, 32)
|
|
if _, err := io.ReadFull(c1, buf[:3]); err != nil {
|
|
t.Errorf("read failed: %v", err)
|
|
return
|
|
}
|
|
if want := []byte{5, 1, 0}; !bytes.Equal(want, buf[:len(want)]) {
|
|
t.Errorf("read %x, want %x", buf[:len(want)], want)
|
|
}
|
|
if _, err := c1.Write([]byte{5, 0}); err != nil {
|
|
t.Errorf("write failed: %v", err)
|
|
return
|
|
}
|
|
if _, err := io.ReadFull(c1, buf[:10]); err != nil {
|
|
t.Errorf("read failed: %v", err)
|
|
return
|
|
}
|
|
if want := []byte{5, 1, 0, 1}; !bytes.Equal(want, buf[:len(want)]) {
|
|
t.Errorf("read %x, want %x", buf[:len(want)], want)
|
|
return
|
|
}
|
|
buf[1] = 0
|
|
if _, err := c1.Write(buf[:10]); err != nil {
|
|
t.Errorf("write failed: %v", err)
|
|
return
|
|
}
|
|
|
|
ip := net.IP(buf[4:8])
|
|
port := binary.BigEndian.Uint16(buf[8:10])
|
|
|
|
c2, err := net.DialTCP("tcp", nil, &net.TCPAddr{IP: ip, Port: int(port)})
|
|
if err != nil {
|
|
t.Errorf("dial failed; %v", err)
|
|
return
|
|
}
|
|
defer c2.Close()
|
|
done := make(chan struct{})
|
|
go func() {
|
|
io.Copy(c1, c2)
|
|
close(done)
|
|
}()
|
|
io.Copy(c2, c1)
|
|
<-done
|
|
}()
|
|
|
|
purl, err := url.Parse("socks5://" + proxyListener.Addr().String())
|
|
if err != nil {
|
|
t.Fatalf("parse failed: %v", err)
|
|
}
|
|
|
|
cstDialer := cstDialer // make local copy for modification on next line.
|
|
cstDialer.Proxy = http.ProxyURL(purl)
|
|
|
|
ws, _, err := cstDialer.Dial(s.URL, nil)
|
|
if err != nil {
|
|
t.Fatalf("Dial: %v", err)
|
|
}
|
|
defer ws.Close()
|
|
sendRecv(t, ws)
|
|
}
|