feat(protocol): define native session credentials
This commit is contained in:
sechmachine
@@ -1,11 +1,31 @@
|
||||
id version kind input expected
|
||||
version-current 1 version 1 valid
|
||||
version-n-minus-1 0 version 0 valid
|
||||
version-n-minus-2 -1 version -1 valid
|
||||
version-unsupported 2 version 2 invalid:unsupported_version
|
||||
version-current 2 version 2 valid
|
||||
version-n-minus-1 1 version 1 valid
|
||||
version-n-minus-2 0 version 0 valid
|
||||
version-unsupported 3 version 3 invalid:unsupported_version
|
||||
page-valid 1 page limit=20;cursor=opaque valid
|
||||
page-limit-high 1 page limit=101 invalid:invalid_limit
|
||||
manifest-valid 1 manifest version=1;gateway_id=g-1;grant=opaque-one-time-grant-value-with-at-least-43-bytes;audience=versevdi-gateway;purpose=launch;protocol=verse-gateway-v1;expires_at=2099-01-01T00:00:00Z valid
|
||||
manifest-provider-field 1 manifest gateway_id=g-1;grant=g-1;audience=versevdi-gateway;purpose=launch;provider_url=https://provider.invalid invalid:forbidden_field
|
||||
manifest-valid 1 manifest version=1;gateway_id=g-1;public_identity=gateway.control.test;grant=opaque-one-time-grant-value-with-at-least-43-bytes;audience=versevdi-gateway;purpose=launch;protocol=verse-gateway-v1;expires_at=2099-01-01T00:00:00Z valid
|
||||
manifest-missing-public-identity 1 manifest version=1;gateway_id=g-1;grant=opaque-one-time-grant-value-with-at-least-43-bytes;audience=versevdi-gateway;purpose=launch;protocol=verse-gateway-v1;expires_at=2099-01-01T00:00:00Z invalid:invalid_manifest
|
||||
manifest-provider-field 1 manifest gateway_id=g-1;public_identity=gateway.control.test;grant=g-1;audience=versevdi-gateway;purpose=launch;provider_url=https://provider.invalid invalid:forbidden_field
|
||||
clipboard-text-valid 1 clipboard encoding=utf-8;text=hello%20world valid
|
||||
clipboard-file 1 clipboard encoding=octet-stream;file=/tmp/a invalid:unsupported_clipboard
|
||||
session-request-policy-free 2 session_request client_device_id=device-1;device_key_id=key-1;pool_id=pool-1;idempotency_key=request-1 valid
|
||||
session-request-wire-v1-shape 1 session_request client_device_id=device-1;device_key_id=key-1;pool_id=pool-1;idempotency_key=request-1;policy_snapshot=client-owned invalid:unsupported_version
|
||||
session-request-client-policy 2 session_request client_device_id=device-1;device_key_id=key-1;pool_id=pool-1;idempotency_key=request-1;policy_snapshot=client-owned invalid:forbidden_field
|
||||
authenticated-browser-session 2 browser_authenticated_session username=alice;provider=local;roles=user;role=user valid
|
||||
authenticated-browser-native-identity 2 browser_authenticated_session username=alice;provider=local;roles=user;role=user;client_device_id=device-1;device_key_id=key-1 invalid:forbidden_field
|
||||
authenticated-browser-empty-role 2 browser_authenticated_session username=alice;provider=local;roles=;role=user invalid:invalid_session
|
||||
authenticated-browser-long-role 2 browser_authenticated_session username=alice;provider=local;roles=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;role=user invalid:invalid_session
|
||||
authenticated-browser-role-64-utf8-bytes 2 browser_authenticated_session username=alice;provider=local;roles=éééééééééééééééééééééééééééééééé;role=user valid
|
||||
authenticated-browser-role-66-utf8-bytes 2 browser_authenticated_session username=alice;provider=local;roles=ééééééééééééééééééééééééééééééééé;role=user invalid:invalid_session
|
||||
authenticated-native-session 2 native_authenticated_session username=alice;provider=local;roles=user;role=user;client_device_id=device-1;device_key_id=key-1 valid
|
||||
authenticated-native-missing-identity 2 native_authenticated_session username=alice;provider=local;roles=user;role=user invalid:required
|
||||
authenticated-partial-native-session 2 native_authenticated_session username=alice;provider=local;roles=user;role=user;client_device_id=device-1 invalid:required
|
||||
authenticated-native-empty-role 2 native_authenticated_session username=alice;provider=local;roles=;role=user;client_device_id=device-1;device_key_id=key-1 invalid:invalid_session
|
||||
authenticated-native-long-role 2 native_authenticated_session username=alice;provider=local;roles=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;role=user;client_device_id=device-1;device_key_id=key-1 invalid:invalid_session
|
||||
authenticated-native-role-64-utf8-bytes 2 native_authenticated_session username=alice;provider=local;roles=éééééééééééééééééééééééééééééééé;role=user;client_device_id=device-1;device_key_id=key-1 valid
|
||||
authenticated-native-role-66-utf8-bytes 2 native_authenticated_session username=alice;provider=local;roles=ééééééééééééééééééééééééééééééééé;role=user;client_device_id=device-1;device_key_id=key-1 invalid:invalid_session
|
||||
native-tunnel-credential 2 native_tunnel_credential client_device_id=device-1;device_key_id=key-1;certificate_chain_pem=certificate;trust_bundle_pem=trust;expires_at=2099-01-01T00:00:00Z valid
|
||||
native-tunnel-credential-offset-time 2 native_tunnel_credential client_device_id=device-1;device_key_id=key-1;certificate_chain_pem=certificate;trust_bundle_pem=trust;expires_at=2099-01-01T00:00:00+00:00 invalid:invalid_credential
|
||||
native-tunnel-credential-noncanonical-fraction 2 native_tunnel_credential client_device_id=device-1;device_key_id=key-1;certificate_chain_pem=certificate;trust_bundle_pem=trust;expires_at=2099-01-01T00:00:00.100Z invalid:invalid_credential
|
||||
|
||||
|
@@ -1,9 +1,9 @@
|
||||
id version kind input expected
|
||||
tunnel-current 1 tunnel offered=1;feature=control.v1 valid
|
||||
tunnel-n-minus-1 0 tunnel offered=0;feature=control.v1 valid
|
||||
tunnel-n-minus-2 -1 tunnel offered=-1;feature=control.v1 valid
|
||||
tunnel-display-request 1 tunnel offered=1;feature=display.request.v1 valid
|
||||
tunnel-absolute-input 1 tunnel offered=1;feature=input.absolute.v1 valid
|
||||
tunnel-scroll-input 1 tunnel offered=1;feature=input.scroll.v1 valid
|
||||
tunnel-unsupported 1 tunnel offered=2;feature=control.v1 invalid:unsupported_version
|
||||
tunnel-no-control 1 tunnel offered=1;feature=media.video invalid:unsupported_feature
|
||||
tunnel-current 2 tunnel offered=2;feature=control.v2 valid
|
||||
tunnel-n-minus-1 1 tunnel offered=1;feature=control.v1 valid
|
||||
tunnel-n-minus-2 0 tunnel offered=0;feature=control.v1 valid
|
||||
tunnel-display-request 2 tunnel offered=2;feature=display.request.v1 valid
|
||||
tunnel-absolute-input 2 tunnel offered=2;feature=input.absolute.v1 valid
|
||||
tunnel-scroll-input 2 tunnel offered=2;feature=input.scroll.v1 valid
|
||||
tunnel-unsupported 2 tunnel offered=3;feature=control.v2 invalid:unsupported_version
|
||||
tunnel-no-control 2 tunnel offered=2;feature=media.video invalid:unsupported_feature
|
||||
|
||||
|
@@ -0,0 +1,9 @@
|
||||
{
|
||||
"username": "alice",
|
||||
"provider": "local",
|
||||
"roles": ["user"],
|
||||
"role": "user",
|
||||
"native_identity": {
|
||||
"client_device_id": "device-1"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,10 @@
|
||||
{
|
||||
"username": "alice",
|
||||
"provider": "local",
|
||||
"roles": ["user"],
|
||||
"role": "user",
|
||||
"native_identity": {
|
||||
"client_device_id": "device-1",
|
||||
"device_key_id": "key-1"
|
||||
}
|
||||
}
|
||||
@@ -6,7 +6,7 @@
|
||||
"gateway": {
|
||||
"id": "gateway-1",
|
||||
"addresses": ["gateway.control.test:443"],
|
||||
"public_identity": "gateway-1"
|
||||
"public_identity": "gateway.control.test"
|
||||
},
|
||||
"tunnel": {
|
||||
"versions": ["verse-gateway-v1/1"],
|
||||
|
||||
@@ -0,0 +1,6 @@
|
||||
{
|
||||
"username": "alice",
|
||||
"provider": "local",
|
||||
"roles": ["user"],
|
||||
"role": "user"
|
||||
}
|
||||
@@ -0,0 +1,7 @@
|
||||
{
|
||||
"client_device_id": "device-1",
|
||||
"device_key_id": "key-1",
|
||||
"pool_id": "pool-1",
|
||||
"idempotency_key": "request-1",
|
||||
"policy_snapshot": {}
|
||||
}
|
||||
@@ -10,5 +10,5 @@
|
||||
"fixtures/conformance/gateway-input-feedback-v1.tsv",
|
||||
"fixtures/conformance/tunnel-v1.tsv"
|
||||
],
|
||||
"corpus_sha256": "4f8bf520d4f61588235b00776b21202ff701b20d6d11b461037b911c2117852b"
|
||||
"corpus_sha256": "ed69937656f395b30f520861948f82ed3c0b21ea86e9b33c7949ed09942e701d"
|
||||
}
|
||||
|
||||
@@ -0,0 +1,6 @@
|
||||
{
|
||||
"username": "alice",
|
||||
"provider": "local",
|
||||
"roles": ["user"],
|
||||
"role": "user"
|
||||
}
|
||||
@@ -0,0 +1,10 @@
|
||||
{
|
||||
"username": "alice",
|
||||
"provider": "local",
|
||||
"roles": ["user"],
|
||||
"role": "user",
|
||||
"native_identity": {
|
||||
"client_device_id": "device-1",
|
||||
"device_key_id": "key-1"
|
||||
}
|
||||
}
|
||||
@@ -6,7 +6,7 @@
|
||||
"gateway": {
|
||||
"id": "gateway-1",
|
||||
"addresses": ["gateway.control.test:443"],
|
||||
"public_identity": "gateway-1"
|
||||
"public_identity": "gateway.control.test"
|
||||
},
|
||||
"tunnel": {
|
||||
"versions": ["verse-gateway-v1/1"],
|
||||
|
||||
@@ -0,0 +1,7 @@
|
||||
{
|
||||
"client_device_id": "device-1",
|
||||
"device_key_id": "key-1",
|
||||
"certificate_chain_pem": "-----BEGIN CERTIFICATE-----\nfixture\n-----END CERTIFICATE-----",
|
||||
"trust_bundle_pem": "-----BEGIN CERTIFICATE-----\nfixture-ca\n-----END CERTIFICATE-----",
|
||||
"expires_at": "2099-01-01T00:00:00Z"
|
||||
}
|
||||
@@ -0,0 +1,6 @@
|
||||
{
|
||||
"client_device_id": "device-1",
|
||||
"device_key_id": "key-1",
|
||||
"pool_id": "pool-1",
|
||||
"idempotency_key": "request-1"
|
||||
}
|
||||
Reference in New Issue
Block a user