1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
|
use warp::{Filter, Rejection, Reply};
use crate::custom_filters;
use crate::handlers;
use gradecoin::schema::Db;
/// Root, all routes combined
pub fn consensus_routes(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
transaction_list(db.clone())
.or(register_user(db.clone()))
.or(transaction_propose(db.clone()))
.or(block_propose(db.clone()))
.or(block_list(db.clone()))
}
/// POST /register warp route
pub fn register_user(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
warp::path!("register")
.and(warp::post())
.and(custom_filters::auth_request_json_body())
.and(custom_filters::with_db(db))
.and_then(handlers::authenticate_user)
}
/// GET /transaction warp route
pub fn transaction_list(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
warp::path!("transaction")
.and(warp::get())
.and(custom_filters::with_db(db))
.and_then(handlers::list_transactions)
}
/// GET /block warp route
pub fn block_list(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
warp::path!("block")
.and(warp::get())
.and(custom_filters::with_db(db))
.and_then(handlers::list_blocks)
}
/// POST /transaction warp route
pub fn transaction_propose(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
warp::path!("transaction")
.and(warp::post())
.and(custom_filters::transaction_json_body())
.and(custom_filters::with_db(db))
.and_then(handlers::propose_transaction)
}
/// POST /block warp route
pub fn block_propose(db: Db) -> impl Filter<Extract = impl Reply, Error = Rejection> + Clone {
warp::path!("block")
.and(warp::post())
.and(custom_filters::block_json_body())
.and(custom_filters::with_db(db))
.and_then(handlers::propose_block)
}
#[cfg(test)]
mod tests {
use super::*;
// use chrono::prelude::*;
// use parking_lot::RwLock;
// use std::sync::Arc;
use warp::http::StatusCode;
use gradecoin::schema::{create_database, AuthRequest, Block, Transaction};
/// Create a mock database to be used in tests
fn mocked_db() -> Db {
let db = create_database();
db.pending_transactions.write().insert(
"hash_value".to_owned(),
Transaction {
source: "source_account".to_owned(),
target: "target_account".to_owned(),
amount: 20,
timestamp: chrono::NaiveDate::from_ymd(2021, 04, 09).and_hms(1, 30, 30),
},
);
*db.blockchain.write() = Block {
transaction_list: vec![
"old_transaction_hash_1".to_owned(),
"old_transaction_hash_2".to_owned(),
"old_transaction_hash_3".to_owned(),
],
nonce: 0,
timestamp: chrono::NaiveDate::from_ymd(2021, 04, 08).and_hms(12, 30, 30),
hash: "not_a_thing_yet".to_owned(),
};
db
}
/// Create a mock user that is allowed to be in gradecoin to be used in tests
fn priviliged_mocked_user() -> AuthRequest {
AuthRequest {
student_id: String::from("e254275"),
public_key: "NOT IMPLEMENTED".to_owned(),
}
}
/// Create a mock user that is NOT allowed to be in gradecoin to be used in tests
fn unpriviliged_mocked_user() -> AuthRequest {
AuthRequest {
student_id: String::from("foobarbaz"),
public_key: "NOT IMPLEMENTED".to_owned(),
}
}
/// Create a mock transaction to be used in tests
fn mocked_transaction() -> Transaction {
Transaction {
source: "mock_transaction_source".to_owned(),
target: "mock_transaction_target".to_owned(),
amount: 25,
timestamp: chrono::NaiveDate::from_ymd(2021, 04, 09).and_hms(14, 30, 00),
}
}
/// Create a mock block with a correct mined hash to be used in tests
fn mocked_block() -> Block {
Block {
transaction_list: vec!["hash_value".to_owned()],
nonce: 560108,
timestamp: chrono::NaiveDate::from_ymd(2021, 04, 08).and_hms(12, 30, 30),
hash: "c7d053f3e5b056ba948db3f5c0d30408fb0c29a328a0c3c1cf435fb68d700000".to_owned(),
}
}
/// Create a mock block with a wrong hash and nonce
fn mocked_wrong_block() -> Block {
Block {
transaction_list: vec!["foobarbaz".to_owned(), "dazsaz".to_owned()],
nonce: 1000, // can you imagine
timestamp: chrono::NaiveDate::from_ymd(2021, 04, 12).and_hms(05, 29, 30),
hash: "tnarstnarsuthnarsthlarjstk".to_owned(),
}
}
/// Test simple GET request to /transaction, resource that exists
/// https://tools.ietf.org/html/rfc7231#section-6.3.1
/// We should get the only pending transaction available in the database as json
#[tokio::test]
async fn get_pending_transactions() {
let db = mocked_db();
let reply = consensus_routes(db);
let res = warp::test::request()
.method("GET")
.path("/transaction")
.reply(&reply)
.await;
assert_eq!(res.status(), StatusCode::OK);
let expected_json_body = r#"[{"source":"source_account","target":"target_account","amount":20,"timestamp":"2021-04-09T01:30:30"}]"#;
assert_eq!(res.body(), expected_json_body);
}
/// Test simple GET request to /block, resource that exists
/// https://tools.ietf.org/html/rfc7231#section-6.3.1
/// Should return the single block available in the database as json
#[tokio::test]
async fn get_blockchain() {
let db = mocked_db();
let filter = consensus_routes(db);
let res = warp::test::request()
.method("GET")
.path("/block")
.reply(&filter)
.await;
assert_eq!(res.status(), StatusCode::OK);
let expected_json_body = r#"{"transaction_list":["old_transaction_hash_1","old_transaction_hash_2","old_transaction_hash_3"],"nonce":0,"timestamp":"2021-04-08T12:30:30","hash":"not_a_thing_yet"}"#;
assert_eq!(res.body(), expected_json_body);
}
/// Test a simple GET request to a nonexisting path
/// https://tools.ietf.org/html/rfc7231#section-6.5.4
/// Should respond with 404 and stop
#[tokio::test]
async fn get_nonexisting_path_404() {
let db = mocked_db();
let filter = consensus_routes(db);
let res = warp::test::request()
.method("GET")
.path("/this_path_does_not_exist")
.reply(&filter)
.await;
assert_eq!(res.status(), StatusCode::NOT_FOUND);
}
/// Test a POST request to /transaction, a resource that exists
/// https://tools.ietf.org/html/rfc7231#section-6.3.2
/// Should accept the json request, create
/// the transaction and add it to pending transactions in the db
#[tokio::test]
async fn post_json_201() {
let db = mocked_db();
let filter = consensus_routes(db.clone());
let res = warp::test::request()
.method("POST")
.json(&mocked_transaction())
.path("/transaction")
.reply(&filter)
.await;
assert_eq!(res.status(), StatusCode::CREATED);
assert_eq!(db.pending_transactions.read().len(), 2);
}
/// Test a POST request to /block, a resource that exists
/// https://tools.ietf.org/html/rfc7231#section-6.3.2
/// Should accept the json request, create
/// the block
#[tokio::test]
async fn post_block_201() {
let db = mocked_db();
let filter = consensus_routes(db.clone());
let res = warp::test::request()
.method("POST")
.json(&mocked_block())
.path("/block")
.reply(&filter)
.await;
assert_eq!(res.status(), StatusCode::CREATED);
assert_eq!(
*db.blockchain.read().hash,
"c7d053f3e5b056ba948db3f5c0d30408fb0c29a328a0c3c1cf435fb68d700000".to_owned()
);
}
/// Test a POST request to /block, a resource that exists
/// https://tools.ietf.org/html/rfc7231#section-6.3.2
/// Should reject the block because of the wrong hash
#[tokio::test]
async fn post_block_wrong_hash() {
let db = mocked_db();
let filter = consensus_routes(db.clone());
let res = warp::test::request()
.method("POST")
.json(&mocked_wrong_block())
.path("/block")
.reply(&filter)
.await;
assert_eq!(res.status(), StatusCode::BAD_REQUEST);
}
/// Test a POST request to /register, an endpoint that exists
/// https://tools.ietf.org/html/rfc7231#section-6.3.2
/// Should accept the json request, create a new user and
/// add it to the user hashmap in the db
#[tokio::test]
async fn post_register_priviliged_user() {
let db = mocked_db();
let filter = consensus_routes(db.clone());
let res = warp::test::request()
.method("POST")
.json(&priviliged_mocked_user())
.path("/register")
.reply(&filter)
.await;
println!("{:?}", res.body());
assert_eq!(res.status(), StatusCode::CREATED);
assert_eq!(db.users.read().len(), 1);
}
/// Test a POST request to /transaction, an endpoint that exists
/// https://tools.ietf.org/html/rfc7231#section-6.3.2
/// Should NOT accept the json request as the user is unpriviliged
#[tokio::test]
async fn post_register_unpriviliged_user() {
let db = mocked_db();
let filter = consensus_routes(db.clone());
let res = warp::test::request()
.method("POST")
.json(&unpriviliged_mocked_user())
.path("/register")
.reply(&filter)
.await;
println!("{:?}", res.body());
assert_eq!(res.status(), StatusCode::BAD_REQUEST);
assert_eq!(db.users.read().len(), 0);
}
/// Test a POST request to /transaction, a resource that exists with a longer than expected
/// payload
/// https://tools.ietf.org/html/rfc7231#section-6.5.11
/// Should return 413 to user
#[tokio::test]
async fn post_too_long_content_413() {
let db = mocked_db();
let filter = consensus_routes(db);
let res = warp::test::request()
.method("POST")
.header("content-length", 1024 * 36)
.path("/transaction")
.reply(&filter)
.await;
assert_eq!(res.status(), StatusCode::PAYLOAD_TOO_LARGE);
}
}
// TODO: POST block without correct transactions test <09-04-21, yigit> //
// TODO: POST transaction while that source has pending transaction test <09-04-21, yigit> //
|