hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Webfinger: Add test showing wrong webfinger behavior

Browse source
This commit is contained in:
Lain Soykaf 2024-05-22 12:57:30 +04:00
commit d1b053f3ba
2 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
test/pleroma/web/web_finger_test.exs
View file

@ -204,4 +204,19 @@ defmodule Pleroma.Web.WebFingerTest do
assert :error = WebFinger.finger("pekorino@pawoo.net")
end
end
test "prevents forgeries" do
Tesla.Mock.mock(fn
%{url: "https://fba.ryona.agency/.well-known/webfinger?resource=acct:graf@fba.ryona.agency"} ->
fake_webfinger =
File.read!("test/fixtures/webfinger/graf-imposter-webfinger.json") |> Jason.decode!()
Tesla.Mock.json(fake_webfinger)
%{url: "https://fba.ryona.agency/.well-known/host-meta"} ->
{:ok, %Tesla.Env{status: 404}}
end)
refute {:ok, _} = WebFinger.finger("graf@fba.ryona.agency")
end
end