justin
8ecfe84540
Add the .NET 8 solution scaffolded against PLAN.md. Three projects share WebhookServer.Core (models, auth, execution, storage, IPC, callbacks) and WebhookServer.Service hosts an embedded Kestrel listener plus the named-pipe admin server. WebhookServer.Gui is a thin MVVM client over the pipe. Includes 25 unit tests covering HMAC verification, bearer auth, IP allowlist parsing, arg-template rendering, DPAPI round-trip, and the encrypt-on-save config store. Install/uninstall PowerShell scripts default to LocalSystem and accept a domain user or gMSA via -ServiceAccount. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
58 lines
1.7 KiB
C#
58 lines
1.7 KiB
C#
using System.Net;
|
|
using WebhookServer.Core.Auth;
|
|
using Xunit;
|
|
|
|
namespace WebhookServer.Core.Tests;
|
|
|
|
public class IpAllowListTests
|
|
{
|
|
[Fact]
|
|
public void Empty_list_allows_everything()
|
|
{
|
|
var list = IpAllowList.Parse(Array.Empty<string>());
|
|
Assert.True(list.IsEmpty);
|
|
Assert.True(list.Contains(IPAddress.Parse("1.2.3.4")));
|
|
Assert.True(list.Contains(IPAddress.Parse("::1")));
|
|
}
|
|
|
|
[Fact]
|
|
public void Single_v4_matches_exact_only()
|
|
{
|
|
var list = IpAllowList.Parse(new[] { "192.168.1.10" });
|
|
Assert.True(list.Contains(IPAddress.Parse("192.168.1.10")));
|
|
Assert.False(list.Contains(IPAddress.Parse("192.168.1.11")));
|
|
}
|
|
|
|
[Fact]
|
|
public void V4_cidr_matches_inside_range()
|
|
{
|
|
var list = IpAllowList.Parse(new[] { "10.0.0.0/8" });
|
|
Assert.True(list.Contains(IPAddress.Parse("10.10.1.42")));
|
|
Assert.False(list.Contains(IPAddress.Parse("11.0.0.1")));
|
|
}
|
|
|
|
[Fact]
|
|
public void V6_cidr_matches_inside_range()
|
|
{
|
|
var list = IpAllowList.Parse(new[] { "fd00::/8" });
|
|
Assert.True(list.Contains(IPAddress.Parse("fd12:3456::1")));
|
|
Assert.False(list.Contains(IPAddress.Parse("fc00::1")));
|
|
}
|
|
|
|
[Fact]
|
|
public void Ipv4_mapped_v6_matches_v4_entry()
|
|
{
|
|
var list = IpAllowList.Parse(new[] { "127.0.0.1" });
|
|
var mapped = IPAddress.Parse("::ffff:127.0.0.1");
|
|
Assert.True(list.Contains(mapped));
|
|
}
|
|
|
|
[Fact]
|
|
public void TryParse_reports_invalid_entries()
|
|
{
|
|
var ok = IpAllowList.TryParse(new[] { "10.0.0.1", "garbage" }, out _, out var error);
|
|
Assert.False(ok);
|
|
Assert.Contains("garbage", error);
|
|
}
|
|
}
|