mirror of
https://github.com/block/buzz.git
synced 2026-11-08 10:21:46 +00:00
83fc30b14d
Signed-off-by: Bradley Axen <baxen@squareup.com> Signed-off-by: npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7 <6e30cd56c30e030cd31bb0939b94a7c257c9a09d5ba2d92cf2735da45629f248@sprout-oss.stage.blox.sqprod.co> Co-authored-by: npub1ty04d6th3jzvggd25za6xmqrh99g42kvkvqsmf7ydv793fgyxa3s3t2lw7 <591f56e9778c84c421aaa0bba36c03b94a8aaaccb3010da7c46b3c58a5043763@sprout-oss.stage.blox.sqprod.co> Co-authored-by: npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7 <6e30cd56c30e030cd31bb0939b94a7c257c9a09d5ba2d92cf2735da45629f248@sprout-oss.stage.blox.sqprod.co>
76 lines
2.8 KiB
Rust
76 lines
2.8 KiB
Rust
//! Live round-trip test for the **static-credentials** S3 path against a local
|
|
//! MinIO, guarded by `#[ignore]`.
|
|
//!
|
|
//! This is the path local/dev and any static-key deployment uses
|
|
//! (`s3_access_key`/`s3_secret_key` both non-empty -> `Credentials::new`). It
|
|
//! exists to prove that adding the IRSA/credential-chain fallback did **not**
|
|
//! regress hardcoded credentials.
|
|
//!
|
|
//! Run it against the docker-compose MinIO (creds `buzz_dev`/`buzz_dev_secret`,
|
|
//! bucket `buzz-media`, endpoint `http://localhost:9000`):
|
|
//!
|
|
//! ```bash
|
|
//! docker compose up -d minio minio-init
|
|
//! cargo test -p buzz-media --test static_creds_minio -- --ignored
|
|
//! ```
|
|
//!
|
|
//! Overridable via `BUZZ_S3_ENDPOINT` / `BUZZ_S3_ACCESS_KEY` /
|
|
//! `BUZZ_S3_SECRET_KEY` / `BUZZ_S3_BUCKET`.
|
|
|
|
use buzz_media::config::MediaConfig;
|
|
use buzz_media::storage::MediaStorage;
|
|
|
|
fn minio_config() -> MediaConfig {
|
|
MediaConfig {
|
|
s3_endpoint: std::env::var("BUZZ_S3_ENDPOINT")
|
|
.unwrap_or_else(|_| "http://localhost:9000".to_string()),
|
|
s3_access_key: std::env::var("BUZZ_S3_ACCESS_KEY")
|
|
.unwrap_or_else(|_| "buzz_dev".to_string()),
|
|
s3_secret_key: std::env::var("BUZZ_S3_SECRET_KEY")
|
|
.unwrap_or_else(|_| "buzz_dev_secret".to_string()),
|
|
s3_bucket: std::env::var("BUZZ_S3_BUCKET").unwrap_or_else(|_| "buzz-media".to_string()),
|
|
s3_region: "us-east-1".to_string(),
|
|
max_image_bytes: 50 * 1024 * 1024,
|
|
max_gif_bytes: 10 * 1024 * 1024,
|
|
max_video_bytes: 524_288_000,
|
|
max_file_bytes: 104_857_600,
|
|
public_base_url: "http://localhost:3000/media".to_string(),
|
|
upload_records_enabled: false,
|
|
upload_ip_header: None,
|
|
upload_port_header: None,
|
|
}
|
|
}
|
|
|
|
#[tokio::test]
|
|
#[ignore = "requires a live MinIO (docker compose up -d minio minio-init)"]
|
|
async fn static_creds_round_trip_against_minio() {
|
|
let storage =
|
|
MediaStorage::new(&minio_config()).expect("static creds should build a storage client");
|
|
|
|
let key = format!("_test/static-creds-{}.bin", std::process::id());
|
|
let body = b"hardcoded-creds-still-work";
|
|
|
|
// PUT
|
|
storage
|
|
.put(&key, body, "application/octet-stream")
|
|
.await
|
|
.expect("put with static creds should succeed");
|
|
|
|
// HEAD -> exists with correct size
|
|
assert!(storage.head(&key).await.expect("head should succeed"));
|
|
let meta = storage
|
|
.head_with_metadata(&key)
|
|
.await
|
|
.expect("head_with_metadata should succeed")
|
|
.expect("object should exist");
|
|
assert_eq!(meta.size, body.len() as u64);
|
|
|
|
// GET round-trips the bytes
|
|
let got = storage.get(&key).await.expect("get should succeed");
|
|
assert_eq!(got, body);
|
|
|
|
// DELETE, then HEAD reports absence
|
|
storage.delete(&key).await.expect("delete should succeed");
|
|
assert!(!storage.head(&key).await.expect("head after delete"));
|
|
}
|