1. 1//! Target verification runs in the broker worker, never in the server
2. 2//! (docs/design/72-openxml-documents.md, F4), and fails closed.
3. 3
4. 4#![allow(clippy::unwrap_used, clippy::expect_used)]
5. 5
6. 6use std::path::Path;
7. 7
8. 8use vak_ooxml::fixtures;
9. 9use vak_sandbox::TargetCheckPlan;
10. 10
11. 11fn worker() -> &'static Path {
12. 12 Path::new(env!("CARGO_BIN_EXE_vak-tool-worker"))
13. 13}
14. 14
15. 15fn plan(path: &str) -> TargetCheckPlan {
16. 16 TargetCheckPlan {
17. 17 verifier: "format.openxml".into(),
18. 18 path: path.into(),
19. 19 }
20. 20}
21. 21
22. 22#[tokio::test]
23. 23async fn office_candidates_are_verified_in_the_worker() {
24. 24 let root = tempfile::tempdir().unwrap();
25. 25 std::fs::write(root.path().join("deck.pptx"), fixtures::pptx()).unwrap();
26. 26 std::fs::write(
27. 27 root.path().join("invoice.docx"),
28. 28 fixtures::word_with(
29. 29 "application/vnd.ms-word.document.macroEnabled.main+xml",
30. 30 fixtures::MINIMAL_WORD_BODY,
31. 31 &[],
32. 32 &[],
33. 33 &[],
34. 34 &[],
35. 35 ),
36. 36 )
37. 37 .unwrap();
38. 38 let results = vak_tools::broker::verify_targets(
39. 39 worker(),
40. 40 root.path(),
41. 41 &[plan("deck.pptx"), plan("invoice.docx")],
42. 42 )
43. 43 .await;
44. 44 assert_eq!(results.len(), 2);
45. 45 assert_eq!(results[0].status, "passed", "{}", results[0].evidence);
46. 46 assert!(
47. 47 results[0].evidence.contains("2 slides"),
48. 48 "{}",
49. 49 results[0].evidence
50. 50 );
51. 51 assert_eq!(results[1].status, "failed");
52. 52 assert!(
53. 53 results[1].evidence.contains("but is named .docx"),
54. 54 "{}",
55. 55 results[1].evidence
56. 56 );
57. 57}
58. 58
59. 59#[tokio::test]
60. 60async fn verification_fails_closed_when_the_worker_cannot_run() {
61. 61 let root = tempfile::tempdir().unwrap();
62. 62 std::fs::write(root.path().join("book.xlsx"), fixtures::xlsx()).unwrap();
63. 63 let results = vak_tools::broker::verify_targets(
64. 64 Path::new("/nonexistent/vak-tool-worker"),
65. 65 root.path(),
66. 66 &[plan("book.xlsx")],
67. 67 )
68. 68 .await;
69. 69 assert_eq!(results.len(), 1);
70. 70 assert_eq!(results[0].status, "failed");
71. 71 assert!(results[0].evidence.starts_with("verification did not run"));
72. 72}
73. 73
74. 74#[tokio::test]
75. 75async fn checks_outside_the_root_are_refused_by_the_worker() {
76. 76 let root = tempfile::tempdir().unwrap();
77. 77 let results =
78. 78 vak_tools::broker::verify_targets(worker(), root.path(), &[plan("../escape.docx")]).await;
79. 79 assert_eq!(results[0].status, "failed", "{}", results[0].evidence);
80. 80}
81. 81