J3vb/OwnCord
1
0
Fork 0
mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

test(ws): lock rotation-burst admission for E2EE offers (W1-2)

Browse Source 
Simulates an 8-participant call: two back-to-back full rotations (7 offers
each) must pass the limiter, while same-target spam still trips it.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
J3vb
2026-07-19 08:46:28 +02:00
co-authored by Claude Fable 5
parent 5df452299b
commit 5d6257d848
1 changed files with 43 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Server/ws/handler_v2_voice_e2ee_offer_test.go
+43
View File
@@ -5,6 +5,8 @@ import (
"encoding/base64"
"strings"
"testing"
"github.com/owncord/server/auth"
)
var (
@@ -50,6 +52,47 @@ func TestVoiceE2EEOfferV2_HappyPath(t *testing.T) {
}
}
// TestVoiceE2EEOfferV2_RotationBurstNotRateLimited locks the W1-2 fix: the
// key holder rotates by sending one offer per peer back-to-back, so the
// limiter is keyed per (sender, target) and must admit an entire rotation
// burst in a large call — while repeated offers at one victim stay capped.
func TestVoiceE2EEOfferV2_RotationBurstNotRateLimited(t *testing.T) {
deps := offerDeps(true)
deps.Limiter = auth.NewRateLimiter()
info := ClientInfo{UserID: 1, VoiceChannelID: 100}
// 8-participant call: one offer to each of 7 peers, immediately.
for target := int64(2); target <= 8; target++ {
cmd := VoiceE2EEOfferCmd{userID: 1, targetUserID: target, encryptedKey: validEncKey, iv: validIV}
if result := handleVoiceE2EEOfferV2(context.Background(), cmd, info, deps); result.Error != nil {
t.Fatalf("rotation offer to peer %d rejected: %v", target, result.Error)
}
}
// Join/leave churn triggers back-to-back rotations — a second full burst
// must also pass.
for target := int64(2); target <= 8; target++ {
cmd := VoiceE2EEOfferCmd{userID: 1, targetUserID: target, encryptedKey: validEncKey, iv: validIV}
if result := handleVoiceE2EEOfferV2(context.Background(), cmd, info, deps); result.Error != nil {
t.Fatalf("second rotation offer to peer %d rejected: %v", target, result.Error)
}
}
// Spamming a single victim is still limited: 2 offers spent above, the
// per-target budget is 5/sec, so within 4 more attempts one must trip.
var limited bool
for i := 0; i < 4; i++ {
cmd := VoiceE2EEOfferCmd{userID: 1, targetUserID: 2, encryptedKey: validEncKey, iv: validIV}
if result := handleVoiceE2EEOfferV2(context.Background(), cmd, info, deps); result.Error != nil {
limited = true
break
}
}
if !limited {
t.Fatal("same-target offer spam must still hit the rate limit")
}
}
func TestVoiceE2EEOfferV2_NotInVoiceChannel(t *testing.T) {
deps := offerDeps(true)
cmd := VoiceE2EEOfferCmd{userID: 1, targetUserID: 2, encryptedKey: validEncKey, iv: validIV}