mptyl/ThothII
1
0
Fork 0
Code Issues 25 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix(auth): close diagnostic filesystem races

Browse Source
This commit is contained in:
marcopan
2026-08-17 13:04:15 +02:00
parent be1724890a
commit 6d438f4c7e
16 changed files with 545 additions and 90 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/tht/internal/authstorage/storage_windows_test.go
+16
View File
@@ -55,6 +55,22 @@ func TestProtocolRejectsRecordCreationAfterSessionsDirectoryDACLBecomesPermissiv
runRejected(t, request{Version: 1, Operation: "create", Root: root, Directory: "sessions", Filename: filename, ContentBase64: base64.StdEncoding.EncodeToString([]byte("record"))})
}
func TestProtocolValidatesAndCreatesTheCompleteWindowsSessionLayout(t *testing.T) {
root := filepath.Join(t.TempDir(), "auth")
runRequest(t, request{Version: 1, Operation: "ensure-layout", Root: root})
runRequest(t, request{Version: 1, Operation: "validate-root", Root: root})
for _, directory := range []string{"sessions", "oidc"} {
if err := safeio.ValidatePrivateDirectory(filepath.Join(root, directory)); err != nil {
t.Fatalf("%s DACL = %v", directory, err)
}
}
if err := setPermissiveDACL(filepath.Join(root, "oidc")); err != nil {
t.Fatal(err)
}
runRejected(t, request{Version: 1, Operation: "validate-root", Root: root})
}
func setPermissiveDACL(path string) error {
world, err := windows.StringToSid("S-1-1-0")
if err != nil {