coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expose protected operability metrics
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-29 23:52:06 +02:00
parent a336f594e7
commit 2bcda7f26f
3 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
tests/test_web.py
View file

@ -73,6 +73,19 @@ class PortalApplicationTests(unittest.TestCase):
self.assertEqual("200 OK", home["status"])
self.assertIn(b"Sign in with KeyCape", html)
def test_metrics_expose_only_bounded_aggregate_state(self):
denied, _ = invoke(self.app, "/metrics", claims={}, marker="")
self.assertEqual("403 Forbidden", denied["status"])
result, payload = invoke(self.app, "/metrics", claims={})
self.assertEqual("200 OK", result["status"])
self.assertEqual(
"text/plain; version=0.0.4; charset=utf-8",
result["headers"]["Content-Type"],
)
self.assertIn(b"user_engine_ready 1", payload)
self.assertIn(b'user_engine_records{kind="users"} 0', payload)
self.assertNotIn(SECRET.encode(), payload)
def test_protected_route_rejects_untrusted_claim_header(self):
result, payload = invoke(
self.app, "/api/v1/me", claims=self.claims, marker="attacker"