mirror of
https://github.com/coollabsio/coolify.git
synced 2026-03-11 08:55:47 +00:00
3ff36ef684
Add SSH key content validation to detect stale key files and invalidate multiplexed connections when key content changes. Fixes #7724
68 lines
2.5 KiB
PHP
68 lines
2.5 KiB
PHP
<?php
|
|
|
|
/**
|
|
* Unit tests for SSH key content validation fix.
|
|
*
|
|
* These tests verify the fix for issue #7724: Sporadic "Permission denied (publickey)" errors
|
|
* caused by SSH key content mismatch between database and filesystem.
|
|
*
|
|
* @see https://github.com/coollabsio/coolify/issues/7724
|
|
*/
|
|
|
|
use App\Helpers\SshMultiplexingHelper;
|
|
use App\Models\PrivateKey;
|
|
|
|
test('PrivateKey model encrypts private_key attribute', function () {
|
|
$privateKey = new PrivateKey;
|
|
$casts = $privateKey->getCasts();
|
|
|
|
expect($casts['private_key'])->toBe('encrypted');
|
|
});
|
|
|
|
test('PrivateKey getKeyLocation returns correct path format', function () {
|
|
$privateKey = new PrivateKey;
|
|
$privateKey->uuid = 'test-uuid-123';
|
|
|
|
expect($privateKey->getKeyLocation())->toBe('/var/www/html/storage/app/ssh/keys/ssh_key@test-uuid-123');
|
|
});
|
|
|
|
test('SshMultiplexingHelper validateSshKey method exists', function () {
|
|
$class = new ReflectionClass(SshMultiplexingHelper::class);
|
|
$method = $class->getMethod('validateSshKey');
|
|
|
|
expect($method->isPrivate())->toBeTrue()
|
|
->and($method->isStatic())->toBeTrue();
|
|
});
|
|
|
|
test('SshMultiplexingHelper uses Storage disk for key validation', function () {
|
|
$class = new ReflectionClass(SshMultiplexingHelper::class);
|
|
$source = file_get_contents($class->getFileName());
|
|
|
|
expect($source)->toContain("Storage::disk('ssh-keys')")
|
|
->and($source)->toContain('$disk->exists($filename)')
|
|
->and($source)->toContain('$disk->get($filename)');
|
|
});
|
|
|
|
test('SshMultiplexingHelper logs key content mismatch', function () {
|
|
$class = new ReflectionClass(SshMultiplexingHelper::class);
|
|
$source = file_get_contents($class->getFileName());
|
|
|
|
expect($source)->toContain("Log::warning('SSH key file content mismatch detected")
|
|
->and($source)->toContain("Log::debug('SSH key file not found, storing key");
|
|
});
|
|
|
|
test('validateSshKey compares file content with database value', function () {
|
|
$class = new ReflectionClass(SshMultiplexingHelper::class);
|
|
$source = file_get_contents($class->getFileName());
|
|
|
|
expect($source)->toContain('$storedContent !== $privateKey->private_key')
|
|
->and($source)->toContain('$privateKey->storeInFileSystem()');
|
|
});
|
|
|
|
test('validateSshKey invalidates mux on content mismatch', function () {
|
|
$class = new ReflectionClass(SshMultiplexingHelper::class);
|
|
$source = file_get_contents($class->getFileName());
|
|
|
|
expect($source)->toContain('self::removeMuxFile($server)')
|
|
->and($source)->toContain("Log::debug('Invalidated mux connection due to key content mismatch");
|
|
});
|