Files
security-alert-center/backend/tests/test_winrm_connect.py
T

118 lines
4.1 KiB
Python

"""WinRM command builder, bundle push and CLIXML error parsing tests."""
from pathlib import Path
from unittest.mock import patch
from app.services.winrm_connect import (
RDP_BUNDLE_REQUIRED,
RDP_REMOTE_STAGING,
WinRmCmdResult,
_clixml_to_plain,
_custom_deploy_body,
_deploy_from_staging_body,
_prepare_staging_body,
_winrm_failure_detail,
_write_file_chunk_body,
run_winrm_rdp_monitor_update,
)
def test_prepare_staging_recreates_remote_dir():
script = _prepare_staging_body(RDP_REMOTE_STAGING)
assert "Remove-Item" in script
assert "_sac_staging" in script
def test_deploy_from_staging_runs_local_bundle():
script = _deploy_from_staging_body(RDP_REMOTE_STAGING)
assert "-SourceShareRoot" in script
assert "Deploy-LoginMonitor.ps1" in script
def test_write_file_chunk_body_supports_append():
first = _write_file_chunk_body(r"C:\temp\a.ps1", "YQ==", append=False)
second = _write_file_chunk_body(r"C:\temp\a.ps1", "Yg==", append=True)
assert "WriteAllBytes" in first
assert "Append" in second
def test_custom_deploy_script_uses_literal_path():
script = _custom_deploy_body(r"C:\tmp\Deploy-LoginMonitor.ps1")
assert r"C:\tmp\Deploy-LoginMonitor.ps1" in script
assert "Test-Path -LiteralPath" in script
def test_custom_deploy_script_escapes_single_quotes():
script = _custom_deploy_body(r"C:\Users\O'Brien\Deploy-LoginMonitor.ps1")
assert "O''Brien" in script
def test_run_winrm_rdp_monitor_update_pushes_bundle_from_sac_git(tmp_path: Path):
repo = tmp_path / "repo"
repo.mkdir()
for name in RDP_BUNDLE_REQUIRED:
(repo / name).write_text(f"content-{name}", encoding="utf-8")
(repo / "Sac-Client.ps1").write_text("Sac client", encoding="utf-8")
calls: list[str] = []
def fake_run_ps(*, script: str, **kwargs) -> WinRmCmdResult:
calls.append(script)
if "Remove-Item" in script:
return WinRmCmdResult(ok=True, message="staging ok", target="pc", stdout="Staging ready")
if "Deploy-LoginMonitor.ps1 missing" in script or "& $deploy" in script:
return WinRmCmdResult(
ok=True,
message="WinRM OK (pc), exit 0",
target="pc",
stdout="deployed 1.2.3",
exit_code=0,
)
return WinRmCmdResult(ok=True, message="chunk ok", target="pc", exit_code=0)
with (
patch("app.services.winrm_connect._fetch_rdp_bundle_dir", return_value=repo),
patch("app.services.winrm_connect.run_winrm_ps", side_effect=fake_run_ps),
):
result = run_winrm_rdp_monitor_update(
target="pc",
user="B26\\admin",
password="pw",
repo_url="https://git.example.com/RDP-login-monitor.git",
)
assert result.ok is True
assert "SAC pushed" in result.stdout
assert any("WriteAllBytes" in call or "Append" in call for call in calls)
assert "git.exe" not in "\n".join(calls)
def test_winrm_failure_detail_extracts_message_from_clixml():
clixml = (
"#< CLIXML\n"
'<Objs><Obj><MS><S N="Message">Preparing modules for first use.</S>'
'<S N="Message">Deploy-LoginMonitor.ps1 not found on client PC</S></MS></Obj></Objs>'
)
detail = _winrm_failure_detail("", clixml, 1)
assert detail == "Deploy-LoginMonitor.ps1 not found on client PC"
def test_winrm_failure_detail_prefers_plain_stderr():
detail = _winrm_failure_detail("", "Access is denied", 5)
assert detail == "Access is denied"
def test_winrm_failure_detail_never_returns_raw_clixml_progress():
clixml = (
"#< CLIXML <Objs Version=\"1.1.0.1\">"
'<Obj S="progress"><MS><PR N="Record"><AV>Preparing modules for first use.</AV></PR></MS></Obj>'
)
detail = _winrm_failure_detail("", clixml, 1)
assert "#< CLIXML" not in detail
assert "exit code" in detail.lower()
def test_clixml_to_plain_strips_progress_only_blob():
clixml = "#< CLIXML <Objs><Obj S=\"progress\"><AV>Preparing modules for first use.</AV></Obj></Objs>"
assert _clixml_to_plain(clixml) == ""