packages/engine.io/test/webtransport.mjs - main - githubmirror/socket.io

packages/engine.io/test/webtransport.mjs
589 строк16 KB
Damien Arrachequesne
fix(eio): prevent WebTransport connections when a middleware is registered
16 апр 2026, 11:19
16 апр 2026, 11:19d1f5aa9
import * as eio from "../build/server.js";
import { Http3Server, WebTransport } from "@fails-components/webtransport";
import expect from "expect.js";
import request from "superagent";
import { createServer } from "http";
import { generateWebTransportCertificate } from "./util.mjs";

const TEXT_ENCODER = new TextEncoder();
const TEXT_DECODER = new TextDecoder();

function success(engine, h3server, done) {
  engine.close();
  h3server.stopServer();
  done();
}

function createPartialDone(done, count) {
  let i = 0;
  return () => {
    if (++i === count) {
      done();
    } else if (i > count) {
      done(new Error(`partialDone() called too many times: ${i} > ${count}`));
    }
  };
}

async function setupServer(opts, cb) {
  const certificate = await generateWebTransportCertificate(
    [{ shortName: "CN", value: "localhost" }],
    {
      days: 13, // the total length of the validity period MUST NOT exceed two weeks (https://w3c.github.io/webtransport/#custom-certificate-requirements)
    },
  );

  const engine = new eio.Server(opts);

  const h3Server = new Http3Server({
    port: 0, // random port
    host: "0.0.0.0",
    secret: "changeit",
    cert: certificate.cert,
    privKey: certificate.private,
  });

  (async () => {
    try {
      const stream = await h3Server.sessionStream("/engine.io/");
      const sessionReader = stream.getReader();

      while (true) {
        const { done, value } = await sessionReader.read();
        if (done) {
          break;
        }
        engine.onWebTransportSession(value);
      }
    } catch (ex) {
      console.error("Server error", ex);
    }
  })();

  h3Server.startServer();

  await h3Server.ready;

  cb({ engine, h3Server, certificate });
}

function setup(opts, cb) {
  setupServer(opts, async ({ engine, h3Server, certificate }) => {
    const client = new WebTransport(
      `https://127.0.0.1:${h3Server.port}/engine.io/`,
      {
        serverCertificateHashes: [
          {
            algorithm: "sha-256",
            value: certificate.hash,
          },
        ],
      },
    );

    await client.ready;

    const stream = await client.createBidirectionalStream();
    const reader = stream.readable.getReader();
    const writer = stream.writable.getWriter();

    engine.on("connection", async (socket) => {
      await reader.read(); // header
      await reader.read(); // payload (handshake)

      cb({ engine, h3Server, socket, client, stream, reader, writer });
    });

    await writer.write(Uint8Array.of(1));
    await writer.write(TEXT_ENCODER.encode("0"));
  });
}

function createHttpServer(port) {
  const httpServer = createServer();

  let retryCount = 0;

  return new Promise((resolve, reject) => {
    httpServer.listen(port, () => resolve(httpServer));

    httpServer.on("error", (e) => {
      if (e.code === "EADDRINUSE" && ++retryCount <= 3) {
        console.warn("port already in use, retrying...");
        setTimeout(() => {
          httpServer.listen(port, () => resolve(httpServer));
        }, 100);
      }
      reject(e);
    });
  });
}

describe("WebTransport", () => {
  it("should allow to connect with WebTransport directly", (done) => {
    setupServer({}, async ({ engine, h3Server, certificate }) => {
      const partialDone = createPartialDone(
        () => success(engine, h3Server, done),
        2,
      );

      engine.on("connection", (socket) => {
        expect(socket.transport.name).to.eql("webtransport");
        partialDone();
      });

      const client = new WebTransport(
        `https://127.0.0.1:${h3Server.port}/engine.io/`,
        {
          serverCertificateHashes: [
            {
              algorithm: "sha-256",
              value: certificate.hash,
            },
          ],
        },
      );

      await client.ready;

      const stream = await client.createBidirectionalStream();
      const reader = stream.readable.getReader();
      const writer = stream.writable.getWriter();

      (async function read() {
        const header = await reader.read();

        expect(header.value).to.eql(Uint8Array.of(107));

        const { value } = await reader.read();

        const handshake = TEXT_DECODER.decode(value);
        expect(handshake.startsWith("0{")).to.be(true);

        partialDone();
      })();

      writer.write(Uint8Array.of(1));
      writer.write(TEXT_ENCODER.encode("0"));
    });
  });

  it("should allow to upgrade to WebTransport", (done) => {
    setupServer(
      {
        transports: ["polling", "websocket", "webtransport"],
      },
      async ({ engine, h3Server, certificate }) => {
        const httpServer = await createHttpServer(h3Server.port);
        engine.attach(httpServer);

        const partialDone = createPartialDone(() => {
          httpServer.close();
          success(engine, h3Server, done);
        }, 2);

        engine.on("connection", (socket) => {
          socket.on("upgrade", (transport) => {
            expect(transport.name).to.eql("webtransport");
            partialDone();
          });
        });

        request(`http://localhost:${h3Server.port}/engine.io/`)
          .query({ EIO: 4, transport: "polling" })
          .end(async (_, res) => {
            const payload = JSON.parse(res.text.substring(1));

            expect(payload.upgrades).to.eql(["websocket", "webtransport"]);

            const client = new WebTransport(
              `https://127.0.0.1:${h3Server.port}/engine.io/`,
              {
                serverCertificateHashes: [
                  {
                    algorithm: "sha-256",
                    value: certificate.hash,
                  },
                ],
              },
            );

            await client.ready;

            const stream = await client.createBidirectionalStream();
            const reader = stream.readable.getReader();
            const writer = stream.writable.getWriter();

            (async function read() {
              const header = await reader.read();

              expect(header.value).to.eql(Uint8Array.of(6));

              const { done, value } = await reader.read();

              if (done) {
                return;
              }

              const probeValue = TEXT_DECODER.decode(value);
              expect(probeValue).to.eql("3probe");

              partialDone();
            })();

            await writer.write(Uint8Array.of(31));
            await writer.write(
              TEXT_ENCODER.encode(`0{"sid":"${payload.sid}"}`),
            );
            await writer.write(Uint8Array.of(6));
            await writer.write(TEXT_ENCODER.encode(`2probe`));
            await writer.write(Uint8Array.of(1));
            await writer.write(TEXT_ENCODER.encode(`5`));
          });
      },
    );
  });

  it("should close a connection that fails to open a bidirectional stream", (done) => {
    setupServer(
      {
        upgradeTimeout: 50,
      },
      async ({ engine, h3Server, certificate }) => {
        const client = new WebTransport(
          `https://127.0.0.1:${h3Server.port}/engine.io/`,
          {
            serverCertificateHashes: [
              {
                algorithm: "sha-256",
                value: certificate.hash,
              },
            ],
          },
        );

        await client.ready;

        client.closed.then(() => {
          success(engine, h3Server, done);
        });
      },
    );
  });

  it("should close a connection that sends an invalid handshake", (done) => {
    setupServer(
      {
        upgradeTimeout: 50,
      },
      async ({ engine, h3Server, certificate }) => {
        const client = new WebTransport(
          `https://127.0.0.1:${h3Server.port}/engine.io/`,
          {
            serverCertificateHashes: [
              {
                algorithm: "sha-256",
                value: certificate.hash,
              },
            ],
          },
        );

        await client.ready;
        const stream = await client.createBidirectionalStream();
        const writer = stream.writable.getWriter();

        await writer.write(Uint8Array.of(1, 2, 3));

        client.closed.then(() => {
          success(engine, h3Server, done);
        });
      },
    );
  });

  it("should close a connection that sends an invalid upgrade", (done) => {
    setupServer(
      {
        transports: ["polling", "websocket", "webtransport"],
      },
      async ({ engine, h3Server, certificate }) => {
        const httpServer = await createHttpServer(h3Server.port);
        engine.attach(httpServer);

        request(`http://localhost:${h3Server.port}/engine.io/`)
          .query({ EIO: 4, transport: "polling" })
          .end(async (_, res) => {
            const payload = JSON.parse(res.text.substring(1));

            expect(payload.upgrades).to.eql(["websocket", "webtransport"]);

            const client = new WebTransport(
              `https://127.0.0.1:${h3Server.port}/engine.io/`,
              {
                serverCertificateHashes: [
                  {
                    algorithm: "sha-256",
                    value: certificate.hash,
                  },
                ],
              },
            );

            await client.ready;

            const stream = await client.createBidirectionalStream();
            const writer = stream.writable.getWriter();

            await writer.write(Uint8Array.of(31));
            await writer.write(
              TEXT_ENCODER.encode(`0{"sid":"11111111111111111111"}`),
            );

            client.closed.then(() => {
              success(engine, h3Server, done);
            });
          });
      },
    );
  });

  it("should close a connection that sends an invalid upgrade (bis)", (done) => {
    setupServer(
      {
        transports: ["polling", "websocket", "webtransport"],
      },
      async ({ engine, h3Server, certificate }) => {
        const httpServer = await createHttpServer(h3Server.port);
        engine.attach(httpServer);

        request(`http://localhost:${h3Server.port}/engine.io/`)
          .query({ EIO: 4, transport: "polling" })
          .end(async (_, res) => {
            const payload = JSON.parse(res.text.substring(1));

            expect(payload.upgrades).to.eql(["websocket", "webtransport"]);

            const client = new WebTransport(
              `https://127.0.0.1:${h3Server.port}/engine.io/`,
              {
                serverCertificateHashes: [
                  {
                    algorithm: "sha-256",
                    value: certificate.hash,
                  },
                ],
              },
            );

            await client.ready;

            const stream = await client.createBidirectionalStream();
            const writer = stream.writable.getWriter();

            await writer.write(Uint8Array.of(20));
            await writer.write(TEXT_ENCODER.encode(`0{"sid":"__proto__"}`));

            client.closed.then(() => {
              success(engine, h3Server, done);
            });
          });
      },
    );
  });

  it("should refuse the connection when a middleware is registered", (done) => {
    setupServer({}, async ({ engine, h3Server, certificate }) => {
      engine.use((req, res, next) => next());

      engine.on("connection", () => {
        done(new Error("should not happen"));
      });

      const client = new WebTransport(
        `https://127.0.0.1:${h3Server.port}/engine.io/`,
        {
          serverCertificateHashes: [
            {
              algorithm: "sha-256",
              value: certificate.hash,
            },
          ],
        },
      );

      await client.closed;

      success(engine, h3Server, done);
    });
  });

  it("should send ping/pong packets", (done) => {
    setup(
      {
        pingInterval: 20,
      },
      async ({ engine, h3Server, reader, writer }) => {
        for (let i = 0; i < 5; i++) {
          const header = await reader.read();
          expect(header.value).to.eql(Uint8Array.of(1));

          const packet = await reader.read();
          const value = TEXT_DECODER.decode(packet.value);
          expect(value).to.eql("2");

          writer.write(Uint8Array.of(1));
          writer.write(TEXT_ENCODER.encode("3"));
        }

        success(engine, h3Server, done);
      },
    );
  });

  it("should close on ping timeout", (done) => {
    setup(
      {
        pingInterval: 20,
        pingTimeout: 30,
      },
      async ({ engine, h3Server, socket, client }) => {
        const partialDone = createPartialDone(done, 2);
        socket.on("close", (reason) => {
          expect(reason).to.eql("ping timeout");
          partialDone();
        });

        client.closed.then(() => success(engine, h3Server, partialDone));
      },
    );
  });

  it("should handle connections closed by the server", (done) => {
    setup({}, async ({ engine, h3Server, socket, client }) => {
      client.closed.then(() => success(engine, h3Server, done));

      socket.close();
    });
  });

  it("should handle connections closed by the client", (done) => {
    setup({}, async ({ engine, h3Server, socket, client }) => {
      socket.on("close", (reason) => {
        expect(reason).to.eql("transport close");
        success(engine, h3Server, done);
      });

      client.close();
    });
  });

  it("should send some plaintext data (client to server)", (done) => {
    setup({}, async ({ engine, h3Server, socket, writer }) => {
      socket.on("data", (data) => {
        expect(data).to.eql("hello");

        success(engine, h3Server, done);
      });

      writer.write(Uint8Array.of(6));
      writer.write(TEXT_ENCODER.encode("4hello"));
    });
  });

  it("should send some plaintext data (server to client)", (done) => {
    setup({}, async ({ engine, h3Server, socket, reader }) => {
      socket.send("hello");

      const header = await reader.read();
      expect(header.value).to.eql(Uint8Array.of(6));

      const { value } = await reader.read();
      const decoded = TEXT_DECODER.decode(value);
      expect(decoded).to.eql("4hello");

      success(engine, h3Server, done);
    });
  });

  it("should invoke send callbacks (server to client)", (done) => {
    setup({}, async ({ engine, h3Server, socket, reader }) => {
      const messageCount = 4;
      let receivedCallbacks = 0;

      for (let i = 0; i < messageCount; i++) {
        socket.send("hello", () => {
          if (++receivedCallbacks === messageCount) {
            success(engine, h3Server, done);
          }
        });
      }
    });
  });

  it("should send some binary data (client to server)", (done) => {
    setup({}, async ({ engine, h3Server, socket, writer }) => {
      socket.on("data", (data) => {
        expect(Buffer.isBuffer(data)).to.be(true);
        expect(data).to.eql(Buffer.of(1, 2, 3));

        success(engine, h3Server, done);
      });

      writer.write(Uint8Array.of(131));
      writer.write(Uint8Array.of(1, 2, 3));
    });
  });

  it("should send some binary data (server to client)", (done) => {
    setup({}, async ({ engine, h3Server, socket, reader }) => {
      socket.send(Buffer.of(1, 2, 3));

      const header = await reader.read();
      expect(header.value).to.eql(Uint8Array.of(131));

      const { value } = await reader.read();
      expect(value).to.eql(Uint8Array.of(1, 2, 3));

      success(engine, h3Server, done);
    });
  });

  it("should send some big binary data (client to server)", (done) => {
    setup({}, async ({ engine, h3Server, socket, writer }) => {
      const payload = Buffer.allocUnsafe(1e6);

      socket.on("data", (data) => {
        expect(Buffer.isBuffer(data)).to.be(true);
        expect(data).to.eql(payload);

        success(engine, h3Server, done);
      });

      writer.write(Uint8Array.of(255, 0, 0, 0, 0, 0, 15, 66, 64));
      writer.write(payload);
    });
  });

  it("should send some big binary data (server to client)", (done) => {
    setup({}, async ({ engine, h3Server, socket, reader }) => {
      const payload = Buffer.allocUnsafe(1e6);

      socket.send(payload);

      const header = await reader.read();
      expect(header.value).to.eql(
        Uint8Array.of(255, 0, 0, 0, 0, 0, 15, 66, 64),
      );

      const chunk1 = await reader.read();
      // the size of the chunk is implementation-specific (maxDatagramSize)
      expect(chunk1.value).to.eql(payload.slice(0, 1228));

      const chunk2 = await reader.read();
      expect(chunk2.value).to.eql(payload.slice(1228, 2456));

      success(engine, h3Server, done);
    });
  });
});