FilesExpand file tree

 main

/

test_webhooks.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

166 lines (135 loc) · 4.96 KB

 main

/

test_webhooks.py

Copy path

Top

File metadata and controls

• Code
• Blame

166 lines (135 loc) · 4.96 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

import time

import httpx

import pytest

import respx

from httpx import Request

import replicate

from replicate.client import Client

from replicate.webhook import (

InvalidSecretKeyError,

InvalidSignatureError,

InvalidTimestampError,

MissingWebhookBodyError,

MissingWebhookHeaderError,

WebhookSigningSecret,

)

@pytest.fixture

def webhook_signing_secret():

# This is a test secret and should not be used in production

return WebhookSigningSecret(key="whsec_MfKQ9r8GKYqrTwjUPD8ILPZIo2LaLaSw")

@pytest.mark.asyncio

@pytest.mark.parametrize("async_flag", [True, False])

@respx.mock

async def test_get_webhook_secret(async_flag, webhook_signing_secret):

respx.get("https://api.replicate.com/v1/webhooks/default/secret").mock(

return_value=httpx.Response(200, json={"key": webhook_signing_secret.key})

)

client = Client(api_token="test-token")

if async_flag:

secret = await client.webhooks.default.async_secret()

else:

secret = client.webhooks.default.secret()

assert isinstance(secret, WebhookSigningSecret)

assert secret.key == webhook_signing_secret.key

body = '{"test": 2432232314}'

headers = {

"Content-Type": "application/json",

"Webhook-ID": "msg_p5jXN8AQM9LWM0D4loKWxJek",

"Webhook-Timestamp": "1614265330",

"Webhook-Signature": "v1,g0hM9SsE+OTPJTGt/tmIKtSyZlE3uFJELVlNIOLJ1OE=",

}

request = Request(

method="POST",

url="http://test.host/webhook",

headers=headers,

content=body.encode(),

)

client.webhooks.validate(request=request, secret=secret)

def test_validate_webhook_invalid_signature(webhook_signing_secret):

headers = {

"Content-Type": "application/json",

"Webhook-ID": "msg_p5jXN8AQM9LWM0D4loKWxJek",

"Webhook-Timestamp": "1614265330",

"Webhook-Signature": "v1,invalid_signature",

}

body = '{"test": 2432232314}'

with pytest.raises(InvalidSignatureError, match="Webhook signature is invalid"):

replicate.webhooks.validate(

headers=headers, body=body, secret=webhook_signing_secret

)

def test_validate_webhook_missing_webhook_id(webhook_signing_secret):

headers = {

"Content-Type": "application/json",

}

body = '{"test": 2432232314}'

with pytest.raises(MissingWebhookHeaderError, match="Missing webhook id"):

replicate.webhooks.validate(

headers=headers, body=body, secret=webhook_signing_secret

)

def test_validate_webhook_invalid_secret():

headers = {

"Content-Type": "application/json",

"Webhook-ID": "msg_p5jXN8AQM9LWM0D4loKWxJek",

"Webhook-Timestamp": "1614265330",

"Webhook-Signature": "v1,invalid_signature",

}

body = '{"test": 2432232314}'

with pytest.raises(InvalidSecretKeyError, match="Invalid secret key format"):

replicate.webhooks.validate(

headers=headers,

body=body,

secret=WebhookSigningSecret(key="invalid_secret_format"),

)

def test_validate_webhook_missing_headers(webhook_signing_secret):

headers = None

body = '{"test": 2432232314}'

with pytest.raises(MissingWebhookHeaderError, match="Missing webhook headers"):

replicate.webhooks.validate(

headers=headers, # type: ignore

body=body,

secret=webhook_signing_secret,

)

def test_validate_webhook_missing_body(webhook_signing_secret):

headers = {

"Content-Type": "application/json",

"Webhook-ID": "msg_p5jXN8AQM9LWM0D4loKWxJek",

"Webhook-Timestamp": "1614265330",

"Webhook-Signature": "v1,g0hM9SsE+OTPJTGt/tmIKtSyZlE3uFJELVlNIOLJ1OE=",

}

body = None

with pytest.raises(MissingWebhookBodyError, match="Missing webhook body"):

replicate.webhooks.validate(

headers=headers,

body=body, # type: ignore

secret=webhook_signing_secret,

)

@pytest.mark.parametrize(

"timestamp_offset, timestamp_invalid",

[

(-3601, True), # 1 hour and 1 second in the past

(3601, True), # 1 hour and 1 second in the future

(-3599, False), # 59 minutes and 59 seconds in the past (valid)

(3599, False), # 59 minutes and 59 seconds in the future (valid)

],

)

def test_validate_webhook_timestamp(

webhook_signing_secret, timestamp_offset, timestamp_invalid

):

current_time = int(time.time())

timestamp = str(current_time + timestamp_offset)

headers = {

"Content-Type": "application/json",

"Webhook-ID": "msg_p5jXN8AQM9LWM0D4loKWxJek",

"Webhook-Timestamp": timestamp,

"Webhook-Signature": "v1,invalid_signature",

}

body = '{"test": 2432232314}'

with pytest.raises(

(InvalidTimestampError if timestamp_invalid else InvalidSignatureError),

):

replicate.webhooks.validate(

headers=headers,

body=body,

secret=webhook_signing_secret,

tolerance=3600,

)