diff --git a/fixtures/vcr_cassettes/create_report.yml b/fixtures/vcr_cassettes/create_report.yml index c4d80cb..4f01cbc 100644 --- a/fixtures/vcr_cassettes/create_report.yml +++ b/fixtures/vcr_cassettes/create_report.yml @@ -8,74 +8,26 @@ http_interactions: string: '{"data":{"type":"report","attributes":{"team_handle":"github","title":"hi","vulnerability_information":"hi","impact":"string","severity_rating":"none","source":"api"}}}' headers: Authorization: - - Basic NOPE - User-Agent: - - Faraday v1.0.1 + - Basic Zm9vOmJhcg== Content-Type: - application/json - Accept-Encoding: - - gzip;q=1.0,deflate;q=0.6,identity;q=0.3 - Accept: - - "*/*" + User-Agent: + - Faraday v1.0.1 response: status: code: 201 message: Created headers: Date: - - Wed, 06 May 2020 23:02:54 GMT + - Wed, 07 Feb 2024 12:00:00 GMT Content-Type: - application/json; charset=utf-8 Transfer-Encoding: - chunked Connection: - keep-alive - Set-Cookie: - - __cfduid=d31f31bc632e337f7fa240d7a863f92a01588806173; expires=Fri, 05-Jun-20 - 23:02:53 GMT; path=/; Domain=api.hackerone.com; HttpOnly; SameSite=Lax; Secure - X-Request-Id: - - 55676c0a-2510-4787-9e47-7f74c1e9b2ac - Etag: - - W/"1f8bd995ef79550e2f8c8484301fadcc" - Cache-Control: - - max-age=0, private, must-revalidate - Strict-Transport-Security: - - max-age=31536000; includeSubDomains; preload - X-Frame-Options: - - DENY - X-Content-Type-Options: - - nosniff - X-Xss-Protection: - - 1; mode=block - X-Download-Options: - - noopen - X-Permitted-Cross-Domain-Policies: - - none - Referrer-Policy: - - strict-origin-when-cross-origin - Expect-Ct: - - enforce, max-age=86400 - Content-Security-Policy: - - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src - www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net; - font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src - ''self'' data: cover-photos.hackerone-user-content.com hackathon-photos.hackerone-user-content.com - profile-photos.hackerone-user-content.com hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com; - media-src ''self'' hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com; - script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline''; - report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598' - Cf-Cache-Status: - - DYNAMIC - Server: - - cloudflare - Cf-Ray: - - 58f654d83ea1bc9c-SEA - Cf-Request-Id: - - '028dd35b1e0000bc9c75365200000001' body: - encoding: ASCII-8BIT - string: !binary |- - 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 - http_version: null + encoding: UTF-8 + string: '{"data":{"id":"1337","type":"report","attributes":{"title":"hi","state":"new","created_at":"2024-02-07T12:00:00.000Z","vulnerability_information":"hi","triaged_at":null,"closed_at":null,"last_reporter_activity_at":"2024-02-07T12:00:00.000Z","first_program_activity_at":"2024-02-07T12:00:00.000Z","last_program_activity_at":"2024-02-07T12:00:00.000Z","bounty_awarded_at":null,"swag_awarded_at":null,"disclosed_at":null,"reporter_agreed_on_going_public_at":null,"last_public_activity_at":"2024-02-07T12:00:00.000Z","last_activity_at":"2024-02-07T12:00:00.000Z","source":"api"},"relationships":{"reporter":{"data":{"id":"12345","type":"user"}},"program":{"data":{"id":"54321","type":"program"}}}}}' recorded_at: Wed, 06 May 2020 23:02:53 GMT recorded_with: VCR 5.1.0 diff --git a/fixtures/vcr_cassettes/report.yml b/fixtures/vcr_cassettes/report.yml index 4a3bea1..cf8a6bd 100644 --- a/fixtures/vcr_cassettes/report.yml +++ b/fixtures/vcr_cassettes/report.yml @@ -8,7 +8,7 @@ http_interactions: string: '' headers: Authorization: - - Basic nope= + - Basic Zm9vOmJhcg== # This is base64 encoded of "foo:bar" User-Agent: - Faraday v0.11.0 Accept-Encoding: diff --git a/fixtures/vcr_cassettes/report_list.yml b/fixtures/vcr_cassettes/report_list.yml index 72486e3..f345a6f 100644 --- a/fixtures/vcr_cassettes/report_list.yml +++ b/fixtures/vcr_cassettes/report_list.yml @@ -8,13 +8,15 @@ http_interactions: string: '' headers: Authorization: - - Basic nope= + - Basic Zm9vOmJhcg== # This is base64 encoded "foo:bar" User-Agent: - - Faraday v0.11.0 - Accept-Encoding: - - gzip;q=1.0,deflate;q=0.6,identity;q=0.3 + - Faraday v1.0.1 + Content-Type: + - application/json Accept: - "*/*" + Accept-Encoding: + - gzip;q=1.0,deflate;q=0.6,identity;q=0.3 response: status: code: 200 diff --git a/lib/hackerone/client.rb b/lib/hackerone/client.rb index e0e41b4..2351ae4 100644 --- a/lib/hackerone/client.rb +++ b/lib/hackerone/client.rb @@ -34,7 +34,6 @@ class NotConfiguredError < StandardError; end DEFAULT_CRITICAL_RANGE = 5000...100_000_000 LENIENT_MODE_ENV_VARIABLE = "HACKERONE_CLIENT_LENIENT_MODE" - REPORT_STATES = %w( new triaged @@ -48,7 +47,7 @@ class NotConfiguredError < StandardError; end class << self ATTRS = [:low_range, :medium_range, :high_range, :critical_range].freeze - attr_accessor :program + attr_accessor :program, :token, :token_name attr_reader *ATTRS ATTRS.each do |attr| @@ -60,14 +59,28 @@ class << self end class Api - def initialize(program = nil) + def initialize(program = nil, token: nil, token_name: nil) @program = program + @token = token || ENV["HACKERONE_TOKEN"] + @token_name = token_name || ENV["HACKERONE_TOKEN_NAME"] + # Set class-level token and token_name if provided + if token + HackerOne::Client.token = token + end + + if token_name + HackerOne::Client.token_name = token_name + end end def program @program || HackerOne::Client.program end + def token_name + @token_name || ENV["HACKERONE_TOKEN_NAME"] + end + def reporters raise ArgumentError, "Program cannot be nil" unless program response = self.class.hackerone_api_connection.get do |req| @@ -200,12 +213,12 @@ def self.parse_response(response, extract_data: true) end def self.hackerone_api_connection - unless ENV["HACKERONE_TOKEN_NAME"] && ENV["HACKERONE_TOKEN"] - raise NotConfiguredError, "HACKERONE_TOKEN_NAME HACKERONE_TOKEN environment variables must be set" + unless HackerOne::Client.token_name && HackerOne::Client.token + raise NotConfiguredError, "Either set token_name and token or HACKERONE_TOKEN_NAME and HACKERONE_TOKEN environment variables" end @connection ||= Faraday.new(url: "https://api.hackerone.com/v1") do |faraday| - faraday.request(:authorization, :basic, ENV["HACKERONE_TOKEN_NAME"], ENV["HACKERONE_TOKEN"]) + faraday.request(:authorization, :basic, HackerOne::Client.token_name, HackerOne::Client.token) faraday.adapter Faraday.default_adapter end end diff --git a/spec/hackerone/client/asset_spec.rb b/spec/hackerone/client/asset_spec.rb index 32ca878..a3df8a1 100644 --- a/spec/hackerone/client/asset_spec.rb +++ b/spec/hackerone/client/asset_spec.rb @@ -1,13 +1,16 @@ # frozen_string_literal: true require "spec_helper" +require "webmock/rspec" RSpec.describe HackerOne::Client::Asset do - before(:all) do - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" - end + let(:api) { HackerOne::Client::Api.new("github", token: "bar", token_name: "foo") } + before(:each) do + # Initialize the API client before running tests + api + + # Stub the HTTP request for fetching the program stub_request(:get, "https://api.hackerone.com/v1/programs/18969"). to_return(body: <<~JSON) { @@ -36,6 +39,7 @@ } JSON + # Stub the HTTP request for fetching the assets stub_request(:get, "https://api.hackerone.com/v1/organizations/14/assets?page%5Bnumber%5D=1&page%5Bsize%5D=100"). to_return(body: <<~JSON2) { @@ -114,17 +118,35 @@ "links": {} } JSON2 + + # Stub the HTTP request for fetching the user's programs + stub_request(:get, "https://api.hackerone.com/v1/me/programs"). + to_return(body: <<~JSON3) +{ + "data": [ + { + "id": "18969", + "type": "program", + "attributes": { + "handle": "github", + "created_at": "2016-02-02T04:05:06.000Z", + "updated_at": "2016-02-02T04:05:06.000Z" + } + } + ] +} + JSON3 end after(:each) do - # clear cached programs to prevent contaminatin between tests + # Clear both cached programs and configuration HackerOne::Client::Program.instance_variable_set(:@my_programs, nil) + HackerOne::Client.instance_variable_set(:@token, nil) + HackerOne::Client.instance_variable_set(:@token_name, nil) end let(:program) do - VCR.use_cassette(:programs) do - HackerOne::Client::Program.find("github") - end + HackerOne::Client::Program.find("github") end let(:organization) do diff --git a/spec/hackerone/client/program_spec.rb b/spec/hackerone/client/program_spec.rb index 529e19f..d04c04f 100644 --- a/spec/hackerone/client/program_spec.rb +++ b/spec/hackerone/client/program_spec.rb @@ -3,9 +3,18 @@ require "spec_helper" RSpec.describe HackerOne::Client::Program do - before(:all) do - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" + let(:api) { HackerOne::Client::Api.new("github", token: "bar", token_name: "foo") } + + before(:each) do + # Initialize the API client before running tests + api + end + + after(:each) do + # Clear both cached programs and configuration + HackerOne::Client::Program.instance_variable_set(:@my_programs, nil) + HackerOne::Client.instance_variable_set(:@token, nil) + HackerOne::Client.instance_variable_set(:@token_name, nil) end let(:program) do diff --git a/spec/hackerone/client/report_spec.rb b/spec/hackerone/client/report_spec.rb index 63831e4..44388f1 100644 --- a/spec/hackerone/client/report_spec.rb +++ b/spec/hackerone/client/report_spec.rb @@ -3,11 +3,17 @@ require "spec_helper" RSpec.describe HackerOne::Client::Report do - let(:api) { HackerOne::Client::Api.new("github") } + let(:api) { HackerOne::Client::Api.new("github", token: "bar", token_name: "foo") } - before(:all) do - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" + before(:each) do + # Initialize the API client before running tests + api + end + + after(:each) do + # Clear both cached programs and configuration + HackerOne::Client.instance_variable_set(:@token, nil) + HackerOne::Client.instance_variable_set(:@token_name, nil) end let(:report) do diff --git a/spec/hackerone/client/reporter_spec.rb b/spec/hackerone/client/reporter_spec.rb index a2f3f54..98e1d3b 100644 --- a/spec/hackerone/client/reporter_spec.rb +++ b/spec/hackerone/client/reporter_spec.rb @@ -3,11 +3,17 @@ require "spec_helper" RSpec.describe HackerOne::Client::Report do - let(:api) { HackerOne::Client::Api.new("github") } + let(:api) { HackerOne::Client::Api.new("github", token: "bar", token_name: "foo") } - before(:all) do - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" + before(:each) do + # Initialize the API client before running tests + api + end + + after(:each) do + # Clear both cached programs and configuration + HackerOne::Client.instance_variable_set(:@token, nil) + HackerOne::Client.instance_variable_set(:@token_name, nil) end let(:reporters) do diff --git a/spec/hackerone/client/swag_spec.rb b/spec/hackerone/client/swag_spec.rb index 74d1635..65b0b54 100644 --- a/spec/hackerone/client/swag_spec.rb +++ b/spec/hackerone/client/swag_spec.rb @@ -3,11 +3,17 @@ require "spec_helper" RSpec.describe HackerOne::Client::Swag do - let(:api) { HackerOne::Client::Api.new("github") } + let(:api) { HackerOne::Client::Api.new("github", token: "bar", token_name: "foo") } - before(:all) do - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" + before(:each) do + # Initialize the API client before running tests + api + end + + after(:each) do + # Clear both cached programs and configuration + HackerOne::Client.instance_variable_set(:@token, nil) + HackerOne::Client.instance_variable_set(:@token_name, nil) end let(:program) do @@ -51,7 +57,6 @@ end end - describe "user" do it "returns a user" do user = swag.user diff --git a/spec/hackerone/client/user_spec.rb b/spec/hackerone/client/user_spec.rb index 2a16a75..7524840 100644 --- a/spec/hackerone/client/user_spec.rb +++ b/spec/hackerone/client/user_spec.rb @@ -3,9 +3,17 @@ require "spec_helper" RSpec.describe HackerOne::Client::User do - before(:all) do - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" + let(:api) { HackerOne::Client::Api.new("github", token: "bar", token_name: "foo") } + + before(:each) do + # Initialize the API client before running tests + api + end + + after(:each) do + # Clear both cached programs and configuration + HackerOne::Client.instance_variable_set(:@token, nil) + HackerOne::Client.instance_variable_set(:@token_name, nil) end describe "find" do diff --git a/spec/hackerone/client_spec.rb b/spec/hackerone/client_spec.rb index b56bdea..bb1d5b6 100644 --- a/spec/hackerone/client_spec.rb +++ b/spec/hackerone/client_spec.rb @@ -4,15 +4,21 @@ require "time" RSpec.describe HackerOne::Client do - let(:api) { HackerOne::Client::Api.new("github") } let(:point_in_time) { DateTime.parse("2017-02-11T16:00:44-10:00") } - - before(:all) do - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" - end + # Remove this let definition as it conflicts with the one in the report context + # let(:api) { HackerOne::Client::Api.new("github") } context "configuration" do + it "raises error when no credentials are available" do + ENV["HACKERONE_TOKEN"] = nil + ENV["HACKERONE_TOKEN_NAME"] = nil + + client = HackerOne::Client::Api.new("github") + expect { + client.report(200) + }.to raise_error(HackerOne::Client::NotConfiguredError) + end + it "rejects invalid range values for risk classification" do begin expect { HackerOne::Client.low_range = "fred" }.to raise_error(ArgumentError) @@ -23,24 +29,37 @@ end end - it "requires credential env vars" do - begin - ENV["HACKERONE_TOKEN_NAME"] = nil - ENV["HACKERONE_TOKEN"] = nil - expect { - api.report(200) - }.to raise_error(HackerOne::Client::NotConfiguredError) - ensure - ENV["HACKERONE_TOKEN_NAME"] = "foo" - ENV["HACKERONE_TOKEN"] = "bar" - end + it "initializes successfully with explicit credentials" do + client = HackerOne::Client::Api.new("github", token: "mytoken", token_name: "myname") + expect(client.instance_variable_get(:@token)).to eq("mytoken") + expect(client.instance_variable_get(:@token_name)).to eq("myname") end + + it "falls back to ENV vars when no explicit credentials given" do + ENV["HACKERONE_TOKEN"] = "envtoken" + ENV["HACKERONE_TOKEN_NAME"] = "envname" + + client = HackerOne::Client::Api.new("github") + expect(client.instance_variable_get(:@token)).to eq("envtoken") + expect(client.instance_variable_get(:@token_name)).to eq("envname") + ensure + ENV["HACKERONE_TOKEN"] = nil + ENV["HACKERONE_TOKEN_NAME"] = nil + end + end context "#report" do + # This setup should work with the VCR cassette + let(:api) { HackerOne::Client::Api.new("github", token: "bar", token_name: "foo") } + it "fetches and populates a report" do + # Add debug to verify credentials + puts "Debug: token=#{api.instance_variable_get(:@token)}, token_name=#{api.instance_variable_get(:@token_name)}" + VCR.use_cassette(:report) do - expect(api.report(200)).to_not be_nil + report = api.report(200) + expect(report).to_not be_nil end end @@ -58,6 +77,8 @@ end context "#create_report" do + let(:api) { HackerOne::Client::Api.new("github", token: "foo", token_name: "bar") } + it "raises an error if no program is supplied" do expect { HackerOne::Client::Api.new.create_report(title: "hi", summary: "hi", impact: "string", severity_rating: "none", source: "api") @@ -66,7 +87,15 @@ it "creates a new report" do VCR.use_cassette(:create_report) do - expect(api.create_report(title: "hi", summary: "hi", impact: "string", severity_rating: "none", source: "api")).to_not be_nil + report = api.create_report( + title: "hi", + summary: "hi", + impact: "string", + severity_rating: "none", + source: "api" + ) + expect(report).to_not be_nil + expect(report).to be_kind_of(HackerOne::Client::Report) end end @@ -80,6 +109,8 @@ end context "#reports" do + let(:api) { HackerOne::Client::Api.new("github", token: "foo", token_name: "bar") } + it "raises an error if no program is supplied" do expect { HackerOne::Client::Api.new.reports }.to raise_error(ArgumentError) end @@ -97,7 +128,9 @@ it "returns new reports for a given program as default" do VCR.use_cassette(:report_list) do - expect(api.reports(since: point_in_time)).to_not be_empty + reports = api.reports(since: point_in_time) + expect(reports).to_not be_empty + expect(reports.first).to be_kind_of(HackerOne::Client::Report) end end diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb index 5be3eb4..fde1ba9 100644 --- a/spec/spec_helper.rb +++ b/spec/spec_helper.rb @@ -17,4 +17,18 @@ VCR.configure do |config| config.cassette_library_dir = "fixtures/vcr_cassettes" config.hook_into :webmock + + config.register_request_matcher :uri_ignoring_array_indexes do |request1, request2| + uri1 = URI(request1.uri) + uri2 = URI(request2.uri) + + uri1.scheme == uri2.scheme && + uri1.host == uri2.host && + uri1.path == uri2.path && + CGI.parse(uri1.query.to_s).transform_values(&:sort) == CGI.parse(uri2.query.to_s).transform_values(&:sort) + end + + config.default_cassette_options = { + match_requests_on: [:method, :uri_ignoring_array_indexes] + } end