mi
54 lines
1.9 KiB
Bash
54 lines
1.9 KiB
Bash
#!/bin/sh
|
|
set -eu
|
|
cd "$(dirname "$0")/../.."
|
|
|
|
ENV_FILE=${ENV_FILE:-.env}
|
|
./scripts/validate-env "$ENV_FILE"
|
|
|
|
env_value() {
|
|
python3 - "$ENV_FILE" "$1" <<'PY'
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
path, wanted = sys.argv[1:]
|
|
for raw in Path(path).read_text(encoding="utf-8").splitlines():
|
|
line = raw.strip()
|
|
if not line or line.startswith("#") or "=" not in line:
|
|
continue
|
|
key, value = line.split("=", 1)
|
|
if key.strip() == wanted:
|
|
value = value.strip()
|
|
if len(value) >= 2 and value[0] == value[-1] and value[0] in "\"'":
|
|
value = value[1:-1]
|
|
print(value)
|
|
break
|
|
else:
|
|
raise SystemExit(f"missing environment variable: {wanted}")
|
|
PY
|
|
}
|
|
|
|
PUBLIC_HOST=$(env_value PUBLIC_HOST)
|
|
PUBLIC_WEB_URL=$(env_value PUBLIC_WEB_URL)
|
|
KEYCLOAK_REALM=$(env_value KEYCLOAK_REALM)
|
|
|
|
tmp=$(mktemp -d)
|
|
trap 'rm -rf "$tmp"' EXIT
|
|
|
|
http_code=$(curl -sS -o /dev/null -w '%{http_code}' "http://${PUBLIC_HOST}/")
|
|
[ "$http_code" = "308" ] || { echo "Expected HTTP 308, got $http_code" >&2; exit 1; }
|
|
curl -fsS "${PUBLIC_WEB_URL}/api/v1/public/app-config" -o "$tmp/app-config.json"
|
|
curl -fsS "${PUBLIC_WEB_URL}/api/v1/public/content" -o "$tmp/content.json"
|
|
curl -fsS "${PUBLIC_WEB_URL}/auth/realms/${KEYCLOAK_REALM}/.well-known/openid-configuration" -o "$tmp/oidc.json"
|
|
|
|
internal_code=$(curl -sS -o /dev/null -w '%{http_code}' "${PUBLIC_WEB_URL}/internal/safety/v1/messages/check")
|
|
[ "$internal_code" = "404" ] || { echo "Public /internal returned $internal_code, expected 404" >&2; exit 1; }
|
|
|
|
headers=$(curl -fsSI "${PUBLIC_WEB_URL}/")
|
|
printf '%s' "$headers" | grep -qi '^x-content-type-options: nosniff'
|
|
printf '%s' "$headers" | grep -qi '^x-request-id:'
|
|
printf '%s' "$headers" | grep -qi '^content-security-policy:'
|
|
|
|
openssl s_client -connect "${PUBLIC_HOST}:443" -servername "$PUBLIC_HOST" </dev/null 2>/dev/null \
|
|
| openssl x509 -noout -checkend 604800
|
|
echo "Public edge smoke passed."
|