Contents

# encoding: utf-8
# This file is distributed under New Relic's license terms.
# See https://github.com/newrelic/rpm/blob/master/LICENSE for complete details.

require 'fake_server'

# These tests are designed to work in conjunction with a local newrelic.yml
# file set with "insecure" settings and the server returning "insecure" values,
# and confirm that high security changes the actual agent behavior, not just
# the settings in question.
class HighSecurityTest < Minitest::Test

  include MultiverseHelpers

  setup_and_teardown_agent do |collector|
    collector.use_ssl = true
    collector.stub('connect', {
      "agent_run_id" => 1,
      "agent_config" => {
        "capture_params" => true,
      }
    }, 200)
  end

  def test_connects_via_ssl_no_matter_what
    assert_equal 1, $collector.calls_for('connect').size
    trigger_agent_reconnect(:ssl => false)
    assert_equal 2, $collector.calls_for('connect').size
  end

  def test_sends_high_security_flag_in_connect
    data = $collector.calls_for('connect')
    assert data.first.body["high_security"]
  end

  def test_disallows_server_config_from_overriding_high_security
    refute NewRelic::Agent.config[:capture_params]
  end

  def test_doesnt_capture_params
    in_transaction(:filtered_params => { "loose" => "params" }) do
      # no-op
    end
    assert_empty last_transaction_trace_request_params
  end

  def test_doesnt_record_custom_parameters
    in_transaction do
      NewRelic::Agent::TransactionState.tl_get.is_cross_app_caller = true
      NewRelic::Agent.add_custom_parameters(:not => "allowed")
    end

    assert_nil last_transaction_trace.params[:custom_params][:not]
    refute_nil last_transaction_trace.params[:custom_params][:cpu_time]
    refute_nil last_transaction_trace.params[:custom_params][:'nr.trip_id']
    refute_nil last_transaction_trace.params[:custom_params][:'nr.path_hash']
  end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
newrelic_rpm-3.11.2.286	test/multiverse/suites/high_security/high_security_test.rb
newrelic_rpm-3.11.1.284	test/multiverse/suites/high_security/high_security_test.rb
newrelic_rpm-3.11.0.283	test/multiverse/suites/high_security/high_security_test.rb