poc2_worked

2026-08-15 18:29:36 +02:00
parent fc3a2944b2
commit 71b6c0d86f
62 changed files with 9112 additions and 375 deletions
@@ -1,41 +1,105 @@
+import contextlib
+import io
 import unittest
+from http.server import BaseHTTPRequestHandler

-from app.webui import DASHBOARD
+from app.webui import DASHBOARD, _WebHTTPServer


 class WebUITests(unittest.TestCase):
-    def test_dashboard_is_english(self):
-        self.assertIn('<html lang="en">', DASHBOARD)
-        self.assertIn("System status", DASHBOARD)
-        self.assertIn("Recent incidents", DASHBOARD)
-        self.assertIn("TZSP datagrams", DASHBOARD)
-        self.assertIn("Extended statistics", DASHBOARD)
-        self.assertIn("Custom Suricata signatures", DASHBOARD)
-        self.assertIn("Signature sources", DASHBOARD)
-        self.assertIn("Refresh OISF catalog", DASHBOARD)
-        for polish_text in (
-            "Ładowanie",
-            "Tryb DEV",
-            "Brak alertów",
-            "Ostatnie alerty",
-            "Źródło",
-            "Blokady RouterOS",
+    def test_dashboard_is_english_and_has_mikrosuricata_sections(self):
+        self.assertIn('<html lang="en"', DASHBOARD)
+        self.assertIn('MikroSuricata', DASHBOARD)
+        self.assertNotIn('Sentinel', DASHBOARD)
+        for text in (
+            "Overview",
+            "Live Sessions",
+            "Security incidents",
+            "RouterOS blocks",
+            "Reports",
+            "Custom Suricata signatures",
+            "Signature Feeds",
+            "Providers and rulesets",
+            "Traffic history",
        ):
+            self.assertIn(text, DASHBOARD)
+        for polish_text in ("Ładowanie", "Brak alertów", "Źródło", "Blokady RouterOS"):
            self.assertNotIn(polish_text, DASHBOARD)

-    def test_dashboard_uses_status_endpoint(self):
-        self.assertIn("api('/api/status')", DASHBOARD)
-        self.assertIn("/api/admin/alerts/clear", DASHBOARD)
-        self.assertIn("/api/admin/rules/suppress", DASHBOARD)
-        self.assertIn("/api/admin/rules/sources", DASHBOARD)
-        self.assertIn("Download / update active signatures", DASHBOARD)
+    def test_dashboard_uses_external_static_assets(self):
+        self.assertIn('/static/libs/tailwindcss/tailwind.min.css', DASHBOARD)
+        self.assertIn('/static/css/app.css', DASHBOARD)
+        self.assertIn('/static/js/charts.js', DASHBOARD)
+        self.assertIn('/static/js/app.js', DASHBOARD)
+        self.assertNotIn('<style>', DASHBOARD)
+        self.assertNotIn('<script>', DASHBOARD)

-    def test_dashboard_has_top_sections_and_local_time_formatting(self):
-        for section in ("overview", "incidents", "statistics", "system", "rules", "maintenance"):
+    def test_dashboard_has_primary_sections(self):
+        for section in ("overview", "live", "security", "intelligence", "blocks", "reports", "feeds", "rules", "system"):
            self.assertIn(f'data-view="{section}"', DASHBOARD)
            self.assertIn(f'id="view-{section}"', DASHBOARD)
-        self.assertIn("function fmtTime", DASHBOARD)
-        self.assertIn("Repeated matches are aggregated", DASHBOARD)
+
+    def test_reports_expose_time_state_and_download(self):
+        for element_id in ("reportWindowBadge", "reportState", "refreshReports", "downloadReport"):
+            self.assertIn(f'id="{element_id}"', DASHBOARD)
+
+    def test_overview_has_persistent_throughput_and_event_charts(self):
+        self.assertIn('Traffic throughput', DASHBOARD)
+        self.assertIn('id="throughputChart"', DASHBOARD)
+        self.assertIn('legend-amber', DASHBOARD)
+        self.assertIn('Events &amp; alerts', DASHBOARD)
+        self.assertIn('id="trafficChart"', DASHBOARD)
+        self.assertIn('id="topClients"', DASHBOARD)
+
+    def test_intelligence_stages_column_has_dedicated_width_hook(self):
+        self.assertIn('<th class="stages-col">Stages</th>', DASHBOARD)
+
+    def test_live_stream_is_opt_in_and_bounded(self):
+        self.assertIn('Continuous streaming is off by default', DASHBOARD)
+        self.assertIn('id="toggleLive"', DASHBOARD)
+        self.assertIn('id="liveLimit"', DASHBOARD)
+        self.assertIn('<option value="200" selected>200 rows</option>', DASHBOARD)
+
+    def test_dashboard_uses_modal_login_and_persistent_summary_ui(self):
+        self.assertIn('id="authModal"', DASHBOARD)
+        self.assertIn('id="loginForm"', DASHBOARD)
+        self.assertIn('id="snapshotMeta"', DASHBOARD)
+        self.assertIn('id="fingerprintRank"', DASHBOARD)
+        self.assertIn('id="mobileMenu"', DASHBOARD)
+        self.assertNotIn('id="adminToken"', DASHBOARD)
+        self.assertNotIn('id="saveToken"', DASHBOARD)
+
+    def test_signature_feed_ui_supports_bulk_queue(self):
+        for element_id in (
+            "selectVisibleSources",
+            "selectAllFreeSources",
+            "clearSourceSelection",
+            "queueSelectedSources",
+            "sourceQueueStatus",
+        ):
+            self.assertIn(f'id="{element_id}"', DASHBOARD)
+
+    def test_autonomous_ids_operations_are_exposed_in_ui(self):
+        for element_id in (
+            "ruleIntelRows", "ruleSnapshotRows", "createRuleSnapshot",
+            "backupRows", "auditRows", "createBackup",
+        ):
+            self.assertIn(f'id="{element_id}"', DASHBOARD)
+        self.assertIn("MITRE ATT&amp;CK", DASHBOARD)
+        self.assertIn("Adaptive rule intelligence", DASHBOARD)
+
+    def test_http_server_suppresses_normal_client_disconnect_traceback(self):
+        server = _WebHTTPServer(("127.0.0.1", 0), BaseHTTPRequestHandler)
+        stderr = io.StringIO()
+        try:
+            with contextlib.redirect_stderr(stderr):
+                try:
+                    raise BrokenPipeError(32, "Broken pipe")
+                except BrokenPipeError:
+                    server.handle_error(None, ("127.0.0.1", 12345))
+            self.assertEqual("", stderr.getvalue())
+        finally:
+            server.server_close()


 if __name__ == "__main__":