github-such-software/adaptive-multi-protocol-gateway
1
0
Fork 0
mirror of https://github.com/Such-Software/adaptive-multi-protocol-gateway.git synced 2026-10-17 07:31:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(dns): allow exact protected-name record exceptions

Browse Source
This commit is contained in:
jwinterm
2026-07-31 16:06:46 -04:00
parent 0c6bbace07
commit 3fe9c472ef
2 changed files with 100 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_dns_manifest.py
+52
View File
@@ -108,6 +108,58 @@ class DNSManifestTests(unittest.TestCase):
with self.assertRaisesRegex(ValueError, "protected"):
load_dns_manifest(self.path)
def test_exact_protected_apex_txt_exception_is_allowed(self):
document = manifest_document()
document["records"][1]["name"] = "@"
document["records"][1]["value"] = (
"v=spf1 include:spf.efwd.registrar-servers.com "
"include:mail.suchshop.lol ~all"
)
document["protected_name_exceptions"] = [
{"name": "@", "type": "TXT"}
]
self.path.write_text(json.dumps(document), encoding="utf-8")
manifest = load_dns_manifest(self.path)
self.assertEqual((("@", "TXT"),), manifest.protected_name_exceptions)
existing = (
ProviderDNSRecord("@", "A", "153.75.248.86", 1800),
ProviderDNSRecord(
"@", "MX", "eforward1.registrar-servers.com.", 1800, 10
),
ProviderDNSRecord(
"@",
"TXT",
"v=spf1 include:spf.efwd.registrar-servers.com ~all",
1800,
),
)
merged = merge_dns_manifest_records(existing, manifest.records)
identities = {
(record.name, record.type, record.value) for record in merged
}
self.assertIn(("@", "A", "153.75.248.86"), identities)
self.assertIn(
("@", "MX", "eforward1.registrar-servers.com."), identities
)
self.assertNotIn(
(
"@",
"TXT",
"v=spf1 include:spf.efwd.registrar-servers.com ~all",
),
identities,
)
def test_protected_exception_must_match_managed_name_and_type(self):
document = manifest_document()
document["protected_name_exceptions"] = [
{"name": "@", "type": "TXT"}
]
self.path.write_text(json.dumps(document), encoding="utf-8")
with self.assertRaisesRegex(ValueError, "match a managed record"):
load_dns_manifest(self.path)
def test_unresolved_values_are_rejected(self):
document = manifest_document()
document["records"][0]["value"] = "{{ prod_ip }}"