Add recon UX backend: scan history, export, and streaming tests.

Persist recon scans in SQLite with history diff and export routes; wire WebSocket streaming test coverage and relay path_tracer_hints in fleet reports.
2026-06-07 12:25:35 -07:00
parent 826798c586
commit 5317135a7d
4 changed files with 260 additions and 0 deletions
--- a/server/internal/recon/recon_stream_test.go
+++ b/server/internal/recon/recon_stream_test.go
@@ -0,0 +1,98 @@
+package recon
+
+import (
+	"testing"
+	"time"
+)
+
+func TestProfileOptions(t *testing.T) {
+	quick := ProfileOptions(ProfileQuick)
+	if len(quick.Ports) != 10 || quick.MaxPages != 1 || quick.SkipPorts {
+		t.Fatalf("quick=%+v", quick)
+	}
+	deep := ProfileOptions(ProfileDeep)
+	if deep.MaxPages != 50 || deep.CrawlDepth != 2 {
+		t.Fatalf("deep=%+v", deep)
+	}
+	ssrf := ProfileOptions(ProfileSSRFOnly)
+	if !ssrf.SkipPorts || ssrf.MaxPages != 50 {
+		t.Fatalf("ssrf=%+v", ssrf)
+	}
+}
+
+func TestScanStreamEmitsPortsFirst(t *testing.T) {
+	SetPortDialHook(func(host string, port int, _ time.Duration) bool {
+		return port == 80 || port == 443
+	})
+	t.Cleanup(func() { SetPortDialHook(nil) })
+	SetFetchPageHook(func(rawURL string) (int, string, error) {
+		return 200, `<html><title>Home</title></html>`, nil
+	})
+	t.Cleanup(func() { SetFetchPageHook(nil) })
+
+	var events []string
+	report, err := ScanStream(ScanRequest{Host: "stream.lab", Profile: ProfileQuick, Port: 80, Scheme: "http"}, "scan-1", func(eventType string, _ map[string]interface{}) {
+		events = append(events, eventType)
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if report.ScanID != "scan-1" || report.Profile != ProfileQuick {
+		t.Fatalf("report=%+v", report)
+	}
+	if len(events) == 0 {
+		t.Fatal("expected streaming events")
+	}
+	firstPort := -1
+	for i, e := range events {
+		if e == "recon_port" && firstPort < 0 {
+			firstPort = i
+		}
+	}
+	if firstPort < 0 {
+		t.Fatalf("missing recon_port events: %v", events)
+	}
+	for i, e := range events {
+		if e == "recon_page" && i < firstPort {
+			t.Fatalf("pages before ports: %v", events)
+		}
+	}
+}
+
+func TestDiffReportsNewPortsAndForms(t *testing.T) {
+	prev := &ScanReport{
+		Ports: []PortResult{{Port: 80, Open: true}},
+		Crawl: &CrawlReport{MultipartForms: []FormFinding{{PageURL: "http://a/", Action: "/upload"}}},
+	}
+	cur := &ScanReport{
+		Ports: []PortResult{{Port: 80, Open: true}, {Port: 443, Open: true}},
+		Crawl: &CrawlReport{
+			MultipartForms: []FormFinding{
+				{PageURL: "http://a/", Action: "/upload"},
+				{PageURL: "http://a/admin", Action: "/post"},
+			},
+		},
+	}
+	diff := DiffReports(prev, cur)
+	if len(diff.NewPorts) != 1 || diff.NewPorts[0] != 443 {
+		t.Fatalf("ports=%v", diff.NewPorts)
+	}
+	if len(diff.NewForms) != 1 || diff.NewForms[0].Action != "/post" {
+		t.Fatalf("forms=%v", diff.NewForms)
+	}
+}
+
+func TestBuildHistoryDiffChain(t *testing.T) {
+	now := time.Now().UTC()
+	rows := []*ScanReport{
+		{ScanID: "a", Host: "h", ScannedAt: now, Ports: []PortResult{{Port: 22, Open: true}}},
+		{ScanID: "b", Host: "h", ScannedAt: now.Add(time.Minute), Ports: []PortResult{{Port: 22, Open: true}, {Port: 80, Open: true}}},
+	}
+	hist := BuildHistory(rows)
+	if len(hist) != 2 || hist[0].Diff == nil || len(hist[0].Diff.NewPorts) != 1 {
+		t.Fatalf("first diff=%+v", hist[0].Diff)
+	}
+	if hist[1].Diff == nil || len(hist[1].Diff.NewPorts) != 1 || hist[1].Diff.NewPorts[0] != 80 {
+		t.Fatalf("second diff=%+v", hist[1].Diff)
+	}
+}