Feditest Session Report: Session 62

feditest-run-20241024-220237 [Summary]

This FediTest report requires a desktop or laptop-class monitor.

It cannot be viewed on a mobile device with a small screen.

Sorry about that. But then, you weren't going to use a phone to fix reported bugs, either, right?

Test Run Summary

Status Count
Passed
12 (66.7%)
Failed
Interoperability
Compromised Degraded Unaffected Unknown Total
Conformance Must
1
1
4
0
6 (33.3%)
Should
0
0
0
0
0 (0.0%)
Implied
0
0
0
0
0 (0.0%)
Unspecified
0
0
0
0
0 (0.0%)
Total
1 (5.6%)
1 (5.6%)
4 (22.2%)
0 (0.0%)
6 (33.3%)
Skipped
0
Errors
0
Total
18

Constellation

client

ImpInProcessNodeDriver
Imp
0.4

server

FediverseSaasNodeDriver
Mobilizon
?

Test Results

Test: webfinger.server.4_1__2_parameter_ordering_not_significant::parameter_ordering

Parameter ordering is not significant.

Started 2024:10:24-22:15:25.527140Z, ended 2024:10:24-22:15:27.952766Z (duration: 0:00:02.425626)

Passed

Test: webfinger.server.4_2__14_must_only_redirect_to_https::must_only_redirect_to_https

Test that if the server redirected, the final URL is an HTTPS URL.

Started 2024:10:24-22:15:27.952863Z, ended 2024:10:24-22:15:28.705501Z (duration: 0:00:00.752638)

Passed

Test: webfinger.server.4_2__2_perform_query::normal_query

Perform a normal, simple query on an existing account.

Started 2024:10:24-22:15:28.705581Z, ended 2024:10:24-22:15:29.461826Z (duration: 0:00:00.756245)

AssertionFailure: AssertionFailure (Must, Problem): Accessed URI: "https://mobilizon.fr/.well-known/webfinger?resource=acct%3Aframasoft%40mobilizon.fr":
0: Wrong HTTP content type.
 -> "application/json; charset=utf-8"
Expected: an empty collection
     but: was <[WrongContentTypeError(HttpRequestResponsePair(request=HttpRequest(parsed_uri=ParsedNonAcctUri(https://mobilizon.fr/.well-known/webfinger?resource=acct%3Aframasoft%40mobilizon.fr), method='GET', accept_header=None, payload=None, content_type=None, when_started=datetime.datetime(2024, 10, 24, 22, 2, 37, 617816, tzinfo=datetime.timezone.utc)), final_request=HttpRequest(parsed_uri=ParsedNonAcctUri(https://mobilizon.fr/.well-known/webfinger?resource=acct%3Aframasoft%40mobilizon.fr), method='GET', accept_header=None, payload=None, content_type=None, when_started=datetime.datetime(2024, 10, 24, 22, 2, 37, 617816, tzinfo=datetime.timezone.utc)), response=HttpResponse(http_status=200, response_headers=<MultiDict('server': 'nginx/1.18.0', 'date': 'Thu, 24 Oct 2024 22:15:29 GMT', 'content-type': 'application/json; charset=utf-8', 'content-length': '599', 'connection': 'keep-alive', 'vary': 'Accept-Encoding, accept-encoding', 'cache-control': 'max-age=0, private, must-revalidate, public, max-age=0, s-maxage=0, must-revalidate', 'report-to': '{"endpoints":[{"url":"https://sentry.framasoft.org/api/2/security/?sentry_key=40b6fa4d621f40efa6155d70c9618301"}],"group":"csp-endpoint","max-age":10886400}', 'reporting-endpoints': 'csp-endpoint="https://sentry.framasoft.org/api/2/security/?sentry_key=40b6fa4d621f40efa6155d70c9618301"', 'x-xss-protection': '0', 'x-frame-options': 'DENY', 'x-content-type-options': 'nosniff', 'referrer-policy': 'same-origin', 'content-security-policy': "report-uri https://sentry.framasoft.org/api/2/security/?sentry_key=40b6fa4d621f40efa6155d70c9618301 ; report-to csp-endpoint;upgrade-insecure-requests;frame-ancestors 'none';frame-src 'none';font-src 'self' ;media-src 'self' ;img-src 'self' data: blob: *.tile.openstreetmap.org stats.framasoft.org search.joinmobilizon.org images.unsplash.com;connect-src 'self' * blob: https://mobilizon.fr wss://mobilizon.fr stats.framasoft.org sentry.framasoft.org;style-src 'self' ;script-src 'self' 'unsafe-eval' 'sha256-4RS22DYeB7U14dra4KcQYxmwt5HkOInieXK1NUMBmQI=' 'sha256-zJdRXhLWm9NGI6BFr+sNmHBBrjAdJdFr7MpUq0EwK58=' stats.framasoft.org;default-src 'none';base-uri 'self';manifest-src 'self';", 'access-control-allow-credentials': 'true', 'access-control-allow-origin': '*', 'access-control-expose-headers': '', 'x-request-id': 'GAGDVCc6DIlm8u8AeY1L', 'strict-transport-security': 'max-age=31536000; includeSubDomains; preload')>, payload=b'{"aliases":["https://mobilizon.fr/@framasoft"],"links":[{"href":"https://mobilizon.fr/@framasoft","rel":"self","type":"application/activity+json"},{"rel":"http://ostatus.org/schema/1.0/subscribe","template":"https://mobilizon.fr/interact?uri={uri}"},{"href":"https://mobilizon.fr/media/890f5396ef80081a6b1b18a5db969746cf8bb340e8a4e657d665e41f6646c539.jpg?name=framasoft%27s%20avatar.jpg","rel":"http://webfinger.net/rel/avatar","type":"image/jpeg"},{"href":"https://mobilizon.fr/@framasoft","rel":"http://webfinger.net/rel/profile-page/","type":"text/html"}],"subject":"acct:framasoft@mobilizon.fr"}', when_completed=datetime.datetime(2024, 10, 24, 22, 2, 37, 618161, tzinfo=datetime.timezone.utc))))]>
../feditest-tests-fediverse/tests/webfinger/server/4_2__2_perform_query.py:20

Test: webfinger.server.4_2__3_requires_resource_uri::requires_resource_uri_http_status

Do not accept requests with missing resource parameter: HTTP status.

Started 2024:10:24-22:15:29.469140Z, ended 2024:10:24-22:15:30.217775Z (duration: 0:00:00.748635)

Passed

Test: webfinger.server.4_2__3_requires_resource_uri::requires_resource_uri_jrd

Do not accept requests with missing resource parameter: JRD content.

Started 2024:10:24-22:15:30.217865Z, ended 2024:10:24-22:15:30.985131Z (duration: 0:00:00.767266)

Passed

Test: webfinger.server.4_2__4_do_not_accept_malformed_resource_parameters::double_equals_http_status

Do not accept malformed resource parameters. Test HTTP status for inserting an extra = character.

Started 2024:10:24-22:15:30.985273Z, ended 2024:10:24-22:15:31.750376Z (duration: 0:00:00.765103)

AssertionFailure: AssertionFailure (Must, Unaffected): Not HTTP status 4xx.
Accessed URI: "https://mobilizon.fr/.well-known/webfinger?resource==acct%3Aframasoft%40mobilizon.fr".
Expected: (a value greater than or equal to <400> and a value less than <500>)
     but: a value greater than or equal to <400> was <200>
../feditest-tests-fediverse/tests/webfinger/server/4_2__4_do_not_accept_malformed_resource_parameters.py:106

Test: webfinger.server.4_2__4_do_not_accept_malformed_resource_parameters::double_equals_jrd

Do not accept malformed resource parameters. Test JRD content for inserting an extra = character.

Started 2024:10:24-22:15:31.756535Z, ended 2024:10:24-22:15:32.503931Z (duration: 0:00:00.747396)

AssertionFailure: AssertionFailure (Must, Unaffected): Returns JRD content.
Accessed URI: "https://mobilizon.fr/.well-known/webfinger?resource==acct%3Aframasoft%40mobilizon.fr".
../feditest-tests-fediverse/tests/webfinger/server/4_2__4_do_not_accept_malformed_resource_parameters.py:144

Test: webfinger.server.4_2__4_do_not_accept_malformed_resource_parameters::requires_valid_resource_uri_http_status

Do not accept malformed resource parameters. Test HTTP status for missing acct: scheme.

Started 2024:10:24-22:15:32.504756Z, ended 2024:10:24-22:15:33.276308Z (duration: 0:00:00.771552)

AssertionFailure: AssertionFailure (Must, Unaffected): Not HTTP status 4xx.
Accessed URI: "https://mobilizon.fr/.well-known/webfinger?resource=framasoft@mobilizon.fr".
Expected: (a value greater than or equal to <400> and a value less than <500>)
     but: a value greater than or equal to <400> was <200>
../feditest-tests-fediverse/tests/webfinger/server/4_2__4_do_not_accept_malformed_resource_parameters.py:32

Test: webfinger.server.4_2__4_do_not_accept_malformed_resource_parameters::requires_valid_resource_uri_jrd

Do not accept malformed resource parameters. Test JRD content for missing acct: scheme.

Started 2024:10:24-22:15:33.282115Z, ended 2024:10:24-22:15:34.030724Z (duration: 0:00:00.748609)

AssertionFailure: AssertionFailure (Must, Unaffected): Returns JRD content.
Accessed URI: "https://mobilizon.fr/.well-known/webfinger?resource=framasoft@mobilizon.fr".
../feditest-tests-fediverse/tests/webfinger/server/4_2__4_do_not_accept_malformed_resource_parameters.py:71

Test: webfinger.server.4_2__5_status_404_for_nonexisting_resources::status_404_for_nonexisting_resources

The server responds with 404 when the resource parameter identifies a non-existent resource.

Started 2024:10:24-22:15:34.032894Z, ended 2024:10:24-22:15:34.816598Z (duration: 0:00:00.783704)

Passed

Test: webfinger.server.4_2__9_content_type::returns_jrd_in_response_to_https

Test that a query over HTTPS produces a JRD.

Started 2024:10:24-22:15:34.816873Z, ended 2024:10:24-22:15:35.585039Z (duration: 0:00:00.768166)

AssertionFailure: AssertionFailure (Must, Degraded): Wrong content type.
Accessed URI: "https://mobilizon.fr/.well-known/webfinger?resource=acct%3Aframasoft%40mobilizon.fr".
Expected: ('application/jrd+json' or a string starting with 'application/jrd+json;')
     but: was 'application/json; charset=utf-8'
../feditest-tests-fediverse/tests/webfinger/server/4_2__9_content_type.py:44

Test: webfinger.server.4_5__1_any_uri_scheme_for_resource_identifiers::any_uri_scheme_for_resource_identifiers

The server must accept resource identifiers provided in the query that use any scheme.

Started 2024:10:24-22:15:35.592511Z, ended 2024:10:24-22:15:37.319656Z (duration: 0:00:01.727145)

Passed

Test: webfinger.server.4__1_accepts_all_link_rels_in_query::accepts_combined_link_rels_in_query

A server must accept all link rels in the query, even if it does not understand them. Tests several known an unknown link rels at a time.

Started 2024:10:24-22:15:37.319734Z, ended 2024:10:24-22:15:39.604812Z (duration: 0:00:02.285078)

Passed

Test: webfinger.server.4__1_accepts_all_link_rels_in_query::accepts_known_link_rels_in_query

A server must accept all link rels in the query, even if it does not understand them. Tests one known link rel at a time.

Started 2024:10:24-22:15:39.604859Z, ended 2024:10:24-22:15:41.873337Z (duration: 0:00:02.268478)

Passed

Test: webfinger.server.4__1_accepts_all_link_rels_in_query::accepts_unknown_link_rels_in_query

A server must accept all link rels in the query, even if it does not understand them. Tests one unknown link rels at a time.

Started 2024:10:24-22:15:41.873374Z, ended 2024:10:24-22:15:43.401910Z (duration: 0:00:01.528536)

Passed

Test: webfinger.server.4__3_only_returns_jrd_in_response_to_https_requests::does_not_return_jrd_in_response_to_http

Test that a query over HTTP does not produce a JRD.

Started 2024:10:24-22:15:43.402010Z, ended 2024:10:24-22:15:43.813387Z (duration: 0:00:00.411377)

Passed

Test: webfinger.server.4__3_only_returns_jrd_in_response_to_https_requests::uses_valid_https_certificate

Test that the server uses a valid HTTPS certificate.

Started 2024:10:24-22:15:43.813527Z, ended 2024:10:24-22:15:44.593561Z (duration: 0:00:00.780034)

Passed

Test: webfinger.server.5_1_cors_header_required::cors_header_required

The server must provide a valid value for HTTP Header "Access-Control-Allow-Origin".

Started 2024:10:24-22:15:44.593756Z, ended 2024:10:24-22:15:45.355433Z (duration: 0:00:00.761677)

Passed

Test Run Metadata

Started 2024:10:24-22:15:25.526637Z
Ended 2024:10:24-22:15:45.355564Z (total: 0:00:19.828927)
Platform Linux-6.11.3-1-aarch64-ARCH-aarch64-with-glibc2.35
Feditest version 0.4