Files
LibreMail-Bug-Report-Ingest/api-tests/oversized-report.yml
T
JMR-devandClaude Opus 4.8 4c22056e66 #7 Ingest HTTPS endpoint: accept report POST, size limit
Add internal/ingest implementing POST /v1/reports, wired into the core
build-tag-free handler so the same route serves on the dev server and the
Cloudflare Worker.

Response contract (ADR #6 §2.4):
- 202 Accepted for valid JSON within the 256 KiB cap ({"status":"accepted"})
- 413 for oversized bodies (Content-Length fast path AND a MaxBytesReader
  hard cap, so a missing/lying Content-Length cannot bypass the limit)
- 415 when Content-Type is not application/json
- 400 for malformed JSON or failed schema validation (generic error body,
  never echoes request content)
- 405 with Allow: POST for any non-POST method
- 503 when the storage Sink fails

Storage is decoupled behind a small Sink interface (Store(ctx, raw)) with a
NopSink default and a MemorySink for tests, so PII scrubbing (#8) and
encrypted R2 storage (#9) can slot in without touching the HTTP contract.
Rate limiting (429) and volumetric shedding stay a Cloudflare-edge/Pulumi
concern per #2 and are intentionally not implemented in the Worker.

Tests:
- Go unit tests (net/http/httptest) for every response code, including 413
  via both Content-Length and an oversized streamed body, plus boundary,
  storage-failure, and no-content-echo cases.
- Bruno API tests in OpenCollection YAML format under api-tests/, asserting
  the full contract against the local dev server via @usebruno/cli.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-02 13:52:04 -05:00

34 lines
945 B
YAML

info:
name: 413 - oversized report is rejected
type: http
seq: 2
http:
method: POST
url: "{{baseUrl}}/v1/reports"
headers:
- name: Content-Type
value: application/json
body:
type: json
data: "{{oversizedReport}}"
runtime:
scripts:
# Build a payload larger than the 256 KiB cap at run time so this file stays
# small. The before-request script runs before body interpolation, so the
# {{oversizedReport}} placeholder above is replaced with this ~300 KiB body.
- type: before-request
code: |-
const filler = "x".repeat(300 * 1024); // 300 KiB, over the 256 KiB cap
bru.setVar("oversizedReport", JSON.stringify({
appVersion: "1.0.0",
platform: "android",
report: filler
}));
- type: tests
code: |-
test("body larger than 256 KiB returns 413", function () {
expect(res.getStatus()).to.equal(413);
});