fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

DebugServ: stream live services activity to the log channel

Browse source 
A pseudo-client that joins the staff log channel and reports what the services
layer is doing in real time: authentication (IDENTIFY and every SASL mechanism,
success and failure, with nick/host/account/reason), sessions (forced logout),
and the account/channel/operator lifecycle — the committed-event audit now
speaks through it, falling back to a server notice when it is off.

The reporting lives in the engine (feed()/who() helpers plus hooks at
complete_authenticate / sasl_login / sasl_deny); the module itself is just the
bot's identity and a STATUS/HELP surface. On by default; the feed is gated on
the configured [log] channel.
This commit is contained in:
Jean Chevronnet 2026-07-16 22:27:35 +00:00
parent 7e838cee49
commit bad17a184e
No known key found for this signature in database
9 changed files with 228 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

38
src/engine/tests.rs
View file

@ -43,6 +43,44 @@
assert!(is_success(&out), "{out:?}");
}
// DebugServ streams auth outcomes into the log channel, and stays silent when
// it isn't running.
#[test]
fn debugserv_feeds_auth_events() {
let mut e = engine_with("dbgfeed", "foo", "sesame");
e.set_sid("42S".into());
e.set_log_channel(Some("#services".into()));
e.set_debugserv_uid("42SAAAAAO");
e.handle(NetEvent::UserConnect { uid: "000AAAAAB".into(), nick: "foo".into(), host: "host.example".into(), ip: "0.0.0.0".into() });
sasl(&mut e, "S", "PLAIN");
let ok = sasl(&mut e, "C", &plain(b"", b"foo", b"sesame"));
assert!(is_success(&ok), "login should still work: {ok:?}");
assert!(
ok.iter().any(|a| matches!(a, NetAction::Privmsg { from, to, text }
if from == "42SAAAAAO" && to == "#services" && text.contains("[AUTH]") && text.contains("SASL PLAIN"))),
"expected an AUTH feed line from DebugServ, got {ok:?}"
);
sasl(&mut e, "S", "PLAIN");
let bad = sasl(&mut e, "C", &plain(b"", b"foo", b"wrongpass"));
assert!(!is_success(&bad), "wrong password must not log in: {bad:?}");
assert!(
bad.iter().any(|a| matches!(a, NetAction::Privmsg { from, text, .. }
if from == "42SAAAAAO" && text.contains("[AUTH]") && text.contains("bad password"))),
"expected an AUTH failure line, got {bad:?}"
);
// Disabled (no uid) -> the feed is silent.
e.set_debugserv_uid("");
sasl(&mut e, "S", "PLAIN");
let quiet = sasl(&mut e, "C", &plain(b"", b"foo", b"sesame"));
assert!(
!quiet.iter().any(|a| matches!(a, NetAction::Privmsg { to, .. } if to == "#services")),
"no feed line when DebugServ is off: {quiet:?}"
);
}
// A response that is not a multiple of 400 splits into 400 + remainder.
#[test]
fn plain_chunked_412() {