mirror of
https://github.com/gesellix/Bose-SoundTouch.git
synced 2026-08-24 14:47:23 +00:00
Fixes CodeQL go/log-injection alerts in the final batch of packages. New logutil.go helpers: pkg/client, pkg/testutils/amazon, pkg/testutils/spotify, cmd/soundtouch-service, cmd/soundtouch-web, cmd/dummy-speaker, cmd/mdns-scanner. pkg/discovery/logger.go: added sanitizeLog and a nil-safe remoteAddrString helper to the existing file (alongside logVerbose). Call sites wrapped across 11 files — device IDs, source types, hostnames, IPs, interface names, URLs, service names, HTTP method/form values, WebSocket URLs and payloads, TLS SNI names, remote addresses. No behaviour change. golangci-lint and make check pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
97 lines
2.5 KiB
Go
97 lines
2.5 KiB
Go
// Package spotify provides shared handlers for mocking the Spotify API.
|
|
package spotify
|
|
|
|
import (
|
|
"encoding/json"
|
|
"log"
|
|
"net/http"
|
|
)
|
|
|
|
// NewSpotifyHandler returns a new http.Handler configured with Spotify mock endpoints.
|
|
func NewSpotifyHandler() http.Handler {
|
|
mux := http.NewServeMux()
|
|
|
|
// OAuth Token Endpoint
|
|
mux.HandleFunc("/api/token", HandleToken)
|
|
|
|
// User Profile Endpoint
|
|
mux.HandleFunc("/v1/me", HandleMe)
|
|
mux.HandleFunc("/me", HandleMe)
|
|
|
|
return mux
|
|
}
|
|
|
|
// HandleToken simulates the Spotify OAuth token endpoint.
|
|
func HandleToken(w http.ResponseWriter, r *http.Request) {
|
|
log.Printf("[Spotify Mock] Token request: %s", sanitizeLog(r.Method))
|
|
|
|
if r.Method != http.MethodPost {
|
|
http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
|
|
return
|
|
}
|
|
|
|
if err := r.ParseForm(); err != nil {
|
|
http.Error(w, "Bad request", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
grantType := r.FormValue("grant_type")
|
|
log.Printf("[Spotify Mock] Grant type: %s", sanitizeLog(grantType))
|
|
|
|
resp := map[string]interface{}{
|
|
"access_token": "spotify-access-token",
|
|
"token_type": "Bearer",
|
|
"expires_in": 3600,
|
|
"refresh_token": "spotify-refresh-token",
|
|
"scope": "user-read-private user-read-email",
|
|
}
|
|
|
|
switch grantType {
|
|
case "authorization_code":
|
|
code := r.FormValue("code")
|
|
if code == "" {
|
|
http.Error(w, `{"error":"invalid_grant"}`, http.StatusBadRequest)
|
|
return
|
|
}
|
|
case "refresh_token":
|
|
refreshToken := r.FormValue("refresh_token")
|
|
if refreshToken == "" {
|
|
http.Error(w, `{"error":"invalid_grant"}`, http.StatusBadRequest)
|
|
return
|
|
}
|
|
default:
|
|
http.Error(w, `{"error":"unsupported_grant_type"}`, http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
w.Header().Set("Content-Type", "application/json")
|
|
|
|
if err := json.NewEncoder(w).Encode(resp); err != nil {
|
|
log.Printf("Error encoding token response: %v", err)
|
|
}
|
|
}
|
|
|
|
// HandleMe simulates the Spotify user profile endpoint.
|
|
func HandleMe(w http.ResponseWriter, r *http.Request) {
|
|
log.Printf("[Spotify Mock] Profile request: %s", sanitizeLog(r.Method))
|
|
|
|
auth := r.Header.Get("Authorization")
|
|
if auth != "Bearer spotify-access-token" {
|
|
http.Error(w, `{"error":"unauthorized"}`, http.StatusUnauthorized)
|
|
return
|
|
}
|
|
|
|
resp := map[string]interface{}{
|
|
"id": "spotify-user-id",
|
|
"display_name": "Spotify Test User",
|
|
"email": "spotify-test@example.com",
|
|
"uri": "spotify:user:spotify-user-id",
|
|
}
|
|
|
|
w.Header().Set("Content-Type", "application/json")
|
|
|
|
if err := json.NewEncoder(w).Encode(resp); err != nil {
|
|
log.Printf("Error encoding profile response: %v", err)
|
|
}
|
|
}
|