all: return 403 Forbidden when requesting awwan.key and awwan.pass

When user run "awwan serve", using web-user interface, any request to
fetch the content of "awwan.key" and "awwan.pass" should not allowed for
security reason, in case user want to serve awwan with others.

3 files changed, 21 insertions, 0 deletions

diff --git a/testdata/http_server/fsget/.ssh b/testdata/http_server/fsget/.ssh
new file mode 120000
index 0000000..3a90f72
--- /dev/null
+++ b/testdata/http_server/fsget/.ssh
@@ -0,0 +1 @@
+../../encrypt-with-passfile/.ssh
\ No newline at end of file
diff --git a/testdata/http_server/fsget/myhost/plain.txt b/testdata/http_server/fsget/myhost/plain.txt
new file mode 100644
index 0000000..4d50a3a
--- /dev/null
+++ b/testdata/http_server/fsget/myhost/plain.txt
@@ -0,0 +1 @@
+content of plain text
diff --git a/testdata/http_server/fsget_test.data b/testdata/http_server/fsget_test.data
new file mode 100644
index 0000000..34b322f
--- /dev/null
+++ b/testdata/http_server/fsget_test.data
@@ -0,0 +1,19 @@
+Test on FSGet method.
+
+<<< getSshAwwanKey
+{
+  "message": "Forbidden",
+  "code": 403
+}
+
+<<< getSshAwwanPass
+{
+  "message": "Forbidden",
+  "code": 403
+}
+
+<<< getSshAwwanKeyIndirectly
+{
+  "message": "\"/myhost/../.ssh/awwan.key\" not found",
+  "code": 404
+}