test(transport): add remaining endpoint policy contracts

Author: loong10k

src/test/java/io/github/easy4j/hermes/security/EndpointPolicyContractTest.java

@@ -80,4 +80,67 @@ void testEp003S1() throws Exception {
         }
     }
 
+
+    @Test
+    void testEp001S2TrustedPrivateRequiresExplicitPolicy() {
+        assertThrows(IllegalArgumentException.class, () ->
+                EndpointPolicy.strictPublic().require("http://10.20.30.40:8642"));
+
+        EndpointPolicy policy = EndpointPolicy.trustedPrivate("10.20.30.40", 8642);
+        assertDoesNotThrow(() -> policy.require("http://10.20.30.40:8642"));
+        assertThrows(IllegalArgumentException.class, () ->
+                policy.require("http://10.20.30.41:8642"));
+        assertThrows(IllegalArgumentException.class, () ->
+                policy.require("http://10.20.30.40:8643"));
+    }
+
+    @Test
+    void testPublicPolicyRequiresHttps() {
+        EndpointPolicy policy = EndpointPolicy.strictPublic();
+        assertThrows(IllegalArgumentException.class, () ->
+                policy.require("http://1.1.1.1/v1"));
+        assertDoesNotThrow(() -> policy.require("https://1.1.1.1/v1"));
+    }
+
+    @Test
+    void testEp002S1RejectsMixedResolutionCandidates() throws Exception {
+        EndpointPolicy policy = EndpointPolicy.strictPublic(host -> new java.net.InetAddress[] {
+                java.net.InetAddress.getByAddress(new byte[] {1, 1, 1, 1}),
+                java.net.InetAddress.getByAddress(new byte[] {127, 0, 0, 1})
+        });
+
+        assertThrows(IllegalArgumentException.class, () ->
+                policy.require("https://mixed.example/v1"));
+    }
+
+    @Test
+    void testEp003RejectsUserInfo() {
+        assertThrows(IllegalArgumentException.class, () ->
+                EndpointPolicy.strictPublic().require("https://user:secret@1.1.1.1/v1"));
+    }
+
+    @Test
+    void testEp003S2EncodesReservedRunIdentifierAsOnePathSegment() throws Exception {
+        try (MockWebServer server = new MockWebServer()) {
+            server.enqueue(new MockResponse()
+                    .setResponseCode(200)
+                    .setHeader("Content-Type", "application/json")
+                    .setBody("{}"));
+            server.start();
+
+            HermesHttpClientConfig config = new HermesHttpClientConfig()
+                    .setEndpointPolicy(EndpointPolicy.trustedLocal("127.0.0.1", server.getPort()))
+                    .setBaseUrl("http://127.0.0.1:" + server.getPort());
+
+            try (HermesHttpClient client = new HermesHttpClient(config)) {
+                assertNotNull(client.getRun("run/alpha?x=1"));
+            }
+
+            okhttp3.mockwebserver.RecordedRequest request = server.takeRequest(1, TimeUnit.SECONDS);
+            assertNotNull(request);
+            org.junit.jupiter.api.Assertions.assertEquals(
+                    "/v1/runs/run%2Falpha%3Fx%3D1", request.getPath());
+        }
+    }
+
 }