nextcloud-spreed-signaling/api/signaling_test.go

/**
 * Standalone signaling server for the Nextcloud Spreed app.
 * Copyright (C) 2017 struktur AG
 *
 * @author Joachim Bauch <bauch@struktur.de>
 *
 * @license GNU AGPL version 3 or any later version
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
package api

import (
	"encoding/json"
	"errors"
	"slices"
	"strings"
	"testing"

	"github.com/pion/ice/v4"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"

	"github.com/strukturag/nextcloud-spreed-signaling/v2/container"
	"github.com/strukturag/nextcloud-spreed-signaling/v2/mock"
)

func TestRoomSessionIds(t *testing.T) {
	t.Parallel()

	assert := assert.New(t)

	var s1 RoomSessionId = "foo"
	assert.False(s1.IsFederated())
	assert.EqualValues("foo", s1.WithoutFederation())

	var s2 RoomSessionId = "federated|bar"
	assert.True(s2.IsFederated())
	assert.EqualValues("bar", s2.WithoutFederation())
}

type testCheckValid interface {
	CheckValid() error
}

func wrapMessage(messageType string, msg testCheckValid) *ClientMessage {
	wrapped := &ClientMessage{
		Type: messageType,
	}
	switch messageType {
	case "hello":
		wrapped.Hello = msg.(*HelloClientMessage)
	case "message":
		wrapped.Message = msg.(*MessageClientMessage)
	case "bye":
		wrapped.Bye = msg.(*ByeClientMessage)
	case "room":
		wrapped.Room = msg.(*RoomClientMessage)
	case "control":
		wrapped.Control = msg.(*ControlClientMessage)
	case "internal":
		wrapped.Internal = msg.(*InternalClientMessage)
	case "transient":
		wrapped.TransientData = msg.(*TransientDataClientMessage)
	default:
		return nil
	}
	return wrapped
}

func testMessages(t *testing.T, messageType string, valid_messages []testCheckValid, invalid_messages []testCheckValid) {
	t.Helper()
	assert := assert.New(t)
	for _, msg := range valid_messages {
		assert.NoError(msg.CheckValid(), "Message %+v should be valid", msg)

		if messageType != "" {
			// If the inner message is valid, it should also be valid in a wrapped
			// ClientMessage.
			if wrapped := wrapMessage(messageType, msg); assert.NotNil(wrapped, "Unknown message type: %s", messageType) {
				assert.NoError(wrapped.CheckValid(), "Message %+v should be valid", wrapped)
			}
		}
	}
	for _, msg := range invalid_messages {
		assert.Error(msg.CheckValid(), "Message %+v should not be valid", msg)

		if messageType != "" {
			// If the inner message is invalid, it should also be invalid in a
			// wrapped ClientMessage.
			if wrapped := wrapMessage(messageType, msg); assert.NotNil(wrapped, "Unknown message type: %s", messageType) {
				assert.Error(wrapped.CheckValid(), "Message %+v should not be valid", wrapped)
			}
		}
	}
}

func TestClientMessage(t *testing.T) {
	t.Parallel()
	assert := assert.New(t)
	// The message needs a type.
	msg := ClientMessage{}
	assert.Error(msg.CheckValid())
}

func TestHelloClientMessage(t *testing.T) {
	t.Parallel()
	internalAuthParams := []byte("{\"backend\":\"https://domain.invalid\"}")
	tokenAuthParams := []byte("{\"token\":\"invalid-token\"}")
	valid_messages := []testCheckValid{
		// Hello version 1
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Params: json.RawMessage("{}"),
				Url:    "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Type:   "client",
				Params: json.RawMessage("{}"),
				Url:    "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Type:   "internal",
				Params: internalAuthParams,
			},
		},
		&HelloClientMessage{
			Version:  HelloVersionV1,
			ResumeId: "the-resume-id",
		},
		// Hello version 2
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Params: tokenAuthParams,
				Url:    "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Type:   "client",
				Params: tokenAuthParams,
				Url:    "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version:  HelloVersionV2,
			ResumeId: "the-resume-id",
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Type:   "federation",
				Params: tokenAuthParams,
				Url:    "https://domain.invalid",
			},
		},
	}
	invalid_messages := []testCheckValid{
		// Hello version 1
		&HelloClientMessage{},
		&HelloClientMessage{Version: "0.0"},
		&HelloClientMessage{Version: HelloVersionV1},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Params: json.RawMessage("{}"),
				Type:   "invalid-type",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Url: "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Params: json.RawMessage("{}"),
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Params: json.RawMessage("{}"),
				Url:    "invalid-url",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Type:   "internal",
				Params: json.RawMessage("{}"),
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV1,
			Auth: &HelloClientMessageAuth{
				Type:   "internal",
				Params: json.RawMessage("xyz"), // Invalid JSON.
			},
		},
		// Hello version 2
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Url: "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Params: tokenAuthParams,
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Params: tokenAuthParams,
				Url:    "invalid-url",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Params: internalAuthParams,
				Url:    "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Params: json.RawMessage("xyz"), // Invalid JSON.
				Url:    "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Type:   HelloClientTypeFederation,
				Params: json.RawMessage("xyz"), // Invalid JSON.
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Type:   HelloClientTypeFederation,
				Params: json.RawMessage("{}"),
				Url:    "https://domain.invalid",
			},
		},
		&HelloClientMessage{
			Version: HelloVersionV2,
			Auth: &HelloClientMessageAuth{
				Type:   HelloClientTypeFederation,
				Params: tokenAuthParams,
			},
		},
	}

	testMessages(t, "hello", valid_messages, invalid_messages)

	// A "hello" message must be present
	msg := ClientMessage{
		Type: "hello",
	}
	assert := assert.New(t)
	assert.Error(msg.CheckValid())
}

func TestMessageClientMessage(t *testing.T) {
	t.Parallel()
	valid_messages := []testCheckValid{
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type:      "session",
				SessionId: "the-session-id",
			},
			Data: json.RawMessage("{}"),
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type:   "user",
				UserId: "the-user-id",
			},
			Data: json.RawMessage("{}"),
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type: "room",
			},
			Data: json.RawMessage("{}"),
		},
	}
	invalid_messages := []testCheckValid{
		&MessageClientMessage{},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type:      "session",
				SessionId: "the-session-id",
			},
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type: "session",
			},
			Data: json.RawMessage("{}"),
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type:   "session",
				UserId: "the-user-id",
			},
			Data: json.RawMessage("{}"),
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type: "user",
			},
			Data: json.RawMessage("{}"),
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type:   "user",
				UserId: "the-user-id",
			},
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type:      "user",
				SessionId: "the-user-id",
			},
			Data: json.RawMessage("{}"),
		},
		&MessageClientMessage{
			Recipient: MessageClientMessageRecipient{
				Type: "unknown-type",
			},
			Data: json.RawMessage("{}"),
		},
	}
	testMessages(t, "message", valid_messages, invalid_messages)

	// A "message" message must be present
	msg := ClientMessage{
		Type: "message",
	}
	assert := assert.New(t)
	assert.Error(msg.CheckValid())
}

func TestControlClientMessage(t *testing.T) {
	t.Parallel()
	valid_messages := []testCheckValid{
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type:      "session",
					SessionId: "the-session-id",
				},
				Data: json.RawMessage("{}"),
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type:   "user",
					UserId: "the-user-id",
				},
				Data: json.RawMessage("{}"),
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type: "room",
				},
				Data: json.RawMessage("{}"),
			},
		},
	}
	invalid_messages := []testCheckValid{
		&ControlClientMessage{
			MessageClientMessage{},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type:      "session",
					SessionId: "the-session-id",
				},
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type: "session",
				},
				Data: json.RawMessage("{}"),
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type:   "session",
					UserId: "the-user-id",
				},
				Data: json.RawMessage("{}"),
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type: "user",
				},
				Data: json.RawMessage("{}"),
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type:   "user",
					UserId: "the-user-id",
				},
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type:      "user",
					SessionId: "the-user-id",
				},
				Data: json.RawMessage("{}"),
			},
		},
		&ControlClientMessage{
			MessageClientMessage{
				Recipient: MessageClientMessageRecipient{
					Type: "unknown-type",
				},
				Data: json.RawMessage("{}"),
			},
		},
	}
	testMessages(t, "control", valid_messages, invalid_messages)

	// But a "control" message must be present
	msg := ClientMessage{
		Type: "control",
	}
	assert := assert.New(t)
	assert.Error(msg.CheckValid())
}

func TestMessageClientMessageData(t *testing.T) {
	t.Parallel()
	valid_messages := []testCheckValid{
		&MessageClientMessageData{
			Type:     "invalid",
			RoomType: "video",
		},
		&MessageClientMessageData{
			Type:     "offer",
			RoomType: "video",
			Payload: StringMap{
				"sdp": mock.MockSdpOfferAudioAndVideo,
			},
		},
		&MessageClientMessageData{
			Type:     "answer",
			RoomType: "video",
			Payload: StringMap{
				"sdp": mock.MockSdpAnswerAudioAndVideo,
			},
		},
		&MessageClientMessageData{
			Type:     "candidate",
			RoomType: "video",
			Payload: StringMap{
				"candidate": StringMap{
					"candidate": "",
				},
			},
		},
		&MessageClientMessageData{
			Type:     "candidate",
			RoomType: "video",
			Payload: StringMap{
				"candidate": StringMap{
					"candidate": "candidate:0 1 UDP 2122194687 192.0.2.4 61665 typ host",
				},
			},
		},
	}
	invalid_messages := []testCheckValid{
		&MessageClientMessageData{},
		&MessageClientMessageData{
			RoomType: "invalid",
		},
		&MessageClientMessageData{
			Type:     "offer",
			RoomType: "video",
		},
		&MessageClientMessageData{
			Type:     "offer",
			RoomType: "video",
			Payload: StringMap{
				"sdp": 1234,
			},
		},
		&MessageClientMessageData{
			Type:     "offer",
			RoomType: "video",
			Payload: StringMap{
				"sdp": "invalid-sdp",
			},
		},
		&MessageClientMessageData{
			Type:     "answer",
			RoomType: "video",
		},
		&MessageClientMessageData{
			Type:     "answer",
			RoomType: "video",
			Payload: StringMap{
				"sdp": 1234,
			},
		},
		&MessageClientMessageData{
			Type:     "answer",
			RoomType: "video",
			Payload: StringMap{
				"sdp": "invalid-sdp",
			},
		},
		&MessageClientMessageData{
			Type:     "candidate",
			RoomType: "video",
		},
		&MessageClientMessageData{
			Type:     "candidate",
			RoomType: "video",
			Payload: StringMap{
				"candidate": "invalid-candidate",
			},
		},
		&MessageClientMessageData{
			Type:     "candidate",
			RoomType: "video",
			Payload: StringMap{
				"candidate": StringMap{
					"candidate": 12345,
				},
			},
		},
		&MessageClientMessageData{
			Type:     "candidate",
			RoomType: "video",
			Payload: StringMap{
				"candidate": StringMap{
					"candidate": ":",
				},
			},
		},
	}

	testMessages(t, "", valid_messages, invalid_messages)
}

func TestByeClientMessage(t *testing.T) {
	t.Parallel()
	// Any "bye" message is valid.
	valid_messages := []testCheckValid{
		&ByeClientMessage{},
	}
	invalid_messages := []testCheckValid{}

	testMessages(t, "bye", valid_messages, invalid_messages)

	// The "bye" message is optional.
	msg := ClientMessage{
		Type: "bye",
	}
	assert := assert.New(t)
	assert.NoError(msg.CheckValid())
}

func TestRoomClientMessage(t *testing.T) {
	t.Parallel()
	// Any regular "room" message is valid.
	valid_messages := []testCheckValid{
		&RoomClientMessage{},
		&RoomClientMessage{
			Federation: &RoomFederationMessage{
				SignalingUrl: "http://signaling.domain.invalid/",
				NextcloudUrl: "http://nextcloud.domain.invalid",
				Token:        "the token",
			},
		},
	}
	invalid_messages := []testCheckValid{
		&RoomClientMessage{
			Federation: &RoomFederationMessage{},
		},
		&RoomClientMessage{
			Federation: &RoomFederationMessage{
				SignalingUrl: ":",
			},
		},
		&RoomClientMessage{
			Federation: &RoomFederationMessage{
				SignalingUrl: "http://signaling.domain.invalid",
			},
		},
		&RoomClientMessage{
			Federation: &RoomFederationMessage{
				SignalingUrl: "http://signaling.domain.invalid/",
				NextcloudUrl: ":",
			},
		},
		&RoomClientMessage{
			Federation: &RoomFederationMessage{
				SignalingUrl: "http://signaling.domain.invalid/",
				NextcloudUrl: "http://nextcloud.domain.invalid",
			},
		},
	}

	testMessages(t, "room", valid_messages, invalid_messages)

	// But a "room" message must be present
	msg := ClientMessage{
		Type: "room",
	}
	assert := assert.New(t)
	assert.Error(msg.CheckValid())
}

func TestInternalClientMessage(t *testing.T) {
	t.Parallel()
	valid_messages := []testCheckValid{
		&InternalClientMessage{
			Type: "invalid",
		},
		&InternalClientMessage{
			Type: "addsession",
			AddSession: &AddSessionInternalClientMessage{
				CommonSessionInternalClientMessage: CommonSessionInternalClientMessage{
					SessionId: "session id",
					RoomId:    "room id",
				},
			},
		},
		&InternalClientMessage{
			Type: "updatesession",
			UpdateSession: &UpdateSessionInternalClientMessage{
				CommonSessionInternalClientMessage: CommonSessionInternalClientMessage{
					SessionId: "session id",
					RoomId:    "room id",
				},
			},
		},
		&InternalClientMessage{
			Type: "removesession",
			RemoveSession: &RemoveSessionInternalClientMessage{
				CommonSessionInternalClientMessage: CommonSessionInternalClientMessage{
					SessionId: "session id",
					RoomId:    "room id",
				},
			},
		},
		&InternalClientMessage{
			Type:   "incall",
			InCall: &InCallInternalClientMessage{},
		},
		&InternalClientMessage{
			Type: "dialout",
			Dialout: &DialoutInternalClientMessage{
				Type: "invalid",
			},
		},
		&InternalClientMessage{
			Type: "dialout",
			Dialout: &DialoutInternalClientMessage{
				Type:  "error",
				Error: &Error{},
			},
		},
		&InternalClientMessage{
			Type: "dialout",
			Dialout: &DialoutInternalClientMessage{
				Type:   "status",
				Status: &DialoutStatusInternalClientMessage{},
			},
		},
	}
	invalid_messages := []testCheckValid{
		&InternalClientMessage{},
		&InternalClientMessage{
			Type: "addsession",
		},
		&InternalClientMessage{
			Type:       "addsession",
			AddSession: &AddSessionInternalClientMessage{},
		},
		&InternalClientMessage{
			Type: "addsession",
			AddSession: &AddSessionInternalClientMessage{
				CommonSessionInternalClientMessage: CommonSessionInternalClientMessage{
					SessionId: "session id",
				},
			},
		},
		&InternalClientMessage{
			Type: "updatesession",
		},
		&InternalClientMessage{
			Type:          "updatesession",
			UpdateSession: &UpdateSessionInternalClientMessage{},
		},
		&InternalClientMessage{
			Type: "updatesession",
			UpdateSession: &UpdateSessionInternalClientMessage{
				CommonSessionInternalClientMessage: CommonSessionInternalClientMessage{
					SessionId: "session id",
				},
			},
		},
		&InternalClientMessage{
			Type: "removesession",
		},
		&InternalClientMessage{
			Type:          "removesession",
			RemoveSession: &RemoveSessionInternalClientMessage{},
		},
		&InternalClientMessage{
			Type: "removesession",
			RemoveSession: &RemoveSessionInternalClientMessage{
				CommonSessionInternalClientMessage: CommonSessionInternalClientMessage{
					SessionId: "session id",
				},
			},
		},
		&InternalClientMessage{
			Type: "incall",
		},
		&InternalClientMessage{
			Type: "dialout",
		},
		&InternalClientMessage{
			Type:    "dialout",
			Dialout: &DialoutInternalClientMessage{},
		},
		&InternalClientMessage{
			Type: "dialout",
			Dialout: &DialoutInternalClientMessage{
				Type: "error",
			},
		},
		&InternalClientMessage{
			Type: "dialout",
			Dialout: &DialoutInternalClientMessage{
				Type: "status",
			},
		},
	}

	testMessages(t, "internal", valid_messages, invalid_messages)

	// But a "internal" message must be present
	msg := ClientMessage{
		Type: "internal",
	}
	assert := assert.New(t)
	assert.Error(msg.CheckValid())
}

func TestTransientDataClientMessage(t *testing.T) {
	t.Parallel()
	valid_messages := []testCheckValid{
		&TransientDataClientMessage{
			Type: "set",
			Key:  "foo",
		},
		&TransientDataClientMessage{
			Type: "remove",
			Key:  "foo",
		},
	}
	invalid_messages := []testCheckValid{
		&TransientDataClientMessage{},
		&TransientDataClientMessage{
			Type: "set",
		},
		&TransientDataClientMessage{
			Type: "remove",
		},
	}

	testMessages(t, "transient", valid_messages, invalid_messages)

	// But a "transient" message must be present
	msg := ClientMessage{
		Type: "transient",
	}
	assert := assert.New(t)
	assert.Error(msg.CheckValid())
}

func TestErrorMessages(t *testing.T) {
	t.Parallel()
	assert := assert.New(t)
	id := "request-id"
	msg := ClientMessage{
		Id: id,
	}
	err1 := msg.NewErrorServerMessage(&Error{})
	assert.Equal(id, err1.Id, "%+v", err1)
	assert.Equal("error", err1.Type, "%+v", err1)
	assert.NotNil(err1.Error, "%+v", err1)

	err2 := msg.NewWrappedErrorServerMessage(errors.New("test-error"))
	assert.Equal(id, err2.Id, "%+v", err2)
	assert.Equal("error", err2.Type, "%+v", err2)
	if assert.NotNil(err2.Error, "%+v", err2) {
		assert.Equal("internal_error", err2.Error.Code, "%+v", err2)
		assert.Equal("test-error", err2.Error.Message, "%+v", err2)
	}
	// Test "error" interface
	assert.Equal("test-error", err2.Error.Error(), "%+v", err2)
}

func TestIsChatRefresh(t *testing.T) {
	t.Parallel()
	var msg ServerMessage
	data_true := []byte("{\"type\":\"chat\",\"chat\":{\"refresh\":true}}")
	msg = ServerMessage{
		Type: "event",
		Event: &EventServerMessage{
			Type: "message",
			Message: &RoomEventMessage{
				RoomId: "foo",
				Data:   data_true,
			},
		},
	}
	assert.True(t, msg.IsChatRefresh())

	data_false := []byte("{\"type\":\"chat\",\"chat\":{\"refresh\":false}}")
	msg = ServerMessage{
		Type: "event",
		Event: &EventServerMessage{
			Type: "message",
			Message: &RoomEventMessage{
				RoomId: "foo",
				Data:   data_false,
			},
		},
	}
	assert.False(t, msg.IsChatRefresh())
}

func assertEqualStrings(t *testing.T, expected, result []string) {
	t.Helper()

	if expected == nil {
		expected = make([]string, 0)
	} else {
		slices.Sort(expected)
	}
	if result == nil {
		result = make([]string, 0)
	} else {
		slices.Sort(result)
	}

	assert.Equal(t, expected, result)
}

func Test_Welcome_AddRemoveFeature(t *testing.T) {
	t.Parallel()
	assert := assert.New(t)
	var msg WelcomeServerMessage
	assertEqualStrings(t, []string{}, msg.Features)

	msg.AddFeature("one", "two", "one")
	assertEqualStrings(t, []string{"one", "two"}, msg.Features)
	assert.True(slices.IsSorted(msg.Features), "features should be sorted, got %+v", msg.Features)

	msg.AddFeature("three")
	assertEqualStrings(t, []string{"one", "two", "three"}, msg.Features)
	assert.True(slices.IsSorted(msg.Features), "features should be sorted, got %+v", msg.Features)

	msg.RemoveFeature("three", "one")
	assertEqualStrings(t, []string{"two"}, msg.Features)
}

func TestFilterCandidates(t *testing.T) {
	t.Parallel()
	assert := assert.New(t)

	testcases := []struct {
		candidate      string
		allowed        string
		blocked        string
		expectFiltered bool
	}{
		// IPs can be filtered.
		{
			"candidate:1696121226 1 udp 2122129151 10.1.2.3 12345 typ host generation 0 ufrag YOs/ network-id 1",
			"",
			"10.0.0.0/8",
			true,
		},
		{
			"candidate:1696121226 1 udp 2122129151 1.2.3.4 12345 typ host generation 0 ufrag YOs/ network-id 1",
			"",
			"10.0.0.0/8",
			false,
		},
		// IPs can be allowed.
		{
			"candidate:1696121226 1 udp 2122129151 10.1.2.3 12345 typ host generation 0 ufrag YOs/ network-id 1",
			"10.1.0.0/16",
			"10.0.0.0/8",
			false,
		},
		// IPs can be blocked.
		{
			"candidate:1696121226 1 udp 2122129151 1.2.3.4 12345 typ host generation 0 ufrag YOs/ network-id 1",
			"",
			"1.2.0.0/16",
			true,
		},
	}

	for idx, tc := range testcases {
		candidate, err := ice.UnmarshalCandidate(tc.candidate)
		if !assert.NoError(err, "parsing candidate %s failed in testcase %d", tc.candidate, idx) {
			continue
		}

		var allowed *container.IPList
		if tc.allowed != "" {
			allowed, err = container.ParseIPList(tc.allowed)
			if !assert.NoError(err, "parsing allowed list %s failed in testcase %d", tc.allowed, idx) {
				continue
			}
		}

		var blocked *container.IPList
		if tc.blocked != "" {
			blocked, err = container.ParseIPList(tc.blocked)
			if !assert.NoError(err, "parsing blocked list %s failed in testcase %d", tc.blocked, idx) {
				continue
			}
		}

		filtered := FilterCandidate(candidate, allowed, blocked)
		assert.Equal(tc.expectFiltered, filtered, "failed in testcase %d", idx)
	}
}

func TestFilterSDPCandidates(t *testing.T) {
	t.Parallel()
	require := require.New(t)
	assert := assert.New(t)

	s, err := ParseSDP(mock.MockSdpOfferAudioOnly)
	require.NoError(err)
	if encoded, err := s.Marshal(); assert.NoError(err) {
		assert.Equal(mock.MockSdpOfferAudioOnly, strings.ReplaceAll(string(encoded), "\r\n", "\n"))
	}

	expectedBefore := map[string]int{
		"audio": 4,
	}
	for _, m := range s.MediaDescriptions {
		count := 0
		for _, a := range m.Attributes {
			if a.IsICECandidate() {
				count++
			}
		}

		assert.Equal(expectedBefore[m.MediaName.Media], count, "invalid number of candidates for media description %s", m.MediaName.Media)
	}

	blocked, err := container.ParseIPList("192.0.0.0/24, 192.168.0.0/16")
	require.NoError(err)

	expectedAfter := map[string]int{
		"audio": 2,
	}
	if filtered := FilterSDPCandidates(s, nil, blocked); assert.True(filtered, "should have filtered") {
		for _, m := range s.MediaDescriptions {
			count := 0
			for _, a := range m.Attributes {
				if a.IsICECandidate() {
					count++
				}
			}

			assert.Equal(expectedAfter[m.MediaName.Media], count, "invalid number of candidates for media description %s", m.MediaName.Media)
		}
	}

	if encoded, err := s.Marshal(); assert.NoError(err) {
		assert.NotEqual(mock.MockSdpOfferAudioOnly, strings.ReplaceAll(string(encoded), "\r\n", "\n"))
		assert.Equal(mock.MockSdpOfferAudioOnlyNoFilter, strings.ReplaceAll(string(encoded), "\r\n", "\n"))
	}
}

func TestNoFilterSDPCandidates(t *testing.T) {
	t.Parallel()
	require := require.New(t)
	assert := assert.New(t)

	s, err := ParseSDP(mock.MockSdpOfferAudioOnlyNoFilter)
	require.NoError(err)
	if encoded, err := s.Marshal(); assert.NoError(err) {
		assert.Equal(mock.MockSdpOfferAudioOnlyNoFilter, strings.ReplaceAll(string(encoded), "\r\n", "\n"))
	}

	expectedBefore := map[string]int{
		"audio": 2,
	}
	for _, m := range s.MediaDescriptions {
		count := 0
		for _, a := range m.Attributes {
			if a.IsICECandidate() {
				count++
			}
		}

		assert.Equal(expectedBefore[m.MediaName.Media], count, "invalid number of candidates for media description %s", m.MediaName.Media)
	}

	blocked, err := container.ParseIPList("192.0.0.0/24, 192.168.0.0/16")
	require.NoError(err)

	expectedAfter := map[string]int{
		"audio": 2,
	}
	if filtered := FilterSDPCandidates(s, nil, blocked); assert.False(filtered, "should not have filtered") {
		for _, m := range s.MediaDescriptions {
			count := 0
			for _, a := range m.Attributes {
				if a.IsICECandidate() {
					count++
				}
			}

			assert.Equal(expectedAfter[m.MediaName.Media], count, "invalid number of candidates for media description %s", m.MediaName.Media)
		}
	}

	if encoded, err := s.Marshal(); assert.NoError(err) {
		assert.Equal(mock.MockSdpOfferAudioOnlyNoFilter, strings.ReplaceAll(string(encoded), "\r\n", "\n"))
	}
}