feat: Implement comprehensive RBAC system with JWT authentication #4
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Smart Contract Tests | |
| on: | |
| push: | |
| branches: [ "main", "develop", "feature/*" ] | |
| pull_request: | |
| branches: [ "main", "develop" ] | |
| jobs: | |
| smart-contract-tests: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: stable | |
| target: wasm32-unknown-unknown | |
| override: true | |
| - name: Cache Rust dependencies | |
| uses: actions/cache@v3 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| contracts/target | |
| key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo- | |
| - name: Install Soroban CLI | |
| run: | | |
| curl -L https://github.com/stellar/soroban/releases/latest/download/soroban-cli-linux-x86_64.tar.gz | tar xz | |
| sudo mv soroban /usr/local/bin/ | |
| - name: Build smart contracts | |
| run: | | |
| cd contracts | |
| cargo build --target wasm32-unknown-unknown --release | |
| - name: Run smart contract tests | |
| run: | | |
| cd contracts | |
| cargo test --workspace | |
| - name: Run reentrancy tests specifically | |
| run: | | |
| cd contracts/reentrancy-tests | |
| cargo test -- --nocapture | |
| - name: Verify contract examples | |
| run: | | |
| cd contracts | |
| for contract in vesting-vault malicious-contract reentrancy-tests; do | |
| echo "Testing $contract contract..." | |
| cd $contract | |
| cargo test | |
| cd .. | |
| done | |
| backend-tests: | |
| runs-on: ubuntu-latest | |
| services: | |
| sqlite: | |
| image: keinos/sqlite3:latest | |
| options: >- | |
| --health-cmd "sqlite3 --version" | |
| --health-interval 10s | |
| --health-timeout 5s | |
| --health-retries 5 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '18' | |
| cache: 'npm' | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Create environment file | |
| run: cp .env.example .env | |
| - name: Create data directory | |
| run: mkdir -p data | |
| - name: Run backend tests | |
| run: npm test | |
| - name: Generate coverage report | |
| run: npm run test:coverage | |
| integration-tests: | |
| runs-on: ubuntu-latest | |
| needs: [smart-contract-tests, backend-tests] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '18' | |
| cache: 'npm' | |
| - name: Install Rust | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: stable | |
| target: wasm32-unknown-unknown | |
| override: true | |
| - name: Install dependencies | |
| run: | | |
| npm ci | |
| curl -L https://github.com/stellar/soroban/releases/latest/download/soroban-cli-linux-x86_64.tar.gz | tar xz | |
| sudo mv soroban /usr/local/bin/ | |
| - name: Build contracts | |
| run: | | |
| cd contracts | |
| cargo build --target wasm32-unknown-unknown --release | |
| - name: Start backend server | |
| run: | | |
| cp .env.example .env | |
| mkdir -p data | |
| npm start & | |
| sleep 10 | |
| - name: Run integration tests | |
| run: | | |
| echo "Testing backend API with smart contracts..." | |
| curl -f http://localhost:3000/ || exit 1 | |
| curl -f http://localhost:3000/api/audit/verify || exit 1 | |
| - name: Test reentrancy protection | |
| run: | | |
| cd contracts/reentrancy-tests | |
| cargo test test_comprehensive_reentrancy_protection -- --nocapture |