Add URLEndpointListener QE tests and TLS support in iOS TestServer

[barkha06]

• Added QE test coverage for URLEndpointListener, migrated from mobile-testkit to validate legacy peer-to-peer functionality
• Implemented TLS support in iOS TestServer for URLEndpointListener
• Enabled execution of peer-to-peer replication tests with TLS
• Added corresponding spec files

[Copilot]

Pull request overview

Adds QE test coverage for Couchbase Lite peer-to-peer URLEndpointListener replication and introduces TLS support for the iOS TestServer listener endpoint.

Changes:

• Added a new QE test suite covering multiple peer-to-peer replication topologies and resilience scenarios (incl. TLS).
• Implemented TLS identity import/reuse for iOS URLEndpointListener startup.
• Extended the Python client API to (a) send listener TLS identity material and (b) generate wss:// replication URLs when TLS is enabled.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 10 comments.

Show a summary per file

File	Description
tests/QE/test_peer_to_peer.py	New QE peer-to-peer replication tests (incl. TLS + restart scenario).
spec/tests/QE/test_peer_to_peer.md	Spec describing the new peer-to-peer QE test cases.
servers/ios/TestServer/Utils/DatabaseManager.swift	Adds TLS identity import/reuse and configures tlsIdentity for the listener.
servers/ios/TestServer/Handlers/StartListener.swift	Wires request fields (identity, reuseIdentity) into listener startup.
servers/ios/TestServer/ContentTypes/StartListenerRequest.swift	Adds identity and reuseIdentity fields to the start-listener request type.
client/src/cbltest/v1/requests.py	Adds identity and reuse_identity to /startListener request payload generation.
client/src/cbltest/api/testserver.py	Adds tls flag to produce wss:// URLs for replication endpoints.
client/src/cbltest/api/listener.py	Adds TLS identity generation, exposes identity, and passes identity/reuse flags to the server request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[pasin]

I have review the iOS TestServer code. Please see my comment.

[borrrden]

I don't see a reason to make this have a default.

[barkha06]

This is a required parameter because the replication URL needs to be generated based on the port, so the ty lint check failed since it was marked optional but it needs to have int value later.

[borrrden]

It will still have an int value after it is started. I think the ty lint isn't getting all of the information.

couchbase-lite-tests/client/src/cbltest/api/listener.py

Line 78 in d19e200

self.port = cast_resp.port

[borrrden]

I still don't get why the above is not enough to satisfy this situation.

[barkha06]

I am not sure, but here's the failure:
--> /Users/barkha.goyal/Desktop/temp2/couchbase-lite-tests/tests/QE/test_peer_to_peer.py:376:24 | 374 | all_dbs[1], 375 | endpoint=cblpytest.test_servers[0].replication_url( 376 | "db1", listener1.port, tls=True | ^^^^^^^^^^^^^^ Expected int, found Unknown | int | None 377 | ), 378 | replicator_type=replicator_type, | info: Element None of this union is not assignable to int info: Method defined here --> /Users/barkha.goyal/Desktop/temp2/couchbase-lite-tests/client/src/cbltest/api/testserver.py:146:9 | 144 | await self.__request_factory.send_request(self.__index, request) 145 | 146 | def replication_url(self, db_name: str, port: int, tls: bool = False): | ^^^^^^^^^^^^^^^ --------- Parameter declared here 147 | """

[barkha06]

One way to avoid would this is to make port a private parameter and define a getter for it, since the getter will always return an int, the ty lint would accept it.

[borrrden]

Also, regardless since you've changed the REST API you need to modify the OpenAPI spec and bump the version for the iOS test server and TDK client.

[github-actions]

Redocly preview

API

[pasin]

Let do not do this logic to avoid using any stale identity which may cause a test failure that is difficult to figure out. So if the created identity is nil, we can throw the error right away.

[pasin]

You can do something like this

listenerConfig.disableTLS = disableTLS

if let id = identity {
    guard let tlsIdentity = try DatabaseManager.createTLSIdentity( for: id, label:label) else { 
        throw TestServerError.badRequest("Failed to import TLS identity")
    }
    listenerConfig.tlsIdentity = tlsIdentity
}

[borrrden]

This will fail if a replicator is created twice with the same label, as is done in one of the tests. I had requested something like this to indicate passing nil is the way to say "use the previous existing identity"

[borrrden]

Also why did the default port situation get resolved? I don't see a reply to what I said. Currently the default is to let the system choose the port, and it will be set upon start.

[barkha06]

Also why did the default port situation get resolved? I don't see a reply to what I said. Currently the default is to let the system choose the port, and it will be set upon start.

I might've done that by mistake, I apologise for the oversight