Initial release of Web Tools 0.0.5

2026-08-07 21:51:15 +08:00
commit fa14e9e5b9
71 changed files with 6365 additions and 0 deletions
@@ -0,0 +1,115 @@
+import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import { afterEach, describe, expect, it } from 'vitest'
+import { createWebToolsServer, MAX_JSON_BODY_SIZE } from '../server/index.mjs'
+
+const temporaryDirectories = []
+const servers = []
+
+afterEach(async () => {
+  await Promise.all(servers.splice(0).map((server) => new Promise((resolve) => server.close(resolve))))
+  await Promise.all(temporaryDirectories.splice(0).map((directory) => rm(directory, { recursive: true, force: true })))
+})
+
+const catalog = {
+  categories: [{ id: 'encoding' }, { id: 'crypto' }],
+  tools: [
+    { id: 'hex', category: 'encoding' },
+    { id: 'cmac', category: 'crypto' },
+  ],
+}
+const defaults = {
+  version: 1,
+  categories: [
+    { id: 'encoding', tools: ['hex'] },
+    { id: 'crypto', tools: ['cmac'] },
+  ],
+}
+
+async function createFixtureServer() {
+  const directory = await mkdtemp(path.join(tmpdir(), 'web-tools-server-'))
+  temporaryDirectories.push(directory)
+  const staticRoot = path.join(directory, 'dist')
+  const dataDir = path.join(directory, 'data')
+  await writeFile(path.join(directory, 'placeholder'), '')
+  await mkdir(staticRoot, { recursive: true })
+  await writeFile(path.join(staticRoot, 'index.html'), '<!doctype html><title>Web Tools</title>')
+  await writeFile(path.join(staticRoot, 'app.js'), 'console.log("ok")')
+  const server = await createWebToolsServer({ staticRoot, dataDir, catalog, defaults, logger: { error: () => undefined } })
+  servers.push(server)
+  await new Promise((resolve, reject) => {
+    server.once('error', reject)
+    server.listen(0, '127.0.0.1', resolve)
+  })
+  const address = server.address()
+  return { baseUrl: `http://127.0.0.1:${address.port}`, dataDir }
+}
+
+describe('HTTP server', () => {
+  it('serves direct SPA navigation but returns 404 for missing assets', async () => {
+    const { baseUrl } = await createFixtureServer()
+    const page = await fetch(`${baseUrl}/tools/base64`, { headers: { Accept: 'text/html' } })
+    expect(page.status).toBe(200)
+    expect(await page.text()).toContain('<title>Web Tools</title>')
+
+    const asset = await fetch(`${baseUrl}/assets/definitely-missing.js`)
+    expect(asset.status).toBe(404)
+    expect(asset.headers.get('content-type')).toContain('text/plain')
+
+    const extensionlessAsset = await fetch(`${baseUrl}/assets/chunk`, { headers: { Accept: 'application/javascript' } })
+    expect(extensionlessAsset.status).toBe(404)
+  })
+
+  it('returns no-store JSON health and API responses', async () => {
+    const { baseUrl } = await createFixtureServer()
+    const health = await fetch(`${baseUrl}/healthz`)
+    expect(await health.json()).toEqual({ status: 'ok' })
+    expect(health.headers.get('cache-control')).toBe('no-store')
+
+    const missingApi = await fetch(`${baseUrl}/api/missing`)
+    expect(missingApi.status).toBe(404)
+    expect(missingApi.headers.get('cache-control')).toBe('no-store')
+  })
+
+  it('creates, reads and updates navigation through the API', async () => {
+    const { baseUrl, dataDir } = await createFixtureServer()
+    const initial = await fetch(`${baseUrl}/api/navigation`)
+    expect(await initial.json()).toEqual(defaults)
+
+    const updated = { version: 1, categories: [...defaults.categories].reverse() }
+    const saved = await fetch(`${baseUrl}/api/navigation`, {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(updated),
+    })
+    expect(saved.status).toBe(200)
+    expect(await saved.json()).toEqual(updated)
+    expect(JSON.parse(await readFile(path.join(dataDir, 'navigation.json'), 'utf8'))).toEqual(updated)
+  })
+
+  it('rejects invalid, oversized and cross-site navigation writes', async () => {
+    const { baseUrl } = await createFixtureServer()
+    const invalid = await fetch(`${baseUrl}/api/navigation`, {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: '{invalid',
+    })
+    expect(invalid.status).toBe(400)
+
+    const oversized = await fetch(`${baseUrl}/api/navigation`, {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: ' '.repeat(MAX_JSON_BODY_SIZE + 1),
+    })
+    expect(oversized.status).toBe(400)
+    expect((await oversized.json()).error).toContain('过大')
+
+    const crossSite = await fetch(`${baseUrl}/api/navigation`, {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json', 'Sec-Fetch-Site': 'cross-site' },
+      body: JSON.stringify(defaults),
+    })
+    expect(crossSite.status).toBe(403)
+  })
+})