116 lines
4.5 KiB
JavaScript
116 lines
4.5 KiB
JavaScript
import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
|
|
import { tmpdir } from 'node:os'
|
|
import path from 'node:path'
|
|
import { afterEach, describe, expect, it } from 'vitest'
|
|
import { createWebToolsServer, MAX_JSON_BODY_SIZE } from '../server/index.mjs'
|
|
|
|
const temporaryDirectories = []
|
|
const servers = []
|
|
|
|
afterEach(async () => {
|
|
await Promise.all(servers.splice(0).map((server) => new Promise((resolve) => server.close(resolve))))
|
|
await Promise.all(temporaryDirectories.splice(0).map((directory) => rm(directory, { recursive: true, force: true })))
|
|
})
|
|
|
|
const catalog = {
|
|
categories: [{ id: 'encoding' }, { id: 'crypto' }],
|
|
tools: [
|
|
{ id: 'hex', category: 'encoding' },
|
|
{ id: 'cmac', category: 'crypto' },
|
|
],
|
|
}
|
|
const defaults = {
|
|
version: 1,
|
|
categories: [
|
|
{ id: 'encoding', tools: ['hex'] },
|
|
{ id: 'crypto', tools: ['cmac'] },
|
|
],
|
|
}
|
|
|
|
async function createFixtureServer() {
|
|
const directory = await mkdtemp(path.join(tmpdir(), 'web-tools-server-'))
|
|
temporaryDirectories.push(directory)
|
|
const staticRoot = path.join(directory, 'dist')
|
|
const dataDir = path.join(directory, 'data')
|
|
await writeFile(path.join(directory, 'placeholder'), '')
|
|
await mkdir(staticRoot, { recursive: true })
|
|
await writeFile(path.join(staticRoot, 'index.html'), '<!doctype html><title>Web Tools</title>')
|
|
await writeFile(path.join(staticRoot, 'app.js'), 'console.log("ok")')
|
|
const server = await createWebToolsServer({ staticRoot, dataDir, catalog, defaults, logger: { error: () => undefined } })
|
|
servers.push(server)
|
|
await new Promise((resolve, reject) => {
|
|
server.once('error', reject)
|
|
server.listen(0, '127.0.0.1', resolve)
|
|
})
|
|
const address = server.address()
|
|
return { baseUrl: `http://127.0.0.1:${address.port}`, dataDir }
|
|
}
|
|
|
|
describe('HTTP server', () => {
|
|
it('serves direct SPA navigation but returns 404 for missing assets', async () => {
|
|
const { baseUrl } = await createFixtureServer()
|
|
const page = await fetch(`${baseUrl}/tools/base64`, { headers: { Accept: 'text/html' } })
|
|
expect(page.status).toBe(200)
|
|
expect(await page.text()).toContain('<title>Web Tools</title>')
|
|
|
|
const asset = await fetch(`${baseUrl}/assets/definitely-missing.js`)
|
|
expect(asset.status).toBe(404)
|
|
expect(asset.headers.get('content-type')).toContain('text/plain')
|
|
|
|
const extensionlessAsset = await fetch(`${baseUrl}/assets/chunk`, { headers: { Accept: 'application/javascript' } })
|
|
expect(extensionlessAsset.status).toBe(404)
|
|
})
|
|
|
|
it('returns no-store JSON health and API responses', async () => {
|
|
const { baseUrl } = await createFixtureServer()
|
|
const health = await fetch(`${baseUrl}/healthz`)
|
|
expect(await health.json()).toEqual({ status: 'ok' })
|
|
expect(health.headers.get('cache-control')).toBe('no-store')
|
|
|
|
const missingApi = await fetch(`${baseUrl}/api/missing`)
|
|
expect(missingApi.status).toBe(404)
|
|
expect(missingApi.headers.get('cache-control')).toBe('no-store')
|
|
})
|
|
|
|
it('creates, reads and updates navigation through the API', async () => {
|
|
const { baseUrl, dataDir } = await createFixtureServer()
|
|
const initial = await fetch(`${baseUrl}/api/navigation`)
|
|
expect(await initial.json()).toEqual(defaults)
|
|
|
|
const updated = { version: 1, categories: [...defaults.categories].reverse() }
|
|
const saved = await fetch(`${baseUrl}/api/navigation`, {
|
|
method: 'PUT',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify(updated),
|
|
})
|
|
expect(saved.status).toBe(200)
|
|
expect(await saved.json()).toEqual(updated)
|
|
expect(JSON.parse(await readFile(path.join(dataDir, 'navigation.json'), 'utf8'))).toEqual(updated)
|
|
})
|
|
|
|
it('rejects invalid, oversized and cross-site navigation writes', async () => {
|
|
const { baseUrl } = await createFixtureServer()
|
|
const invalid = await fetch(`${baseUrl}/api/navigation`, {
|
|
method: 'PUT',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: '{invalid',
|
|
})
|
|
expect(invalid.status).toBe(400)
|
|
|
|
const oversized = await fetch(`${baseUrl}/api/navigation`, {
|
|
method: 'PUT',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: ' '.repeat(MAX_JSON_BODY_SIZE + 1),
|
|
})
|
|
expect(oversized.status).toBe(400)
|
|
expect((await oversized.json()).error).toContain('过大')
|
|
|
|
const crossSite = await fetch(`${baseUrl}/api/navigation`, {
|
|
method: 'PUT',
|
|
headers: { 'Content-Type': 'application/json', 'Sec-Fetch-Site': 'cross-site' },
|
|
body: JSON.stringify(defaults),
|
|
})
|
|
expect(crossSite.status).toBe(403)
|
|
})
|
|
})
|