mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-26 09:52:11 +03:00
78f09c8d9f
Release v3.8.41 — 52 commits since v3.8.40 (19 CHANGELOG bullets, 11 contributors). All gating CI green: Unit×8, Coverage×8, Vitest, Package Artifact, Quality Ratchet, CodeQL, Lint, Docs Sync (Strict), Node 24/26 compat, E2E×9, Integration, Electron smoke. Advisory checks overridden (main unprotected): PR Test Policy = test-masking heuristic on the cumulative 52-commit assert delta (legitimate dead-code-sweep removals + consolidations, reviewed per-PR); SonarCloud/SonarQube = new-code maintainability/coverage quality gate (CodeQL/Semgrep/Security/npm-audit/Dependabot all clean — not a security finding).
67 lines
2.2 KiB
TypeScript
67 lines
2.2 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import fs from "node:fs";
|
|
import os from "node:os";
|
|
import path from "node:path";
|
|
|
|
const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omni-command-code-auth-"));
|
|
process.env.DATA_DIR = TEST_DATA_DIR;
|
|
|
|
const coreDb = await import("../../src/lib/db/core.ts");
|
|
const commandCodeAuthDb = await import("../../src/lib/db/commandCodeAuth.ts");
|
|
|
|
async function resetStorage() {
|
|
coreDb.resetDbInstance();
|
|
fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
|
|
fs.mkdirSync(TEST_DATA_DIR, { recursive: true });
|
|
}
|
|
|
|
test.beforeEach(async () => {
|
|
await resetStorage();
|
|
});
|
|
|
|
test.after(() => {
|
|
coreDb.resetDbInstance();
|
|
fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
|
|
});
|
|
|
|
test("status lookup expires stale pending command-code auth sessions", () => {
|
|
const stateHash = commandCodeAuthDb.hashCommandCodeAuthState("expired-state");
|
|
const session = commandCodeAuthDb.createPendingCommandCodeAuthSession({
|
|
stateHash,
|
|
expiresAt: "2026-01-01T00:00:00.000Z",
|
|
});
|
|
|
|
assert.equal(session.status, "pending");
|
|
|
|
const status = commandCodeAuthDb.getCommandCodeAuthSessionSafeStatus(stateHash);
|
|
|
|
assert.equal(status?.status, "expired");
|
|
assert.equal(status?.stateHash, stateHash);
|
|
});
|
|
|
|
test("consume returns the received api key once and marks the session applied", () => {
|
|
const stateHash = commandCodeAuthDb.hashCommandCodeAuthState("received-state");
|
|
commandCodeAuthDb.createPendingCommandCodeAuthSession({
|
|
stateHash,
|
|
expiresAt: "2999-01-01T00:00:00.000Z",
|
|
});
|
|
|
|
const received = commandCodeAuthDb.markCommandCodeAuthSessionReceived({
|
|
stateHash,
|
|
apiKey: "sk-test-command-code",
|
|
metadata: { userId: "user-1", userName: "Test User" },
|
|
});
|
|
|
|
assert.equal(received?.status, "received");
|
|
assert.equal(received?.metadata?.userId, "user-1");
|
|
|
|
const consumed = commandCodeAuthDb.consumeCommandCodeAuthSecret(stateHash);
|
|
|
|
assert.equal(consumed?.apiKey, "sk-test-command-code");
|
|
assert.equal(consumed?.status, "applied");
|
|
|
|
assert.equal(commandCodeAuthDb.consumeCommandCodeAuthSecret(stateHash), null);
|
|
assert.equal(commandCodeAuthDb.getCommandCodeAuthSessionSafeStatus(stateHash)?.status, "applied");
|
|
});
|