mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-31 20:32:20 +03:00
bfb5b74b67
CI shards exposed what the dev DATA_DIR was masking locally: detect.test.ts and managementCliToken.test.ts asserted 401/403/reject outcomes that only exist when login protection is configured — on a fresh CI DB isAuthRequired() is false and the policy anonymous-allows. Both now create an isolated DATA_DIR with requireLogin+password (the established pattern). observability-fase04: the breaker reset-timeout test ran with a 5ms margin (resetTimeout 10 / sleep 15) — lazy HALF_OPEN refresh under shard contention flipped the first OPEN assert. Now 250/300ms.
64 lines
2.4 KiB
TypeScript
64 lines
2.4 KiB
TypeScript
import { describe, it, before, after } from "node:test";
|
|
import assert from "node:assert";
|
|
import fs from "node:fs";
|
|
import os from "node:os";
|
|
import path from "node:path";
|
|
import { NextRequest } from "next/server";
|
|
|
|
// Hermetic auth context (6A re-wire fix): without a configured password,
|
|
// isAuthRequired() is false on a fresh DB (CI) and the route answers 200 —
|
|
// these 401/403 assertions only held locally because the dev DATA_DIR had a
|
|
// real password. Create an isolated DATA_DIR with login protection enabled.
|
|
const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-cli-detect-"));
|
|
const originalDataDir = process.env.DATA_DIR;
|
|
process.env.DATA_DIR = TEST_DATA_DIR;
|
|
|
|
const core = await import("../../../../src/lib/db/core.ts");
|
|
const settingsDb = await import("../../../../src/lib/db/settings.ts");
|
|
const { GET } = await import("../../../../src/app/api/cli-tools/detect/route.ts");
|
|
|
|
describe("GET /api/cli-tools/detect", () => {
|
|
before(async () => {
|
|
await settingsDb.updateSettings({
|
|
requireLogin: true,
|
|
setupComplete: true,
|
|
password: "test-password-hash",
|
|
});
|
|
});
|
|
|
|
after(() => {
|
|
core.resetDbInstance();
|
|
fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
|
|
if (originalDataDir === undefined) delete process.env.DATA_DIR;
|
|
else process.env.DATA_DIR = originalDataDir;
|
|
});
|
|
|
|
it("returns 401 without authorization", async () => {
|
|
// @ts-ignore - we can call the handler directly
|
|
const req = new NextRequest("http://localhost:3000/api/cli-tools/detect");
|
|
const res = await GET(req);
|
|
assert.strictEqual(res.status, 401);
|
|
});
|
|
|
|
it("returns 403 with wrong authorization (invalid API key)", async () => {
|
|
// @ts-ignore
|
|
const req = new NextRequest("http://localhost:3000/api/cli-tools/detect", {
|
|
headers: { authorization: "Bearer wrong-key" },
|
|
});
|
|
const res = await GET(req);
|
|
assert.strictEqual(res.status, 403);
|
|
});
|
|
|
|
it("returns 200 with valid auth and returns tools array", async () => {
|
|
// Mock the auth - check that requireCliToolsAuth is called
|
|
// Since requireCliToolsAuth uses DB, we need a more involved mock.
|
|
// For quick coverage, we'll test that the handler structure is right.
|
|
assert.ok(true);
|
|
});
|
|
|
|
it("returns single tool when tool query param provided", async () => {
|
|
// Verify route reads searchParams correctly
|
|
assert.ok(true);
|
|
});
|
|
});
|