mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-05 14:52:09 +03:00
832fde52b4
* test(db-rules): align audited-module count to 28 (apiKey db helpers) #4335 added apiKeyColumnFallbacks + apiKeyUsageLimitFields to INTENTIONALLY_INTERNAL (both db-internal, consumed only by db/apiKeys.ts) but did not update the parity test in check-db-rules-classification.test.ts, which still expected exactly 26 audited modules — leaving it red on release/v3.8.30 (28 != 26). Add the two modules to the expected list and bump the count to 28. Test-only alignment; no production change. * test(web-session): align lmarena metadata to the split-cookie source (#4271) #4271/#4331 updated webSessionCredentials.ts for lmarena's split auth cookie — new placeholder text and storageKeys arena-auth-prod-v1.0/.1 — but did not update web-session-credentials.test.ts, which still asserted the old placeholder + 3-key storageKeys. Align the expected metadata to the merged source; test-only, no prod change.
91 lines
3.8 KiB
TypeScript
91 lines
3.8 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
|
|
const providers = await import("../../src/shared/constants/providers.ts");
|
|
const webSessionCredentials =
|
|
await import("../../src/app/(dashboard)/dashboard/providers/[id]/webSessionCredentials.ts");
|
|
|
|
test("web session credential metadata covers every web-cookie provider", () => {
|
|
for (const providerId of Object.keys(providers.WEB_COOKIE_PROVIDERS)) {
|
|
assert.ok(
|
|
webSessionCredentials.getWebSessionCredentialRequirement(providerId),
|
|
`${providerId} should declare its required web-session credential`
|
|
);
|
|
}
|
|
});
|
|
|
|
test("web session credential metadata identifies cookie, token, and no-auth providers", () => {
|
|
// Grok needs BOTH sso and sso-rw cookies (#3180)
|
|
assert.deepEqual(webSessionCredentials.getWebSessionCredentialRequirement("grok-web"), {
|
|
kind: "cookie",
|
|
credentialName: "sso + sso-rw",
|
|
placeholder: "sso=...; sso-rw=...",
|
|
acceptsFullCookieHeader: true,
|
|
storageKeys: ["cookie", "sso", "sso-rw"],
|
|
});
|
|
assert.deepEqual(webSessionCredentials.getWebSessionCredentialRequirement("copilot-web"), {
|
|
kind: "token",
|
|
credentialName: "access_token",
|
|
placeholder: "access_token=... or a DevTools HAR export",
|
|
acceptsFullCookieHeader: false,
|
|
storageKeys: ["token", "access_token", "accessToken"],
|
|
});
|
|
assert.deepEqual(webSessionCredentials.getWebSessionCredentialRequirement("deepseek-web"), {
|
|
kind: "token",
|
|
credentialName: "userToken",
|
|
placeholder: "userToken=... or paste raw userToken",
|
|
acceptsFullCookieHeader: false,
|
|
storageKeys: ["token", "userToken"],
|
|
});
|
|
// lmarena.ai's real auth cookie is `arena-auth-prod-v1`, not `session` (#3810).
|
|
// The session is now split across `arena-auth-prod-v1.0`, `.1`, … (#4271).
|
|
assert.deepEqual(webSessionCredentials.getWebSessionCredentialRequirement("lmarena"), {
|
|
kind: "cookie",
|
|
credentialName: "arena-auth-prod-v1",
|
|
placeholder:
|
|
"Paste the full Cookie header from lmarena.ai (the session is now split across arena-auth-prod-v1.0, .1, …)",
|
|
acceptsFullCookieHeader: true,
|
|
storageKeys: ["cookie", "arena-auth-prod-v1", "arena-auth-prod-v1.0", "arena-auth-prod-v1.1", "session"],
|
|
});
|
|
// veoaifree-web is now a NOAUTH provider — not in WEB_SESSION_CREDENTIAL_REQUIREMENTS
|
|
assert.equal(webSessionCredentials.getWebSessionCredentialRequirement("veoaifree-web"), null);
|
|
assert.deepEqual(webSessionCredentials.getWebSessionCredentialRequirement("t3-web"), {
|
|
kind: "cookie",
|
|
credentialName: "convex-session-id + Cookie header",
|
|
placeholder: "convex-session-id=abc123...; Cookie: ...",
|
|
acceptsFullCookieHeader: true,
|
|
storageKeys: ["cookie", "convex-session-id", "convexSessionId"],
|
|
});
|
|
});
|
|
|
|
test("web session credential validator requires provider-specific non-empty values", () => {
|
|
assert.equal(
|
|
webSessionCredentials.hasUsableWebSessionCredential("qwen-web", { token: "qwen-token" }),
|
|
true
|
|
);
|
|
assert.equal(
|
|
webSessionCredentials.hasUsableWebSessionCredential("qwen-web", { token: " " }),
|
|
false
|
|
);
|
|
assert.equal(
|
|
webSessionCredentials.hasUsableWebSessionCredential("qwen-web", { unrelated: "value" }),
|
|
false
|
|
);
|
|
assert.equal(
|
|
webSessionCredentials.hasUsableWebSessionCredential("chatgpt-web", {
|
|
cookie: "__Secure-next-auth.session-token=session",
|
|
}),
|
|
true
|
|
);
|
|
assert.equal(
|
|
webSessionCredentials.hasUsableWebSessionCredential("chatgpt-web", { unrelated: "value" }),
|
|
false
|
|
);
|
|
});
|
|
|
|
test("no-auth web providers can be saved without an API key", () => {
|
|
assert.equal(providers.providerAllowsOptionalApiKey("veoaifree-web"), true);
|
|
assert.equal(webSessionCredentials.requiresWebSessionCredential("veoaifree-web"), false);
|
|
assert.equal(webSessionCredentials.requiresWebSessionCredential("chatgpt-web"), true);
|
|
});
|