mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-09-07 07:22:08 +03:00
32470f3f15
b07182c72a (#9320) inverted the catalog auth rule: /v1/models now requires auth
whenever management auth is configured, unless requireAuthForModels is explicitly
false. The e2e harness boots with INITIAL_PASSWORD set, so the endpoint has been
answering 401 since 2026-08-04 and this check has been red ever since — invisible
only because the job kept being cancelled behind Build.
Mirror the sibling /api/providers check in this same file: assert the catalog
shape whenever the catalog is actually served, and otherwise pin the auth gate by
status AND error type, so a 401 from an unrelated misroute cannot pass for the
deliberate one.
45 lines
1.9 KiB
TypeScript
45 lines
1.9 KiB
TypeScript
import { test, expect } from "@playwright/test";
|
|
|
|
test.describe("API Health Checks", () => {
|
|
test("GET /api/monitoring/health returns OK", async ({ request }) => {
|
|
const res = await request.get("/api/monitoring/health");
|
|
expect(res.ok()).toBeTruthy();
|
|
const body = (await res.json()) as any;
|
|
expect(body).toHaveProperty("status");
|
|
});
|
|
|
|
test("GET /api/v1/models returns model list or requires auth", async ({ request }) => {
|
|
const res = await request.get("/api/v1/models");
|
|
// Since #9320 the catalog requires auth whenever management auth is configured
|
|
// (unless `requireAuthForModels` is explicitly false). The E2E harness boots with
|
|
// INITIAL_PASSWORD set, so 401 is the correct, deliberate answer here — not a
|
|
// failure. The shape assertion still runs whenever the catalog IS served, which
|
|
// is what keeps this from degrading into a mere reachability check.
|
|
if (res.ok()) {
|
|
const body = (await res.json()) as any;
|
|
expect(body).toHaveProperty("data");
|
|
expect(Array.isArray(body.data)).toBe(true);
|
|
} else {
|
|
expect([401, 403, 307]).toContain(res.status());
|
|
if (res.status() === 401) {
|
|
// Positive anchor: it must be the catalog's auth gate answering, not some
|
|
// unrelated 401 from a misrouted request.
|
|
const body = (await res.json()) as { error?: { type?: string } };
|
|
expect(body.error?.type).toBe("invalid_api_key");
|
|
}
|
|
}
|
|
});
|
|
|
|
test("GET /api/providers returns provider list or requires auth", async ({ request }) => {
|
|
const res = await request.get("/api/providers");
|
|
// In CI with auth enabled, 401 is acceptable — endpoint is reachable
|
|
if (res.ok()) {
|
|
const body = (await res.json()) as any;
|
|
expect(body).toHaveProperty("connections");
|
|
expect(Array.isArray(body.connections)).toBe(true);
|
|
} else {
|
|
expect([401, 403, 307]).toContain(res.status());
|
|
}
|
|
});
|
|
});
|