mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-31 12:22:14 +03:00
592ca9b5c4
- Remove `new Request('http://localhost/api/keys')` default arg from GET handler in src/app/api/keys/route.ts (line 26)
- Fix api-key-reveal-route.test.mjs to pass explicit Request instead of calling GET() with no args
- Add --output-dir coverage to all c8 scripts in package.json
- Add coverage.reportsDirectory: 'coverage' to vitest.config.ts and vitest.mcp.config.ts
- Fix CHANGELOG.md structure (# Changelog + [Unreleased] to top)
- Remove 30+ stale coverage-* directories from project root
- Coverage: Statements 78.76% | Branches 72.75% | Functions 80.93% | Lines 78.76% (all thresholds passed)
80 lines
3.0 KiB
JavaScript
80 lines
3.0 KiB
JavaScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import path from "node:path";
|
|
import { pathToFileURL } from "node:url";
|
|
|
|
const ORIGINAL_STORAGE_KEY = process.env.STORAGE_ENCRYPTION_KEY;
|
|
|
|
async function importFresh(modulePath) {
|
|
const url = pathToFileURL(path.resolve(modulePath)).href;
|
|
return import(`${url}?test=${Date.now()}-${Math.random().toString(16).slice(2)}`);
|
|
}
|
|
|
|
test.after(() => {
|
|
if (ORIGINAL_STORAGE_KEY === undefined) {
|
|
delete process.env.STORAGE_ENCRYPTION_KEY;
|
|
} else {
|
|
process.env.STORAGE_ENCRYPTION_KEY = ORIGINAL_STORAGE_KEY;
|
|
}
|
|
});
|
|
|
|
test("encryption stays in passthrough mode when no storage key is configured", async () => {
|
|
delete process.env.STORAGE_ENCRYPTION_KEY;
|
|
const encryption = await importFresh("src/lib/db/encryption.ts");
|
|
|
|
assert.equal(encryption.isEncryptionEnabled(), false);
|
|
assert.equal(encryption.encrypt("plain-text"), "plain-text");
|
|
assert.equal(encryption.decrypt("plain-text"), "plain-text");
|
|
assert.equal(encryption.encrypt(""), "");
|
|
assert.equal(encryption.decrypt(null), null);
|
|
assert.equal(encryption.decrypt(undefined), undefined);
|
|
});
|
|
|
|
test("encrypt/decrypt round-trip uses the expected serialized format", async () => {
|
|
process.env.STORAGE_ENCRYPTION_KEY = "task-304-secret-a";
|
|
const encryption = await importFresh("src/lib/db/encryption.ts");
|
|
|
|
const encrypted = encryption.encrypt("hello world");
|
|
const decrypted = encryption.decrypt(encrypted);
|
|
|
|
assert.equal(encryption.isEncryptionEnabled(), true);
|
|
assert.match(encrypted, /^enc:v1:[0-9a-f]+:[0-9a-f]+:[0-9a-f]+$/);
|
|
assert.equal(decrypted, "hello world");
|
|
assert.equal(encryption.encrypt(encrypted), encrypted);
|
|
});
|
|
|
|
test("connection field helpers encrypt and decrypt all supported credential fields", async () => {
|
|
process.env.STORAGE_ENCRYPTION_KEY = "task-304-secret-b";
|
|
const encryption = await importFresh("src/lib/db/encryption.ts");
|
|
|
|
const connection = {
|
|
apiKey: "sk-123",
|
|
accessToken: "access-123",
|
|
refreshToken: "refresh-123",
|
|
idToken: "id-123",
|
|
untouched: "keep-me",
|
|
};
|
|
|
|
const encrypted = encryption.encryptConnectionFields({ ...connection });
|
|
const decrypted = encryption.decryptConnectionFields(encrypted);
|
|
|
|
assert.notEqual(encrypted.apiKey, connection.apiKey);
|
|
assert.match(encrypted.apiKey, /^enc:v1:/);
|
|
assert.match(encrypted.accessToken, /^enc:v1:/);
|
|
assert.match(encrypted.refreshToken, /^enc:v1:/);
|
|
assert.match(encrypted.idToken, /^enc:v1:/);
|
|
assert.deepEqual(decrypted, connection);
|
|
});
|
|
|
|
test("decrypt returns the original ciphertext when the value is malformed or the key is wrong", async () => {
|
|
process.env.STORAGE_ENCRYPTION_KEY = "task-304-secret-c";
|
|
const firstModule = await importFresh("src/lib/db/encryption.ts");
|
|
const encrypted = firstModule.encrypt("top-secret");
|
|
|
|
process.env.STORAGE_ENCRYPTION_KEY = "task-304-secret-d";
|
|
const secondModule = await importFresh("src/lib/db/encryption.ts");
|
|
|
|
assert.equal(secondModule.decrypt(encrypted), encrypted);
|
|
assert.equal(secondModule.decrypt("enc:v1:not-valid"), "enc:v1:not-valid");
|
|
});
|