mirror of
https://github.com/screentinker/screentinker.git
synced 2026-08-13 13:53:12 -06:00
12c0004245
The subprocess-booting test suites hand-picked fixed ports in a cramped ~3955-4021 range, and 156-schedule-read-path deviated to a RANDOM port (3900 + rand%90) that overlapped those fixed ports. Under CI load two servers could race on the same port, surfacing as flaky "no such table: devices" / "FOREIGN KEY constraint failed" (a server answering a request against a half-migrated or wrong DB). It's environmental — the suites pass locally and in isolation. Fix: a shared test/helpers/free-port.js (bind :0 on loopback, read the OS-assigned port, release) called in before() so every suite gets a guaranteed-unique ephemeral port — concurrent suites can no longer collide, and no one has to hand-assign ports. - Codemod converted 30 suites: const PORT = <fixed|random> -> let PORT (+ BASE) assigned via `PORT = await freePort()` at the top of before(). - 3 hand-fixed (different structure): 148-eviction-storm (lowercase `base`), boot-health (no before() — allocates PORT + a throwaway SEED_PORT inside the test, replacing the hardcoded 3894), totp-keyrotation (no before() — allocates at the test start before bootServer()). No fixed 39xx/40xx ports remain. Full server suite 435/435; the 4 hand-touched suites pass in isolation. Pure test-infra change — no app code touched.
250 lines
16 KiB
JavaScript
250 lines
16 KiB
JavaScript
'use strict';
|
|
|
|
// #73 FULL bite-suite for the agency-token primitive, end-to-end against a booted server:
|
|
// the happy path (upload -> date-bounded item on a DESIGNATED playlist) plus the four
|
|
// confinement assertions at their three seams (gate / off-ladder / JWT-only / issuance).
|
|
|
|
const { test, before, after } = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const { spawn } = require('node:child_process');
|
|
const path = require('node:path');
|
|
const os = require('node:os');
|
|
const fs = require('node:fs');
|
|
const crypto = require('node:crypto');
|
|
|
|
const { freePort } = require('./helpers/free-port');
|
|
let PORT, BASE;
|
|
const DATA_DIR = path.join(os.tmpdir(), 'st-agency-' + crypto.randomBytes(4).toString('hex'));
|
|
let proc;
|
|
|
|
before(async () => {
|
|
PORT = await freePort();
|
|
BASE = `http://127.0.0.1:${PORT}`;
|
|
const logFd = fs.openSync(path.join(os.tmpdir(), 'st-agency.log'), 'w');
|
|
proc = spawn('node', ['server.js'], {
|
|
cwd: path.join(__dirname, '..'),
|
|
env: { ...process.env, DATA_DIR, SELF_HOSTED: 'true', PORT: String(PORT), NODE_ENV: 'test' },
|
|
stdio: ['ignore', logFd, logFd],
|
|
});
|
|
for (let i = 0; i < 80; i++) {
|
|
try { const r = await fetch(BASE + '/api/status'); if (r.ok) break; } catch { /* not yet */ }
|
|
await new Promise(r => setTimeout(r, 250));
|
|
}
|
|
});
|
|
after(() => { try { proc.kill('SIGKILL'); } catch { /* ignore */ } });
|
|
|
|
async function jfetch(p, opts = {}) {
|
|
const res = await fetch(BASE + p, opts);
|
|
let body = null; try { body = await res.json(); } catch { /* non-JSON */ }
|
|
return { status: res.status, body };
|
|
}
|
|
const jpost = (tok, o) => ({ method: 'POST', headers: { Authorization: 'Bearer ' + tok, 'Content-Type': 'application/json' }, body: JSON.stringify(o || {}) });
|
|
const reg = (o) => ({ method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(o) });
|
|
|
|
test('#73 agency token: full bite-suite (happy path + 4 confinement assertions)', async () => {
|
|
const email = 'ag' + crypto.randomBytes(4).toString('hex') + '@x.local';
|
|
const jwt = (await jfetch('/api/auth/register', reg({ email, password: 'Passw0rd123' }))).body.token;
|
|
const pl1 = (await jfetch('/api/playlists', jpost(jwt, { name: 'Designated' }))).body;
|
|
const pl2 = (await jfetch('/api/playlists', jpost(jwt, { name: 'Off-limits' }))).body;
|
|
|
|
// issue an agency token bound to pl1 ONLY
|
|
const tokRes = await jfetch('/api/tokens', jpost(jwt, { name: 'Agency', scope: 'agency', target_playlist_ids: [pl1.id] }));
|
|
assert.equal(tokRes.status, 201, 'agency token created');
|
|
assert.deepEqual(tokRes.body.target_playlist_ids, [pl1.id]);
|
|
const atok = tokRes.body.token;
|
|
|
|
// GET targets (real path: agencyGate -> handler -> query): returns ONLY the designated pl1
|
|
const mine = await jfetch('/api/agency/playlists', { headers: { Authorization: 'Bearer ' + atok } });
|
|
assert.equal(mine.status, 200, 'agency can list its targets');
|
|
assert.deepEqual(mine.body.map(p => p.id), [pl1.id], 'GET /agency/playlists returns ONLY the designated playlist (not pl2)');
|
|
|
|
// GET per-playlist layout (real path through router.param): 200 + array, never device fields;
|
|
// a NON-designated playlist's layout -> 403 (router.param confines it)
|
|
const lay = await jfetch(`/api/agency/playlists/${pl1.id}/layout`, { headers: { Authorization: 'Bearer ' + atok } });
|
|
assert.equal(lay.status, 200, 'agency can read its designated playlist layout');
|
|
assert.ok(Array.isArray(lay.body), 'layout is an array');
|
|
assert.ok(!JSON.stringify(lay.body).includes('device'), 'layout response carries no device data');
|
|
const layX = await jfetch(`/api/agency/playlists/${pl2.id}/layout`, { headers: { Authorization: 'Bearer ' + atok } });
|
|
assert.equal(layX.status, 403, 'layout of a NON-designated playlist -> 403 (router.param)');
|
|
|
|
// HAPPY PATH: upload via the agency token (shared ingest -> first-class content)
|
|
const fd = new FormData();
|
|
fd.append('file', new Blob([Buffer.from('x')], { type: 'image/png' }), 't.png');
|
|
const up = await fetch(BASE + '/api/agency/content', { method: 'POST', headers: { Authorization: 'Bearer ' + atok }, body: fd });
|
|
assert.equal(up.status, 201, 'agency upload -> 201 (first-class content)');
|
|
const content = await up.json();
|
|
|
|
// date-bounded item on the DESIGNATED playlist
|
|
const item = await jfetch(`/api/agency/playlists/${pl1.id}/items`, jpost(atok, { content_id: content.id, start_date: '2026-07-01', end_date: '2026-07-31' }));
|
|
assert.equal(item.status, 201, 'item on designated playlist -> 201');
|
|
|
|
// BITE 1 (gate): NON-designated playlist -> 403
|
|
const blocked = await jfetch(`/api/agency/playlists/${pl2.id}/items`, jpost(atok, { content_id: content.id }));
|
|
assert.equal(blocked.status, 403, 'non-designated playlist -> 403');
|
|
|
|
// BITE 2 (off-ladder): agency token on a normal public router -> 403
|
|
const dev = await jfetch('/api/devices', { headers: { Authorization: 'Bearer ' + atok } });
|
|
assert.equal(dev.status, 403, 'agency token on /api/devices -> 403 (off-ladder, tokenScopeGate)');
|
|
|
|
// BITE 3 (JWT-only): can't reach /api/tokens to widen its OWN targets -> 401
|
|
const widen = await jfetch(`/api/tokens/${tokRes.body.id}/targets`, jpost(atok, { target_playlist_ids: [pl1.id, pl2.id] }));
|
|
assert.equal(widen.status, 401, 'agency token cannot reach /api/tokens (JWT-only) -> 401');
|
|
|
|
// BITE 4 (issuance): an agency token can't be BOUND to an out-of-workspace/unknown playlist -> 400
|
|
const badTok = await jfetch('/api/tokens', jpost(jwt, { name: 'Bad', scope: 'agency', target_playlist_ids: ['nonexistent'] }));
|
|
assert.equal(badTok.status, 400, 'cannot bind an out-of-workspace target at issuance');
|
|
|
|
// Portal graceful-failure trigger: an invalid/revoked key -> 401, which the portal catches
|
|
// to show "paste it again" (never a wall of 403s).
|
|
const bogus = await jfetch('/api/agency/playlists', { headers: { Authorization: 'Bearer st_bogus_invalid_key' } });
|
|
assert.equal(bogus.status, 401, 'invalid agency key -> 401 (portal resets to the entry screen)');
|
|
});
|
|
|
|
test('#73 auto-publish: the TOKEN flag decides draft vs live; the body can never override it', async () => {
|
|
const jwtAuth = (tok) => ({ headers: { Authorization: 'Bearer ' + tok } });
|
|
const email = 'ap' + crypto.randomBytes(4).toString('hex') + '@x.local';
|
|
const jwt = (await jfetch('/api/auth/register', reg({ email, password: 'Passw0rd123' }))).body.token;
|
|
const plD = (await jfetch('/api/playlists', jpost(jwt, { name: 'DraftTarget' }))).body;
|
|
const plA = (await jfetch('/api/playlists', jpost(jwt, { name: 'AutoTarget' }))).body;
|
|
|
|
const draftTok = (await jfetch('/api/tokens', jpost(jwt, { name: 'DraftAgency', scope: 'agency', target_playlist_ids: [plD.id] }))).body;
|
|
assert.equal(draftTok.auto_publish, false, 'DEFAULT is draft (auto_publish false) - the fail-safe');
|
|
const autoTok = (await jfetch('/api/tokens', jpost(jwt, { name: 'AutoAgency', scope: 'agency', target_playlist_ids: [plA.id], auto_publish: true }))).body;
|
|
assert.equal(autoTok.auto_publish, true, 'admin explicitly opted into auto-publish');
|
|
|
|
async function upload(tok) {
|
|
const fd = new FormData();
|
|
fd.append('file', new Blob([Buffer.from('x')], { type: 'image/png' }), 't.png');
|
|
return (await fetch(BASE + '/api/agency/content', { method: 'POST', headers: { Authorization: 'Bearer ' + tok }, body: fd })).json();
|
|
}
|
|
const cD = await upload(draftTok.token);
|
|
const cA = await upload(autoTok.token);
|
|
|
|
// (a) DRAFT token + {auto_publish:true} IN THE BODY -> still draft (token flag wins, body ignored)
|
|
const addD = await jfetch(`/api/agency/playlists/${plD.id}/items`, jpost(draftTok.token, { content_id: cD.id, auto_publish: true }));
|
|
assert.equal(addD.status, 201);
|
|
assert.equal(addD.body.published, false, 'draft token does NOT publish even with auto_publish:true in the body');
|
|
assert.equal((await jfetch(`/api/playlists/${plD.id}`, jwtAuth(jwt))).body.status, 'draft', 'playlist stays draft');
|
|
|
|
// (b) AUTO-PUBLISH token -> item goes live via the shared publishPlaylist path
|
|
const addA = await jfetch(`/api/agency/playlists/${plA.id}/items`, jpost(autoTok.token, { content_id: cA.id }));
|
|
assert.equal(addA.status, 201);
|
|
assert.equal(addA.body.published, true, 'auto-publish token publishes');
|
|
assert.equal((await jfetch(`/api/playlists/${plA.id}`, jwtAuth(jwt))).body.status, 'published', 'playlist is published');
|
|
|
|
// (c) REGRESSION: the manual publish endpoint still works after the publishPlaylist extraction
|
|
const pub = await jfetch(`/api/playlists/${plD.id}/publish`, jpost(jwt, {}));
|
|
assert.equal(pub.status, 200, 'manual publish works post-extraction');
|
|
assert.equal((await jfetch(`/api/playlists/${plD.id}`, jwtAuth(jwt))).body.status, 'published', 'manual publish sets status=published');
|
|
});
|
|
|
|
test('#73 edit-designations: PUT /:id/targets re-designates (add + remove); confinement follows', async () => {
|
|
const auth = (tok) => ({ headers: { Authorization: 'Bearer ' + tok } });
|
|
const email = 're' + crypto.randomBytes(4).toString('hex') + '@x.local';
|
|
const jwt = (await jfetch('/api/auth/register', reg({ email, password: 'Passw0rd123' }))).body.token;
|
|
const plA = (await jfetch('/api/playlists', jpost(jwt, { name: 'A' }))).body;
|
|
const plB = (await jfetch('/api/playlists', jpost(jwt, { name: 'B' }))).body;
|
|
const plC = (await jfetch('/api/playlists', jpost(jwt, { name: 'C' }))).body;
|
|
|
|
const tokRes = await jfetch('/api/tokens', jpost(jwt, { name: 'EditMe', scope: 'agency', target_playlist_ids: [plA.id, plB.id] }));
|
|
const atok = tokRes.body.token, tokId = tokRes.body.id;
|
|
// initially A+B designated (200 = router.param lets it through), C not (403)
|
|
assert.equal((await jfetch(`/api/agency/playlists/${plA.id}/layout`, auth(atok))).status, 200, 'A reachable');
|
|
assert.equal((await jfetch(`/api/agency/playlists/${plC.id}/layout`, auth(atok))).status, 403, 'C not yet designated');
|
|
|
|
// re-designate: drop A, keep B, add C
|
|
const put = await jfetch(`/api/tokens/${tokId}/targets`, { method: 'PUT', headers: { Authorization: 'Bearer ' + jwt, 'Content-Type': 'application/json' }, body: JSON.stringify({ target_playlist_ids: [plB.id, plC.id] }) });
|
|
assert.equal(put.status, 200, 're-designate ok');
|
|
|
|
// confinement follows the NEW set: removed A -> 403, kept B -> 200, added C -> 200
|
|
assert.equal((await jfetch(`/api/agency/playlists/${plA.id}/layout`, auth(atok))).status, 403, 'removed A -> 403');
|
|
assert.equal((await jfetch(`/api/agency/playlists/${plB.id}/layout`, auth(atok))).status, 200, 'kept B -> 200');
|
|
assert.equal((await jfetch(`/api/agency/playlists/${plC.id}/layout`, auth(atok))).status, 200, 'added C -> 200');
|
|
});
|
|
|
|
test('#73 full-screen guardrail holds at UPLOAD time too (auto-publish has no draft net)', async () => {
|
|
const auth = (tok) => ({ headers: { Authorization: 'Bearer ' + tok } });
|
|
const upload = async (tok) => {
|
|
const fd = new FormData();
|
|
fd.append('file', new Blob([Buffer.from('x')], { type: 'image/png' }), 't.png');
|
|
return (await fetch(BASE + '/api/agency/content', { method: 'POST', headers: { Authorization: 'Bearer ' + tok }, body: fd })).json();
|
|
};
|
|
const email = 'fs' + crypto.randomBytes(4).toString('hex') + '@x.local';
|
|
const jwt = (await jfetch('/api/auth/register', reg({ email, password: 'Passw0rd123' }))).body.token;
|
|
const plFS = (await jfetch('/api/playlists', jpost(jwt, { name: 'FullScreen' }))).body;
|
|
|
|
// (1) full-screen playlist -> AUTO-PUBLISH token designation SUCCEEDS (safe at designation)
|
|
const tokRes = await jfetch('/api/tokens', jpost(jwt, { name: 'AP', scope: 'agency', target_playlist_ids: [plFS.id], auto_publish: true }));
|
|
assert.equal(tokRes.status, 201, 'full-screen designation OK');
|
|
const atok = tokRes.body.token;
|
|
|
|
// (2) zone the playlist AFTER designation: a layout+zone, then a zone-targeted item via JWT
|
|
const lid = (await jfetch('/api/layouts', jpost(jwt, { name: 'Z', zones: [{ name: 'Main', x_percent: 0, y_percent: 0, width_percent: 70, height_percent: 100 }] }))).body.id;
|
|
const zoneId = (await jfetch(`/api/layouts/${lid}`, auth(jwt))).body.zones[0].id;
|
|
const c1 = await upload(atok);
|
|
assert.equal((await jfetch(`/api/playlists/${plFS.id}/items`, jpost(jwt, { content_id: c1.id, zone_id: zoneId }))).status, 201, 'playlist is now zoned');
|
|
|
|
// (3) THE BITE: agency upload to the now-zoned playlist is BLOCKED (409), NOT auto-published into the zone
|
|
const c2 = await upload(atok);
|
|
const add = await jfetch(`/api/agency/playlists/${plFS.id}/items`, jpost(atok, { content_id: c2.id }));
|
|
assert.equal(add.status, 409, 'upload to a now-zoned playlist blocked (auto-publish cannot slip it into the zone)');
|
|
|
|
// (4) and an already-zoned playlist is rejected at DESIGNATION too
|
|
const reDesig = await jfetch('/api/tokens', jpost(jwt, { name: 'AP2', scope: 'agency', target_playlist_ids: [plFS.id] }));
|
|
assert.equal(reDesig.status, 400, 'already-zoned playlist rejected at designation');
|
|
});
|
|
|
|
test('#158 agency upload folder: auto-create, pick, subtree confinement, rebind', async () => {
|
|
const email = 'af' + crypto.randomBytes(4).toString('hex') + '@x.local';
|
|
const jwt = (await jfetch('/api/auth/register', reg({ email, password: 'Passw0rd123' }))).body.token;
|
|
const jwtAuth = { headers: { Authorization: 'Bearer ' + jwt } };
|
|
const jput = (o) => ({ method: 'PUT', headers: { Authorization: 'Bearer ' + jwt, 'Content-Type': 'application/json' }, body: JSON.stringify(o) });
|
|
const pl = (await jfetch('/api/playlists', jpost(jwt, { name: 'FolderTarget' }))).body;
|
|
|
|
// (1) AUTO-CREATE: no upload_folder_id -> a folder "Agency — <name>" is created and bound
|
|
const tokRes = await jfetch('/api/tokens', jpost(jwt, { name: 'Acme', scope: 'agency', target_playlist_ids: [pl.id] }));
|
|
assert.equal(tokRes.status, 201, 'agency token created');
|
|
const boundId = tokRes.body.upload_folder_id;
|
|
assert.ok(boundId, 'a folder was auto-created and its id returned');
|
|
const bound = (await jfetch('/api/folders', jwtAuth)).body.find(f => f.id === boundId);
|
|
assert.ok(bound && bound.name === 'Agency — Acme', 'auto-created folder is named after the token');
|
|
const atok = tokRes.body.token;
|
|
|
|
const up = async (folderId) => {
|
|
const fd = new FormData();
|
|
fd.append('file', new Blob([Buffer.from('x')], { type: 'image/png' }), 't.png');
|
|
if (folderId) fd.append('folder_id', folderId);
|
|
return fetch(BASE + '/api/agency/content', { method: 'POST', headers: { Authorization: 'Bearer ' + atok }, body: fd });
|
|
};
|
|
|
|
// default upload (no folder_id) -> lands in the bound folder
|
|
const c1 = await (await up()).json();
|
|
assert.equal(c1.folder_id, boundId, 'default upload lands in the bound folder');
|
|
|
|
// (2) subtree confinement: a subfolder is targetable; a sibling is not
|
|
const sub = (await jfetch('/api/folders', jpost(jwt, { name: 'Q1', parent_id: boundId }))).body;
|
|
const sibling = (await jfetch('/api/folders', jpost(jwt, { name: 'Internal' }))).body;
|
|
const listIds = (await jfetch('/api/agency/folders', { headers: { Authorization: 'Bearer ' + atok } })).body.map(f => f.id).sort();
|
|
assert.deepEqual(listIds, [boundId, sub.id].sort(), 'GET /agency/folders returns ONLY the bound subtree, never the sibling');
|
|
|
|
const c2 = await (await up(sub.id)).json();
|
|
assert.equal(c2.folder_id, sub.id, 'upload targeting an in-subtree folder lands there');
|
|
const blocked = await up(sibling.id);
|
|
assert.equal(blocked.status, 403, 'upload to a sibling folder outside the bound subtree -> 403');
|
|
|
|
// (3) PICK an existing folder at creation (no auto-create); unknown pick -> 400
|
|
const picked = (await jfetch('/api/folders', jpost(jwt, { name: 'Chosen' }))).body;
|
|
const tok2 = await jfetch('/api/tokens', jpost(jwt, { name: 'Picky', scope: 'agency', target_playlist_ids: [pl.id], upload_folder_id: picked.id }));
|
|
assert.equal(tok2.body.upload_folder_id, picked.id, 'admin-picked folder is bound as-is');
|
|
const badPick = await jfetch('/api/tokens', jpost(jwt, { name: 'BadPick', scope: 'agency', target_playlist_ids: [pl.id], upload_folder_id: 'nonexistent' }));
|
|
assert.equal(badPick.status, 400, 'binding an unknown/cross-workspace folder at issuance -> 400');
|
|
|
|
// (4) REBIND to root -> uploads land at root, subtree goes empty
|
|
const rebind = await jfetch(`/api/tokens/${tokRes.body.id}/upload-folder`, jput({ upload_folder_id: null }));
|
|
assert.equal(rebind.status, 200, 'rebind ok');
|
|
assert.equal(rebind.body.upload_folder_id, null, 'rebind cleared the binding (root)');
|
|
const c3 = await (await up()).json();
|
|
assert.equal(c3.folder_id, null, 'after unbinding, uploads land at library root');
|
|
assert.deepEqual((await jfetch('/api/agency/folders', { headers: { Authorization: 'Bearer ' + atok } })).body, [], 'no bound folder -> empty subtree (portal shows no picker)');
|
|
});
|