toor
1e9ea89d86
Import the client, server, skills, tests, and build scripts as the starting point for the rebuild, then trim the surfaces this project does not ship: Electron desktop packaging, the marketing website, and the ESP32 firmware tree. CI keeps the web build, e2e, lockfile, release, and Docker workflows. Rename the package and CLI entry points to hermes-ui, drop the prepare hook so npm ci no longer triggers a build, and drop the removed tsconfig and nodemon references. Rewrite AGENTS.md, ARCHITECTURE.md, DEVELOPMENT.md, and the READMEs so the documented package map and hard rules match this repository. reference_code/ is ignored: it is a read-only snapshot, not an input to the build.
90 lines
4.1 KiB
TypeScript
90 lines
4.1 KiB
TypeScript
import { beforeEach, describe, expect, it, vi } from 'vitest'
|
|
|
|
// Mock the controllers so we only verify wiring
|
|
vi.mock('../../packages/server/src/controllers/auth', () => ({
|
|
authStatus: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
login: vi.fn(async (ctx: any) => { ctx.body = { token: 'x' } }),
|
|
microcontrollerLogin: vi.fn(async (ctx: any) => { ctx.body = { token: 'x', profiles: [] } }),
|
|
setupPassword: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
currentUser: vi.fn(async (ctx: any) => { ctx.body = { user: {} } }),
|
|
changePassword: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
changeUsername: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
getMyAvatar: vi.fn(async (ctx: any) => { ctx.body = { avatar: '' } }),
|
|
updateMyAvatar: vi.fn(async (ctx: any) => { ctx.body = { success: true } }),
|
|
removePassword: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
listManagedUsers: vi.fn(async (ctx: any) => { ctx.body = { users: [] } }),
|
|
createManagedUser: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
updateManagedUser: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
deleteManagedUser: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
listLockedIps: vi.fn(async (ctx: any) => { ctx.body = { locks: [] } }),
|
|
unlockIpHandler: vi.fn(async (ctx: any) => { ctx.body = { ok: true } }),
|
|
}))
|
|
|
|
const requireSuperAdminMock = vi.fn(async (_ctx: any, next: any) => { await next() })
|
|
vi.mock('../../packages/server/src/middleware/user-auth', () => ({
|
|
requireSuperAdmin: requireSuperAdminMock,
|
|
issueUserJwt: vi.fn(async () => 'jwt'),
|
|
}))
|
|
|
|
describe('auth routes: avatar endpoints', () => {
|
|
beforeEach(() => {
|
|
vi.resetModules()
|
|
vi.clearAllMocks()
|
|
})
|
|
|
|
function findLayer(router: any, method: string, path: string) {
|
|
return router.stack.find(
|
|
(entry: any) => Array.isArray(entry.methods) && entry.methods.includes(method) && entry.path === path,
|
|
)
|
|
}
|
|
|
|
it('mounts GET /api/auth/avatar on the protected router', async () => {
|
|
const { authProtectedRoutes } = await import('../../packages/server/src/routes/auth')
|
|
const layer = findLayer(authProtectedRoutes, 'GET', '/api/auth/avatar')
|
|
expect(layer).toBeDefined()
|
|
})
|
|
|
|
it('mounts PUT /api/auth/avatar on the protected router', async () => {
|
|
const { authProtectedRoutes } = await import('../../packages/server/src/routes/auth')
|
|
const layer = findLayer(authProtectedRoutes, 'PUT', '/api/auth/avatar')
|
|
expect(layer).toBeDefined()
|
|
})
|
|
|
|
it('does not expose the avatar routes on the public router', async () => {
|
|
const { authPublicRoutes, authProtectedRoutes } = await import('../../packages/server/src/routes/auth')
|
|
|
|
expect(findLayer(authPublicRoutes, 'GET', '/api/auth/avatar')).toBeUndefined()
|
|
expect(findLayer(authPublicRoutes, 'PUT', '/api/auth/avatar')).toBeUndefined()
|
|
expect(findLayer(authProtectedRoutes, 'GET', '/api/auth/avatar')).toBeDefined()
|
|
expect(findLayer(authProtectedRoutes, 'PUT', '/api/auth/avatar')).toBeDefined()
|
|
})
|
|
|
|
it('routes GET /api/auth/avatar to getMyAvatar', async () => {
|
|
const { authProtectedRoutes } = await import('../../packages/server/src/routes/auth')
|
|
const ctrl = await import('../../packages/server/src/controllers/auth')
|
|
const layer = findLayer(authProtectedRoutes, 'GET', '/api/auth/avatar')
|
|
expect(layer).toBeDefined()
|
|
const handler = layer!.stack[0]
|
|
|
|
const ctx: any = { request: { body: {} }, status: 200, body: null }
|
|
const next = vi.fn(async () => {})
|
|
await handler(ctx, next)
|
|
|
|
expect(ctrl.getMyAvatar).toHaveBeenCalledWith(ctx, next)
|
|
})
|
|
|
|
it('routes PUT /api/auth/avatar to updateMyAvatar', async () => {
|
|
const { authProtectedRoutes } = await import('../../packages/server/src/routes/auth')
|
|
const ctrl = await import('../../packages/server/src/controllers/auth')
|
|
const layer = findLayer(authProtectedRoutes, 'PUT', '/api/auth/avatar')
|
|
expect(layer).toBeDefined()
|
|
const handler = layer!.stack[0]
|
|
|
|
const ctx: any = { request: { body: { type: 'default' } }, status: 200, body: null }
|
|
const next = vi.fn(async () => {})
|
|
await handler(ctx, next)
|
|
|
|
expect(ctrl.updateMyAvatar).toHaveBeenCalledWith(ctx, next)
|
|
})
|
|
})
|