b14f6f040f
- Implement tests for feature flags coverage in `feature_flags_coverage_v2_test.go` to validate behavior with invalid persisted and environment values, as well as default settings. - Create tests in `notification_provider_patch_coverage_test.go` to ensure correct handling of notification provider updates, including blocking type mutations for non-Discord providers. - Add tests in `security_notifications_patch_coverage_test.go` to verify deprecated headers, handle invalid CIDR warnings, and ensure correct severity handling for security events. - Introduce migration error handling tests in `routes_coverage_test.go` to ensure graceful handling of migration errors during registration. - Enhance `cerberus_blockers_test.go` with tests for disabled security event notifications and error handling for dispatch failures. - Update `router_test.go` to validate notify routing based on feature flags. - Refactor `mail_service.go` to normalize base URLs for invites, ensuring proper handling of trailing slashes. - Modify `notification_service_json_test.go` and `notification_service_test.go` to mock Discord validation and improve webhook testing. - Update `proxyhost_service.go` to enhance hostname validation by parsing URLs. - Refine `uptime_service.go` to extract ports correctly from URLs, including handling edge cases. - Enhance frontend tests in `notifications.test.ts` and `Notifications.test.tsx` to ensure correct behavior for Discord notification providers and enforce type constraints.
116 lines
3.4 KiB
Go
116 lines
3.4 KiB
Go
package handlers
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/Wikid82/charon/backend/internal/models"
|
|
"github.com/Wikid82/charon/backend/internal/services"
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
"gorm.io/driver/sqlite"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
// TestUpdate_BlockTypeMutationForNonDiscord covers lines 137-139
|
|
func TestUpdate_BlockTypeMutationForNonDiscord(t *testing.T) {
|
|
db, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{})
|
|
require.NoError(t, err)
|
|
|
|
require.NoError(t, db.AutoMigrate(&models.NotificationProvider{}, &models.Notification{}))
|
|
|
|
// Create existing non-Discord provider
|
|
existing := &models.NotificationProvider{
|
|
ID: "test-provider",
|
|
Name: "Test Webhook",
|
|
Type: "webhook",
|
|
URL: "https://example.com/webhook",
|
|
Enabled: true,
|
|
}
|
|
require.NoError(t, db.Create(existing).Error)
|
|
|
|
service := services.NewNotificationService(db)
|
|
handler := NewNotificationProviderHandler(service)
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
r := gin.New()
|
|
r.Use(func(c *gin.Context) {
|
|
c.Set("role", "admin")
|
|
c.Set("userID", uint(1))
|
|
c.Next()
|
|
})
|
|
r.PUT("/api/v1/notifications/providers/:id", handler.Update)
|
|
|
|
// Try to mutate type from webhook to discord (should be blocked)
|
|
req := map[string]interface{}{
|
|
"name": "Updated Name",
|
|
"type": "discord", // Trying to change type
|
|
"url": "https://discord.com/api/webhooks/123/abc",
|
|
}
|
|
body, _ := json.Marshal(req)
|
|
|
|
w := httptest.NewRecorder()
|
|
httpReq := httptest.NewRequest(http.MethodPut, "/api/v1/notifications/providers/test-provider", bytes.NewReader(body))
|
|
httpReq.Header.Set("Content-Type", "application/json")
|
|
r.ServeHTTP(w, httpReq)
|
|
|
|
// Should block type mutation (lines 137-139)
|
|
assert.Equal(t, http.StatusBadRequest, w.Code)
|
|
|
|
var response map[string]interface{}
|
|
err = json.Unmarshal(w.Body.Bytes(), &response)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, "DEPRECATED_PROVIDER_TYPE_IMMUTABLE", response["code"])
|
|
}
|
|
|
|
// TestUpdate_AllowTypeMutationForDiscord verifies Discord can be updated
|
|
func TestUpdate_AllowTypeMutationForDiscord(t *testing.T) {
|
|
db, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{})
|
|
require.NoError(t, err)
|
|
|
|
require.NoError(t, db.AutoMigrate(&models.NotificationProvider{}, &models.Notification{}))
|
|
|
|
// Create existing Discord provider
|
|
existing := &models.NotificationProvider{
|
|
ID: "test-provider",
|
|
Name: "Test Discord",
|
|
Type: "discord",
|
|
URL: "https://discord.com/api/webhooks/123/abc",
|
|
Enabled: true,
|
|
}
|
|
require.NoError(t, db.Create(existing).Error)
|
|
|
|
service := services.NewNotificationService(db)
|
|
handler := NewNotificationProviderHandler(service)
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
r := gin.New()
|
|
r.Use(func(c *gin.Context) {
|
|
c.Set("role", "admin")
|
|
c.Set("userID", uint(1))
|
|
c.Next()
|
|
})
|
|
r.PUT("/api/v1/notifications/providers/:id", handler.Update)
|
|
|
|
// Try to update Discord (type remains discord - should be allowed)
|
|
req := map[string]interface{}{
|
|
"name": "Updated Discord",
|
|
"type": "discord",
|
|
"url": "https://discord.com/api/webhooks/456/def",
|
|
}
|
|
body, _ := json.Marshal(req)
|
|
|
|
w := httptest.NewRecorder()
|
|
httpReq := httptest.NewRequest(http.MethodPut, "/api/v1/notifications/providers/test-provider", bytes.NewReader(body))
|
|
httpReq.Header.Set("Content-Type", "application/json")
|
|
r.ServeHTTP(w, httpReq)
|
|
|
|
// Should succeed
|
|
assert.Equal(t, http.StatusOK, w.Code)
|
|
}
|