fuomag9
de28478a42
- API token model (SHA-256 hashed, debounced lastUsedAt) with Bearer auth - Dual auth middleware (session + API token) in src/lib/api-auth.ts - 23 REST endpoints under /api/v1/ covering all functionality: tokens, proxy-hosts, l4-proxy-hosts, certificates, ca-certificates, client-certificates, access-lists, settings, instances, users, audit-log, caddy/apply - OpenAPI 3.1 spec at /api/v1/openapi.json with fully typed schemas - Swagger UI docs page at /api-docs in the dashboard - API token management integrated into the Profile page - Fix: next build now works under Node.js (bun:sqlite aliased to better-sqlite3) - 89 new API route unit tests + 11 integration tests (592 total) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
78 lines
2.7 KiB
TypeScript
78 lines
2.7 KiB
TypeScript
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
|
|
vi.mock('@/src/lib/caddy', () => ({
|
|
applyCaddyConfig: vi.fn().mockResolvedValue({ ok: true }),
|
|
}));
|
|
|
|
vi.mock('@/src/lib/api-auth', () => {
|
|
const ApiAuthError = class extends Error {
|
|
status: number;
|
|
constructor(msg: string, status: number) { super(msg); this.status = status; this.name = 'ApiAuthError'; }
|
|
};
|
|
return {
|
|
requireApiAdmin: vi.fn().mockResolvedValue({ userId: 1, role: 'admin', authMethod: 'bearer' }),
|
|
requireApiUser: vi.fn().mockResolvedValue({ userId: 1, role: 'admin', authMethod: 'bearer' }),
|
|
apiErrorResponse: vi.fn((error: unknown) => {
|
|
const { NextResponse } = require('next/server');
|
|
if (error && typeof error === 'object' && 'status' in error) {
|
|
return NextResponse.json({ error: (error as Error).message }, { status: (error as any).status });
|
|
}
|
|
return NextResponse.json({ error: error instanceof Error ? error.message : 'Internal server error' }, { status: 500 });
|
|
}),
|
|
ApiAuthError,
|
|
};
|
|
});
|
|
|
|
import { POST } from '@/app/api/v1/caddy/apply/route';
|
|
import { applyCaddyConfig } from '@/src/lib/caddy';
|
|
import { requireApiAdmin } from '@/src/lib/api-auth';
|
|
|
|
const mockApplyCaddyConfig = vi.mocked(applyCaddyConfig);
|
|
const mockRequireApiAdmin = vi.mocked(requireApiAdmin);
|
|
|
|
function createMockRequest(): any {
|
|
return {
|
|
headers: { get: () => null },
|
|
method: 'POST',
|
|
nextUrl: { pathname: '/api/v1/caddy/apply', searchParams: new URLSearchParams() },
|
|
json: async () => ({}),
|
|
};
|
|
}
|
|
|
|
beforeEach(() => {
|
|
vi.clearAllMocks();
|
|
mockRequireApiAdmin.mockResolvedValue({ userId: 1, role: 'admin', authMethod: 'bearer' });
|
|
});
|
|
|
|
describe('POST /api/v1/caddy/apply', () => {
|
|
it('applies caddy config and returns ok', async () => {
|
|
const response = await POST(createMockRequest());
|
|
const data = await response.json();
|
|
|
|
expect(response.status).toBe(200);
|
|
expect(data).toEqual({ ok: true });
|
|
expect(mockApplyCaddyConfig).toHaveBeenCalled();
|
|
});
|
|
|
|
it('returns 401 on auth failure', async () => {
|
|
const { ApiAuthError } = await import('@/src/lib/api-auth');
|
|
mockRequireApiAdmin.mockRejectedValue(new ApiAuthError('Unauthorized', 401));
|
|
|
|
const response = await POST(createMockRequest());
|
|
const data = await response.json();
|
|
|
|
expect(response.status).toBe(401);
|
|
expect(data.error).toBe('Unauthorized');
|
|
});
|
|
|
|
it('returns 500 when applyCaddyConfig fails', async () => {
|
|
mockApplyCaddyConfig.mockRejectedValue(new Error('Connection refused'));
|
|
|
|
const response = await POST(createMockRequest());
|
|
const data = await response.json();
|
|
|
|
expect(response.status).toBe(500);
|
|
expect(data.error).toBe('Connection refused');
|
|
});
|
|
});
|