ident

7.4 KB

1. // tests/shortid.mjs — THE SHORT ID GATE (ident#23): one public id per identity, the same in every app.
2. // Own ident :8706 (fresh storage .scratch/shortid-gate), no browser: every step is HTTP.
3. // * every identity (default and added ones) has 5 characters from the alphabet without look-alikes
4. // * the identity page shows it; the ids are unique; the id never changes (edit, sign out of an app)
5. // * two apps, one identity → the exchange gives the SAME id; another identity → another id
6. // * notifications name the identity by it (case does not matter); a wrong id / another app's user → 404
7. // * migrate-ids: strict body, wrong secret 401, nothing to migrate on a new store
8. import { spawn } from 'node:child_process';
9. import { readFileSync, writeFileSync, rmSync, mkdirSync } from 'node:fs';
10. import { dirname, join } from 'node:path';
11. import { fileURLToPath } from 'node:url';
12. import { sleep } from './cdp.mjs';
14. const APP = join(dirname(fileURLToPath(import.meta.url)), '..');
15. const G = join(APP, '.scratch/shortid-gate');
16. const ID = 'http://127.0.0.1:8706';
17. const SITE = 'http://127.0.0.1:8707';
18. const J = JSON.stringify;
19. let passed = 0, failed = 0;
20. const check = (name, ok, detail = '') => {
21. if (ok) { passed++; console.log(' ok ' + name); } else { failed++; console.log(' FAIL ' + name + (detail ? ' — ' + detail : '')); }
22. };
23. rmSync(G, { recursive: true, force: true });
24. mkdirSync(G, { recursive: true });
25. const p = spawn(join(APP, 'bin/hybriel'), ['project.hl'], {
26. cwd: APP, stdio: ['ignore', 'pipe', 'pipe'],
27. env: { ...process.env, SMTP_HOST: '', SMTP_USER: '', SMTP_PASSWORD: '', IDENT_PORT: '8706', IDENT_STORAGE: join(G, 'ident'), IDENT_SESSIONS: join(G, 'sess') + '/', IDENT_MAIL_SINK: join(G, 'mail.txt'), IDENT_IP_LIMIT: '1000', IDENT_IP_DAY_LIMIT: '1000' },
28. });
29. let log = ''; p.stdout.on('data', d => { log += d; }); p.stderr.on('data', d => { log += d; });
30. const SHORT = /^[2-9a-hj-km-np-z]{5}$/;
31. let emitI = 0;
32. async function emit(event, payload, cookie) {
33. const r = await fetch(ID + '/__hl/emit', { method: 'POST', headers: { 'content-type': 'application/json', ...(cookie ? { cookie } : {}) }, body: J({ t: 'emit', i: ++emitI, event, payload }) });
34. const j = JSON.parse(await r.text());
35. return { cookie: (r.headers.get('set-cookie') || '').split(';')[0], value: j.value };
36. }
37. async function api(path, body) {
38. const r = await fetch(ID + path, { method: 'POST', headers: { 'content-type': 'application/json' }, body: typeof body === 'string' ? body : J(body) });
39. const t = await r.text(); let j = null; try { j = JSON.parse(t); } catch {}
40. return { status: r.status, j, t };
41. }
42. const lastCode = (email) => readFileSync(join(G, 'mail.txt'), 'utf8').trim().split('\n').filter(l => l.startsWith(email + ' ')).pop().split(' ')[1];
43. async function login(email) {
44. await api('/api/code', { email });
45. const v = await emit('verifyCode', [email, lastCode(email), 'UTC']);
46. return { cookie: v.cookie, ids: v.value.identities };
47. }
48. async function appLogin(cookie, app, identity) {
49. const l = await fetch(ID + '/login?key=' + app.key + '&return=' + encodeURIComponent(SITE + '/cb'), { redirect: 'manual' });
50. const rid = (l.headers.get('location') || '').split('/').pop();
51. const c = await emit('chooseIdentity', [rid, identity], cookie);
52. const x = await api('/api/exchange', { key: app.key, secret: app.secret, code: new URL(c.value.url).searchParams.get('ident_code') });
53. if (x.status !== 200) throw new Error('exchange failed: ' + x.t);
54. return x.j.identity;
55. }
56. try {
57. for (let i = 0; i < 80; i++) { try { await fetch(ID + '/', { redirect: 'manual' }); break; } catch {} await sleep(250); }
58. const a = await login('[email protected]');
59. const def = a.ids[0];
60. check('the default identity has a short id: 5 characters, no look-alikes', SHORT.test(def.shortId), J(def));
61. const added = (await emit('addIdentity', [{ identityName: 'Work' }], a.cookie)).value;
62. const work = added.identities.find(i => i.identityName === 'Work');
63. check('a new identity gets one too, another one', SHORT.test(work.shortId) && work.shortId !== def.shortId, J(added.identities));
64. const b = await login('[email protected]');
65. check('another account: another id', SHORT.test(b.ids[0].shortId) && ![def.shortId, work.shortId].includes(b.ids[0].shortId));
66. const home = await (await fetch(ID + '/', { headers: { cookie: a.cookie } })).text();
67. check('the identity page shows the id of each identity', home.includes('>' + def.shortId + '<') && home.includes('>' + work.shortId + '<'));
68. // many ids: all valid, all different
69. const many = [];
70. for (let i = 0; i < 40; i++) many.push((await emit('addIdentity', [{ identityName: 'x' + i }], a.cookie)).value.identities.at(-1).shortId);
71. check('40 more identities: all valid and different from each other', many.every(v => SHORT.test(v)) && new Set([...many, def.shortId, work.shortId]).size === 42);
72. const noLookalike = many.join('') + def.shortId + work.shortId;
73. check('no 0, 1, o, i or l anywhere', !/[01oil]/.test(noLookalike), noLookalike);
75. const mk = async (name) => { const v = (await emit('appCreate', [{ name, origins: [SITE] }], a.cookie)).value; return { key: v.app.apiKey, secret: v.secret }; };
76. const A = await mk('Chat'), B = await mk('Shop');
77. const inA = await appLogin(a.cookie, A, def.id), inB = await appLogin(a.cookie, B, def.id);
78. check('the same identity gets the SAME id in two apps, and it is its short id', inA === inB && inA === def.shortId, J([inA, inB, def.shortId]));
79. const inAwork = await appLogin(a.cookie, A, work.id);
80. check('another identity → another id', inAwork === work.shortId && inAwork !== inA, inAwork);
81. const edit = (await emit('editIdentity', [def.id, { nickname: 'Al' }], a.cookie)).value;
82. check('editing the identity does not change its id', edit.identities.find(i => i.id === def.id).shortId === def.shortId);
83. const bIn = await appLogin(b.cookie, A, b.ids[0].id);
84. check('bob in app A: his own short id, no email or names in the answer', bIn === b.ids[0].shortId);
86. // notifications by the short id
87. const note = (app, identity) => api('/api/notify', { key: app.key, secret: app.secret, identity, name: 'New comment', text: 'hello' });
88. let n = await note(A, def.shortId);
89. check('notify by the short id → 200', n.status === 200 && n.j.id, n.t);
90. n = await note(A, def.shortId.toUpperCase());
91. check('capital letters do not matter', n.status === 200, n.t);
92. n = await note(B, work.shortId);
93. check('an identity that never logged in to this app → 404', n.status === 404, n.t);
94. n = await note(A, 'zzzzz');
95. check('an unknown id → 404', n.status === 404, n.t);
96. n = await note(A, 'a0l1o');
97. check('look-alike characters are no id → 404', n.status === 404, n.t);
99. // the mapping endpoint
100. let m = await api('/api/migrate-ids', { key: A.key, secret: A.secret });
101. check('migrate-ids on a new store: nothing to map', m.status === 200 && J(m.j.ids) === '{}' && m.j.finished === false, m.t);
102. m = await api('/api/migrate-ids', { key: A.key, secret: 'sk_' + '0'.repeat(48) });
103. check('migrate-ids with a wrong secret → 401', m.status === 401, m.t);
104. m = await api('/api/migrate-ids', { key: A.key, secret: A.secret, extra: 1 });
105. check('migrate-ids with an unknown field → 400 naming it', m.status === 400 && /extra/.test(m.t), m.t);
106. const g = await fetch(ID + '/api/migrate-ids');
107. check('migrate-ids is POST only → 405', g.status === 405);
108. } catch (err) {
109. failed++; console.log(' FAIL (aborted) ' + err.stack);
110. } finally {
111. p.kill(); await sleep(300);
112. writeFileSync(join(G, 'ident.log'), log);
113. }
114. console.log(`\n${passed} passed, ${failed} failed`);
115. process.exit(failed ? 1 : 0);