File size: 1,634 Bytes
95b671e | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 | import assert from "node:assert/strict";
import { randomUUID } from "node:crypto";
import { test } from "node:test";
import type { DB } from "@superlog/db";
import { resolvePublicSourceMapUploadAuth } from "./management-auth.js";
function databaseReturning(row: { id: string; projectId: string } | null): DB {
return {
query: {
apiKeys: {
async findFirst() {
return row;
},
},
},
} as unknown as DB;
}
test("public ingest keys can authorize source map uploads for their own project", async () => {
const projectId = randomUUID();
const auth = await resolvePublicSourceMapUploadAuth({
database: databaseReturning({ id: "key-1", projectId }),
method: "POST",
path: `/api/v1/projects/${projectId}/sourcemaps`,
token: "sl_public_test-token",
});
assert.deepEqual(auth, { projectId, apiKeyId: "key-1" });
});
test("public ingest keys cannot upload source maps for another project", async () => {
const auth = await resolvePublicSourceMapUploadAuth({
database: databaseReturning({ id: "key-1", projectId: randomUUID() }),
method: "POST",
path: `/api/v1/projects/${randomUUID()}/sourcemaps`,
token: "sl_public_test-token",
});
assert.equal(auth, null);
});
test("public ingest keys do not authorize other management API routes", async () => {
const projectId = randomUUID();
const auth = await resolvePublicSourceMapUploadAuth({
database: databaseReturning({ id: "key-1", projectId }),
method: "GET",
path: `/api/v1/projects/${projectId}/api-keys`,
token: "sl_public_test-token",
});
assert.equal(auth, null);
});
|