gitoria

5.8 KB

1. // tests/identkit.mjs — helpers for tickets' tests that need a REAL ident (ticket #7): a
2. // throw-away ident instance from ident's code (a COPY without .env, storage, sessions — so it
3. // can never send mail: codes go to IDENT_MAIL_SINK), its accounts, a registered app, and the
4. // ident side of the two login flows. Never the live ident, never the dev server on :8351.
5. //
6. // const id = await startIdent({ identDir, workDir, port }) // copies the code, starts it
7. // const alice = await id.signIn('[email protected]') // → { cookie } (identsid=…)
8. // const app = await id.registerApp(alice, 'tickets', [origin]) // → { key, secret }
9. // const code = await id.selectorCode(alice, app, origin) // one-time code (the selector's path)
10. // const pid = await id.exchange(app, code) // → the per-app identity id
11. // id.stop()
12. import { spawn } from 'node:child_process';
13. import { cpSync, mkdirSync, readFileSync, rmSync, existsSync, writeFileSync } from 'node:fs';
14. import { join } from 'node:path';
16. const sleep = (ms) => new Promise(r => setTimeout(r, ms));
17. const J = JSON.stringify;
19. // the ident code, copied without anything that holds secrets or data
20. const SKIP = new Set(['.env', 'storage', '.sessions', '.scratch', 'server.log', 'server.pid', 'testapp', '.git']);
21. export function copyIdent(identDir, to) {
22. rmSync(to, { recursive: true, force: true });
23. mkdirSync(to, { recursive: true });
24. cpSync(identDir, to, { recursive: true, filter: (src) => {
25. const rel = src.slice(identDir.length).replace(/^\/+/, '');
26. if (rel === '') return true;
27. return !SKIP.has(rel.split('/')[0]);
28. } });
29. if (existsSync(join(to, '.env'))) throw new Error('identkit: a .env was copied — refusing to start');
30. }
32. export async function startIdent({ identDir, workDir, port }) {
33. const code = join(workDir, 'ident-code');
34. const data = join(workDir, 'ident-data');
35. copyIdent(identDir, code);
36. rmSync(data, { recursive: true, force: true });
37. mkdirSync(data, { recursive: true });
38. const sink = join(data, 'mail.txt');
39. writeFileSync(sink, '');
40. const base = `http://127.0.0.1:${port}`;
41. let log = '';
42. const proc = spawn(join(code, 'bin/hybriel'), ['project.hl'], {
43. cwd: code,
44. env: { ...process.env, IDENT_PORT: String(port), IDENT_STORAGE: join(data, 'mpackdb'), IDENT_SESSIONS: join(data, 'sessions') + '/',
45. IDENT_MAIL_SINK: sink, IDENT_IP_LIMIT: '1000', IDENT_IP_DAY_LIMIT: '1000', IDENT_WATCH: '0', HL_HOST: '127.0.0.1',
46. SMTP_HOST: '', SMTP_USER: '', SMTP_PASSWORD: '' },
47. stdio: ['ignore', 'pipe', 'pipe'],
48. });
49. proc.stdout.on('data', d => log += d); proc.stderr.on('data', d => log += d);
50. let up = false;
51. for (let i = 0; i < 80 && !up; i++) { try { const r = await fetch(base + '/'); up = r.ok; } catch {} if (!up) await sleep(250); }
52. if (!up) throw new Error('ident did not come up\n' + log);
54. let emitI = 0;
55. const emit = async (event, payload, cookie) => {
56. const r = await fetch(base + '/__hl/emit', { method: 'POST', headers: { 'content-type': 'application/json', ...(cookie ? { cookie } : {}) }, body: J({ t: 'emit', i: ++emitI, event, payload }) });
57. const setCookie = (r.headers.get('set-cookie') || '').split(';')[0];
58. const t = await r.text();
59. let j = null; try { j = JSON.parse(t); } catch {}
60. return { value: j && j.value, raw: t, setCookie };
61. };
62. const lastCode = (email) => {
63. const lines = readFileSync(sink, 'utf8').trim().split('\n').filter(l => l.startsWith(email + ' '));
64. return lines.length ? lines[lines.length - 1].split(' ')[1] : null;
65. };
66. return {
67. base, sink, lastCode, log: () => log, proc,
68. // an ident account signed in over the REST carrier (the first login creates it)
69. async signIn(email) {
70. const c = await fetch(base + '/api/code', { method: 'POST', headers: { 'content-type': 'application/json' }, body: J({ email }) });
71. if (c.status !== 200) throw new Error('ident code refused: ' + c.status + ' ' + await c.text());
72. const v = await emit('verifyCode', [email, lastCode(email), 'Europe/Vienna']);
73. if (!v.value || !v.value.account || !v.setCookie) throw new Error('ident sign-in failed: ' + v.raw);
74. return { email, cookie: v.setCookie };
75. },
76. async registerApp(who, name, origins) {
77. const r = await emit('appCreate', [{ name, origins }], who.cookie);
78. if (!r.value || !r.value.secret) throw new Error('appCreate failed: ' + r.raw);
79. return { key: r.value.app.apiKey, secret: r.value.secret, raw: r.value };
80. },
81. // the selector's path without a browser: the identities (as the page at `origin` asks) → choose → code
82. async selectorCode(who, app, origin, identityName = null) {
83. const l = await fetch(base + '/api/selector/identities?key=' + app.key, { headers: { origin, cookie: who.cookie } });
84. const lj = await l.json();
85. if (!lj.identities || !lj.identities.length) throw new Error('no identities: ' + J(lj));
86. const pick = identityName ? lj.identities.find(i => i.name === identityName) : lj.identities[0];
87. const c = await fetch(base + '/api/selector/choose?key=' + app.key, { method: 'POST', headers: { origin, cookie: who.cookie, 'content-type': 'application/json' }, body: J({ identity: pick.id }) });
88. const cj = await c.json();
89. if (!cj.code) throw new Error('choose failed: ' + J(cj));
90. return cj.code;
91. },
92. async exchange(app, code) {
93. const r = await fetch(base + '/api/exchange', { method: 'POST', headers: { 'content-type': 'application/json' }, body: J({ key: app.key, secret: app.secret, code }) });
94. const j = await r.json();
95. if (!j.identity) throw new Error('exchange failed: ' + J(j));
96. return j.identity;
97. },
98. async stop() {
99. try { proc.kill('SIGTERM'); } catch {}
100. await new Promise(r => { if (proc.exitCode !== null || proc.signalCode !== null) return r(); proc.once('exit', r); setTimeout(r, 3000); });
101. },
102. };
103. }