@araminix/platform 1.0.0 → 1.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +73 -1
- package/dist/src/Platform.d.ts +12 -1
- package/dist/src/Platform.d.ts.map +1 -1
- package/dist/src/Platform.js +217 -77
- package/dist/src/Platform.js.map +1 -1
- package/dist/src/agent/AgentController.d.ts +24 -3
- package/dist/src/agent/AgentController.d.ts.map +1 -1
- package/dist/src/agent/AgentController.js +168 -60
- package/dist/src/agent/AgentController.js.map +1 -1
- package/dist/src/agent/worker.js +5 -0
- package/dist/src/agent/worker.js.map +1 -1
- package/dist/src/executor/Instance.d.ts +9 -3
- package/dist/src/executor/Instance.d.ts.map +1 -1
- package/dist/src/executor/Instance.js +148 -36
- package/dist/src/executor/Instance.js.map +1 -1
- package/dist/src/server/AuthProvider.d.ts +70 -1
- package/dist/src/server/AuthProvider.d.ts.map +1 -1
- package/dist/src/server/AuthProvider.js +12 -1
- package/dist/src/server/AuthProvider.js.map +1 -1
- package/dist/src/server/Endpoint.d.ts +30 -1
- package/dist/src/server/Endpoint.d.ts.map +1 -1
- package/dist/src/server/Endpoint.js +467 -72
- package/dist/src/server/Endpoint.js.map +1 -1
- package/dist/src/server/index.d.ts +1 -0
- package/dist/src/server/index.d.ts.map +1 -1
- package/dist/src/server/index.js +1 -0
- package/dist/src/server/index.js.map +1 -1
- package/dist/src/utils/log_middleware.d.ts.map +1 -1
- package/dist/src/utils/log_middleware.js +2 -1
- package/dist/src/utils/log_middleware.js.map +1 -1
- package/dist/src/utils/minioService.d.ts +1 -0
- package/dist/src/utils/minioService.d.ts.map +1 -1
- package/dist/src/utils/minioService.js +6 -3
- package/dist/src/utils/minioService.js.map +1 -1
- package/dist/tests/agentWorker.test.d.ts +2 -0
- package/dist/tests/agentWorker.test.d.ts.map +1 -0
- package/dist/tests/agentWorker.test.js +225 -0
- package/dist/tests/agentWorker.test.js.map +1 -0
- package/dist/tests/authProvider.test.js +15 -0
- package/dist/tests/authProvider.test.js.map +1 -1
- package/dist/tests/endpointSecurity.test.d.ts +2 -0
- package/dist/tests/endpointSecurity.test.d.ts.map +1 -0
- package/dist/tests/endpointSecurity.test.js +1007 -0
- package/dist/tests/endpointSecurity.test.js.map +1 -0
- package/dist/tests/logMiddleware.test.js +50 -0
- package/dist/tests/logMiddleware.test.js.map +1 -1
- package/dist/tests/minioService.test.js +178 -1
- package/dist/tests/minioService.test.js.map +1 -1
- package/dist/tests/platform.test.js +245 -0
- package/dist/tests/platform.test.js.map +1 -1
- package/dist/tests/unhandledRejections.test.d.ts +2 -0
- package/dist/tests/unhandledRejections.test.d.ts.map +1 -0
- package/dist/tests/unhandledRejections.test.js +204 -0
- package/dist/tests/unhandledRejections.test.js.map +1 -0
- package/dist/tests/uploadSecurity.test.d.ts +2 -0
- package/dist/tests/uploadSecurity.test.d.ts.map +1 -0
- package/dist/tests/uploadSecurity.test.js +219 -0
- package/dist/tests/uploadSecurity.test.js.map +1 -0
- package/package.json +4 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform.test.js","sourceRoot":"","sources":["../../tests/platform.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,QAAQ,MAAM,oBAAoB,CAAC;AAG1C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
1
|
+
{"version":3,"file":"platform.test.js","sourceRoot":"","sources":["../../tests/platform.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,QAAQ,MAAM,6BAA6B,CAAC;AACnD,OAAO,QAAQ,MAAM,oBAAoB,CAAC;AAG1C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAC/E,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAChD,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAE,QAAQ,CAAC,QAAgB,CAAC,eAAe,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAQ;YACvB,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE;gBACN,UAAU,EAAE;oBACR,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,eAAe;oBACvB,IAAI,EAAE,aAAa;iBACtB;aACJ;SACJ,CAAC;QAEF,MAAM,SAAS,GAAI,QAAgB,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACxD,MAAM,QAAQ,GAAiB;QAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;KAC1C,CAAC;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACrF,MAAM,cAAc,GAAG,EAAS,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjK,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAEhD,IAAI,YAAY,GAAG,CAAC,CAAC;QACpB,QAAgB,CAAC,SAAS,GAAG,GAAG,EAAE;YAC/B,YAAY,EAAE,CAAC;QACnB,CAAC,CAAC;QAEF,+DAA+D;QAC/D,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACrB,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAEpC,qFAAqF;QACrF,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACrB,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,cAAc,GAAG,EAAS,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAE5H,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,QAAgB,CAAC,MAAM,GAAG,WAAW,CAAC;QAEvC,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACxB,cAAc,GAAG,IAAI,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAEnB,8CAA8C;QAC9C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACtG,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,mBAAmB,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEjD,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,EAAE;YACnD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;YACtF,IAAY,CAAC,EAAE,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,WAAW,EAAE,CAAC;YAClB,CAAC,CAAC;YACF,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;QAEF,uEAAuE;QACvE,MAAM,KAAK,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,cAAc,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,cAAc,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAEjD,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAEnC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAE1C,yDAAyD;QACzD,MAAM,KAAK,GAAI,QAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACzD,OAAO,aAAa,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;YACjC,IAAI,MAA4B,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAC;gBAClB,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;QAED,8CAA8C;QAC9C,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,2FAA2F;QAC3F,MAAM,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAE5C,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEjD,6DAA6D;QAC7D,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QACxF,MAAc,CAAC,EAAE,GAAG,UAAU,CAAC;QAC/B,MAAc,CAAC,SAAS,GAAG,SAAS,CAAC;QACtC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAErC,MAAM,KAAK,GAAI,QAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACzD,OAAO,aAAa,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;YACjC,IAAI,MAA4B,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAC;gBAClB,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7C,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;YACpB,YAAY,EAAE,CAAC;SAClB,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;QACzC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QAEzF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAE5B,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAE/C,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,oBAAoB,GAAG,KAAK,CAAC;QACjC,MAAM,UAAU,GAAG;YACf,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;YAC7C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;YACvB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,QAAQ,EAAE,GAAG,EAAE;gBACX,mBAAmB,GAAG,IAAI,CAAC;YAC/B,CAAC;SACJ,CAAC;QAEF,MAAM,UAAU,GAAG;YACf,cAAc,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,gBAAgB,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBACrD,oBAAoB,GAAG,IAAI,CAAC;oBAC5B,OAAO,IAAI,EAAE,CAAC,UAAiB,CAAC,CAAC;gBACrC,CAAC;gBACD,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;SACJ,CAAC;QAED,QAAgB,CAAC,QAAQ,GAAG;YACzB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SACtF,CAAC;QAEF,qEAAqE;QACpE,QAAgB,CAAC,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,UAAiB,CAAC,CAAC;QAEhF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAE/C,oDAAoD;QACpD,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAE/C,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC3D,MAAM,cAAc,GAAG,EAAS,CAAC;QACjC,MAAM,YAAY,GAAG;YACjB,sBAAsB,EAAE,GAAG;YAC3B,WAAW,EAAE,CAAC;SACjB,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QAE3H,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"unhandledRejections.test.d.ts","sourceRoot":"","sources":["../../tests/unhandledRejections.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,204 @@
|
|
|
1
|
+
import { deal, err, Ok, ok, StreamCloseCodes, WsCloseCodes } from '@araminix/lib';
|
|
2
|
+
import assert from 'node:assert';
|
|
3
|
+
import fs from 'node:fs';
|
|
4
|
+
import os from 'node:os';
|
|
5
|
+
import path from 'node:path';
|
|
6
|
+
import { afterEach, beforeEach, describe, it } from 'node:test';
|
|
7
|
+
import AgentController from '../src/agent/AgentController.js';
|
|
8
|
+
import Platform from '../src/Platform.js';
|
|
9
|
+
import { AgentInfo, UserInfo } from '../src/server/AuthProvider.js';
|
|
10
|
+
import Endpoint from '../src/server/Endpoint.js';
|
|
11
|
+
describe('Unhandled Rejections and Uncaught Exceptions Defense', () => {
|
|
12
|
+
let tempDir;
|
|
13
|
+
beforeEach(() => {
|
|
14
|
+
tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'araminix-test-'));
|
|
15
|
+
});
|
|
16
|
+
afterEach(() => {
|
|
17
|
+
fs.rmSync(tempDir, { recursive: true, force: true });
|
|
18
|
+
});
|
|
19
|
+
it('Endpoint: corrupt index.json returns 404 without uncaught exception', async () => {
|
|
20
|
+
const fileId = 'corrupt-file-123';
|
|
21
|
+
const fileDir = path.join(tempDir, fileId);
|
|
22
|
+
fs.mkdirSync(fileDir, { recursive: true });
|
|
23
|
+
fs.writeFileSync(path.join(fileDir, 'index.json'), '{corrupt-json-data');
|
|
24
|
+
const mockAuth = {
|
|
25
|
+
getInfo: async () => new Ok(new UserInfo('user-1', 'john', 'John Doe', 'rt-1', 'john@example.com', [], { _key: 'u1', name: 'Unit 1', code: 'U1' })),
|
|
26
|
+
auth: async () => ({}),
|
|
27
|
+
googleAuth: async () => ({}),
|
|
28
|
+
destroy: async () => { },
|
|
29
|
+
refreshToken: async () => ({}),
|
|
30
|
+
request2FA: async () => ({}),
|
|
31
|
+
verify2FA: async () => ({}),
|
|
32
|
+
enable2FA: async () => ({}),
|
|
33
|
+
disable2FA: async () => ({}),
|
|
34
|
+
requestUploadUrl: async () => ({}),
|
|
35
|
+
requestDownloadUrl: async () => ({}),
|
|
36
|
+
mobileRequests: async () => ({}),
|
|
37
|
+
};
|
|
38
|
+
const endpoint = new Endpoint({
|
|
39
|
+
authProvider: mockAuth,
|
|
40
|
+
port: 0,
|
|
41
|
+
uploadDir: tempDir,
|
|
42
|
+
});
|
|
43
|
+
endpoint.open();
|
|
44
|
+
const address = endpoint.server?.address();
|
|
45
|
+
const port = typeof address === 'object' && address ? address.port : 3000;
|
|
46
|
+
try {
|
|
47
|
+
const res = await fetch(`http://127.0.0.1:${port}/file/${fileId}`, {
|
|
48
|
+
headers: {
|
|
49
|
+
'x-token': 'valid-token',
|
|
50
|
+
},
|
|
51
|
+
});
|
|
52
|
+
assert.strictEqual(res.status, 404);
|
|
53
|
+
}
|
|
54
|
+
finally {
|
|
55
|
+
endpoint.close();
|
|
56
|
+
}
|
|
57
|
+
});
|
|
58
|
+
it('Endpoint: ws route handles authProvider throwing without unhandled rejection and closes with code 1011', async () => {
|
|
59
|
+
const mockAuth = {
|
|
60
|
+
getInfo: async () => {
|
|
61
|
+
throw new Error('Database connection unexpectedly dropped');
|
|
62
|
+
},
|
|
63
|
+
auth: async () => ({}),
|
|
64
|
+
googleAuth: async () => ({}),
|
|
65
|
+
destroy: async () => { },
|
|
66
|
+
refreshToken: async () => ({}),
|
|
67
|
+
request2FA: async () => ({}),
|
|
68
|
+
verify2FA: async () => ({}),
|
|
69
|
+
enable2FA: async () => ({}),
|
|
70
|
+
disable2FA: async () => ({}),
|
|
71
|
+
requestUploadUrl: async () => ({}),
|
|
72
|
+
requestDownloadUrl: async () => ({}),
|
|
73
|
+
mobileRequests: async () => ({}),
|
|
74
|
+
};
|
|
75
|
+
const endpoint = new Endpoint({
|
|
76
|
+
authProvider: mockAuth,
|
|
77
|
+
port: 0,
|
|
78
|
+
uploadDir: tempDir,
|
|
79
|
+
});
|
|
80
|
+
endpoint.open();
|
|
81
|
+
const address = endpoint.server?.address();
|
|
82
|
+
const port = typeof address === 'object' && address ? address.port : 3000;
|
|
83
|
+
const [closePromise, resolveClose] = deal();
|
|
84
|
+
const ws = new WebSocket(`ws://127.0.0.1:${port}/ws-token/some-token/platform`);
|
|
85
|
+
ws.onclose = (event) => {
|
|
86
|
+
resolveClose({ code: event.code, reason: event.reason });
|
|
87
|
+
};
|
|
88
|
+
try {
|
|
89
|
+
const result = await closePromise;
|
|
90
|
+
assert.strictEqual(result.code, WsCloseCodes.InternalError);
|
|
91
|
+
assert.strictEqual(result.code, 1011);
|
|
92
|
+
}
|
|
93
|
+
finally {
|
|
94
|
+
endpoint.close();
|
|
95
|
+
}
|
|
96
|
+
});
|
|
97
|
+
it('Platform: custom stream handler exception is caught and closes stream with error', async () => {
|
|
98
|
+
let streamCloseCalled = false;
|
|
99
|
+
let closedCode = null;
|
|
100
|
+
const mockStream = {
|
|
101
|
+
args: { test: true },
|
|
102
|
+
write: async () => ok(),
|
|
103
|
+
closeOk: () => { },
|
|
104
|
+
closeErr: () => {
|
|
105
|
+
streamCloseCalled = true;
|
|
106
|
+
closedCode = StreamCloseCodes.Error;
|
|
107
|
+
},
|
|
108
|
+
};
|
|
109
|
+
const mockSocket = {
|
|
110
|
+
incomingStream: async (name) => {
|
|
111
|
+
if (name === 'custom/exploding') {
|
|
112
|
+
if (!streamCloseCalled) {
|
|
113
|
+
return new Ok(mockStream);
|
|
114
|
+
}
|
|
115
|
+
}
|
|
116
|
+
return err();
|
|
117
|
+
},
|
|
118
|
+
};
|
|
119
|
+
const mockAuth = {
|
|
120
|
+
getInfo: async () => ({}),
|
|
121
|
+
auth: async () => ({}),
|
|
122
|
+
googleAuth: async () => ({}),
|
|
123
|
+
destroy: async () => { },
|
|
124
|
+
refreshToken: async () => ({}),
|
|
125
|
+
request2FA: async () => ({}),
|
|
126
|
+
verify2FA: async () => ({}),
|
|
127
|
+
enable2FA: async () => ({}),
|
|
128
|
+
disable2FA: async () => ({}),
|
|
129
|
+
requestUploadUrl: async () => ({}),
|
|
130
|
+
requestDownloadUrl: async () => ({}),
|
|
131
|
+
mobileRequests: async () => ({}),
|
|
132
|
+
};
|
|
133
|
+
const platform = new Platform({
|
|
134
|
+
appIndexPath: new URL('file:///d:/dummy/apps.js'),
|
|
135
|
+
agentIndexPath: new URL('file:///d:/dummy/agents.js'),
|
|
136
|
+
authProvider: mockAuth,
|
|
137
|
+
instanceUserLimit: 5,
|
|
138
|
+
onCustomStream: {
|
|
139
|
+
exploding: async () => {
|
|
140
|
+
throw new Error('Custom stream catastrophic error');
|
|
141
|
+
},
|
|
142
|
+
},
|
|
143
|
+
});
|
|
144
|
+
try {
|
|
145
|
+
platform.processCustomStreams({ id: 'user-1' }, mockSocket);
|
|
146
|
+
await new Promise((resolve) => setTimeout(resolve, 50));
|
|
147
|
+
assert.strictEqual(streamCloseCalled, true);
|
|
148
|
+
assert.strictEqual(closedCode, StreamCloseCodes.Error);
|
|
149
|
+
}
|
|
150
|
+
finally {
|
|
151
|
+
platform.stop();
|
|
152
|
+
}
|
|
153
|
+
});
|
|
154
|
+
it('AgentController: incoming post stream with null or invalid args closes stream with error without throwing', async () => {
|
|
155
|
+
let streamCloseErrCount = 0;
|
|
156
|
+
let streamCount = 0;
|
|
157
|
+
const mockStreams = [
|
|
158
|
+
{ args: null }, // remote trigger case: null args
|
|
159
|
+
{ args: { name: 12345 } }, // invalid name type
|
|
160
|
+
{ args: undefined }, // undefined args
|
|
161
|
+
];
|
|
162
|
+
const [finishPromise, resolveFinish] = deal();
|
|
163
|
+
const mockSocket = {
|
|
164
|
+
waitClose: async () => 'Intentional',
|
|
165
|
+
destroy: () => { },
|
|
166
|
+
incomingStream: async (name) => {
|
|
167
|
+
if (name === 'post' && streamCount < mockStreams.length) {
|
|
168
|
+
const current = mockStreams[streamCount++];
|
|
169
|
+
const stream = {
|
|
170
|
+
args: current.args,
|
|
171
|
+
closeErr: () => {
|
|
172
|
+
streamCloseErrCount++;
|
|
173
|
+
if (streamCloseErrCount === mockStreams.length) {
|
|
174
|
+
resolveFinish();
|
|
175
|
+
}
|
|
176
|
+
},
|
|
177
|
+
closeOk: () => { },
|
|
178
|
+
write: async () => ok(),
|
|
179
|
+
};
|
|
180
|
+
return new Ok(stream);
|
|
181
|
+
}
|
|
182
|
+
return err();
|
|
183
|
+
},
|
|
184
|
+
};
|
|
185
|
+
const controller = new AgentController(new URL('file:///d:/dummy/agents.js'));
|
|
186
|
+
const origSet = controller.instances.set;
|
|
187
|
+
controller.instances.set = function (key, val) {
|
|
188
|
+
val.init = async () => ok();
|
|
189
|
+
return origSet.call(this, key, val);
|
|
190
|
+
};
|
|
191
|
+
const agentInfo = new AgentInfo('agent-1', 'test');
|
|
192
|
+
const mockRequest = {
|
|
193
|
+
info: agentInfo,
|
|
194
|
+
arg: '',
|
|
195
|
+
accept: () => new Ok(mockSocket),
|
|
196
|
+
deny: () => ok(),
|
|
197
|
+
};
|
|
198
|
+
const connectResult = await controller.connect(agentInfo, mockRequest);
|
|
199
|
+
assert.ok(connectResult.isOk());
|
|
200
|
+
await finishPromise;
|
|
201
|
+
assert.strictEqual(streamCloseErrCount, 3);
|
|
202
|
+
});
|
|
203
|
+
});
|
|
204
|
+
//# sourceMappingURL=unhandledRejections.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"unhandledRejections.test.js","sourceRoot":"","sources":["../../tests/unhandledRejections.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,eAAe,MAAM,iCAAiC,CAAC;AAC9D,OAAO,QAAQ,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAgB,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAElF,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AAEjD,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAClE,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACZ,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACX,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAEzE,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAQ;YAC1J,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAI,QAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1E,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,SAAS,MAAM,EAAE,EAAE;gBAC/D,OAAO,EAAE;oBACL,SAAS,EAAE,aAAa;iBAC3B;aACJ,CAAC,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACP,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAI,QAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1E,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,IAAI,EAAoC,CAAC;QAE9E,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,kBAAkB,IAAI,+BAA+B,CAAC,CAAC;QAChF,EAAE,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;YACnB,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAClC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5D,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACP,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAC9F,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,UAAU,GAAQ,IAAI,CAAC;QAE3B,MAAM,UAAU,GAAG;YACf,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACpB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;YACvB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,QAAQ,EAAE,GAAG,EAAE;gBACX,iBAAiB,GAAG,IAAI,CAAC;gBACzB,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC;YACxC,CAAC;SACJ,CAAC;QAEF,MAAM,UAAU,GAAG;YACf,cAAc,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC9B,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBACrB,OAAO,IAAI,EAAE,CAAC,UAAiB,CAAC,CAAC;oBACrC,CAAC;gBACL,CAAC;gBACD,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;SACJ,CAAC;QAEF,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;YACpB,cAAc,EAAE;gBACZ,SAAS,EAAE,KAAK,IAAI,EAAE;oBAClB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACxD,CAAC;aACJ;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC;YACD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAS,EAAE,UAAiB,CAAC,CAAC;YAC1E,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACxD,MAAM,CAAC,WAAW,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACP,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2GAA2G,EAAE,KAAK,IAAI,EAAE;QACvH,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,MAAM,WAAW,GAAG;YAChB,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,iCAAiC;YACjD,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,oBAAoB;YAC/C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,iBAAiB;SACzC,CAAC;QAEF,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,IAAI,EAAQ,CAAC;QAEpD,MAAM,UAAU,GAAG;YACf,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa;YACpC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,cAAc,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,MAAM,IAAI,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;oBACtD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC3C,MAAM,MAAM,GAAG;wBACX,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,GAAG,EAAE;4BACX,mBAAmB,EAAE,CAAC;4BACtB,IAAI,mBAAmB,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gCAC7C,aAAa,EAAE,CAAC;4BACpB,CAAC;wBACL,CAAC;wBACD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;wBACjB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;qBAC1B,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC,MAAa,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;SACJ,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAI,UAAkB,CAAC,SAAS,CAAC,GAAG,CAAC;QACjD,UAAkB,CAAC,SAAS,CAAC,GAAG,GAAG,UAAU,GAAQ,EAAE,GAAQ;YAC5D,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG;YAChB,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,EAAE;YACP,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,UAAiB,CAAC;YACvC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;SACU,CAAC;QAE/B,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAEhC,MAAM,aAAa,CAAC;QACpB,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"uploadSecurity.test.d.ts","sourceRoot":"","sources":["../../tests/uploadSecurity.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,219 @@
|
|
|
1
|
+
import { Ok } from '@araminix/lib';
|
|
2
|
+
import assert from 'node:assert';
|
|
3
|
+
import fs from 'node:fs';
|
|
4
|
+
import os from 'node:os';
|
|
5
|
+
import path from 'node:path';
|
|
6
|
+
import { afterEach, beforeEach, describe, it } from 'node:test';
|
|
7
|
+
import request from 'supertest';
|
|
8
|
+
import { UserInfo } from '../src/server/AuthProvider.js';
|
|
9
|
+
import Endpoint from '../src/server/Endpoint.js';
|
|
10
|
+
describe('Endpoint Upload Security and Stored XSS Defenses', () => {
|
|
11
|
+
let mockAuth;
|
|
12
|
+
let endpoint;
|
|
13
|
+
let tempDir;
|
|
14
|
+
beforeEach(() => {
|
|
15
|
+
tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'araminix-upload-test-'));
|
|
16
|
+
mockAuth = {
|
|
17
|
+
getInfo: async (token) => {
|
|
18
|
+
if (token === 'valid-token') {
|
|
19
|
+
return new Ok(new UserInfo('user-1', 'john', 'John Doe', 'rt-1', 'john@example.com', [], { _key: 'u1', name: 'Unit 1', code: 'U1' }));
|
|
20
|
+
}
|
|
21
|
+
return { isErr: () => true, isOk: () => false, unwrap: () => null };
|
|
22
|
+
},
|
|
23
|
+
auth: async () => new Ok('token'),
|
|
24
|
+
googleAuth: async () => new Ok('token'),
|
|
25
|
+
destroy: async () => { },
|
|
26
|
+
refreshToken: async () => new Ok('token'),
|
|
27
|
+
request2FA: async () => ({}),
|
|
28
|
+
verify2FA: async () => new Ok('token'),
|
|
29
|
+
enable2FA: async () => ({}),
|
|
30
|
+
disable2FA: async () => ({}),
|
|
31
|
+
requestUploadUrl: async () => ({}),
|
|
32
|
+
requestDownloadUrl: async () => ({}),
|
|
33
|
+
mobileRequests: async () => ({}),
|
|
34
|
+
};
|
|
35
|
+
});
|
|
36
|
+
afterEach(() => {
|
|
37
|
+
if (endpoint) {
|
|
38
|
+
endpoint.close();
|
|
39
|
+
}
|
|
40
|
+
if (tempDir && fs.existsSync(tempDir)) {
|
|
41
|
+
fs.rmSync(tempDir, { recursive: true, force: true });
|
|
42
|
+
}
|
|
43
|
+
});
|
|
44
|
+
it('rejects unauthenticated upload requests with 401 Unauthorized', async () => {
|
|
45
|
+
endpoint = new Endpoint({
|
|
46
|
+
authProvider: mockAuth,
|
|
47
|
+
uploadDir: tempDir,
|
|
48
|
+
port: 0,
|
|
49
|
+
});
|
|
50
|
+
const res = await request(endpoint.express).post('/file').attach('file', Buffer.from('hello'), 'test.txt');
|
|
51
|
+
assert.strictEqual(res.status, 401);
|
|
52
|
+
});
|
|
53
|
+
it('uploads valid file within size limit and stores sanitized metadata', async () => {
|
|
54
|
+
endpoint = new Endpoint({
|
|
55
|
+
authProvider: mockAuth,
|
|
56
|
+
uploadDir: tempDir,
|
|
57
|
+
port: 0,
|
|
58
|
+
});
|
|
59
|
+
const fileContent = 'Hello secure world!';
|
|
60
|
+
const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from(fileContent), 'document.txt');
|
|
61
|
+
assert.strictEqual(res.status, 200);
|
|
62
|
+
assert.ok(res.body.id, 'Response must contain file ID');
|
|
63
|
+
assert.strictEqual(res.body.name, 'document.txt');
|
|
64
|
+
assert.strictEqual(res.body.size, Buffer.byteLength(fileContent));
|
|
65
|
+
assert.strictEqual(res.body.userId, 'user-1');
|
|
66
|
+
const savedFilePath = path.join(tempDir, res.body.id, 'document.txt');
|
|
67
|
+
assert.ok(fs.existsSync(savedFilePath), 'Uploaded file must exist in UUID directory on disk');
|
|
68
|
+
assert.strictEqual(fs.readFileSync(savedFilePath, 'utf8'), fileContent);
|
|
69
|
+
const indexJsonPath = path.join(tempDir, res.body.id, 'index.json');
|
|
70
|
+
assert.ok(fs.existsSync(indexJsonPath), 'index.json metadata file must exist on disk');
|
|
71
|
+
const metadata = JSON.parse(fs.readFileSync(indexJsonPath, 'utf8'));
|
|
72
|
+
assert.strictEqual(metadata.name, 'document.txt');
|
|
73
|
+
assert.strictEqual(metadata.userId, 'user-1');
|
|
74
|
+
});
|
|
75
|
+
it('rejects upload exceeding maxUploadBytes with HTTP 413 Payload Too Large', async () => {
|
|
76
|
+
const maxBytes = 100;
|
|
77
|
+
endpoint = new Endpoint({
|
|
78
|
+
authProvider: mockAuth,
|
|
79
|
+
uploadDir: tempDir,
|
|
80
|
+
port: 0,
|
|
81
|
+
maxUploadBytes: maxBytes,
|
|
82
|
+
});
|
|
83
|
+
const oversizedData = Buffer.alloc(maxBytes + 50, 'a');
|
|
84
|
+
const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', oversizedData, 'oversized.txt');
|
|
85
|
+
assert.strictEqual(res.status, 413);
|
|
86
|
+
assert.ok(res.body.error, 'Response must return error message');
|
|
87
|
+
assert.ok(res.body.error.includes('File exceeds maximum allowed size of 100 bytes'));
|
|
88
|
+
});
|
|
89
|
+
it('rejects upload with disallowed extension with HTTP 415 Unsupported Media Type', async () => {
|
|
90
|
+
endpoint = new Endpoint({
|
|
91
|
+
authProvider: mockAuth,
|
|
92
|
+
uploadDir: tempDir,
|
|
93
|
+
port: 0,
|
|
94
|
+
uploadAllowlist: {
|
|
95
|
+
extensions: ['png', 'jpg', 'pdf'],
|
|
96
|
+
},
|
|
97
|
+
});
|
|
98
|
+
const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('<script>alert(1)</script>'), 'malicious.html');
|
|
99
|
+
assert.strictEqual(res.status, 415);
|
|
100
|
+
assert.strictEqual(res.body.error, 'File extension not allowed');
|
|
101
|
+
});
|
|
102
|
+
it('rejects upload with disallowed MIME type with HTTP 415 Unsupported Media Type', async () => {
|
|
103
|
+
endpoint = new Endpoint({
|
|
104
|
+
authProvider: mockAuth,
|
|
105
|
+
uploadDir: tempDir,
|
|
106
|
+
port: 0,
|
|
107
|
+
uploadAllowlist: {
|
|
108
|
+
mimetypes: ['image/png', 'image/jpeg'],
|
|
109
|
+
},
|
|
110
|
+
});
|
|
111
|
+
const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('<svg xmlns="http://www.w3.org/2000/svg"></svg>'), {
|
|
112
|
+
filename: 'graphic.svg',
|
|
113
|
+
contentType: 'image/svg+xml',
|
|
114
|
+
});
|
|
115
|
+
assert.strictEqual(res.status, 415);
|
|
116
|
+
assert.strictEqual(res.body.error, 'MIME type not allowed');
|
|
117
|
+
});
|
|
118
|
+
it('allows upload when both extension and MIME type match configured allowlist', async () => {
|
|
119
|
+
endpoint = new Endpoint({
|
|
120
|
+
authProvider: mockAuth,
|
|
121
|
+
uploadDir: tempDir,
|
|
122
|
+
port: 0,
|
|
123
|
+
uploadAllowlist: {
|
|
124
|
+
extensions: ['png'],
|
|
125
|
+
mimetypes: ['image/png'],
|
|
126
|
+
},
|
|
127
|
+
});
|
|
128
|
+
const res = await request(endpoint.express)
|
|
129
|
+
.post('/file')
|
|
130
|
+
.set('x-token', 'valid-token')
|
|
131
|
+
.attach('file', Buffer.from([0x89, 0x50, 0x4e, 0x47]), {
|
|
132
|
+
filename: 'icon.png',
|
|
133
|
+
contentType: 'image/png',
|
|
134
|
+
});
|
|
135
|
+
assert.strictEqual(res.status, 200);
|
|
136
|
+
assert.strictEqual(res.body.name, 'icon.png');
|
|
137
|
+
});
|
|
138
|
+
it('sanitizes filename by stripping directory traversal, control characters, and capping length', async () => {
|
|
139
|
+
endpoint = new Endpoint({
|
|
140
|
+
authProvider: mockAuth,
|
|
141
|
+
uploadDir: tempDir,
|
|
142
|
+
port: 0,
|
|
143
|
+
});
|
|
144
|
+
// Test 1: directory traversal and control characters
|
|
145
|
+
const traversalName = '../../../../etc/passwd\ttest.txt';
|
|
146
|
+
const res1 = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('safe payload'), traversalName);
|
|
147
|
+
assert.strictEqual(res1.status, 200);
|
|
148
|
+
assert.strictEqual(res1.body.name, 'passwdtest.txt');
|
|
149
|
+
// Test 2: unit verification of fallback for empty, dot-only, and complex traversal names
|
|
150
|
+
assert.strictEqual(endpoint.sanitizeFilename('..'), 'upload');
|
|
151
|
+
assert.strictEqual(endpoint.sanitizeFilename('.'), 'upload');
|
|
152
|
+
assert.strictEqual(endpoint.sanitizeFilename(''), 'upload');
|
|
153
|
+
assert.strictEqual(endpoint.sanitizeFilename(' '), 'upload');
|
|
154
|
+
assert.strictEqual(endpoint.sanitizeFilename('foo/../../bar'), 'bar');
|
|
155
|
+
assert.strictEqual(endpoint.sanitizeFilename('file\x00\r\n\tname.txt'), 'filename.txt');
|
|
156
|
+
// Test 3: excessively long filename is capped at 255 chars
|
|
157
|
+
const longBase = 'a'.repeat(300) + '.txt';
|
|
158
|
+
const res3 = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('long payload'), longBase);
|
|
159
|
+
assert.strictEqual(res3.status, 200);
|
|
160
|
+
assert.strictEqual(res3.body.name.length, 255);
|
|
161
|
+
});
|
|
162
|
+
it('rejects upload missing file field with HTTP 400 Bad Request', async () => {
|
|
163
|
+
endpoint = new Endpoint({
|
|
164
|
+
authProvider: mockAuth,
|
|
165
|
+
uploadDir: tempDir,
|
|
166
|
+
port: 0,
|
|
167
|
+
});
|
|
168
|
+
const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').send({ otherField: 'some-value' });
|
|
169
|
+
assert.strictEqual(res.status, 400);
|
|
170
|
+
assert.strictEqual(res.body.error, 'No file uploaded');
|
|
171
|
+
});
|
|
172
|
+
it('serves static files with nosniff, attachment, and CSP sandbox headers', async () => {
|
|
173
|
+
endpoint = new Endpoint({
|
|
174
|
+
authProvider: mockAuth,
|
|
175
|
+
uploadDir: tempDir,
|
|
176
|
+
port: 0,
|
|
177
|
+
});
|
|
178
|
+
const htmlPayload = '<html><script>alert("XSS")</script></html>';
|
|
179
|
+
const uploadRes = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from(htmlPayload), 'page.html');
|
|
180
|
+
assert.strictEqual(uploadRes.status, 200);
|
|
181
|
+
const fileId = uploadRes.body.id;
|
|
182
|
+
const downloadRes = await request(endpoint.express).get(`/file/${fileId}/page.html`).set('x-token', 'valid-token');
|
|
183
|
+
assert.strictEqual(downloadRes.status, 200);
|
|
184
|
+
assert.strictEqual(downloadRes.text, htmlPayload);
|
|
185
|
+
// Verify Stored XSS defense headers
|
|
186
|
+
assert.strictEqual(downloadRes.headers['x-content-type-options'], 'nosniff');
|
|
187
|
+
assert.strictEqual(downloadRes.headers['content-disposition'], 'attachment');
|
|
188
|
+
assert.strictEqual(downloadRes.headers['content-security-policy'], "default-src 'none'; sandbox");
|
|
189
|
+
});
|
|
190
|
+
it('denies access to dotfiles', async () => {
|
|
191
|
+
endpoint = new Endpoint({
|
|
192
|
+
authProvider: mockAuth,
|
|
193
|
+
uploadDir: tempDir,
|
|
194
|
+
port: 0,
|
|
195
|
+
});
|
|
196
|
+
// Pre-create a dotfile directly in an upload folder
|
|
197
|
+
const folderId = 'dotfile-folder-id';
|
|
198
|
+
const folderPath = path.join(tempDir, folderId);
|
|
199
|
+
fs.mkdirSync(folderPath, { recursive: true });
|
|
200
|
+
fs.writeFileSync(path.join(folderPath, '.env'), 'SECRET_KEY=12345');
|
|
201
|
+
const res = await request(endpoint.express).get(`/file/${folderId}/.env`).set('x-token', 'valid-token');
|
|
202
|
+
assert.ok(res.status === 403 || res.status === 404, 'Dotfiles must be denied access');
|
|
203
|
+
assert.notStrictEqual(res.text, 'SECRET_KEY=12345', 'Dotfile contents must never be served');
|
|
204
|
+
});
|
|
205
|
+
it('redirects /file/:fileId to /file/:fileId/:safeName for backward compatibility', async () => {
|
|
206
|
+
endpoint = new Endpoint({
|
|
207
|
+
authProvider: mockAuth,
|
|
208
|
+
uploadDir: tempDir,
|
|
209
|
+
port: 0,
|
|
210
|
+
});
|
|
211
|
+
const uploadRes = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('my report'), 'my report.txt');
|
|
212
|
+
assert.strictEqual(uploadRes.status, 200);
|
|
213
|
+
const fileId = uploadRes.body.id;
|
|
214
|
+
const redirectRes = await request(endpoint.express).get(`/file/${fileId}`).set('x-token', 'valid-token');
|
|
215
|
+
assert.strictEqual(redirectRes.status, 302);
|
|
216
|
+
assert.strictEqual(redirectRes.headers.location, `/file/${fileId}/my%20report.txt`);
|
|
217
|
+
});
|
|
218
|
+
});
|
|
219
|
+
//# sourceMappingURL=uploadSecurity.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"uploadSecurity.test.js","sourceRoot":"","sources":["../../tests/uploadSecurity.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,EAAE,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,OAAO,MAAM,WAAW,CAAC;AAEhC,OAAO,EAAgB,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AAEjD,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC9D,IAAI,QAAsB,CAAC;IAC3B,IAAI,QAAkB,CAAC;IACvB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACZ,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC1E,QAAQ,GAAG;YACP,OAAO,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC7B,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC1B,OAAO,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC1I,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAS,CAAC;YAC/E,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACjC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACzC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACtC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACX,IAAI,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC3E,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;QAE3G,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAChF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,qBAAqB,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjJ,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE9C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,oDAAoD,CAAC,CAAC;QAC9F,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;QAExE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,6CAA6C,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,QAAQ,GAAG,GAAG,CAAC;QACrB,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,cAAc,EAAE,QAAQ;SAC3B,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QAEvI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;aACpC;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAEnK,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,SAAS,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;aACzC;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,EAAE;YAClK,QAAQ,EAAE,aAAa;YACvB,WAAW,EAAE,eAAe;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QACxF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,UAAU,EAAE,CAAC,KAAK,CAAC;gBACnB,SAAS,EAAE,CAAC,WAAW,CAAC;aAC3B;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;aACtC,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC;aAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE;YACnD,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,WAAW;SAC3B,CAAC,CAAC;QAEP,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QACzG,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,qDAAqD;QACrD,MAAM,aAAa,GAAG,kCAAkC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,CAAC;QAEpJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAErD,yFAAyF;QACzF,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjG,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;QAE/I,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QACzE,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;QAE3H,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACnF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,4CAA4C,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QAEpJ,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,MAAM,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEnH,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,YAAY,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACvC,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,QAAQ,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAExG,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,gCAAgC,CAAC,CAAC;QACtF,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;QAExJ,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEzG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,MAAM,kBAAkB,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@araminix/platform",
|
|
3
3
|
"description": "Enterprise-grade actor runtime, WebSocket endpoint platform, and agent execution engine",
|
|
4
|
-
"version": "1.
|
|
4
|
+
"version": "1.7.0",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|
|
7
7
|
"type": "module",
|
|
@@ -45,6 +45,7 @@
|
|
|
45
45
|
"axios": "1.20.0",
|
|
46
46
|
"cookie-parser": "1.4.7",
|
|
47
47
|
"express": "5.3.0",
|
|
48
|
+
"express-rate-limit": "8.7.1",
|
|
48
49
|
"express-ws": "5.0.2",
|
|
49
50
|
"minio": "8.0.7",
|
|
50
51
|
"multer": "2.5.0"
|
|
@@ -66,7 +67,7 @@
|
|
|
66
67
|
"build": "tsc",
|
|
67
68
|
"format": "prettier --write .",
|
|
68
69
|
"format:check": "prettier --check .",
|
|
69
|
-
"test": "node --test dist/tests
|
|
70
|
-
"test:coverage": "node --experimental-test-coverage --test dist/tests
|
|
70
|
+
"test": "node --test 'dist/tests/**/*.test.js'",
|
|
71
|
+
"test:coverage": "node --experimental-test-coverage --test 'dist/tests/**/*.test.js'"
|
|
71
72
|
}
|
|
72
73
|
}
|