@fedify/vocab 2.2.19 → 2.2.20

package/dist-tests/actor.test.mjs

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { E as Service, N as __exportAll, b as Person, d as Group, i as Application, y as Organization } from "./vocab-DTY3b5Yj.mjs";
-import { n as version, r as esm_default, t as name } from "./deno-6CUIKmD6.mjs";
+import { E as Service, N as __exportAll, b as Person, d as Group, i as Application, y as Organization } from "./vocab-C6G3QtaR.mjs";
+import { n as version, r as esm_default, t as name } from "./deno-CE8IFnvm.mjs";
 import { t as getTypeId } from "./type-Cf-vxmre.mjs";
 import { test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects, strictEqual, throws } from "node:assert/strict";

package/dist-tests/{deno-6CUIKmD6.mjs → deno-CE8IFnvm.mjs}

@@ -1,6 +1,6 @@
 import "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { M as __commonJSMin, P as __toESM } from "./vocab-DTY3b5Yj.mjs";
+import { M as __commonJSMin, P as __toESM } from "./vocab-C6G3QtaR.mjs";
 //#region ../../node_modules/.pnpm/glob-to-regexp@0.4.1/node_modules/glob-to-regexp/index.js
 var require_glob_to_regexp = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = function(glob, opts) {
@@ -1204,6 +1204,6 @@ var esm_default = new class FetchMock {
 //#endregion
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.2.19";
+var version = "2.2.20";
 //#endregion
 export { version as n, esm_default as r, name as t };

package/dist-tests/lookup.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { _ as Object$1, a as Collection, b as Person, g as Note } from "./vocab-DTY3b5Yj.mjs";
-import { n as version, r as esm_default, t as name } from "./deno-6CUIKmD6.mjs";
+import { _ as Object$1, a as Collection, b as Person, g as Note } from "./vocab-C6G3QtaR.mjs";
+import { n as version, r as esm_default, t as name } from "./deno-CE8IFnvm.mjs";
 import { t as getTypeId } from "./type-Cf-vxmre.mjs";
 import { t as assertInstanceOf } from "./utils-CE8Dk5hm.mjs";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
@@ -220,10 +220,12 @@ async function* traverseCollection(collection, options = {}) {
 }
 //#endregion
 //#region src/lookup.test.ts
+const allowPrivateAddress = { allowPrivateAddress: true };
 test("lookupObject()", {
 	sanitizeResources: false,
 	sanitizeOps: false
 }, async (t) => {
+	const responseTimers = [];
 	esm_default.spyGlobal();
 	esm_default.get("begin:https://example.com/.well-known/webfinger", {
 		subject: "acct:johndoe@example.com",
@@ -247,7 +249,8 @@ test("lookupObject()", {
 	});
 	const options = {
 		documentLoader: mockDocumentLoader,
-		contextLoader: mockDocumentLoader
+		contextLoader: mockDocumentLoader,
+		...allowPrivateAddress
 	};
 	await t.step("actor", async () => {
 		const person = await lookupObject("@johndoe@example.com", options);
@@ -286,7 +289,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("begin:https://example.com/.well-known/webfinger", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				subject: "acct:johndoe@example.com",
 				links: [{
@@ -295,7 +298,7 @@ test("lookupObject()", {
 					type: "application/activity+json"
 				}]
 			});
-		}, 1e3);
+		}, 1e3));
 	}));
 	await t.step("request cancellation", async () => {
 		const controller = new AbortController();
@@ -326,7 +329,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("begin:https://example.com/.well-known/webfinger", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				subject: "acct:johndoe@example.com",
 				links: [{
@@ -335,7 +338,7 @@ test("lookupObject()", {
 					type: "application/activity+json"
 				}]
 			});
-		}, 500);
+		}, 500));
 	}));
 	await t.step("cancellation with immediate abort", async () => {
 		const controller = new AbortController();
@@ -347,7 +350,7 @@ test("lookupObject()", {
 	});
 	esm_default.removeRoutes({ includeFallback: false });
 	esm_default.get("https://example.com/slow-object", () => new Promise((resolve) => {
-		setTimeout(() => {
+		responseTimers.push(setTimeout(() => {
 			resolve({
 				status: 200,
 				headers: { "Content-Type": "application/activity+json" },
@@ -357,7 +360,7 @@ test("lookupObject()", {
 					content: "Slow response"
 				}
 			});
-		}, 1e3);
+		}, 1e3));
 	}));
 	await t.step("direct object fetch cancellation", async () => {
 		const controller = new AbortController();
@@ -368,6 +371,7 @@ test("lookupObject()", {
 		controller.abort();
 		deepStrictEqual(await promise, null);
 	});
+	for (const timer of responseTimers) clearTimeout(timer);
 	esm_default.hardReset();
 	esm_default.removeRoutes();
 });
@@ -538,15 +542,18 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 			throw new Error(`Unexpected URL: ${url}`);
 		};
 		deepStrictEqual(await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader
 		}), null);
 		await rejects(() => lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "throw"
 		}), Error, "The object's @id (https://malicious.com/fake-actor) has a different origin than the document URL (https://different-origin.com/actor)");
 		const result2 = await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "trust"
@@ -617,11 +624,20 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 		const errorDocumentLoader = async (_url) => {
 			throw new Error("Network error");
 		};
-		deepStrictEqual(await lookupObject("https://example.com/note", {
-			documentLoader: errorDocumentLoader,
-			contextLoader: mockDocumentLoader,
-			crossOrigin: "throw"
-		}), null);
+		esm_default.spyGlobal();
+		esm_default.get("begin:https://example.com/.well-known/webfinger", 404);
+		let result;
+		try {
+			result = await lookupObject("https://example.com/note", {
+				...allowPrivateAddress,
+				documentLoader: errorDocumentLoader,
+				contextLoader: mockDocumentLoader,
+				crossOrigin: "throw"
+			});
+		} finally {
+			esm_default.hardReset();
+		}
+		deepStrictEqual(result, null);
 	});
 	await t.step("malformed JSON handling with cross-origin policy", async () => {
 		const malformedJsonDocumentLoader = async (url) => {

package/dist-tests/type.test.mjs

@@ -1,6 +1,6 @@
 import "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { A as isEntityType, b as Person, h as Link, k as getEntityTypeById } from "./vocab-DTY3b5Yj.mjs";
+import { A as isEntityType, b as Person, h as Link, k as getEntityTypeById } from "./vocab-C6G3QtaR.mjs";
 import { t as getTypeId } from "./type-Cf-vxmre.mjs";
 import { test } from "@fedify/fixture";
 import { deepStrictEqual } from "node:assert/strict";