@kalisio/kdk 2.6.3 → 2.7.0

package/test/api/core/users.test.js

@@ -0,0 +1,384 @@
+import _ from 'lodash'
+import authentication from '@feathersjs/authentication'
+import commonHooks from 'feathers-hooks-common'
+import request from 'superagent'
+import chai from 'chai'
+import chailint from 'chai-lint'
+import core, { kdk, hooks } from '../../../core/api/index.js'
+
+const { authenticate } = authentication.hooks
+const { util, expect } = chai
+const { iff, disallow, isProvider, keep, discard } = commonHooks
+const { isNotMe, onlyMe, preventChanges } = hooks
+
+describe('core:users', () => {
+  let app, server, port, baseUrl, userIdAccessToken, emailAccessToken, phoneAccessToken, statelessAccessToken, adminAccessToken,
+    userService, userObject, anotherUserObject, authenticationService
+
+  before(async () => {
+    chailint(chai, util)
+
+    app = kdk()
+    port = app.get('port')
+    baseUrl = `http://localhost:${port}${app.get('apiPath')}`
+    await app.db.connect()
+    await app.db.instance.dropDatabase()
+  })
+
+  it('registers the services', async () => {
+    await app.configure(core)
+    authenticationService = app.getService('authentication')
+    expect(authenticationService).toExist()
+    userService = app.getService('users')
+    expect(userService).toExist()
+    // Register hooks, what we'd like is a configuration so that:
+    // - information disclosure about internal user secrets like password is not permitted
+    // - information disclosure about others users is not permitted for a given user unless it has 'administrator' permissions
+    // - privilege escalation is not permitted for a given user
+    // - user with 'administrator' permissions can change others user permissions
+    // - changing others users information is not permitted for a given user unless it has 'administrator' permissions
+    // - external calls can only target myself except if I have administrator permissions
+    const isNotAdministrator = (context) => {
+      const userPermissions = _.get(context.params, 'user.permissions')
+      return userPermissions !== 'administrator'
+    }
+    userService.hooks({
+      before: {
+        all: authenticate('jwt'),
+        get: [iff(isNotMe(), disallow('external'))],
+        find: [iff(isProvider('external'), iff(isNotAdministrator, onlyMe()))],
+        create: [iff(isProvider('external'), keep('name', 'email', 'profile', 'password'))],
+        update: [disallow('external')],
+        patch: [iff(isProvider('external'), iff(isNotAdministrator, onlyMe(), preventChanges(true, ['permissions'])))],
+        remove: [iff(isProvider('external'), iff(isNotAdministrator, onlyMe()))]
+      },
+      after: {
+        all: [iff(isProvider('external'), iff(isNotMe(), iff(isNotAdministrator, discard('permissions'))))]
+      }
+    })
+    // Now app is configured launch the server
+    server = await app.listen(port)
+    await new Promise(resolve => server.once('listening', resolve))
+  })
+  // Let enough time to process
+    .timeout(10000)
+
+  it('creates users and tokens with different subject identifiers', async () => {
+    userObject = await userService.create({
+      email: 'test@test.org',
+      name: 'test user',
+      permissions: 'user',
+      profile: { phone: '0623256968' }
+    })
+    userIdAccessToken = await authenticationService.createAccessToken({
+      sub: userObject._id
+    })
+    emailAccessToken = await authenticationService.createAccessToken({
+      sub: userObject.email
+    })
+    phoneAccessToken = await authenticationService.createAccessToken({
+      sub: userObject.profile.phone
+    })
+    statelessAccessToken = await authenticationService.createAccessToken({
+      property: 'mycustomproperty'
+    }, {
+      subject: 'mycustomapp'
+    })
+    anotherUserObject = await userService.create({
+      email: 'another_test@test.org',
+      name: 'another test user',
+      permissions: 'administrator',
+      profile: { phone: '0623256969' }
+    })
+    adminAccessToken = await authenticationService.createAccessToken({
+      sub: anotherUserObject._id
+    })
+  })
+
+  it('checks all user tokens are recognized', async () => {
+    let response = await request
+      .post(`${baseUrl}/authentication`)
+      .send({ accessToken: userIdAccessToken, strategy: 'jwt' })
+    let accessToken = response.body.accessToken
+    let user = response.body.user
+    expect(accessToken).toExist()
+    expect(accessToken).not.to.equal(userIdAccessToken)
+    expect(user).toExist()
+    response = await request
+      .post(`${baseUrl}/authentication`)
+      .send({ accessToken: emailAccessToken, strategy: 'jwt' })
+    accessToken = response.body.accessToken
+    user = response.body.user
+    expect(accessToken).toExist()
+    expect(accessToken).not.to.equal(emailAccessToken)
+    expect(user).toExist()
+    response = await request
+      .post(`${baseUrl}/authentication`)
+      .send({ accessToken: phoneAccessToken, strategy: 'jwt' })
+    accessToken = response.body.accessToken
+    user = response.body.user
+    expect(accessToken).toExist()
+    expect(accessToken).not.to.equal(phoneAccessToken)
+    expect(user).toExist()
+    response = await request
+      .post(`${baseUrl}/authentication`)
+      .send({ accessToken: statelessAccessToken, strategy: 'jwt' })
+    accessToken = response.body.accessToken
+    user = response.body.user
+    expect(accessToken).toExist()
+    expect(accessToken).not.to.equal(statelessAccessToken)
+    expect(user).beUndefined()
+  })
+
+  it('checks for user information disclosure', async () => {
+    // Should not retrieve internal user secret information like password in any case
+    // Should not list others users in case of requests with identified user
+    let response = await request
+      .get(`${baseUrl}/users`)
+      .set('Authorization', 'Bearer ' + userIdAccessToken)
+    let users = response.body.data
+    expect(users.length).to.equal(1)
+    let user = users[0]
+    expect(user._id).to.equal(userObject._id.toString())
+    expect(user.password).beUndefined()
+    expect(user.previousPasswords).beUndefined()
+    expect(user.permissions).toExist()
+    response = await request
+      .get(`${baseUrl}/users`)
+      .set('Authorization', 'Bearer ' + emailAccessToken)
+    users = response.body.data
+    expect(users.length).to.equal(1)
+    user = users[0]
+    expect(user._id).to.equal(userObject._id.toString())
+    expect(user.password).beUndefined()
+    expect(user.previousPasswords).beUndefined()
+    expect(user.permissions).toExist()
+    response = await request
+      .get(`${baseUrl}/users`)
+      .set('Authorization', 'Bearer ' + phoneAccessToken)
+    users = response.body.data
+    expect(users.length).to.equal(1)
+    user = users[0]
+    expect(user._id).to.equal(userObject._id.toString())
+    expect(user.password).beUndefined()
+    expect(user.previousPasswords).beUndefined()
+    expect(user.permissions).toExist()
+    // Should not list users in case of request without identified user
+    try {
+      response = await request
+        .get(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + statelessAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('MethodNotAllowed')).beTrue()
+    }
+    /*
+    response = await request
+      .get(`${baseUrl}/users`)
+      .set('Authorization', 'Bearer ' + statelessAccessToken)
+    users = response.body.data
+    expect(users.length).to.equal(2)
+    user = users[0]
+    expect(user._id).to.equal(userObject._id.toString())
+    expect(user.password).beUndefined()
+    expect(user.previousPasswords).beUndefined()
+    expect(user.permissions).beUndefined()
+    user = users[1]
+    expect(user._id).to.equal(anotherUserObject._id.toString())
+    expect(user.password).beUndefined()
+    expect(user.previousPasswords).beUndefined()
+    expect(user.permissions).beUndefined()
+    */
+    // Should not get others users in case of requests with identified user
+    try {
+      response = await request
+        .get(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + userIdAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('MethodNotAllowed')).beTrue()
+    }
+    try {
+      response = await request
+        .get(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + emailAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('MethodNotAllowed')).beTrue()
+    }
+    try {
+      response = await request
+        .get(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + phoneAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('MethodNotAllowed')).beTrue()
+    }
+    try {
+      response = await request
+        .get(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + statelessAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('MethodNotAllowed')).beTrue()
+    }
+  })
+
+  it('checks for user information integrity', async () => {
+    // Should not be able to update information of others users if not administrator
+    try {
+      await request
+        .patch(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + userIdAccessToken)
+        .send({ name: 'new name' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('NotFound')).beTrue()
+    }
+    try {
+      await request
+        .patch(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + emailAccessToken)
+        .send({ name: 'new name' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('NotFound')).beTrue()
+    }
+    try {
+      await request
+        .patch(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + phoneAccessToken)
+        .send({ name: 'new name' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('NotFound')).beTrue()
+    }
+    try {
+      await request
+        .patch(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + statelessAccessToken)
+        .send({ name: 'new name' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('Forbidden')).beTrue()
+    }
+    // Should be possible otherwise
+    const response = await request
+      .patch(`${baseUrl}/users/${userObject._id}`)
+      .set('Authorization', 'Bearer ' + adminAccessToken)
+      .send({ name: 'new name' })
+    const user = response.body
+    expect(user.name).to.equal('new name')
+  })
+
+  it('checks for user privilege escalation', async () => {
+    // Should not be able to upgrade user permissions when not administrator
+    try {
+      await request
+        .patch(`${baseUrl}/users/${userObject._id}`)
+        .set('Authorization', 'Bearer ' + userIdAccessToken)
+        .send({ permissions: 'administrator' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('BadRequest')).beTrue()
+    }
+    try {
+      await request
+        .patch(`${baseUrl}/users/${userObject._id}`)
+        .set('Authorization', 'Bearer ' + emailAccessToken)
+        .send({ permissions: 'administrator' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('BadRequest')).beTrue()
+    }
+    try {
+      await request
+        .patch(`${baseUrl}/users/${userObject._id}`)
+        .set('Authorization', 'Bearer ' + phoneAccessToken)
+        .send({ permissions: 'administrator' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('BadRequest')).beTrue()
+    }
+    try {
+      await request
+        .patch(`${baseUrl}/users/${userObject._id}`)
+        .set('Authorization', 'Bearer ' + statelessAccessToken)
+        .send({ permissions: 'administrator' })
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('Forbidden')).beTrue()
+    }
+    // Should be possible otherwise
+    const response = await request
+      .patch(`${baseUrl}/users/${userObject._id}`)
+      .set('Authorization', 'Bearer ' + adminAccessToken)
+      .send({ permissions: 'manager' })
+    const user = response.body
+    expect(user.permissions).to.equal('manager')
+  })
+
+  it('checks users removal', async () => {
+    // Should not be able to remove others users if not administrator
+    try {
+      await request
+        .delete(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + userIdAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('NotFound')).beTrue()
+    }
+    try {
+      await request
+        .delete(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + emailAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('NotFound')).beTrue()
+    }
+    try {
+      await request
+        .delete(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + phoneAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('NotFound')).beTrue()
+    }
+    try {
+      await request
+        .delete(`${baseUrl}/users/${anotherUserObject._id}`)
+        .set('Authorization', 'Bearer ' + statelessAccessToken)
+    } catch (error) {
+      // Not sure why but in this case the raised error is in text/html format
+      expect(error.status).to.equal(500)
+      expect(error.response.text.includes('Forbidden')).beTrue()
+    }
+    await userService.remove(userObject._id)
+    await userService.remove(anotherUserObject._id)
+  })
+  // Let enough time to process
+    .timeout(5000)
+
+  // Cleanup
+  after(async () => {
+    if (server) await server.close()
+    await app.db.instance.dropDatabase()
+    await app.db.disconnect()
+  })
+})

package/test/api/map/grid-sources.test.js

@@ -276,7 +276,7 @@ describe('map:grid-source', () => {
 
     it('is possible to create a Weacast source from makeGridSource', () => {
       const [key, conf] = extractGridSourceConfig(weacastOptions)
-      source = makeGridSource(key, { weacastApi: weacastOptions.weacastApi })
+      source = makeGridSource(key, { planetApi: weacastOptions.weacastApi })
       expect(source).to.exist
       expect(conf).to.deep.equal(weacastOptions.weacast)
       sourceConfig = conf

package/test/api/map/test-log-2026-03-10.log

@@ -0,0 +1,56 @@
+{"level":"info","message":"Logger configured"}
+{"level":"info","message":"Initializing weacast-gfs plugin"}
+{"level":"info","message":"Initializing gfs-world forecast"}
+{"level":"info","message":"Checking for up-to-date forecast data on gfs-world/u-wind"}
+{"level":"info","message":"Checking for up-to-date forecast data on gfs-world/v-wind"}
+{"level":"error","message":"Could not update gfs-world/v-wind forecast at 2026-03-10T06:00:00Z for run 2026-03-10T00:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/v-wind/2026-03-10_00-00-00_2026-03-10_06-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/u-wind forecast at 2026-03-10T06:00:00Z for run 2026-03-10T00:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/u-wind/2026-03-10_00-00-00_2026-03-10_06-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/v-wind forecast at 2026-03-10T06:00:00Z for run 2026-03-09T18:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/v-wind/2026-03-09_18-00-00_2026-03-10_06-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/u-wind forecast at 2026-03-10T06:00:00Z for run 2026-03-09T18:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/u-wind/2026-03-09_18-00-00_2026-03-10_06-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/v-wind forecast at 2026-03-10T06:00:00Z for run 2026-03-09T12:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/v-wind/2026-03-09_12-00-00_2026-03-10_06-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/u-wind forecast at 2026-03-10T06:00:00Z for run 2026-03-09T12:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/u-wind/2026-03-09_12-00-00_2026-03-10_06-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/v-wind forecast at 2026-03-10T09:00:00Z for run 2026-03-10T00:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/v-wind/2026-03-10_00-00-00_2026-03-10_09-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/u-wind forecast at 2026-03-10T09:00:00Z for run 2026-03-10T00:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/u-wind/2026-03-10_00-00-00_2026-03-10_09-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/v-wind forecast at 2026-03-10T09:00:00Z for run 2026-03-09T18:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/v-wind/2026-03-09_18-00-00_2026-03-10_09-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/v-wind forecast at 2026-03-10T09:00:00Z for run 2026-03-09T12:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/v-wind/2026-03-09_12-00-00_2026-03-10_09-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"info","message":"Completed forecast data update on gfs-world/v-wind"}
+{"level":"error","message":"Could not update gfs-world/u-wind forecast at 2026-03-10T09:00:00Z for run 2026-03-09T18:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/u-wind/2026-03-09_18-00-00_2026-03-10_09-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"error","message":"Could not update gfs-world/u-wind forecast at 2026-03-10T09:00:00Z for run 2026-03-09T12:00:00Z"}
+{"level":"error","message":"Command failed: /home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json --data /home/robin/Taff/kalisio/kdk/test/api/map/forecast-data/gfs-world/u-wind/2026-03-09_12-00-00_2026-03-10_09-00-00.grib\n/home/robin/Taff/kalisio/kdk/node_modules/@weacast/grib2json/bin/grib2json: 3: /bin/java: not found\n"}
+{"level":"info","message":"Completed forecast data update on gfs-world/u-wind"}
+{"level":"error","message":"Cannot check alert 69afde354d314fa3bd9e24a8 as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afde354d314fa3bd9e24a8 as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afde354d314fa3bd9e24a8 as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afde444d314fa3bd9e24a9 as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afde444d314fa3bd9e24a9 as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afde444d314fa3bd9e24a9 as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afde534d314fa3bd9e24aa as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afde724d314fa3bd9e29ed as no data is available for features service vigicrues-observations"}
+{"level":"error","message":"error: api/catalog - Method: create: Object with name equals to dummy already exist for service catalog"}
+{"level":"info","message":"Logger configured"}
+{"level":"error","message":"error: api/vigicrues-observations - Method: find: You are not allowed to use $accumulator operator"}
+{"level":"error","message":"error: api/vigicrues-observations - Method: find: You are not allowed to use $function operator"}
+{"level":"info","message":"Logger configured"}
+{"level":"info","message":"Initializing weacast-gfs plugin"}
+{"level":"info","message":"Initializing gfs-world forecast"}
+{"level":"info","message":"Checking for up-to-date forecast data on gfs-world/u-wind"}
+{"level":"info","message":"Checking for up-to-date forecast data on gfs-world/v-wind"}
+{"level":"info","message":"Completed forecast data update on gfs-world/v-wind"}
+{"level":"info","message":"Completed forecast data update on gfs-world/u-wind"}
+{"level":"error","message":"Cannot check alert 69afe195ae25fbb35c793f22 as no data is available for gfs-world"}
+{"level":"error","message":"Cannot check alert 69afe1b3ae25fbb35c794465 as no data is available for features service vigicrues-observations"}
+{"level":"error","message":"error: api/catalog - Method: create: Object with name equals to dummy already exist for service catalog"}
+{"level":"info","message":"Logger configured"}
+{"level":"error","message":"error: api/vigicrues-observations - Method: find: You are not allowed to use $accumulator operator"}
+{"level":"error","message":"error: api/vigicrues-observations - Method: find: You are not allowed to use $function operator"}

package/vite/package.json

@@ -37,6 +37,7 @@
     "node": ">= 16.0.0"
   },
   "scripts": {
+    "fix-protomaps-leaflet": "fix-esm-import-path node_modules/protomaps-leaflet/dist/index.js",
     "build:app": "cross-env BUILD_MODE=app vite build",
     "build:app:globe": "cross-env BUILD_MODE=app GLOBE=1 vite build",
     "extras:css": "shx mkdir -p ../client/css && shx cp -R ../extras/css/* ../client/css",
@@ -47,7 +48,9 @@
     "build:lib:globe:debug": "cross-env BUILD_MODE=lib GLOBE=1 DEBUG=1 vite build",
     "build:lib": "cross-env BUILD_MODE=lib vite build",
     "build:lib:globe": "cross-env BUILD_MODE=lib GLOBE=1 vite build",
-    "build:libs": "npm run build:lib:extras && npm run build:lib:debug && npm run build:lib:globe:debug && npm run build:lib && npm run build:lib:globe",
+    "build:libs": "npm run build:lib:extras && npm run build:lib:debug && npm run build:lib:globe:debug && npm run fix-protomaps-leaflet && npm run build:lib && npm run build:lib:globe",
+    "test:core": "vitest --run --dir test/core",
+    "test": "npm-run-all --serial test:**",
     "dev": "vite dev",
     "dev:globe": "cross-env GLOBE=1 vite dev"
   },
@@ -84,8 +87,9 @@
     "@thumbmarkjs/thumbmarkjs": "^0.16.1",
     "@tmcw/togeojson": "^4.5.0",
     "@turf/turf": "^6.5.0",
-    "@weacast/core": "^2.2.1",
     "@vitejs/plugin-vue": "^6.0.0",
+    "@vue/test-utils": "^2.4.6",
+    "@weacast/core": "^2.2.1",
     "abort-controller": "^3.0.0",
     "ajv": "^8.12.0",
     "ajv-formats": "^2.1.1",
@@ -107,6 +111,7 @@
     "debug": "^4.1.0",
     "email-validator": "^2.0.4",
     "feathers-reactive": "^0.11.0",
+    "fix-esm-import-path": "^1.10.0",
     "formatcoords": "^1.1.3",
     "fs-extra": "^8.1.0",
     "geotiff": "^2.1.3",
@@ -115,11 +120,13 @@
     "iso8601-js-period": "^0.2.1",
     "jquery": "^3.2.1",
     "js-yaml": "^3.13.1",
+    "jsdom": "^27.3.0",
     "jsts": "^2.12.1",
     "jwt-decode": "^3.1.2",
     "leaflet": "1.6.0",
     "leaflet-arrowheads": "^1.4.0",
     "leaflet-fullscreen": "^1.0.2",
+    "leaflet-gesture-handling": "^1.2.2",
     "leaflet-heatmap": "^1.0.0",
     "leaflet-pixi-overlay": "1.9.3",
     "leaflet-realtime": "^2.2.0",
@@ -140,6 +147,7 @@
     "moment": "^2.29.3",
     "moment-timezone": "^0.5.35",
     "node-fetch": "^2.6.7",
+    "npm-run-all": "^4.1.1",
     "papaparse": "^5.3.2",
     "path-browserify": "^1.0.1",
     "pinch-zoom-element": "^1.1.1",
@@ -162,6 +170,7 @@
     "vite": "^7.0.6",
     "vite-plugin-node-polyfills": "^0.24.0",
     "vite-plugin-static-copy": "^3.1.1",
+    "vitest": "^4.0.15",
     "vue": "3.2.45",
     "vue-i18n": "^9.2.0-beta.35",
     "vue-router": "4.1.3",

package/vite/test/core/composables.test.js

@@ -0,0 +1,77 @@
+import { ref } from 'vue'
+import { feathers } from '@feathersjs/feathers'
+import { rx } from 'feathers-reactive'
+import { memory } from '@feathersjs/memory'
+import { describe, it, expect, beforeAll, afterAll, vi } from 'vitest'
+import { flushPromises } from '@vue/test-utils'
+import { kdkCore, kdkMap } from '../../../client/kdk.client.map.js'
+
+describe('core:composables', () => {
+  let client
+  const nbItemsPerPage = ref(2)
+  const baseQuery = ref({ $sort: { _id: 1 } })
+  const filterQuery = ref({})
+  const getService = ref(() => client.service('/messages'))
+
+  beforeAll(() => {
+    client = feathers()
+      .configure(rx({ idField: '_id' }))
+    const service = memory({
+      id: '_id',
+      store: {
+        0: { _id: 1, name: 'xxx' },
+        1: { _id: 2, name: 'yyy' },
+        2: { _id: 3, name: 'zzz' }
+      },
+      paginate: { default: 5, max: 5 }
+    })
+    client.use('/messages', service).hooks({
+      before: {
+        // Required as some options like $locale are only supported by server-side services
+        all: [kdkCore.hooks.removeServerSideParameters]
+      }
+    })
+  })
+
+  it('refresh collection in paginated mode', async () => {
+    const { items, currentPage, refreshCollection } = kdkCore.composables.useCollection({
+      nbItemsPerPage, baseQuery, filterQuery, getService
+    })
+    refreshCollection()
+    await vi.waitFor(() => {
+      expect(items.value).to.deep.equal([{ _id: 1, name: 'xxx' }, { _id: 2, name: 'yyy' }])
+    })
+    currentPage.value++
+    refreshCollection()
+    await vi.waitFor(() => {
+      expect(items.value).to.deep.equal([{ _id: 3, name: 'zzz' }])
+    })
+    filterQuery.value = { name: 'yyy' }
+    await vi.waitFor(() => {
+      expect(items.value).to.deep.equal([{ _id: 2, name: 'yyy' }])
+    })
+  })
+
+  it('refresh collection in append mode', async () => {
+    // Reset any filter
+    filterQuery.value = {}
+    const { items, currentPage, refreshCollection } = kdkCore.composables.useCollection({
+      nbItemsPerPage, baseQuery, filterQuery, getService, appendItems: ref(true)
+    })
+    refreshCollection()
+    await vi.waitFor(() => {
+      expect(items.value).to.deep.equal([{ _id: 1, name: 'xxx' }, { _id: 2, name: 'yyy' }])
+    })
+    currentPage.value++
+    refreshCollection()
+    await vi.waitFor(() => {
+      expect(items.value).to.deep.equal([{ _id: 1, name: 'xxx' }, { _id: 2, name: 'yyy' }, { _id: 3, name: 'zzz' }])
+    })
+    filterQuery.value = { name: 'yyy' }
+    await vi.waitFor(() => {
+      expect(items.value).to.deep.equal([{ _id: 2, name: 'yyy' }])
+    })
+  })
+
+  afterAll(() => {})
+})

package/vite/vitest.config.js

@@ -0,0 +1,13 @@
+import { defineConfig, mergeConfig } from 'vite'
+import viteConfig from './vite.config'
+import 'vitest/config'
+
+export default mergeConfig(
+  viteConfig,
+  defineConfig({
+    test: {
+      environment: 'jsdom',
+      disableConsoleIntercept: true
+    }
+  })
+)