@manablox/media 0.2.0 → 0.4.0

package/test/signing.test.ts

@@ -1,37 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { signTransform, transformPath, verifyTransform } from '../src/signing.js';
-
-const SECRET = 'a-signing-secret';
-const request = { assetId: 'asset-1', preset: 'thumb', format: 'webp' };
-
-describe('transform signing', () => {
-  it('verifies a signature it produced', () => {
-    expect(verifyTransform(SECRET, request, signTransform(SECRET, request))).toBe(true);
-  });
-
-  /**
-   * Without a signature, `/media/:id/:preset` is a resize amplifier: a caller can force
-   * an unbounded number of distinct decodes. Each component is bound into the MAC.
-   */
-  it('rejects a signature bound to a different asset, preset or format', () => {
-    const signature = signTransform(SECRET, request);
-    expect(verifyTransform(SECRET, { ...request, assetId: 'asset-2' }, signature)).toBe(false);
-    expect(verifyTransform(SECRET, { ...request, preset: 'hero' }, signature)).toBe(false);
-    expect(verifyTransform(SECRET, { ...request, format: 'avif' }, signature)).toBe(false);
-  });
-
-  it('rejects a signature made with another secret', () => {
-    expect(verifyTransform(SECRET, request, signTransform('other', request))).toBe(false);
-  });
-
-  it('rejects malformed signatures without throwing', () => {
-    for (const value of ['', 'x', 'x'.repeat(200)]) {
-      expect(verifyTransform(SECRET, request, value)).toBe(false);
-    }
-  });
-
-  it('builds a path carrying the signature', () => {
-    const signature = signTransform(SECRET, request);
-    expect(transformPath(request, signature)).toBe(`/media/asset-1/thumb.webp?s=${signature}`);
-  });
-});

package/test/urls.test.ts

@@ -1,39 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { absoluteMediaUrl } from '../src/urls.js';
-
-/**
- * A relative `/media/…` resolves against whatever origin the *browser* is on, which for
- * a delivery consumer is the frontend, not the API. Found by driving `example-plain`
- * against a public instance on another port: every `<img>` 404ed.
- */
-describe('absoluteMediaUrl', () => {
-  it('prefixes a root-relative path with the public origin', () => {
-    expect(absoluteMediaUrl('/media/a1/original', 'https://cms.example.com')).toBe(
-      'https://cms.example.com/media/a1/original',
-    );
-  });
-
-  it('does not double a trailing slash on the base', () => {
-    expect(absoluteMediaUrl('/media/a1/original', 'https://cms.example.com/')).toBe(
-      'https://cms.example.com/media/a1/original',
-    );
-  });
-
-  it('leaves an absolute URL alone, so an S3 or CDN URL survives', () => {
-    const cdn = 'https://cdn.example.com/uploads/a1.jpg';
-    expect(absoluteMediaUrl(cdn, 'https://cms.example.com')).toBe(cdn);
-    expect(absoluteMediaUrl('//cdn.example.com/a1.jpg', 'https://cms.example.com')).toBe(
-      '//cdn.example.com/a1.jpg',
-    );
-  });
-
-  it('leaves the URL alone when no public origin is configured', () => {
-    expect(absoluteMediaUrl('/media/a1/original', undefined)).toBe('/media/a1/original');
-  });
-
-  it('preserves a signed transform query', () => {
-    expect(absoluteMediaUrl('/media/a1/card.webp?s=abc', 'https://cms.example.com')).toBe(
-      'https://cms.example.com/media/a1/card.webp?s=abc',
-    );
-  });
-});

package/tsconfig.json

@@ -1 +0,0 @@
-{ "extends": "@manablox/config-typescript/library.json", "include": ["src", "test"] }

package/vitest.config.ts

@@ -1,2 +0,0 @@
-import { defineConfig } from 'vitest/config';
-export default defineConfig({ test: { environment: 'node', include: ['test/**/*.test.ts'] } });