@nocobase/app-template-default 1.0.0-beta.87 → 1.0.0-beta.89

package/tests/server/notification-templates.test.ts

@@ -0,0 +1,144 @@
+import { randomUUID } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import {
+  signIn,
+  DEFAULT_ADMIN_CREDENTIALS,
+} from '@nocobase/app-plugin-authentication/testing';
+import { createAppTest } from '@nocobase/app-testing/server';
+import { describe, expect } from 'vitest';
+import { createStandaloneServer } from '../../server/standalone.js';
+
+const common = {
+  createServer: createStandaloneServer,
+  scope: 'test' as const,
+  config: {
+    app: { publicOrigin: 'http://localhost' },
+    spa: {
+      indexPath: fileURLToPath(new URL('../../index.html', import.meta.url)),
+    },
+    auth: {
+      secret: 'notification-template-test-secret-at-least-32-characters',
+    },
+  },
+};
+describe('bare Default', () => {
+  const test = createAppTest(common);
+  test('keeps the bare Default navigation disabled without an invitation transport', async ({
+    app,
+  }) => {
+    expect(
+      app.config.get('client.notificationTemplates.invitationConfigured'),
+    ).toBe(false);
+  });
+});
+describe('configured Default', () => {
+  const test = createAppTest({
+    ...common,
+    config: {
+      ...common.config,
+      mailers: {
+        default: 'system',
+        system: {
+          provider: 'smtp',
+          host: '127.0.0.1',
+          port: 9,
+          auth: { user: 'synthetic', pass: 'synthetic-private-password' },
+        },
+      },
+    },
+  });
+
+  test('boots the real Default invitation directory and protects all three endpoints', async ({
+    testApp,
+    app,
+    request,
+  }) => {
+    expect(
+      app.config.get('client.notificationTemplates.invitationConfigured'),
+    ).toBe(true);
+    const page = await testApp.fetch(
+      new Request(`http://localhost${testApp.publicBasePath}/`),
+    );
+    expect(page.status).toBe(200);
+    const html = await page.text();
+    expect(html).toContain('"invitationConfigured":true');
+    expect(html).not.toContain('synthetic-private-password');
+    const admin = await signIn(testApp, DEFAULT_ADMIN_CREDENTIALS);
+    expect((await request('/notifications/templates')).status).toBe(401);
+    const list = await admin.fetch('/notifications/templates');
+    expect(list.status).toBe(200);
+    const body = await list.json();
+    expect(JSON.stringify(body)).not.toContain('synthetic-private-password');
+    expect(body.data).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          id: 'users.invitation',
+          channels: [
+            { name: 'system', type: 'email', configured: true, enabled: true },
+          ],
+        }),
+      ]),
+    );
+    const detail = await admin.fetch(
+      '/notifications/templates/users.invitation',
+    );
+    expect(detail.status).toBe(200);
+    const logsBefore = await (await admin.fetch('/notifications/logs')).json();
+    const preview = await admin.fetch(
+      '/notifications/templates/users.invitation/preview',
+      {
+        method: 'POST',
+        headers: {
+          origin: 'http://localhost',
+          'content-type': 'application/json',
+        },
+        body: JSON.stringify({ locale: 'en-US' }),
+      },
+    );
+    expect(preview.status).toBe(200);
+    expect(JSON.stringify(await preview.json())).toContain('example.invalid');
+    expect(await (await admin.fetch('/notifications/logs')).json()).toEqual(
+      logsBefore,
+    );
+    const member = {
+      username: 'templateviewer',
+      email: 'templateviewer@example.invalid',
+      password: 'Synthetic-template-viewer-943!',
+    };
+    const created = await admin.fetch('/users', {
+      method: 'POST',
+      headers: {
+        origin: 'http://localhost',
+        'content-type': 'application/json',
+        'Idempotency-Key': `${Date.now()}.${randomUUID()}`,
+      },
+      body: JSON.stringify({
+        ...member,
+        name: 'Synthetic restricted viewer',
+        roleScopes: {},
+      }),
+    });
+    expect(created.status).toBe(201);
+    const restricted = await signIn(testApp, member);
+    for (const endpoint of [
+      '',
+      '/users.invitation',
+      '/users.invitation/preview',
+    ]) {
+      const response = await restricted.fetch(
+        `/notifications/templates${endpoint}`,
+        endpoint.endsWith('/preview')
+          ? {
+              method: 'POST',
+              headers: {
+                origin: 'http://localhost',
+                'content-type': 'application/json',
+              },
+              body: JSON.stringify({ locale: 'en-US' }),
+            }
+          : undefined,
+      );
+      expect(response.status).toBe(403);
+    }
+  });
+});

package/tests/client/permission-management-routes.test.ts

@@ -1,64 +0,0 @@
-import { resolveAppClientContributions } from '@nocobase/app-client/plugins';
-import { expect, it } from 'vitest';
-import settings from '../../client/pages/settings/routes.js';
-import {
-  buildRouteNavigation,
-  selectedNavigationId,
-  routeKey,
-} from '../../client/routing/route-navigation.js';
-it('groups existing permission pages without changing their URLs or authorization and hides inaccessible children', () => {
-  const { routes } = resolveAppClientContributions([
-    { packageName: 'test', source: 'application', routes: [settings] },
-  ]);
-  const group = routes[0].children!.find(
-    (route) => route.name === 'permissionManagement',
-  )!;
-  expect(group.componentLoader).toBeUndefined();
-  expect(
-    group.children!.map((route) => [route.name, route.path, route.authz]),
-  ).toEqual([
-    [
-      'settingsRoles',
-      '/settings/roles',
-      {
-        resource: { type: 'settings', id: 'authorization.permission-sets' },
-        action: 'read',
-      },
-    ],
-    [
-      'settingsDefaultAccess',
-      '/settings/default-access',
-      {
-        resource: { type: 'settings', id: 'authorization.default-access' },
-        action: 'read',
-      },
-    ],
-  ]);
-  const visible = buildRouteNavigation(routes, new Set())[0].children.find(
-    ({ route }) => route.name === 'permissionManagement',
-  )!;
-  expect(visible.children).toEqual([]);
-  expect(visible.route.path).toBe('/settings/roles');
-  expect(visible.route.navigation?.title).toBe('settings.permissionManagement');
-  expect(selectedNavigationId(routes, '/settings/roles/member/edit')).toBe(
-    routeKey(visible.route),
-  );
-  expect(selectedNavigationId(routes, '/settings/default-access')).toBe(
-    routeKey(visible.route),
-  );
-  const denied = new Set([routeKey(group.children![0])]);
-  const onlyDefault = buildRouteNavigation(routes, denied)[0].children.find(
-    ({ route }) => route.name === 'permissionManagement',
-  )!;
-  expect(onlyDefault.children).toEqual([]);
-  expect(onlyDefault.route.path).toBe('/settings/default-access');
-  expect(selectedNavigationId(routes, '/settings/default-access', denied)).toBe(
-    routeKey(onlyDefault.route),
-  );
-  denied.add(routeKey(group.children![1]));
-  expect(
-    buildRouteNavigation(routes, denied)[0].children.map(
-      ({ route }) => route.name,
-    ),
-  ).toEqual(['settingsUsers']);
-});