@oktis-works/api 0.1.4 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +15 -26
- package/dist/index.js.map +1 -1
- package/dist/middleware/auth.d.ts +2 -2
- package/dist/middleware/auth.d.ts.map +1 -1
- package/dist/middleware/auth.js +7 -4
- package/dist/middleware/auth.js.map +1 -1
- package/dist/middleware/csrf.d.ts +10 -6
- package/dist/middleware/csrf.d.ts.map +1 -1
- package/dist/middleware/csrf.js +27 -8
- package/dist/middleware/csrf.js.map +1 -1
- package/dist/routes/audit-logs/index.d.ts +1 -1
- package/dist/routes/audit-logs/index.d.ts.map +1 -1
- package/dist/routes/auth/index.d.ts +1 -1
- package/dist/routes/auth/index.d.ts.map +1 -1
- package/dist/routes/auth/index.js +97 -15
- package/dist/routes/auth/index.js.map +1 -1
- package/dist/routes/builds/index.d.ts +4 -0
- package/dist/routes/builds/index.d.ts.map +1 -0
- package/dist/routes/builds/index.js +45 -0
- package/dist/routes/builds/index.js.map +1 -0
- package/dist/routes/categories/index.d.ts +1 -1
- package/dist/routes/categories/index.d.ts.map +1 -1
- package/dist/routes/content/index.d.ts +1 -1
- package/dist/routes/content/index.d.ts.map +1 -1
- package/dist/routes/content/index.js +86 -1
- package/dist/routes/content/index.js.map +1 -1
- package/dist/routes/content-types/index.d.ts +1 -1
- package/dist/routes/content-types/index.d.ts.map +1 -1
- package/dist/routes/deployments/index.d.ts +1 -1
- package/dist/routes/deployments/index.d.ts.map +1 -1
- package/dist/routes/deployments/index.js +14 -1
- package/dist/routes/deployments/index.js.map +1 -1
- package/dist/routes/docs/index.d.ts +1 -1
- package/dist/routes/docs/index.d.ts.map +1 -1
- package/dist/routes/docs/index.js +1 -0
- package/dist/routes/docs/index.js.map +1 -1
- package/dist/routes/events/index.d.ts +1 -1
- package/dist/routes/events/index.d.ts.map +1 -1
- package/dist/routes/field-groups/index.d.ts +1 -1
- package/dist/routes/field-groups/index.d.ts.map +1 -1
- package/dist/routes/field-types/index.d.ts +1 -1
- package/dist/routes/field-types/index.d.ts.map +1 -1
- package/dist/routes/health/index.d.ts +1 -1
- package/dist/routes/health/index.d.ts.map +1 -1
- package/dist/routes/hooks/index.d.ts +1 -1
- package/dist/routes/hooks/index.d.ts.map +1 -1
- package/dist/routes/media/index.d.ts +1 -1
- package/dist/routes/media/index.d.ts.map +1 -1
- package/dist/routes/media/index.js +135 -19
- package/dist/routes/media/index.js.map +1 -1
- package/dist/routes/menus/index.d.ts +1 -1
- package/dist/routes/menus/index.d.ts.map +1 -1
- package/dist/routes/metrics/index.d.ts +1 -1
- package/dist/routes/metrics/index.d.ts.map +1 -1
- package/dist/routes/pages/index.d.ts +1 -1
- package/dist/routes/pages/index.d.ts.map +1 -1
- package/dist/routes/plugins/index.d.ts +1 -1
- package/dist/routes/plugins/index.d.ts.map +1 -1
- package/dist/routes/posts/index.d.ts +1 -1
- package/dist/routes/posts/index.d.ts.map +1 -1
- package/dist/routes/roles/index.d.ts +1 -1
- package/dist/routes/roles/index.d.ts.map +1 -1
- package/dist/routes/settings/index.d.ts +1 -1
- package/dist/routes/settings/index.d.ts.map +1 -1
- package/dist/routes/shared/content-collection.d.ts.map +1 -1
- package/dist/routes/shared/content-collection.js +4 -0
- package/dist/routes/shared/content-collection.js.map +1 -1
- package/dist/routes/tags/index.d.ts +1 -1
- package/dist/routes/tags/index.d.ts.map +1 -1
- package/dist/routes/taxonomies/index.d.ts +1 -1
- package/dist/routes/taxonomies/index.d.ts.map +1 -1
- package/dist/routes/tenants/index.d.ts +1 -1
- package/dist/routes/tenants/index.d.ts.map +1 -1
- package/dist/routes/themes/index.d.ts +1 -1
- package/dist/routes/themes/index.d.ts.map +1 -1
- package/dist/routes/users/index.d.ts +1 -1
- package/dist/routes/users/index.d.ts.map +1 -1
- package/dist/routes/users/index.js +94 -4
- package/dist/routes/users/index.js.map +1 -1
- package/dist/routes/webhooks/index.d.ts +1 -1
- package/dist/routes/webhooks/index.d.ts.map +1 -1
- package/dist/routes/webhooks/index.js +1 -1
- package/dist/routes/webhooks/index.js.map +1 -1
- package/dist/storage.d.ts +17 -0
- package/dist/storage.d.ts.map +1 -0
- package/dist/storage.js +95 -0
- package/dist/storage.js.map +1 -0
- package/dist/utils/csrf.d.ts +6 -0
- package/dist/utils/csrf.d.ts.map +1 -0
- package/dist/utils/csrf.js +29 -0
- package/dist/utils/csrf.js.map +1 -0
- package/package.json +8 -8
- package/dist/middleware/csrf.test.d.ts +0 -2
- package/dist/middleware/csrf.test.d.ts.map +0 -1
- package/dist/middleware/csrf.test.js +0 -94
- package/dist/middleware/csrf.test.js.map +0 -1
- package/dist/middleware/rate-limit.test.d.ts +0 -2
- package/dist/middleware/rate-limit.test.d.ts.map +0 -1
- package/dist/middleware/rate-limit.test.js +0 -58
- package/dist/middleware/rate-limit.test.js.map +0 -1
- package/dist/middleware/trace.test.d.ts +0 -2
- package/dist/middleware/trace.test.d.ts.map +0 -1
- package/dist/middleware/trace.test.js +0 -27
- package/dist/middleware/trace.test.js.map +0 -1
- package/dist/routes/auth/me.d.ts +0 -4
- package/dist/routes/auth/me.d.ts.map +0 -1
- package/dist/routes/auth/me.js +0 -16
- package/dist/routes/auth/me.js.map +0 -1
- package/dist/routes/metrics/index.test.d.ts +0 -2
- package/dist/routes/metrics/index.test.d.ts.map +0 -1
- package/dist/routes/metrics/index.test.js +0 -64
- package/dist/routes/metrics/index.test.js.map +0 -1
- package/dist/routes/posts/revisions.test.d.ts +0 -2
- package/dist/routes/posts/revisions.test.d.ts.map +0 -1
- package/dist/routes/posts/revisions.test.js +0 -57
- package/dist/routes/posts/revisions.test.js.map +0 -1
|
@@ -1,94 +0,0 @@
|
|
|
1
|
-
// @oktis-works/api - CSRF double-submit (security-001)
|
|
2
|
-
import { describe, it, expect, vi } from 'vitest';
|
|
3
|
-
vi.mock('@oktis-works/core', () => ({
|
|
4
|
-
establishTenantContext: vi.fn(async () => undefined),
|
|
5
|
-
}));
|
|
6
|
-
import { Hono } from 'hono';
|
|
7
|
-
import { csrfMiddleware, issueCsrfToken, CSRF_COOKIE, CSRF_HEADER, isSameOrigin } from './csrf.js';
|
|
8
|
-
function buildApp() {
|
|
9
|
-
const app = new Hono();
|
|
10
|
-
app.use('*', csrfMiddleware);
|
|
11
|
-
app.post('/api/v1/things', (c) => c.json({ ok: true }));
|
|
12
|
-
app.get('/api/v1/things', (c) => c.json({ ok: true }));
|
|
13
|
-
return app;
|
|
14
|
-
}
|
|
15
|
-
describe('csrfMiddleware', () => {
|
|
16
|
-
it('GET passa sem validação', async () => {
|
|
17
|
-
const res = await buildApp().request('/api/v1/things');
|
|
18
|
-
expect(res.status).toBe(200);
|
|
19
|
-
});
|
|
20
|
-
it('POST com Bearer token fica isento (API-first)', async () => {
|
|
21
|
-
const res = await buildApp().request('/api/v1/things', {
|
|
22
|
-
method: 'POST',
|
|
23
|
-
headers: { Authorization: 'Bearer abc' },
|
|
24
|
-
});
|
|
25
|
-
expect(res.status).toBe(200);
|
|
26
|
-
});
|
|
27
|
-
it('POST com cookie de sessão sem header CSRF é bloqueado', async () => {
|
|
28
|
-
const res = await buildApp().request('/api/v1/things', {
|
|
29
|
-
method: 'POST',
|
|
30
|
-
headers: { Cookie: `session=abc; ${CSRF_COOKIE}=tok-1` },
|
|
31
|
-
});
|
|
32
|
-
expect(res.status).toBe(403);
|
|
33
|
-
const body = (await res.json());
|
|
34
|
-
expect(body.error).toBe('CSRF_TOKEN_INVALID');
|
|
35
|
-
});
|
|
36
|
-
it('POST com cookie + header iguais e mesma origem passa', async () => {
|
|
37
|
-
const res = await buildApp().request('/api/v1/things', {
|
|
38
|
-
method: 'POST',
|
|
39
|
-
headers: {
|
|
40
|
-
Host: 'cms.local',
|
|
41
|
-
Origin: 'https://cms.local',
|
|
42
|
-
Cookie: `session=abc; ${CSRF_COOKIE}=tok-1`,
|
|
43
|
-
[CSRF_HEADER]: 'tok-1',
|
|
44
|
-
},
|
|
45
|
-
});
|
|
46
|
-
expect(res.status).toBe(200);
|
|
47
|
-
});
|
|
48
|
-
it('token divergente ou origem cruzada é rejeitado', async () => {
|
|
49
|
-
const app = buildApp();
|
|
50
|
-
const mismatch = await app.request('/api/v1/things', {
|
|
51
|
-
method: 'POST',
|
|
52
|
-
headers: {
|
|
53
|
-
Host: 'cms.local',
|
|
54
|
-
Origin: 'https://cms.local',
|
|
55
|
-
Cookie: `${CSRF_COOKIE}=tok-1`,
|
|
56
|
-
[CSRF_HEADER]: 'tok-other',
|
|
57
|
-
},
|
|
58
|
-
});
|
|
59
|
-
expect(mismatch.status).toBe(403);
|
|
60
|
-
const crossOrigin = await app.request('/api/v1/things', {
|
|
61
|
-
method: 'POST',
|
|
62
|
-
headers: {
|
|
63
|
-
Host: 'cms.local',
|
|
64
|
-
Origin: 'https://evil.example',
|
|
65
|
-
Cookie: `${CSRF_COOKIE}=tok-1`,
|
|
66
|
-
[CSRF_HEADER]: 'tok-1',
|
|
67
|
-
},
|
|
68
|
-
});
|
|
69
|
-
expect(crossOrigin.status).toBe(403);
|
|
70
|
-
});
|
|
71
|
-
it('issueCsrfToken gera tokens únicos', () => {
|
|
72
|
-
expect(issueCsrfToken()).not.toBe(issueCsrfToken());
|
|
73
|
-
});
|
|
74
|
-
});
|
|
75
|
-
describe('isSameOrigin', () => {
|
|
76
|
-
it('aceita host igual e TRUSTED_ORIGINS', () => {
|
|
77
|
-
const ctx = (origin, host = 'cms.local') => ({
|
|
78
|
-
req: {
|
|
79
|
-
header: (name) => name === 'Origin' ? origin : name === 'Host' ? host : undefined,
|
|
80
|
-
},
|
|
81
|
-
});
|
|
82
|
-
process.env['TRUSTED_ORIGINS'] = 'app.okcms.dev';
|
|
83
|
-
try {
|
|
84
|
-
expect(isSameOrigin(ctx('https://cms.local'))).toBe(true);
|
|
85
|
-
expect(isSameOrigin(ctx('https://app.okcms.dev'))).toBe(true);
|
|
86
|
-
expect(isSameOrigin(ctx(undefined))).toBe(false);
|
|
87
|
-
expect(isSameOrigin(ctx('https://evil.example'))).toBe(false);
|
|
88
|
-
}
|
|
89
|
-
finally {
|
|
90
|
-
delete process.env['TRUSTED_ORIGINS'];
|
|
91
|
-
}
|
|
92
|
-
});
|
|
93
|
-
});
|
|
94
|
-
//# sourceMappingURL=csrf.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"csrf.test.js","sourceRoot":"","sources":["../../src/middleware/csrf.test.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;CACrD,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEnG,SAAS,QAAQ;IACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC7B,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxD,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,WAAW,QAAQ,EAAE;SACzD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,mBAAmB;gBAC3B,MAAM,EAAE,gBAAgB,WAAW,QAAQ;gBAC3C,CAAC,WAAW,CAAC,EAAE,OAAO;aACvB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QAEvB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,mBAAmB;gBAC3B,MAAM,EAAE,GAAG,WAAW,QAAQ;gBAC9B,CAAC,WAAW,CAAC,EAAE,WAAW;aAC3B;SACF,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,GAAG,WAAW,QAAQ;gBAC9B,CAAC,WAAW,CAAC,EAAE,OAAO;aACvB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,CAAC,MAA0B,EAAE,IAAI,GAAG,WAAW,EAAE,EAAE,CAC7D,CAAC;YACC,GAAG,EAAE;gBACH,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CACvB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAClE;SACF,CAAU,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,eAAe,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"rate-limit.test.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,58 +0,0 @@
|
|
|
1
|
-
// @oktis-works/api - Rate limit (rest-api-003)
|
|
2
|
-
import { describe, it, expect, beforeEach, vi } from 'vitest';
|
|
3
|
-
vi.mock('@oktis-works/core', () => ({
|
|
4
|
-
establishTenantContext: vi.fn(async () => undefined),
|
|
5
|
-
}));
|
|
6
|
-
import { Hono } from 'hono';
|
|
7
|
-
import { rateLimitMiddleware, resetRateLimiter, parseRateLimitEnv } from './rate-limit.js';
|
|
8
|
-
function buildApp(max) {
|
|
9
|
-
const app = new Hono();
|
|
10
|
-
app.use('*', rateLimitMiddleware({ max, windowMs: 60_000 }));
|
|
11
|
-
app.get('/api/v1/things', (c) => c.json({ ok: true }));
|
|
12
|
-
app.get('/health', (c) => c.json({ status: 'ok' }));
|
|
13
|
-
return app;
|
|
14
|
-
}
|
|
15
|
-
beforeEach(() => {
|
|
16
|
-
resetRateLimiter();
|
|
17
|
-
});
|
|
18
|
-
describe('parseRateLimitEnv', () => {
|
|
19
|
-
it('lê env com defaults sensatos', () => {
|
|
20
|
-
expect(parseRateLimitEnv({})).toEqual({ max: 300, windowMs: 60_000 });
|
|
21
|
-
expect(parseRateLimitEnv({ RATE_LIMIT_MAX: '10', RATE_LIMIT_WINDOW_SECONDS: '30' })).toEqual({
|
|
22
|
-
max: 10,
|
|
23
|
-
windowMs: 30_000,
|
|
24
|
-
});
|
|
25
|
-
expect(parseRateLimitEnv({ RATE_LIMIT_MAX: 'abc' })).toEqual({ max: 300, windowMs: 60_000 });
|
|
26
|
-
});
|
|
27
|
-
});
|
|
28
|
-
describe('rateLimitMiddleware', () => {
|
|
29
|
-
it('permite até max requisições e devolve 429 + Retry-After na excedente', async () => {
|
|
30
|
-
const app = buildApp(3);
|
|
31
|
-
const headers = { 'X-Tenant-ID': 't1', 'X-Forwarded-For': '10.0.0.1' };
|
|
32
|
-
for (let i = 0; i < 3; i++) {
|
|
33
|
-
const res = await app.request('/api/v1/things', { headers });
|
|
34
|
-
expect(res.status).toBe(200);
|
|
35
|
-
}
|
|
36
|
-
const blocked = await app.request('/api/v1/things', { headers });
|
|
37
|
-
expect(blocked.status).toBe(429);
|
|
38
|
-
expect(Number(blocked.headers.get('Retry-After'))).toBeGreaterThan(0);
|
|
39
|
-
expect(blocked.headers.get('X-RateLimit-Limit')).toBe('3');
|
|
40
|
-
const body = (await blocked.json());
|
|
41
|
-
expect(body.error).toBe('TOO_MANY_REQUESTS');
|
|
42
|
-
});
|
|
43
|
-
it('buckets separados por tenant+IP', async () => {
|
|
44
|
-
const app = buildApp(1);
|
|
45
|
-
const h1 = { 'X-Tenant-ID': 't1', 'X-Forwarded-For': '10.0.0.1' };
|
|
46
|
-
const h2 = { 'X-Tenant-ID': 't2', 'X-Forwarded-For': '10.0.0.2' };
|
|
47
|
-
expect((await app.request('/api/v1/things', { headers: h1 })).status).toBe(200);
|
|
48
|
-
expect((await app.request('/api/v1/things', { headers: h1 })).status).toBe(429);
|
|
49
|
-
expect((await app.request('/api/v1/things', { headers: h2 })).status).toBe(200);
|
|
50
|
-
});
|
|
51
|
-
it('health fica isento do limite', async () => {
|
|
52
|
-
const app = buildApp(1);
|
|
53
|
-
expect((await app.request('/health')).status).toBe(200);
|
|
54
|
-
expect((await app.request('/health')).status).toBe(200);
|
|
55
|
-
expect((await app.request('/health')).status).toBe(200);
|
|
56
|
-
});
|
|
57
|
-
});
|
|
58
|
-
//# sourceMappingURL=rate-limit.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"rate-limit.test.js","sourceRoot":"","sources":["../../src/middleware/rate-limit.test.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAE/C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;CACrD,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE3F,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,gBAAgB,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3F,GAAG,EAAE,EAAE;YACP,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;QAEvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAsB,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;QAElE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChF,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChF,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"trace.test.d.ts","sourceRoot":"","sources":["../../src/middleware/trace.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
// @oktis-works/api - REQ-observability-005: request rastreável via X-Trace-ID
|
|
2
|
-
import { describe, it, expect } from 'vitest';
|
|
3
|
-
import { Hono } from 'hono';
|
|
4
|
-
import { traceMiddleware } from './trace.js';
|
|
5
|
-
const app = () => {
|
|
6
|
-
const a = new Hono();
|
|
7
|
-
a.use('*', traceMiddleware);
|
|
8
|
-
return a;
|
|
9
|
-
};
|
|
10
|
-
describe('traceMiddleware — REQ-observability-005', () => {
|
|
11
|
-
it('gera X-Trace-ID quando o request não traz', async () => {
|
|
12
|
-
const a = app();
|
|
13
|
-
a.get('/', (c) => c.json({ ok: true }));
|
|
14
|
-
const res = await a.request('/');
|
|
15
|
-
expect(res.headers.get('X-Trace-ID')).toBeTruthy();
|
|
16
|
-
expect(res.headers.get('X-Trace-ID')).toHaveLength(36); // UUID
|
|
17
|
-
});
|
|
18
|
-
it('propaga X-Trace-ID recebido do cliente', async () => {
|
|
19
|
-
const a = app();
|
|
20
|
-
a.get('/', (c) => c.json({ traceId: c.get('traceId') }));
|
|
21
|
-
const res = await a.request('/', { headers: { 'X-Trace-ID': 'my-trace-123' } });
|
|
22
|
-
const body = (await res.json());
|
|
23
|
-
expect(body.traceId).toBe('my-trace-123');
|
|
24
|
-
expect(res.headers.get('X-Trace-ID')).toBe('my-trace-123');
|
|
25
|
-
});
|
|
26
|
-
});
|
|
27
|
-
//# sourceMappingURL=trace.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"trace.test.js","sourceRoot":"","sources":["../../src/middleware/trace.test.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,GAAG,GAAG,GAAG,EAAE;IACf,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,SAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QAElE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
package/dist/routes/auth/me.d.ts
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../../../src/routes/auth/me.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,QAAA,MAAM,MAAM,iEAAa,CAAC;AAoB1B,eAAe,MAAM,CAAC"}
|
package/dist/routes/auth/me.js
DELETED
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
import { Hono } from 'hono';
|
|
2
|
-
import { getConnection } from '@oktis-works/database';
|
|
3
|
-
import { authMiddleware } from '../../middleware/auth.js';
|
|
4
|
-
const router = new Hono();
|
|
5
|
-
router.use('*', authMiddleware);
|
|
6
|
-
router.get('/me', async (c) => {
|
|
7
|
-
const userId = c.get('userId');
|
|
8
|
-
const sql = getConnection();
|
|
9
|
-
const result = await sql.unsafe('SELECT id, email, name, avatar, status, last_login_at, created_at, updated_at FROM users WHERE id = $1', [userId]);
|
|
10
|
-
if (result.length === 0) {
|
|
11
|
-
return c.json({ error: 'User not found' }, 404);
|
|
12
|
-
}
|
|
13
|
-
return c.json(result[0]);
|
|
14
|
-
});
|
|
15
|
-
export default router;
|
|
16
|
-
//# sourceMappingURL=me.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"me.js","sourceRoot":"","sources":["../../../src/routes/auth/me.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;AAE1B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AAEhC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAiB,CAAW,CAAC;IAClD,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAC7B,wGAAwG,EACxG,CAAC,MAAM,CAAC,CACT,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../../src/routes/metrics/index.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,64 +0,0 @@
|
|
|
1
|
-
// @oktis-works/api - rotas /metrics e /audit-logs
|
|
2
|
-
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
3
|
-
vi.mock('../../middleware/auth.js', () => ({
|
|
4
|
-
authMiddleware: async (_c, next) => next(),
|
|
5
|
-
requirePermission: () => async (_c, next) => next(),
|
|
6
|
-
}));
|
|
7
|
-
vi.mock('@oktis-works/core', async (importOriginal) => {
|
|
8
|
-
const actual = await importOriginal();
|
|
9
|
-
return {
|
|
10
|
-
...actual,
|
|
11
|
-
auditService: { list: vi.fn(async () => [{ action: 'plugin.install' }]) },
|
|
12
|
-
};
|
|
13
|
-
});
|
|
14
|
-
import metricsRouter from './index.js';
|
|
15
|
-
import auditLogsRouter from '../audit-logs/index.js';
|
|
16
|
-
import { metrics } from '@oktis-works/core';
|
|
17
|
-
beforeEach(() => metrics.reset());
|
|
18
|
-
describe('GET /api/v1/metrics', () => {
|
|
19
|
-
it('retorna formato Prometheus por padrão', async () => {
|
|
20
|
-
metrics.inc('deployments.total', { status: 'active' });
|
|
21
|
-
metrics.gauge('deployment.progress', 100, { deploymentId: 'd1' });
|
|
22
|
-
const res = await metricsRouter.request('/');
|
|
23
|
-
expect(res.status).toBe(200);
|
|
24
|
-
expect(res.headers.get('Content-Type')).toContain('text/plain');
|
|
25
|
-
const body = await res.text();
|
|
26
|
-
expect(body).toContain('# TYPE deployments.total counter');
|
|
27
|
-
expect(body).toContain('deployments.total{status="active"} 1');
|
|
28
|
-
expect(body).toContain('deployment.progress{deploymentId="d1"} 100');
|
|
29
|
-
});
|
|
30
|
-
it('?format=json retorna snapshot estruturado', async () => {
|
|
31
|
-
metrics.inc('x.y');
|
|
32
|
-
const res = await metricsRouter.request('/?format=json');
|
|
33
|
-
const body = (await res.json());
|
|
34
|
-
expect(res.status).toBe(200);
|
|
35
|
-
expect(body.counters[0]).toMatchObject({ name: 'x.y', value: 1 });
|
|
36
|
-
});
|
|
37
|
-
it('escapa aspas em labels no formato Prometheus', async () => {
|
|
38
|
-
metrics.inc('events.consumed', { type: 'say "hi"' });
|
|
39
|
-
const body = await (await metricsRouter.request('/')).text();
|
|
40
|
-
expect(body).toContain('type="say \\"hi\\""');
|
|
41
|
-
});
|
|
42
|
-
});
|
|
43
|
-
describe('GET /api/v1/audit-logs', () => {
|
|
44
|
-
it('repassa filtros de query ao AuditService.list', async () => {
|
|
45
|
-
const res = await auditLogsRouter.request('/?tenantId=t1&resourceType=plugin&action=plugin.install&limit=25');
|
|
46
|
-
const body = (await res.json());
|
|
47
|
-
expect(res.status).toBe(200);
|
|
48
|
-
expect(body.count).toBe(1);
|
|
49
|
-
expect(vi.mocked((await import('@oktis-works/core')).auditService.list).mock.calls.at(-1)?.[0]).toEqual({
|
|
50
|
-
tenantId: 't1',
|
|
51
|
-
resourceType: 'plugin',
|
|
52
|
-
action: 'plugin.install',
|
|
53
|
-
userId: undefined,
|
|
54
|
-
limit: 25,
|
|
55
|
-
});
|
|
56
|
-
});
|
|
57
|
-
it('limit inválido usa default 100', async () => {
|
|
58
|
-
await auditLogsRouter.request('/?limit=abc');
|
|
59
|
-
expect(vi.mocked((await import('@oktis-works/core')).auditService.list).mock.calls.at(-1)?.[0]).toMatchObject({
|
|
60
|
-
limit: 100,
|
|
61
|
-
});
|
|
62
|
-
});
|
|
63
|
-
});
|
|
64
|
-
//# sourceMappingURL=index.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../../src/routes/metrics/index.test.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAElD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,cAAc,EAAE,KAAK,EAAE,EAAW,EAAE,IAAyB,EAAE,EAAE,CAAC,IAAI,EAAE;IACxE,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAW,EAAE,IAAyB,EAAE,EAAE,CAAC,IAAI,EAAE;CAClF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACpD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAsC,CAAC;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAAE;KAC1E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,aAAa,MAAM,YAAY,CAAC;AACvC,OAAO,eAAe,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;AAElC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEnB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoD,CAAC;QAEnF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAErD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9G,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;QAErD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACtG,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAE7C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5G,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"revisions.test.d.ts","sourceRoot":"","sources":["../../../src/routes/posts/revisions.test.ts"],"names":[],"mappings":""}
|
|
@@ -1,57 +0,0 @@
|
|
|
1
|
-
// @oktis-works/api - Revisions endpoints na collection router (posts/pages/CPTs)
|
|
2
|
-
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
3
|
-
import postsRouter from './index.js';
|
|
4
|
-
vi.mock('../../middleware/auth.js', () => ({
|
|
5
|
-
authMiddleware: async (_c, next) => next(),
|
|
6
|
-
requirePermission: () => async (_c, next) => next(),
|
|
7
|
-
}));
|
|
8
|
-
vi.mock('@oktis-works/core', () => ({
|
|
9
|
-
contentService: {
|
|
10
|
-
list: vi.fn(),
|
|
11
|
-
create: vi.fn(),
|
|
12
|
-
getById: vi.fn(async () => ({ id: 'c-1', type: 'post' })),
|
|
13
|
-
update: vi.fn(),
|
|
14
|
-
delete: vi.fn(),
|
|
15
|
-
getRevisions: vi.fn(async () => [
|
|
16
|
-
{ id: 'rev-1', version: 2, title: 'v2' },
|
|
17
|
-
{ id: 'rev-2', version: 1, title: 'v1' },
|
|
18
|
-
]),
|
|
19
|
-
restoreRevision: vi.fn(async (_id, rev) => rev === 'rev-1' ? { id: 'c-1', version: 3, title: 'v2' } : null),
|
|
20
|
-
},
|
|
21
|
-
}));
|
|
22
|
-
import { contentService } from '@oktis-works/core';
|
|
23
|
-
beforeEach(() => vi.clearAllMocks());
|
|
24
|
-
describe('GET /posts/:id/revisions', () => {
|
|
25
|
-
it('lista revisões com count', async () => {
|
|
26
|
-
const res = await postsRouter.request('/c-1/revisions');
|
|
27
|
-
const body = (await res.json());
|
|
28
|
-
expect(res.status).toBe(200);
|
|
29
|
-
expect(body.count).toBe(2);
|
|
30
|
-
expect(contentService.getRevisions).toHaveBeenCalledWith('c-1');
|
|
31
|
-
});
|
|
32
|
-
it('404 para conteúdo de outro tipo', async () => {
|
|
33
|
-
vi.mocked(contentService.getById).mockResolvedValueOnce({ id: 'c-2', type: 'page' });
|
|
34
|
-
const res = await postsRouter.request('/c-2/revisions');
|
|
35
|
-
expect(res.status).toBe(404);
|
|
36
|
-
expect(contentService.getRevisions).not.toHaveBeenCalled();
|
|
37
|
-
});
|
|
38
|
-
});
|
|
39
|
-
describe('POST /posts/:id/revisions/:revisionId/restore', () => {
|
|
40
|
-
it('restaura e retorna o conteúdo atualizado', async () => {
|
|
41
|
-
const res = await postsRouter.request('/c-1/revisions/rev-1/restore', { method: 'POST' });
|
|
42
|
-
const body = (await res.json());
|
|
43
|
-
expect(res.status).toBe(200);
|
|
44
|
-
expect(body.version).toBe(3);
|
|
45
|
-
expect(contentService.restoreRevision).toHaveBeenCalledWith('c-1', 'rev-1');
|
|
46
|
-
});
|
|
47
|
-
it('404 quando a revisão não existe', async () => {
|
|
48
|
-
const res = await postsRouter.request('/c-1/revisions/nope/restore', { method: 'POST' });
|
|
49
|
-
expect(res.status).toBe(404);
|
|
50
|
-
});
|
|
51
|
-
it('400 em erro do serviço', async () => {
|
|
52
|
-
vi.mocked(contentService.restoreRevision).mockRejectedValueOnce(new Error('db down'));
|
|
53
|
-
const res = await postsRouter.request('/c-1/revisions/rev-1/restore', { method: 'POST' });
|
|
54
|
-
expect(res.status).toBe(400);
|
|
55
|
-
});
|
|
56
|
-
});
|
|
57
|
-
//# sourceMappingURL=revisions.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"revisions.test.js","sourceRoot":"","sources":["../../../src/routes/posts/revisions.test.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,WAAW,MAAM,YAAY,CAAC;AAErC,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,cAAc,EAAE,KAAK,EAAE,EAAW,EAAE,IAAyB,EAAE,EAAE,CAAC,IAAI,EAAE;IACxE,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAW,EAAE,IAAyB,EAAE,EAAE,CAAC,IAAI,EAAE;CAClF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,cAAc,EAAE;QACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9B,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;YACxC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;SACzC,CAAC;QACF,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE,CACxD,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAChE;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;AAErC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuC,CAAC;QAEtE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAW,CAAC,CAAC;QAE9F,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAExD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;QAEvD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAEtF,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAE1F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|