@things-factory/shell 10.1.79 → 10.1.106

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/shell",
-  "version": "10.1.79",
+  "version": "10.1.106",
   "description": "Core module for framework",
   "bin": {
     "things-factory": "bin/things-factory",
@@ -126,5 +126,5 @@
     "pg": "^8.7.3",
     "sqlite3": "^5.0.8"
   },
-  "gitHead": "94cde9ba17dfdddb0a16139b71e5a7e370977e4a"
+  "gitHead": "8d78c14708420773ec32d18b8dd44c300771c44d"
 }

package/tests/domain-middleware-refusal.test.ts

@@ -42,3 +42,29 @@ describe('domain middleware - an address the domain does not let in', () => {
     expect(await run(undefined, '10.0.0.1')).toEqual({ status: 200, headers: {}, passed: true })
   })
 })
+
+describe('domain middleware - privileges the protected list withholds say they were the address', () => {
+  function stateAfter(iplist: any, ip: string) {
+    const context: any = {
+      state: { domain: { id: 'd1', iplist } },
+      req: { headers: { 'x-client-ip': ip }, connection: {}, socket: {} },
+      status: 200,
+      set: () => {}
+    }
+    return domainMiddleware(context, async () => {}).then(() => context.state)
+  }
+
+  const iplist = { protectedlist: ['^10\\.'], privileges: [{ category: 'board', privilege: 'mutation' }] }
+
+  it('★ outside the protected list each withheld privilege carries by: address (ADR-0103 decision 1)', async () => {
+    const state = await stateAfter(iplist, '192.168.0.9')
+    expect(state.unsafeIP).toBe(true)
+    expect(state.prohibitedPrivileges).toEqual([{ category: 'board', privilege: 'mutation', by: 'address' }])
+  })
+
+  it('inside the protected list nothing is withheld', async () => {
+    const state = await stateAfter(iplist, '10.0.0.1')
+    expect(state.unsafeIP).toBe(false)
+    expect(state.prohibitedPrivileges).toBeUndefined()
+  })
+})