acrylblends 0.6.3 → 0.6.4

package/plugins/acryl-router/src/core/middleware/serve-static/index.test.ts

@@ -1,450 +0,0 @@
-import { serveStatic as baseServeStatic } from './index.ts'
-import { Acryl } from '../../app.ts'
-
-describe('Serve Static Middleware with a Blob body', () => {
-  it('Should serve content returned as a Blob', async () => {
-    const app = new Acryl()
-    app.use(
-      '/static/*',
-      baseServeStatic({
-        getContent: async (path) => new Blob([`Hello in ${path}`]),
-      })
-    )
-    const res = await app.request('http://localhost/static/hello.txt')
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('Hello in static/hello.txt')
-  })
-})
-
-describe('Serve Static Middleware', () => {
-  const app = new Acryl()
-  const getContent = vi.fn(async (path) => {
-    if (path.endsWith('not-found.txt')) {
-      return null
-    }
-    return `Hello in ${path}`
-  })
-
-  const serveStatic = baseServeStatic({
-    getContent,
-    isDir: (path) => {
-      if (path === 'static/sub' || path === 'static/hello.world') {
-        return true
-      }
-    },
-    onFound: (path, c) => {
-      if (path.endsWith('hello.html')) {
-        c.header('X-Custom', `Found the file at ${path}`)
-      }
-    },
-  })
-
-  app.get('/static/*', serveStatic)
-
-  beforeEach(() => {
-    getContent.mockClear()
-  })
-
-  it.each(['GET', 'HEAD'])(
-    'Should serve files for %s requests registered with use()',
-    async (method) => {
-      const app = new Acryl().use('/static/*', serveStatic)
-
-      const res = await app.request('/static/hello.html', { method })
-
-      expect(res.status).toBe(200)
-      expect(res.headers.get('Content-Type')).toMatch(/^text\/html/)
-      expect(await res.text()).toBe(method === 'HEAD' ? '' : 'Hello in static/hello.html')
-      expect(getContent).toBeCalledTimes(1)
-    }
-  )
-
-  it.each(['POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS', 'PROPFIND'])(
-    'Should pass %s requests to the next handler without accessing files',
-    async (method) => {
-      const isDir = vi.fn(() => false)
-      const rewriteRequestPath = vi.fn((path: string) => path)
-      const onFound = vi.fn()
-      const onNotFound = vi.fn()
-      const app = new Acryl().use(
-        '/static/*',
-        baseServeStatic({ getContent, isDir, rewriteRequestPath, onFound, onNotFound })
-      )
-      app.on(method, '/static/hello.html', (c) => c.text('Handled downstream', 202))
-
-      const res = await app.request('/static/hello.html', { method })
-
-      expect(res.status).toBe(202)
-      expect(await res.text()).toBe('Handled downstream')
-      expect(rewriteRequestPath).not.toBeCalled()
-      expect(isDir).not.toBeCalled()
-      expect(getContent).not.toBeCalled()
-      expect(onFound).not.toBeCalled()
-      expect(onNotFound).not.toBeCalled()
-    }
-  )
-
-  it.each(['/static/hello.html', '/static/not-found.txt'])(
-    'Should return 404 for an unhandled POST request regardless of file existence - %s',
-    async (path) => {
-      const app = new Acryl().use('/static/*', serveStatic)
-
-      const res = await app.request(path, { method: 'POST' })
-
-      expect(res.status).toBe(404)
-      expect(await res.text()).toBe('404 Not Found')
-      expect(getContent).not.toBeCalled()
-    }
-  )
-
-  it('Should return 200 response - /static/hello.html', async () => {
-    const res = await app.request('/static/hello.html')
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Encoding')).toBeNull()
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/html/)
-    expect(await res.text()).toBe('Hello in static/hello.html')
-    expect(res.headers.get('X-Custom')).toBe('Found the file at static/hello.html')
-  })
-
-  it('Should return 200 response - /static/sub', async () => {
-    const res = await app.request('/static/sub')
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/html/)
-    expect(await res.text()).toBe('Hello in static/sub/index.html')
-  })
-
-  it('Should return 200 response - /static/hello.world', async () => {
-    const res = await app.request('/static/hello.world')
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/html/)
-    expect(await res.text()).toBe('Hello in static/hello.world/index.html')
-  })
-
-  it.each([
-    ['/static/%E7%82%8E.txt', 'static/炎.txt'],
-    ['/static/hello%20world.txt', 'static/hello world.txt'],
-  ])('Should decode URI strings - %s', async (url, path) => {
-    const res = await app.request(url)
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/plain/)
-    expect(await res.text()).toBe(`Hello in ${path}`)
-  })
-
-  it.each(['/static/100%25.txt', '/static/100%25/hello.txt', '/static/%2Fadmin/secret.txt'])(
-    'Should skip paths containing percent signs by default - %s',
-    async (path) => {
-      const onNotFound = vi.fn()
-      const app = new Acryl().use('*', baseServeStatic({ getContent, onNotFound }))
-
-      const res = await app.request(path)
-
-      expect(res.status).toBe(404)
-      expect(getContent).not.toBeCalled()
-      expect(onNotFound).toHaveBeenCalledWith(path, expect.anything())
-    }
-  )
-
-  it.each([
-    ['/static/100%25.txt', 'static/100%.txt'],
-    ['/static/100%25/hello.txt', 'static/100%/hello.txt'],
-    ['/static/%2Fadmin/secret.txt', 'static/%2Fadmin/secret.txt'],
-  ])('Should allow percent signs when opted in - %s', async (url, path) => {
-    const app = new Acryl().use('*', baseServeStatic({ getContent, allowPercentInPath: true }))
-
-    const res = await app.request(url)
-
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe(`Hello in ${path}`)
-  })
-
-  it('Should not bypass authentication through a second decode', async () => {
-    const app = new Acryl()
-    app.get('/static/admin/*', (c) => c.text('Unauthorized', 401))
-    app.use('/static/*', baseServeStatic({ getContent }))
-
-    const protectedRes = await app.request('/static/admin/secret.txt')
-    expect(protectedRes.status).toBe(401)
-
-    const res = await app.request('/static/%%36%31dmin/secret.txt')
-    expect(res.status).toBe(404)
-    expect(getContent).not.toBeCalled()
-  })
-
-  it('Should return 404 response - /static/not-found.txt', async () => {
-    const res = await app.request('/static/not-found.txt')
-    expect(res.status).toBe(404)
-    expect(res.headers.get('Content-Encoding')).toBeNull()
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/plain/)
-    expect(await res.text()).toBe('404 Not Found')
-    expect(getContent).toBeCalledTimes(1)
-  })
-
-  it('Should return 200 response for empty string content - /static/empty.txt', async () => {
-    const onNotFound = vi.fn()
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent: async () => '',
-        onNotFound,
-      })
-    )
-    const res = await app.request('/static/empty.txt')
-    expect(res.status).toBe(200)
-    expect(await res.text()).toBe('')
-    expect(onNotFound).not.toBeCalled()
-  })
-
-  it('Should not allow a directory traversal - /static/%2e%2e/static/hello.html', async () => {
-    const res = await app.fetch({
-      method: 'GET',
-      url: 'http://localhost/static/%2e%2e/static/hello.html',
-    } as Request)
-    expect(res.status).toBe(404)
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/plain/)
-    expect(await res.text()).toBe('404 Not Found')
-  })
-
-  it('Should not allow a backslash separator injection - /static/admin%5Csecret.txt', async () => {
-    const res = await app.fetch({
-      method: 'GET',
-      url: 'http://localhost/static/admin%5Csecret.txt',
-    } as Request)
-    expect(res.status).toBe(404)
-    expect(await res.text()).toBe('404 Not Found')
-  })
-
-  it('Should return a pre-compressed zstd response - /static/hello.html', async () => {
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent,
-        precompressed: true,
-      })
-    )
-
-    const res = await app.request('/static/hello.html', {
-      headers: { 'Accept-Encoding': 'zstd' },
-    })
-
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Encoding')).toBe('zstd')
-    expect(res.headers.get('Vary')).toBe('Accept-Encoding')
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/html/)
-    expect(await res.text()).toBe('Hello in static/hello.html.zst')
-  })
-
-  it('Should return a pre-compressed brotli response - /static/hello.html', async () => {
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent,
-        precompressed: true,
-      })
-    )
-
-    const res = await app.request('/static/hello.html', {
-      headers: { 'Accept-Encoding': 'wompwomp, gzip, br, deflate, zstd' },
-    })
-
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Encoding')).toBe('br')
-    expect(res.headers.get('Vary')).toBe('Accept-Encoding')
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/html/)
-    expect(await res.text()).toBe('Hello in static/hello.html.br')
-  })
-
-  it('Should return a pre-compressed brotli response - /static/hello.unknown', async () => {
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent,
-        precompressed: true,
-      })
-    )
-
-    const res = await app.request('/static/hello.unknown', {
-      headers: { 'Accept-Encoding': 'wompwomp, gzip, br, deflate, zstd' },
-    })
-
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Encoding')).toBe('br')
-    expect(res.headers.get('Vary')).toBe('Accept-Encoding')
-    expect(res.headers.get('Content-Type')).toBe('application/octet-stream')
-    expect(await res.text()).toBe('Hello in static/hello.unknown.br')
-  })
-
-  it('Should return a pre-compressed response when Accept-Encoding has q-values', async () => {
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent,
-        precompressed: true,
-      })
-    )
-
-    const res = await app.request('/static/hello.html', {
-      headers: { 'Accept-Encoding': 'br;q=0, zstd;q=1.0, gzip;q=0.5' },
-    })
-
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Encoding')).toBe('zstd')
-    expect(res.headers.get('Vary')).toBe('Accept-Encoding')
-    expect(await res.text()).toBe('Hello in static/hello.html.zst')
-  })
-
-  it('Should not return a pre-compressed response - /static/not-found.txt', async () => {
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent,
-        precompressed: true,
-      })
-    )
-
-    const res = await app.request('/static/not-found.txt', {
-      headers: { 'Accept-Encoding': 'gzip, zstd, br' },
-    })
-
-    expect(res.status).toBe(404)
-    expect(res.headers.get('Content-Encoding')).toBeNull()
-    expect(res.headers.get('Vary')).toBeNull()
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/plain/)
-    expect(await res.text()).toBe('404 Not Found')
-  })
-
-  it('Should not return a pre-compressed response - /static/hello.html', async () => {
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent,
-        precompressed: true,
-      })
-    )
-
-    const res = await app.request('/static/hello.html', {
-      headers: { 'Accept-Encoding': 'wompwomp, unknown' },
-    })
-
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Encoding')).toBeNull()
-    expect(res.headers.get('Vary')).toBeNull()
-    expect(res.headers.get('Content-Type')).toMatch(/^text\/html/)
-    expect(await res.text()).toBe('Hello in static/hello.html')
-  })
-
-  it('Should not find pre-compressed files - /static/hello.jpg', async () => {
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent,
-        precompressed: true,
-      })
-    )
-
-    const res = await app.request('/static/hello.jpg', {
-      headers: { 'Accept-Encoding': 'gzip, br, deflate, zstd' },
-    })
-
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Encoding')).toBeNull()
-    expect(res.headers.get('Vary')).toBeNull()
-    expect(res.headers.get('Content-Type')).toMatch(/^image\/jpeg/)
-    expect(await res.text()).toBe('Hello in static/hello.jpg')
-  })
-
-  it('Should return response object content as-is', async () => {
-    const body = new ReadableStream()
-    const response = new Response(body)
-    const app = new Acryl().use(
-      '*',
-      baseServeStatic({
-        getContent: async () => {
-          return response
-        },
-      })
-    )
-
-    const res = await app.fetch({
-      method: 'GET',
-      url: 'http://localhost',
-    } as Request)
-    expect(res.status).toBe(200)
-    expect(res.body).toBe(body)
-  })
-
-  describe('Changing root path', () => {
-    it('Should return the content with absolute root path', async () => {
-      const app = new Acryl()
-      const serveStatic = baseServeStatic({
-        getContent,
-        root: '/home/acryl/child',
-      })
-      app.get('/static/*', serveStatic)
-
-      const res = await app.request('/static/html/hello.html')
-      expect(await res.text()).toBe('Hello in /home/acryl/child/static/html/hello.html')
-    })
-
-    it('Should traverse the directories with absolute root path', async () => {
-      const app = new Acryl()
-      const serveStatic = baseServeStatic({
-        getContent,
-        root: '/home/acryl/../parent',
-      })
-      app.get('/static/*', serveStatic)
-
-      const res = await app.request('/static/html/hello.html')
-      expect(await res.text()).toBe('Hello in /home/parent/static/html/hello.html')
-    })
-
-    it('Should treat the root path includes .. as relative path', async () => {
-      const app = new Acryl()
-      const serveStatic = baseServeStatic({
-        getContent,
-        root: '../home/acryl',
-      })
-      app.get('/static/*', serveStatic)
-
-      const res = await app.request('/static/html/hello.html')
-      expect(await res.text()).toBe('Hello in ../home/acryl/static/html/hello.html')
-    })
-
-    it('Should not allow directory traversal with . as relative path', async () => {
-      const app = new Acryl()
-      const serveStatic = baseServeStatic({
-        getContent,
-        root: '.',
-      })
-      app.get('*', serveStatic)
-
-      const res = await app.request('/etc/passwd')
-      expect(await res.text()).toBe('Hello in etc/passwd')
-    })
-
-    it('Should not allow bypass via path mismatch between middleware and serveStatic', async () => {
-      const app = new Acryl()
-
-      app.use('/admin/*', async (c, next) => {
-        c.header('X-Authorized', 'true')
-        await next()
-      })
-
-      const serveStatic = baseServeStatic({
-        getContent,
-        root: '.',
-      })
-      app.use('/*', serveStatic)
-
-      const res = await app.request('/admin/secret.txt')
-      expect(res.headers.get('X-Authorized')).toBe('true')
-      expect(await res.text()).toBe('Hello in admin/secret.txt')
-
-      const res2 = await app.request('/admin%2Fsecret.txt')
-      expect(res2.headers.get('X-Authorized')).toBeNull()
-      expect(res2.status).toBe(404)
-
-      const res3 = await app.request('//admin/secret.txt')
-      expect(res3.status).toBe(404)
-    })
-  })
-})

package/plugins/acryl-router/src/core/middleware/serve-static/path.test.ts

@@ -1,50 +0,0 @@
-import { join as posixJoin } from 'node:path/posix'
-import { defaultJoin } from './path.ts'
-
-describe('defaultJoin', () => {
-  describe('Comparison with node:path/posix.join', () => {
-    it('Should behave like path.posix.join for all path operations', () => {
-      const testCases = [
-        // Basic path joining
-        ['/home/yusuke/work/app/public', 'static/main.html'],
-        ['public', 'sub/', 'file.html'],
-        ['', 'file.html'],
-        ['public', ''],
-        ['public/', 'file.html'],
-        ['public', 'static', 'main.html'],
-        ['assets', 'images', 'logo.png'],
-
-        // Parent directory references
-        ['public', '../parent/file.html'],
-        ['public', '../../grandparent/file.html'],
-        ['/abs/path', '../relative.html'],
-        ['a/b', '../c'],
-        ['a/b/c', '../../d'],
-
-        // Current directory references
-        ['./public', 'static/main.html'],
-        ['public', './file.html'],
-        ['./public', '/absolute/path.html'],
-        ['.', 'file.html'],
-        ['public/.', 'file.html'],
-
-        // Edge cases
-        [],
-        ['.'],
-        [''],
-        ['/'],
-        ['a', 'b', 'c'],
-
-        // Backslash handling (security)
-        ['static', 'test\\file.txt'],
-        ['public', 'path\\with\\backslash'],
-      ]
-
-      testCases.forEach(([...args]) => {
-        const expected = posixJoin(...args)
-        const actual = defaultJoin(...args)
-        expect(actual).toBe(expected)
-      })
-    })
-  })
-})

package/plugins/acryl-router/src/core/middleware/timeout/index.test.ts

@@ -1,70 +0,0 @@
-import type { HTTPExceptionFunction } from './index.ts'
-import { timeout } from './index.ts'
-import type { Context } from '../../context.ts'
-import { Acryl } from '../../app.ts'
-import { HTTPException } from '../../http-exception.ts'
-
-describe('Timeout API', () => {
-  const app = new Acryl()
-
-  app.use('/slow-endpoint', timeout(1000))
-  app.use(
-    '/slow-endpoint/custom',
-    timeout(
-      1100,
-      () => new HTTPException(408, { message: 'Request timeout. Please try again later.' })
-    )
-  )
-  const exception500: HTTPExceptionFunction = (context: Context) =>
-    new HTTPException(500, { message: `Internal Server Error at ${context.req.path}` })
-  app.use('/slow-endpoint/error', timeout(1200, exception500))
-  app.use('/normal-endpoint', timeout(1000))
-
-  app.get('/slow-endpoint', async (c) => {
-    await new Promise((resolve) => setTimeout(resolve, 1100))
-    return c.text('This should not show up')
-  })
-
-  app.get('/slow-endpoint/custom', async (c) => {
-    await new Promise((resolve) => setTimeout(resolve, 1200))
-    return c.text('This should not show up')
-  })
-
-  app.get('/slow-endpoint/error', async (c) => {
-    await new Promise((resolve) => setTimeout(resolve, 1300))
-    return c.text('This should not show up')
-  })
-
-  app.get('/normal-endpoint', async (c) => {
-    await new Promise((resolve) => setTimeout(resolve, 900))
-    return c.text('This should not show up')
-  })
-
-  it('Should trigger default timeout exception', async () => {
-    const res = await app.request('http://localhost/slow-endpoint')
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(504)
-    expect(await res.text()).toContain('Gateway Timeout')
-  })
-
-  it('Should apply custom exception with function', async () => {
-    const res = await app.request('http://localhost/slow-endpoint/custom')
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(408)
-    expect(await res.text()).toContain('Request timeout. Please try again later.')
-  })
-
-  it('Error timeout with custom status code and message', async () => {
-    const res = await app.request('http://localhost/slow-endpoint/error')
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(500)
-    expect(await res.text()).toContain('Internal Server Error at /slow-endpoint/error')
-  })
-
-  it('No Timeout should pass', async () => {
-    const res = await app.request('http://localhost/normal-endpoint')
-    expect(res).not.toBeNull()
-    expect(res.status).toBe(200)
-    expect(await res.text()).toContain('This should not show up')
-  })
-})