shelldeck 0.0.1__tar.gz → 0.0.2__tar.gz

{shelldeck-0.0.1 → shelldeck-0.0.2}/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to shelldeck are listed here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow [Semantic Versioning](https://semver.org/).
 
+## [0.0.2] - 2026-09-29
+
+### Added
+
+- `sd share`: reach shelldeck from another device over an HTTPS Cloudflare quick tunnel (needs `cloudflared`, no account). It prints a QR code and a one-per-share link; the tunnel address is refused without that link, and your password is still required. Ctrl+C stops sharing and signs those browsers out.
+- Phone key bar on touch screens: Esc, Tab, a sticky Ctrl, arrows and `| ~ / -`.
+
+### Changed
+
+- Touch devices use xterm's DOM renderer (WebGL came up blank on high-DPI phones).
+- History rows and the Settings dialog stack into one column on narrow screens.
+- Requests through a proxy that sets `CF-Connecting-IP` count as remote.
+- CI actions updated: checkout v7, setup-uv v7, upload-artifact v7, download-artifact v8.
+
 ## [0.0.1] - 2026-09-28
 
 First public release.
@@ -18,4 +32,5 @@ First public release.
 - Mandatory password with per-browser logins, idle lock, and HTTPS or SSH-tunnel remote access.
 - `sd` CLI with a startup banner, `sd search` (LLM-free code search), and one-line installers for Windows and Linux.
 
+[0.0.2]: https://github.com/codejunction/shelldeck/releases/tag/v0.0.2
 [0.0.1]: https://github.com/codejunction/shelldeck/releases/tag/v0.0.1

{shelldeck-0.0.1 → shelldeck-0.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: shelldeck
-Version: 0.0.1
+Version: 0.0.2
 Summary: Project-first multi-terminal for Windows and Linux: real shells, grouped by project, in your browser
 Project-URL: Homepage, https://github.com/codejunction/shelldeck
 Project-URL: Source, https://github.com/codejunction/shelldeck
@@ -28,6 +28,7 @@ Requires-Dist: fastapi>=0.110
 Requires-Dist: psutil>=5.9
 Requires-Dist: pywinpty>=2.0; sys_platform == 'win32'
 Requires-Dist: rich>=13
+Requires-Dist: segno>=1.6
 Requires-Dist: typer>=0.12
 Requires-Dist: uvicorn[standard]>=0.29
 Description-Content-Type: text/markdown
@@ -43,7 +44,7 @@ Description-Content-Type: text/markdown
 Real shells (PowerShell, cmd, Git Bash, WSL, bash, zsh, fish) grouped by project,<br>
 in split or free-floating panes that survive restarts.
 
-[![PyPI](https://img.shields.io/pypi/v/shelldeck?color=8b5cf6&label=pypi)](https://pypi.org/project/shelldeck/)
+[![PyPI](https://img.shields.io/pypi/v/shelldeck?color=8b5cf6&cacheSeconds=3600)](https://pypi.org/project/shelldeck/)
 [![Python](https://img.shields.io/pypi/pyversions/shelldeck?color=8b5cf6)](https://pypi.org/project/shelldeck/)
 [![CI](https://github.com/codejunction/shelldeck/actions/workflows/ci.yml/badge.svg)](https://github.com/codejunction/shelldeck/actions/workflows/ci.yml)
 [![Platforms](https://img.shields.io/badge/platform-Windows%20%7C%20Linux-8b5cf6)](#install)
@@ -194,6 +195,7 @@ sd schedule list|add|run|toggle|delete|logs
 sd task list|add|move|delete|alarms
 sd serve [--host H]                  run the server in the foreground
 sd stop                              stop the background server (closes all terminals)
+sd share                             share over an HTTPS Cloudflare tunnel with a QR link (needs cloudflared)
 sd login-link                        emergency: one-time login URL (host only)
 sd reset-password                    emergency: forget the password (host only)
 ```
@@ -215,6 +217,17 @@ sd serve                                  # on the VM: stays on 127.0.0.1:5455
 ssh -N -L 5455:127.0.0.1:5455 you@vm      # on your machine, then open http://127.0.0.1:5455
 ```
 
+**`sd share` (any device, no setup).** Needs [`cloudflared`](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/) (`winget install Cloudflare.cloudflared`); no Cloudflare account.
+
+```sh
+sd share          # starts shelldeck if needed, prints a QR code and a link; Ctrl+C stops sharing
+```
+
+- **Encrypted.** The other device talks HTTPS to Cloudflare, which relays it through cloudflared's outbound encrypted tunnel to shelldeck on `127.0.0.1`. No ports are opened.
+- **Two locks.** The random `trycloudflare.com` address alone is refused; only the printed link (a one-per-share token made on the host) lets a browser in, and then it still needs your password. A password must exist before sharing.
+- **Phones.** On touch screens a key bar adds Esc, Tab, Ctrl (applies to the next letter), arrows and `| ~ / -`; dialogs open as bottom sheets.
+- **Stopping.** Ctrl+C closes the tunnel, voids the link and signs out every browser that logged in through it. Each `sd share` gets a new address and link.
+
 **HTTPS on the VM's address,** with a real certificate (Tailscale `tailscale cert`, Let's Encrypt, your reverse proxy) or a self-signed one:
 
 ```sh

{shelldeck-0.0.1 → shelldeck-0.0.2}/README.md

@@ -9,7 +9,7 @@
 Real shells (PowerShell, cmd, Git Bash, WSL, bash, zsh, fish) grouped by project,<br>
 in split or free-floating panes that survive restarts.
 
-[![PyPI](https://img.shields.io/pypi/v/shelldeck?color=8b5cf6&label=pypi)](https://pypi.org/project/shelldeck/)
+[![PyPI](https://img.shields.io/pypi/v/shelldeck?color=8b5cf6&cacheSeconds=3600)](https://pypi.org/project/shelldeck/)
 [![Python](https://img.shields.io/pypi/pyversions/shelldeck?color=8b5cf6)](https://pypi.org/project/shelldeck/)
 [![CI](https://github.com/codejunction/shelldeck/actions/workflows/ci.yml/badge.svg)](https://github.com/codejunction/shelldeck/actions/workflows/ci.yml)
 [![Platforms](https://img.shields.io/badge/platform-Windows%20%7C%20Linux-8b5cf6)](#install)
@@ -160,6 +160,7 @@ sd schedule list|add|run|toggle|delete|logs
 sd task list|add|move|delete|alarms
 sd serve [--host H]                  run the server in the foreground
 sd stop                              stop the background server (closes all terminals)
+sd share                             share over an HTTPS Cloudflare tunnel with a QR link (needs cloudflared)
 sd login-link                        emergency: one-time login URL (host only)
 sd reset-password                    emergency: forget the password (host only)
 ```
@@ -181,6 +182,17 @@ sd serve                                  # on the VM: stays on 127.0.0.1:5455
 ssh -N -L 5455:127.0.0.1:5455 you@vm      # on your machine, then open http://127.0.0.1:5455
 ```
 
+**`sd share` (any device, no setup).** Needs [`cloudflared`](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/) (`winget install Cloudflare.cloudflared`); no Cloudflare account.
+
+```sh
+sd share          # starts shelldeck if needed, prints a QR code and a link; Ctrl+C stops sharing
+```
+
+- **Encrypted.** The other device talks HTTPS to Cloudflare, which relays it through cloudflared's outbound encrypted tunnel to shelldeck on `127.0.0.1`. No ports are opened.
+- **Two locks.** The random `trycloudflare.com` address alone is refused; only the printed link (a one-per-share token made on the host) lets a browser in, and then it still needs your password. A password must exist before sharing.
+- **Phones.** On touch screens a key bar adds Esc, Tab, Ctrl (applies to the next letter), arrows and `| ~ / -`; dialogs open as bottom sheets.
+- **Stopping.** Ctrl+C closes the tunnel, voids the link and signs out every browser that logged in through it. Each `sd share` gets a new address and link.
+
 **HTTPS on the VM's address,** with a real certificate (Tailscale `tailscale cert`, Let's Encrypt, your reverse proxy) or a self-signed one:
 
 ```sh

{shelldeck-0.0.1 → shelldeck-0.0.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "shelldeck"
-version = "0.0.1"
+version = "0.0.2"
 description = "Project-first multi-terminal for Windows and Linux: real shells, grouped by project, in your browser"
 readme = "README.md"
 license = "MIT"
@@ -29,6 +29,7 @@ dependencies = [
   "rich>=13",
   "apscheduler>=3.10,<4",
   "psutil>=5.9",
+  "segno>=1.6",
 ]
 
 [project.urls]

{shelldeck-0.0.1 → shelldeck-0.0.2}/shelldeck/cli.py

@@ -1,5 +1,6 @@
 import json
 import os
+import re
 import shutil
 import ssl
 import subprocess
@@ -301,6 +302,51 @@ def login_link():
     typer.echo("One use, valid for 5 minutes. Through an SSH tunnel, open it on your machine as-is.")
 
 
+def _show_share(url: str) -> None:
+    import segno
+
+    if sys.stdout.isatty():
+        segno.make(url, error="l").terminal(compact=(sys.stdout.encoding or "").lower().startswith("utf"))
+    typer.echo(f"\n  {url}\n")
+    typer.echo("  Scan or open it on the other device, then log in with your shelldeck password.")
+    typer.echo("  Without this link the tunnel URL is refused. Ctrl+C stops sharing and signs those browsers out.")
+
+
+@app.command()
+def share():
+    """Reach this shelldeck from another device: HTTPS Cloudflare quick tunnel, QR link, then your password."""
+    exe = shutil.which("cloudflared")
+    if not exe:
+        hint = "winget install Cloudflare.cloudflared" if sys.platform == "win32" else "see https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/"
+        typer.echo(f"cloudflared is not installed ({hint})", err=True)
+        raise typer.Exit(1)
+    ensure_server()
+    if not _api("/api/auth/status").get("has_password"):
+        typer.echo("Set a password first: open shelldeck on this machine (`sd`), then run `sd share` again.", err=True)
+        raise typer.Exit(1)
+    # the tunnel ends at our own loopback server, whose certificate (if any) is self-signed
+    cmd = [exe, "tunnel", "--no-autoupdate", "--url", _url()] + (["--no-tls-verify"] if _scheme() == "https" else [])
+    proc = subprocess.Popen(cmd, stdout=subprocess.DEVNULL, stderr=subprocess.PIPE, text=True, errors="replace")
+    host = shared = None
+    try:
+        for line in proc.stderr:  # cloudflared logs to stderr: the URL first, then each edge connection
+            if not host and (m := re.search(r"https://([a-z0-9-]+\.trycloudflare\.com)", line)):
+                host = m.group(1)
+            elif host and not shared and "Registered tunnel connection" in line:
+                shared = f"https://{host}" + _api("/api/share", "POST", {"host": host})["path"]
+                _show_share(shared)
+    except KeyboardInterrupt:
+        pass
+    finally:
+        proc.terminate()
+        if shared and _health() == "ok":
+            _api("/api/share", "DELETE")
+    if not shared:
+        typer.echo("cloudflared exited without a tunnel URL; run it by hand to see why.", err=True)
+        raise typer.Exit(1)
+    typer.echo("sharing stopped")
+
+
 @app.command()
 def stop():
     """Stop the background server (closes all terminals)."""

{shelldeck-0.0.1 → shelldeck-0.0.2}/shelldeck/server.py

@@ -1,4 +1,5 @@
 import asyncio
+import hashlib
 import hmac
 import json
 import logging
@@ -67,10 +68,28 @@ def err(code: str, status: int = 400) -> JSONResponse:
     return JSONResponse({"error": code}, status_code=status)
 
 
-def _trusted(headers) -> bool:
-    """Same-origin check. Browsers always send Origin cross-site; the CLI sends none."""
+# `sd share`: the tunnel's public hostname, sha256 of its link token, and the logins made through it
+_share: dict = {}
+SHARE_COOKIE = "sd_share"
+
+
+def _share_key(token: str | None) -> bool:
+    return bool(token and _share) and hmac.compare_digest(hashlib.sha256(token.encode()).hexdigest(), _share["key"])
+
+
+def _via_share(conn) -> bool:
+    return bool(_share) and conn.headers.get("host", "").rsplit(":", 1)[0] == _share["host"]
+
+
+def _trusted(conn) -> bool:
+    """Same-origin check. Browsers always send Origin cross-site; the CLI sends none.
+    The share tunnel's host also needs the cookie its link sets (or to be opening that link)."""
+    headers = conn.headers
     host = headers.get("host", "")
-    if ALLOWED_HOSTS is not None and host.rsplit(":", 1)[0] not in ALLOWED_HOSTS:
+    if _via_share(conn):
+        if not (conn.url.path.startswith("/share/") or _share_key(conn.cookies.get(SHARE_COOKIE))):
+            return False
+    elif ALLOWED_HOSTS is not None and host.rsplit(":", 1)[0] not in ALLOWED_HOSTS:
         return False
     origin = headers.get("origin")
     return not origin or urlsplit(origin).netloc == host
@@ -152,7 +171,8 @@ def _client(conn) -> str:
 
 def _is_local(conn) -> bool:
     """A request from the host itself (not through a reverse proxy)."""
-    return _client(conn) in LOOPBACK and "x-forwarded-for" not in conn.headers
+    proxied = "x-forwarded-for" in conn.headers or "cf-connecting-ip" in conn.headers  # e.g. `sd share`
+    return _client(conn) in LOOPBACK and not proxied
 
 
 def _who(conn) -> tuple[str, str | None] | None:
@@ -169,7 +189,7 @@ def _denied() -> JSONResponse:
 
 @app.middleware("http")
 async def guard(request: Request, call_next):
-    if not _trusted(request.headers):
+    if not _trusted(request):
         return err("forbidden_origin", 403)
     path = request.url.path
     request.state.session = None
@@ -217,6 +237,8 @@ async def shutdown():
 def _login_response(request: Request, body: dict, res=None):
     """Start a login session: cookie on `res` (JSON body by default)."""
     token = auth.new_session(f"{_client(request)} {request.headers.get('user-agent', '')}")
+    if _via_share(request):
+        _share["sessions"].add(auth.session_hash(token))
     res = res or JSONResponse(body)
     res.set_cookie(
         auth.COOKIE, token, httponly=True, samesite="strict", path="/",
@@ -293,6 +315,48 @@ async def auth_login_link(request: Request):
     return {"path": f"/api/auth/link/{code}"}
 
 
+@app.post("/api/share")
+async def share_start(request: Request, payload: dict):
+    """Host CLI only: open the gate for an `sd share` tunnel host; returns its one link."""
+    if not auth.cli_ok(request.headers.get(auth.TOKEN_HEADER)):
+        return err("host_cli_only", 403)
+    host = str(payload.get("host", "")).lower()
+    if not re.fullmatch(r"[a-z0-9-]+(\.[a-z0-9-]+)+", host):
+        return err("invalid_host")
+    await _share_stop()
+    token = secrets.token_urlsafe(32)
+    _share.update(host=host, key=hashlib.sha256(token.encode()).hexdigest(), sessions=set())
+    log.info("sharing via %s", host)
+    return {"path": f"/share/{token}"}
+
+
+@app.delete("/api/share")
+async def share_stop(request: Request):
+    if not auth.cli_ok(request.headers.get(auth.TOKEN_HEADER)):
+        return err("host_cli_only", 403)
+    await _share_stop()
+    return {"status": "ok"}
+
+
+async def _share_stop() -> None:
+    """Close the gate and sign out every browser that logged in through the tunnel."""
+    sessions = _share.get("sessions", set())
+    _share.clear()
+    for h in sessions:
+        auth.end_session(h)
+    await _close_session_sockets(lambda owner: owner in sessions)
+
+
+@app.get("/share/{token}")
+async def share_open(request: Request, token: str):
+    """The QR link: sets the tunnel cookie, then the usual password login takes over."""
+    if not (_via_share(request) and _share_key(token)):
+        return err("link_expired", 403)
+    res = RedirectResponse("/", status_code=303)  # drops the token from the address bar
+    res.set_cookie(SHARE_COOKIE, token, httponly=True, samesite="lax", secure=True, path="/", max_age=24 * 3600)
+    return res
+
+
 @app.get("/api/auth/link/{code}")
 async def auth_use_link(request: Request, code: str):
     expiry = _login_links.pop(code, 0)
@@ -825,7 +889,7 @@ def _attach(session: dict, rows: int, cols: int) -> None:
 
 @app.websocket("/ws/alarms")
 async def alarms_ws(ws: WebSocket):
-    who = _who(ws) if _trusted(ws.headers) else None
+    who = _who(ws) if _trusted(ws) else None
     if not who:
         await ws.close(code=1008)
         return
@@ -846,7 +910,7 @@ async def alarms_ws(ws: WebSocket):
 
 @app.websocket("/ws/{session_id}")
 async def terminal_ws(ws: WebSocket, session_id: str):
-    who = _who(ws) if _trusted(ws.headers) else None
+    who = _who(ws) if _trusted(ws) else None
     if not who:
         await ws.close(code=1008)
         return

{shelldeck-0.0.1 → shelldeck-0.0.2}/shelldeck/static/app.css

@@ -1700,7 +1700,42 @@ textarea:focus {
   }
 }
 
+#keybar {
+  display: none;
+}
+
 @media (pointer: coarse) {
+  #keybar {
+    display: flex;
+    gap: 4px;
+    padding: 4px 6px calc(4px + env(safe-area-inset-bottom));
+    overflow-x: auto;
+    border-top: 1px solid var(--border);
+    background: var(--bg);
+  }
+
+  #main:has(#view-terminals[hidden]) #keybar,
+  #main:has(#layout:empty) #keybar {
+    display: none;
+  }
+
+  #keybar button {
+    flex: 1 0 auto;
+    min-width: 40px;
+    height: 36px;
+    border: 1px solid var(--border);
+    border-radius: 6px;
+    background: var(--panel);
+    color: var(--text);
+    font: 500 13px "Cascadia Mono", Consolas, monospace;
+  }
+
+  #keybar button[aria-pressed="true"] {
+    background: var(--accent);
+    border-color: var(--accent);
+    color: var(--primary-fg);
+  }
+
   .proj-row,
   .sess-row,
   .sb-link,
@@ -2286,3 +2321,37 @@ textarea:focus {
   color: var(--accent);
   border-radius: 2px;
 }
+
+/* ------------------------------------------------------------ phones */
+
+@media (max-width: 560px) {
+  .field-row {
+    grid-template-columns: minmax(0, 1fr);
+  }
+
+  /* history rows stack: command on top, then time / exit / duration, then actions */
+  .hist-table tr {
+    display: grid;
+    grid-template-columns: minmax(0, 1fr) auto auto;
+    align-items: center;
+    column-gap: 10px;
+  }
+
+  .hist-table td {
+    border: 0 !important;
+  }
+
+  .hist-table tr + tr {
+    border-top: 1px solid var(--border);
+  }
+
+  .hist-table .hist-cmd {
+    grid-column: 1 / -1;
+    grid-row: 1;
+    max-width: none;
+  }
+
+  .hist-table .hist-actions {
+    grid-column: 1 / -1;
+  }
+}

{shelldeck-0.0.1 → shelldeck-0.0.2}/shelldeck/static/app.js

@@ -197,6 +197,7 @@ class Term {
     this.replaying = false;
     this.xterm.onData((data) => {
       if (this.replaying) return;
+      data = withCtrl(data);
       this.track(data);
       this.send({ type: "input", data });
     });
@@ -378,7 +379,8 @@ class Term {
     container.append(this.el);
     if (!this.opened) {
       this.xterm.open(this.el);
-      try {
+      // phones: WebGL canvases came up blank at high pixel ratios; the DOM renderer is fine there
+      if (!matchMedia("(pointer: coarse)").matches) try {
         const gl = new WebglAddon.WebglAddon();
         gl.onContextLoss(() => gl.dispose());
         this.xterm.loadAddon(gl);
@@ -1777,9 +1779,42 @@ function connectAlarms() {
   };
 }
 
+// ----------------------------------------------------------------- phone keys
+
+// keys a phone keyboard lacks; Ctrl applies to the next typed letter
+const KEYS = { esc: "", tab: "	", up: "", down: "", right: "", left: "" };
+let ctrlNext = false;
+
+function setCtrl(on) {
+  ctrlNext = on;
+  $("#keybar [data-key=ctrl]").setAttribute("aria-pressed", String(on));
+}
+
+function withCtrl(data) {
+  if (!ctrlNext || data.length !== 1) return data;
+  setCtrl(false);
+  const c = data.toUpperCase().charCodeAt(0);
+  return c >= 64 && c < 96 ? String.fromCharCode(c - 64) : data;
+}
+
+function wireKeybar() {
+  const bar = $("#keybar");
+  bar.addEventListener("pointerdown", (e) => e.preventDefault()); // keep the soft keyboard open
+  bar.addEventListener("click", (e) => {
+    const k = e.target.closest("[data-key]")?.dataset.key;
+    const t = S.terms.get(S.focused);
+    if (!k || !t) return;
+    if (k === "ctrl") return setCtrl(!ctrlNext);
+    const data = withCtrl(KEYS[k] ?? k);
+    t.track(data);
+    t.send({ type: "input", data });
+  });
+}
+
 // ----------------------------------------------------------------- init
 
 function wireGlobal() {
+  wireKeybar();
   document.addEventListener("keydown", onKey, true);
   document.addEventListener("click", (e) => {
     const a = e.target.closest("[data-action]");

{shelldeck-0.0.1 → shelldeck-0.0.2}/shelldeck/static/index.html

@@ -2,7 +2,7 @@
 <html lang="en" data-theme="dark">
   <head>
     <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="viewport" content="width=device-width, initial-scale=1, interactive-widget=resizes-content" />
     <meta name="color-scheme" content="dark light" />
     <title>shelldeck</title>
     <link rel="icon" href="/static/icon.svg" type="image/svg+xml" />
@@ -88,6 +88,11 @@
         <section id="view-tasks" class="view page" hidden></section>
         <section id="view-monitor" class="view page" hidden></section>
         <section id="view-history" class="view page" hidden></section>
+        <div id="keybar" aria-label="Terminal keys">
+          <button data-key="esc">Esc</button><button data-key="tab">Tab</button><button data-key="ctrl" aria-pressed="false">Ctrl</button>
+          <button data-key="left" aria-label="Left">&larr;</button><button data-key="up" aria-label="Up">&uarr;</button><button data-key="down" aria-label="Down">&darr;</button><button data-key="right" aria-label="Right">&rarr;</button>
+          <button data-key="|">|</button><button data-key="~">~</button><button data-key="/">/</button><button data-key="-">-</button>
+        </div>
       </main>
     </div>
 

{shelldeck-0.0.1 → shelldeck-0.0.2}/tests/test_cli.py

@@ -110,3 +110,27 @@ def test_search_formats(codebase):
 def test_search_rejects_bad_format(codebase):
     r = runner.invoke(cli.app, ["search", "x", "--root", str(codebase), "-f", "xml"])
     assert r.exit_code == 1
+
+
+def test_share_waits_for_tunnel_then_prints_link_and_cleans_up(monkeypatch, capsys):
+    calls = []
+
+    class FakeTunnel:
+        stderr = iter([
+            "INF |  https://abc-def.trycloudflare.com  |\n",
+            "INF Registered tunnel connection connIndex=0\n",
+        ])
+        terminate = lambda self: calls.append("terminate")  # noqa: E731
+
+    def api(path, method="GET", payload=None):
+        calls.append((method, path))
+        return {"has_password": True} if path == "/api/auth/status" else {"path": "/share/tok"}
+
+    monkeypatch.setattr(cli.shutil, "which", lambda name: "cloudflared")
+    monkeypatch.setattr(cli, "ensure_server", lambda: None)
+    monkeypatch.setattr(cli, "_health", lambda: "ok")
+    monkeypatch.setattr(cli, "_api", api)
+    monkeypatch.setattr(cli.subprocess, "Popen", lambda argv, **kw: calls.append(argv[1:4]) or FakeTunnel())
+    cli.share()
+    assert "https://abc-def.trycloudflare.com/share/tok" in capsys.readouterr().out
+    assert calls[1:] == [["tunnel", "--no-autoupdate", "--url"], ("POST", "/api/share"), "terminate", ("DELETE", "/api/share")]

{shelldeck-0.0.1 → shelldeck-0.0.2}/tests/test_shelldeck.py

@@ -366,3 +366,37 @@ def test_projects_get_distinct_colors(client, tmp_path):
     assert colors == [0, 1, 2]
     assert client.put("/api/settings", json={"layout_mode": "free"}).json()["layout_mode"] == "free"
     assert client.put("/api/settings", json={"layout_mode": "grid"}).status_code == 400
+
+
+def test_share_gate_needs_link_then_password(browser):
+    b = browser
+    b.post("/api/auth/setup", json={"password": "longenough", "confirm": "longenough"})
+    cli = {"X-Shelldeck-Token": auth.read_cli_token()}
+    tunnel = {"host": "abc-def.trycloudflare.com", "cf-connecting-ip": "203.0.113.9", "x-forwarded-for": "203.0.113.9"}
+    assert b.get("/", headers=tunnel).status_code == 403  # not shared
+    assert b.post("/api/share", json={"host": tunnel["host"]}).status_code == 403  # browsers can't open it
+    assert b.post("/api/share", json={"host": "bad host"}, headers=cli).status_code == 400
+    path = b.post("/api/share", json={"host": tunnel["host"]}, headers=cli).json()["path"]
+
+    # the bare tunnel URL and a wrong token get nothing; the link sets the gate cookie
+    assert b.get("/", headers=tunnel).status_code == 403
+    assert b.get("/share/wrong", headers=tunnel).status_code == 403
+    r = b.get(path, headers=tunnel, follow_redirects=False)
+    assert r.status_code == 303 and r.headers["location"] == "/" and "secure" in r.headers["set-cookie"].lower()
+    gate = {**tunnel, "cookie": f"{server.SHARE_COOKIE}={path.rsplit('/', 1)[1]}"}
+    assert b.get("/", headers=gate).status_code == 200
+
+    # the password is still required, and tunnel visitors are remote
+    assert b.get("/api/projects", headers=gate).json() == {"error": "locked"}
+    assert b.post("/api/auth/login-link", headers=gate).status_code == 403
+    r = b.post("/api/auth/login", json={"password": "longenough"}, headers={**gate, "origin": "https://" + tunnel["host"]})
+    assert r.status_code == 200
+    login = r.headers["set-cookie"].split(";")[0]
+    authed = {**tunnel, "cookie": f"{gate['cookie']}; {login}"}
+    assert b.get("/api/projects", headers=authed).status_code == 200
+
+    # stopping closes the gate and signs out tunnel logins
+    assert b.delete("/api/share", headers=cli).status_code == 200
+    assert b.get("/", headers=authed).status_code == 403
+    auth._cache.clear()
+    assert b.get("/api/projects", headers={"cookie": login}).status_code == 401