e52c97b8e7
Pairing tests stub only the Electron preload bridge so the real jsdom window and its event APIs survive; paging fixtures use nonzero deterministic timestamps so the conversion-time Date.now() ID fallback cannot produce a mismatch across separate conversions. (Second commit of #107839, minus the test_anon_auth_core.py change that main already carries as 0c0983ab21.)
49 lines
1.7 KiB
TypeScript
49 lines
1.7 KiB
TypeScript
// Pairing writes must target the profile the user is actually looking at.
|
|
// The approve/revoke endpoints read `profile` off the BODY (a POST body is
|
|
// not touched by query-param scoping), so a request that only carried
|
|
// `profileScoped()` at the top level would approve into the default
|
|
// profile's whitelist while the operator was managing another one — a grant
|
|
// the running gateway for that profile never consults.
|
|
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
|
|
|
|
const api = vi.fn().mockResolvedValue({ ok: true })
|
|
|
|
describe('pairing requests carry the active profile', () => {
|
|
beforeEach(() => {
|
|
api.mockClear()
|
|
Object.defineProperty(window, 'hermesDesktop', { configurable: true, value: { api } })
|
|
})
|
|
|
|
afterEach(() => {
|
|
Reflect.deleteProperty(window, 'hermesDesktop')
|
|
})
|
|
|
|
it('scopes approve and revoke by body, and the listing by query', async () => {
|
|
const mod = await import('@/hermes')
|
|
mod.setApiRequestProfile('work')
|
|
|
|
await mod.approvePairing('telegram', 'a'.repeat(16))
|
|
await mod.revokePairing('telegram', 'U1')
|
|
await mod.getPairing()
|
|
|
|
const [approve, revoke, list] = api.mock.calls.map(call => call[0])
|
|
|
|
expect(approve.body.profile).toBe('work')
|
|
expect(revoke.body.profile).toBe('work')
|
|
expect(list.profile).toBe('work')
|
|
})
|
|
|
|
it('omits the profile entirely for single-profile users', async () => {
|
|
const mod = await import('@/hermes')
|
|
mod.setApiRequestProfile(null)
|
|
|
|
await mod.approvePairing('telegram', 'a'.repeat(16))
|
|
await mod.getPairing()
|
|
|
|
const [approve, list] = api.mock.calls.map(call => call[0])
|
|
|
|
expect(approve.body.profile).toBeUndefined()
|
|
expect(list.profile).toBeUndefined()
|
|
})
|
|
})
|