72 lines
2.3 KiB
TypeScript
72 lines
2.3 KiB
TypeScript
|
import { describe, it, expect, vi } from 'vitest';
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Content page passwords (#722): their own cookie, `lb_auth_page_<slug>`,
|
||
|
|
* through the same authenticate()/isAuthenticated() path as every other gate,
|
||
|
|
* and a token that no other gate of the same slug and password accepts.
|
||
|
|
*/
|
||
|
|
vi.mock('@/lib/config', () => ({
|
||
|
|
getConfig: () => ({
|
||
|
|
authSecret: 'test-auth-secret-32-chars-long-min',
|
||
|
|
standaloneAlbums: [],
|
||
|
|
albumPasswords: {},
|
||
|
|
subpages: [{ name: 'Pricing', slug: 'pricing', albumIds: [], password: 'shared' }],
|
||
|
|
}),
|
||
|
|
}));
|
||
|
|
|
||
|
|
vi.mock('@/lib/admin/pages-service', () => ({
|
||
|
|
readPageSync: (slug: string) =>
|
||
|
|
slug === 'pricing' || slug === 'open'
|
||
|
|
? {
|
||
|
|
slug,
|
||
|
|
rawMarkdown: '',
|
||
|
|
parsed: {
|
||
|
|
frontmatter: slug === 'pricing' ? { password: 'shared' } : {},
|
||
|
|
blocks: [],
|
||
|
|
referencedAssetIds: [],
|
||
|
|
},
|
||
|
|
}
|
||
|
|
: null,
|
||
|
|
}));
|
||
|
|
|
||
|
|
vi.spyOn(console, 'warn').mockImplementation(() => {});
|
||
|
|
|
||
|
|
import { authenticate, isAuthenticated, isProtected } from '@/lib/auth';
|
||
|
|
|
||
|
|
function cookieFrom(setCookie: string): [string, string] {
|
||
|
|
const [pair] = setCookie.split(';');
|
||
|
|
const eq = pair.indexOf('=');
|
||
|
|
return [pair.slice(0, eq), pair.slice(eq + 1)];
|
||
|
|
}
|
||
|
|
|
||
|
|
describe('content page passwords', () => {
|
||
|
|
it('knows which pages are protected', () => {
|
||
|
|
expect(isProtected('pricing', 'page')).toBe(true);
|
||
|
|
expect(isProtected('open', 'page')).toBe(false);
|
||
|
|
expect(isProtected('missing', 'page')).toBe(false);
|
||
|
|
});
|
||
|
|
|
||
|
|
it('sets lb_auth_page_<slug> and accepts it back', async () => {
|
||
|
|
const setCookie = await authenticate('pricing', 'shared', 'page');
|
||
|
|
expect(setCookie).not.toBeNull();
|
||
|
|
const [name, value] = cookieFrom(setCookie!);
|
||
|
|
expect(name).toBe('lb_auth_page_pricing');
|
||
|
|
expect(isAuthenticated('pricing', (n) => (n === name ? value : undefined), 'page')).toBe(true);
|
||
|
|
});
|
||
|
|
|
||
|
|
it('refuses a wrong password', async () => {
|
||
|
|
expect(await authenticate('pricing', 'nope', 'page')).toBeNull();
|
||
|
|
});
|
||
|
|
|
||
|
|
it('does not accept a subpage token of the same slug and password', async () => {
|
||
|
|
const [, subpageValue] = cookieFrom((await authenticate('pricing', 'shared', 'subpage'))!);
|
||
|
|
expect(
|
||
|
|
isAuthenticated(
|
||
|
|
'pricing',
|
||
|
|
(n) => (n === 'lb_auth_page_pricing' ? subpageValue : undefined),
|
||
|
|
'page',
|
||
|
|
),
|
||
|
|
).toBe(false);
|
||
|
|
});
|
||
|
|
});
|