smail
f60d3b0880
Some checks are pending
Security Checks / security (push) Waiting to run
统一 frontend、backend、test、test-log 和 out 目录，更新构建、部署及测试入口；纳入配置管理兼容与首次安全引导修复；排除本机配置、密钥和测试产物。
70 lines
3.0 KiB
JavaScript
70 lines
3.0 KiB
JavaScript
import assert from 'node:assert/strict'
|
|
import test from 'node:test'
|
|
import { readFileSync } from 'node:fs'
|
|
import { compileFunction } from 'node:vm'
|
|
import { computed, reactive, ref } from './vue.mjs'
|
|
|
|
const source = readFileSync(new URL('../../frontend/src/views/components/SecuritySetupPrompt/SecuritySetupPrompt.js', import.meta.url), 'utf8')
|
|
const createPage = compileFunction(
|
|
source.replace(/^import .*$/gm, '').replace('export function usePage', 'function usePage') + '\nreturn usePage()',
|
|
['computed', 'ref', 'http', 'useGlobalStatusStore']
|
|
)
|
|
|
|
function fixture(post = async () => ({ errorNo: 0 })) {
|
|
const store = reactive({
|
|
isLogin: true,
|
|
role: 'super_admin',
|
|
userInfos: { account: 'root', showSecuritySetupPrompt: true, must_change_password: 0, webAuthnEnabled: false },
|
|
settingsDrawerVisible: false,
|
|
dismissRecoveryPrompt() { this.recoveryPromptDismissed = true }
|
|
})
|
|
return { store, page: createPage(computed, ref, { post }, () => store) }
|
|
}
|
|
|
|
test('初始化超级管理员首次登录显示三项引导，强制改密时延后', () => {
|
|
const { store, page } = fixture()
|
|
assert.equal(page.visible.value, true)
|
|
assert.deepEqual(Array.from(page.options.value, item => item.key), ['question', 'external-email', 'webauthn'])
|
|
store.userInfos.must_change_password = 1
|
|
assert.equal(page.visible.value, false)
|
|
store.userInfos.must_change_password = 0
|
|
assert.equal(page.visible.value, true)
|
|
})
|
|
|
|
test('确认成功后关闭并打开目标设置，刷新后的持久化状态不再弹出', async () => {
|
|
const requests = []
|
|
const { store, page } = fixture(async path => { requests.push(path); return { errorNo: 0 } })
|
|
await page.acknowledge('external-email')
|
|
assert.equal(page.visible.value, false)
|
|
assert.equal(store.settingsActiveTab, 'security')
|
|
assert.equal(store.securityActiveSection, 'external-email')
|
|
assert.equal(store.settingsDrawerVisible, true)
|
|
assert.deepEqual(requests, ['/api/v1/security/setup/acknowledge'])
|
|
store.userInfos = { account: 'root', showSecuritySetupPrompt: false }
|
|
assert.equal(page.visible.value, false)
|
|
})
|
|
|
|
test('保存失败保留引导，可重试且不将查看状态误记为设置完成', async () => {
|
|
const { store, page } = fixture(async () => { throw new Error('请求失败') })
|
|
await page.acknowledge()
|
|
assert.equal(page.visible.value, true)
|
|
assert.equal(page.error.value, '请求失败')
|
|
assert.equal(page.saving.value, false)
|
|
assert.equal(store.settingsDrawerVisible, false)
|
|
assert.equal(store.userInfos.recoveryCodesConfigured, undefined)
|
|
})
|
|
|
|
test('并发点击只提交一次，切换账号后不修改新账号状态', async () => {
|
|
let finish
|
|
let calls = 0
|
|
const { store, page } = fixture(() => { calls++; return new Promise(resolve => { finish = resolve }) })
|
|
const pending = page.acknowledge('question')
|
|
await page.acknowledge('webauthn')
|
|
assert.equal(calls, 1)
|
|
store.userInfos = { account: 'alice', showSecuritySetupPrompt: true }
|
|
finish({ errorNo: 0 })
|
|
await pending
|
|
assert.equal(page.visible.value, true)
|
|
assert.equal(store.settingsDrawerVisible, false)
|
|
})
|