400 lines
26 KiB
JavaScript
400 lines
26 KiB
JavaScript
import assert from 'node:assert/strict'
|
||
import test from 'node:test'
|
||
import { readFileSync } from 'node:fs'
|
||
import { compileFunction } from 'node:vm'
|
||
import { createRequire } from 'node:module'
|
||
|
||
const root = new URL('../../frontend/src/views/components/ConfigSettings/', import.meta.url)
|
||
const source = readFileSync(new URL('ConfigForm/ConfigForm.js', root), 'utf8')
|
||
const { readFormConfig, getFieldGroups, updateFormConfig, validateFormConfig } = compileFunction(
|
||
source.replaceAll('export function ', 'function ') + '\nreturn { readFormConfig, getFieldGroups, updateFormConfig, validateFormConfig }'
|
||
)()
|
||
|
||
test('基础配置不再展示冗余安全选项与开关，通行密钥由系统默认解析，用户权限仍由账号设置管理', () => {
|
||
const config = { domains: { web: 'mail.old.com' }, security: { webAuthnEnabled: false, externalEmailEnabled: false, webAuthnRpId: 'mail.old.com' } }
|
||
const groups = getFieldGroups('base', config)
|
||
const security = groups.find(group => group.id === 'security')
|
||
assert.equal(security, undefined)
|
||
const updated = readFormConfig(updateFormConfig(JSON.stringify(config), 'base', ['domains', 'web'], 'mail.example.com'))
|
||
assert.equal(updated.domains.web, 'mail.example.com')
|
||
assert.equal(updated.security.webAuthnEnabled, false)
|
||
assert.equal(updated.security.externalEmailEnabled, false)
|
||
assert.equal(updated.security.webAuthnRpId, 'mail.old.com')
|
||
})
|
||
|
||
test('配置与安全策略页面使用分组表单，控件和样式能编译且不再提供 JSON 编辑器', () => {
|
||
const require = createRequire(new URL('../../frontend/package.json', import.meta.url))
|
||
const { parse, compileScript, compileStyle } = require('@vue/compiler-sfc')
|
||
for (const name of ['ConfigForm', 'ConfigField', 'ConfigEditor']) {
|
||
const template = readFileSync(new URL(`${name}/${name}.vue`, root), 'utf8')
|
||
const css = readFileSync(new URL(`${name}/${name}.css`, root), 'utf8')
|
||
const { descriptor, errors } = parse(template)
|
||
assert.deepEqual(errors, [])
|
||
assert.doesNotThrow(() => compileScript(descriptor, { id: name, inlineTemplate: true }))
|
||
assert.deepEqual(compileStyle({ source: css, id: `data-v-${name}`, scoped: true }).errors, [])
|
||
assert.doesNotMatch(template, /&#x[0-9a-f]+;|type="textarea"|配置 JSON 编辑器/i)
|
||
}
|
||
const config = { plugins: {
|
||
spam_block: { settings: null },
|
||
telegram_push: { settings: null },
|
||
wechat_push: { settings: null }
|
||
} }
|
||
for (const section of ['base', 'mail', 'mail_policy', 'security_policy', 'ssl', 'plugins', 'spam_block', 'telegram_push', 'wechat_push']) {
|
||
const groups = getFieldGroups(section, config)
|
||
assert.ok(groups.length)
|
||
const keys = groups.flatMap(group => group.fields.map(field => field.path.join('.')))
|
||
assert.equal(keys.length, new Set(keys).size)
|
||
assert.ok(groups.every(group => /[\u4e00-\u9fff]/.test(group.title)))
|
||
assert.ok(!keys.some(key => /generation|database\.password|encryptionKey|capabilities/.test(key)))
|
||
}
|
||
})
|
||
|
||
test('邮件服务页面只管理监听和中继，邮件策略使用独立表单并保持同一配置分区', () => {
|
||
const config = {
|
||
listener: { port: 25, starttlsPort: 587, tlsPort: 465 },
|
||
relay: { relayPort: 465 },
|
||
imap: { tlsPort: 993 },
|
||
pop3: { port: 110, tlsPort: 995 },
|
||
policy: { maxMessageBytes: 10485760, spamFilterLevel: 1, smtpPort: 25, imapPort: 143, pop3Port: 110 }
|
||
}
|
||
const text = JSON.stringify(config)
|
||
const groups = getFieldGroups('mail', config)
|
||
const policyGroups = getFieldGroups('mail_policy', config)
|
||
const listener = groups.find(group => group.id === 'listener')
|
||
const relay = groups.find(group => group.id === 'relay')
|
||
const keys = groups.flatMap(group => group.fields.map(input => input.path.join('.')))
|
||
const policyKeys = policyGroups.flatMap(group => group.fields.map(input => input.path.join('.')))
|
||
assert.deepEqual(keys.filter(key => /^(listener|imap|pop3)\./.test(key)), [
|
||
'listener.security', 'listener.port', 'listener.starttlsPort', 'listener.tlsPort',
|
||
'imap.tlsPort', 'pop3.port', 'pop3.tlsPort'
|
||
])
|
||
assert.ok(keys.includes('relay.relayHost'))
|
||
assert.ok(keys.includes('relay.password'))
|
||
assert.ok(!keys.includes('policy.maxMessageBytes'))
|
||
assert.ok(!keys.includes('policy.spamFilterLevel'))
|
||
assert.deepEqual(policyKeys, ['policy.maxMessageBytes', 'policy.spamFilterLevel'])
|
||
assert.ok(!keys.includes('policy.smtpPort'))
|
||
assert.ok(!keys.includes('policy.imapPort'))
|
||
assert.ok(!keys.includes('policy.pop3Port'))
|
||
assert.equal(listener.fields[0].path.join('.'), 'listener.security')
|
||
assert.equal(listener.fields[0].label, '统一加密方式')
|
||
assert.equal(listener.fields[0].wide, true)
|
||
assert.equal(listener.fields[0].options.find(option => option.value === 'both').label, '全部启用（推荐）')
|
||
assert.equal(listener.fields[0].options.find(option => option.value === 'both').disabled, undefined)
|
||
assert.ok(!relay.fields.some(field => field.path.join('.') === 'relay.security'))
|
||
assert.ok(relay.fields.some(field => field.path.join('.') === 'relay.relayPort'))
|
||
const edited = readFormConfig(updateFormConfig(text, 'mail', ['listener', 'tlsPort'], 2465))
|
||
assert.equal(edited.listener.tlsPort, 2465)
|
||
assert.equal(edited.relay.relayPort, 465)
|
||
assert.ok(validateFormConfig('mail', { ...config, listener: { ...config.listener, tlsPort: 587 } })['listener.tlsPort'])
|
||
})
|
||
|
||
test('三个插件页面只展示和编辑自身字段，完整保留其他插件和未知字段', () => {
|
||
const config = { meta: { generation: 9 }, plugins: {
|
||
spam_block: { enabled: false, settings: { threshold: 20 }, secretStatus: { configured: true } },
|
||
telegram_push: { enabled: false, settings: { timeout: 30, futureField: '保留值' } },
|
||
wechat_push: { enabled: true, settings: { appId: 'test-only' } },
|
||
future_plugin: { enabled: false, settings: ['原样保留'] }
|
||
} }
|
||
const text = JSON.stringify(config)
|
||
for (const id of ['spam_block', 'telegram_push', 'wechat_push']) {
|
||
const groups = getFieldGroups(id, config)
|
||
assert.equal(groups.length, 1)
|
||
assert.equal(groups[0].id, id)
|
||
assert.ok(groups[0].fields.every(field => field.path[1] === id))
|
||
const edited = readFormConfig(updateFormConfig(text, id, ['plugins', id, 'enabled'], true))
|
||
for (const other of Object.keys(config.plugins).filter(key => key !== id)) {
|
||
assert.deepEqual(edited.plugins[other], config.plugins[other])
|
||
assert.equal(updateFormConfig(text, id, ['plugins', other, 'enabled'], true), text)
|
||
}
|
||
assert.deepEqual(edited.meta, config.meta)
|
||
assert.deepEqual(edited.plugins[id].settings, config.plugins[id].settings)
|
||
}
|
||
assert.deepEqual(getFieldGroups('wechat_push', { plugins: {} }), [])
|
||
const invalidOther = structuredClone(config)
|
||
invalidOther.plugins.telegram_push.settings.timeout = 999
|
||
assert.deepEqual(validateFormConfig('spam_block', invalidOther), {})
|
||
assert.ok(validateFormConfig('telegram_push', invalidOther)['plugins.telegram_push.settings.timeout'])
|
||
})
|
||
|
||
test('文本输入的左右留白属于原生输入框，不影响数字、选择和开关控件', () => {
|
||
const require = createRequire(new URL('../../frontend/package.json', import.meta.url))
|
||
const { parse, compileStyle } = require('@vue/compiler-sfc')
|
||
const postcss = require('postcss')
|
||
const template = readFileSync(new URL('ConfigField/ConfigField.vue', root), 'utf8')
|
||
const css = readFileSync(new URL('ConfigField/ConfigField.css', root), 'utf8')
|
||
const { descriptor } = parse(template)
|
||
const ast = require('@vue/compiler-dom').parse(descriptor.template.content)
|
||
const inputs = []
|
||
const otherControls = []
|
||
const visit = node => {
|
||
if (node.tag === 'el-input') inputs.push(node)
|
||
if (['el-input-number', 'el-select', 'el-switch'].includes(node.tag)) otherControls.push(node)
|
||
for (const child of node.children || []) visit(child)
|
||
}
|
||
visit(ast)
|
||
const classes = node => node.props.find(prop => prop.type === 6 && prop.name === 'class')?.value?.content || ''
|
||
assert.equal(inputs.length, 3)
|
||
assert.ok(inputs.every(node => classes(node).split(/\s+/).includes('field-text-input')))
|
||
assert.ok(otherControls.every(node => !classes(node).includes('field-text-input')))
|
||
const compiled = compileStyle({ source: css, id: 'data-v-caret-test', scoped: true })
|
||
assert.deepEqual(compiled.errors, [])
|
||
const rules = new Map()
|
||
postcss.parse(compiled.code).walkRules(rule => {
|
||
if (rule.selector.startsWith('.field-text-input[data-v-caret-test] ')) {
|
||
const declarations = {}
|
||
rule.walkDecls(declaration => { declarations[declaration.prop] = declaration.value })
|
||
rules.set(rule.selector, declarations)
|
||
}
|
||
})
|
||
assert.deepEqual(rules.get('.field-text-input[data-v-caret-test] .el-input__wrapper'), { 'padding-inline': '0' })
|
||
assert.deepEqual(rules.get('.field-text-input[data-v-caret-test] .el-input__inner'), { 'padding-inline': '11px' })
|
||
})
|
||
|
||
test('分组只显示必要标题和字段错误，删除普通介绍、备注和凭据状态', () => {
|
||
const template = readFileSync(new URL('ConfigForm/ConfigForm.vue', root), 'utf8')
|
||
const css = readFileSync(new URL('ConfigForm/ConfigForm.css', root), 'utf8')
|
||
assert.match(template, /<h4>{{ group.title }}<\/h4>/)
|
||
assert.match(template, /form-group-heading/)
|
||
assert.doesNotMatch(template, /form-group-description|group\.description/)
|
||
assert.doesNotMatch(template, /aria-labelledby/)
|
||
assert.match(template, /<section\b[^>]*:aria-label="group.title"/)
|
||
assert.doesNotMatch(template, /credential-status|secretConfigured|form-group-note|group\.note/)
|
||
assert.match(template, /v-if="!groups.length" class="form-empty"/)
|
||
assert.match(template, /<ConfigField\b/)
|
||
for (const binding of ['v-for="field in group.fields"', ':value="getValue(config, field.path)"', ':error="errors[fieldKey(field)]"', ':disabled="disabled"', "emit('change', path, value)"]) {
|
||
assert.ok(template.includes(binding))
|
||
}
|
||
assert.match(css, /form-group-heading/)
|
||
assert.doesNotMatch(css, /form-group-description|credential-status|form-group-note/)
|
||
const formStyle = css.match(/\.config-form\s*\{([^}]+)\}/)?.[1] || ''
|
||
assert.doesNotMatch(formStyle, /margin-top|padding-top/)
|
||
assert.match(css, /\.config-form:not\(:first-child\)\s*\{\s*margin-top: 10px;/)
|
||
assert.match(css, /\.form-group \+ \.form-group\s*\{[^}]*border-top:/)
|
||
assert.match(
|
||
css,
|
||
/\.form-group\[data-group="verification"\] \.config-field > :deep\(\.el-switch\)\s*\{\s*align-items: flex-start;/
|
||
)
|
||
})
|
||
|
||
test('单字段更新完整保留内部数据，锁定字段和污染路径无法写入', () => {
|
||
const config = {
|
||
generation: 8, schemaVersion: 2, database: { type: 'sqlite', localRef: 'test.db', password: null },
|
||
domains: { primary: 'example.com', accepted: ['example.com'] },
|
||
security: { passwordVersion: 'argon2id', encryptionKeyRef: 'system-managed' },
|
||
future: { nested: [true, 1, null] }
|
||
}
|
||
const text = JSON.stringify(config, null, 2)
|
||
const updated = readFormConfig(updateFormConfig(text, 'base', ['domains', 'primary'], 'mail.example.com'))
|
||
assert.deepEqual(updated, { ...config, domains: { ...config.domains, primary: 'mail.example.com' } })
|
||
for (const path of [['database', 'type'], ['database', 'localRef'], ['generation'], ['security', 'encryptionKeyRef'], ['__proto__', 'polluted'], ['constructor', 'prototype', 'polluted'], ['relay', 'relayHost']]) {
|
||
assert.equal(updateFormConfig(text, 'base', path, 'changed'), text)
|
||
}
|
||
assert.equal({}.polluted, undefined)
|
||
})
|
||
|
||
test('基础配置隐藏额外访问主机、代理网段和数据库只读信息，保留内部值且无空分组', () => {
|
||
for (const type of ['sqlite', 'mysql', 'postgresql']) {
|
||
for (const tlsMode of ['direct', 'proxy']) {
|
||
const config = {
|
||
database: { type, localRef: 'preserved.db', name: 'smail', host: 'db.example.com', port: type === 'postgresql' ? 5432 : 3306, username: 'smail', password: null },
|
||
domains: { primary: 'example.com', web: 'mail.example.com', accepted: ['example.com'], accessHosts: ['alternate.example.com', '192.0.2.10'] },
|
||
http: { tlsMode, port: 8080, trustedProxyCidrs: ['127.0.0.1/32', '192.0.2.10/32'] },
|
||
security: { externalEmailEnabled: false, webAuthnEnabled: false }
|
||
}
|
||
const text = JSON.stringify(config)
|
||
const groups = getFieldGroups('base', config)
|
||
const keys = groups.flatMap(item => item.fields.map(input => input.path.join('.')))
|
||
const hidden = ['database.type', 'database.localRef', 'http.trustedProxyCidrs', 'domains.accessHosts']
|
||
assert.ok(groups.every(item => item.fields.length > 0))
|
||
assert.ok(hidden.every(key => !keys.includes(key)))
|
||
assert.doesNotMatch(JSON.stringify(groups), /额外允许的访问主机|按需填写域名或 IP 地址/)
|
||
assert.ok(keys.includes('domains.accepted'))
|
||
assert.equal(groups.some(item => item.id === 'database'), type !== 'sqlite')
|
||
for (const key of hidden) {
|
||
assert.equal(updateFormConfig(text, 'base', key.split('.'), 'changed'), text)
|
||
}
|
||
for (const key of ['security.externalEmailEnabled', 'security.webAuthnEnabled']) {
|
||
assert.ok(!keys.includes(key))
|
||
assert.equal(updateFormConfig(text, 'base', key.split('.'), true), text)
|
||
}
|
||
const updated = readFormConfig(updateFormConfig(text, 'base', ['http', 'port'], 9080))
|
||
assert.deepEqual(updated, { ...config, http: { ...config.http, port: 9080 } })
|
||
if (type !== 'sqlite') {
|
||
for (const key of ['database.name', 'database.host', 'database.port', 'database.username']) {
|
||
assert.ok(keys.includes(key))
|
||
}
|
||
}
|
||
}
|
||
}
|
||
})
|
||
|
||
test('开关、数字、空数字和列表保持真实类型，代理 HTTPS 正确联动', () => {
|
||
const modeField = getFieldGroups('base', {}).flatMap(group => group.fields).find(field => field.path.join('.') === 'http.tlsMode')
|
||
assert.match(modeField.hint, /不自动申请或续期 SSL 证书/)
|
||
assert.match(modeField.hint, /邮件协议仍需有效的本地证书/)
|
||
let text = JSON.stringify({ http: { tlsMode: 'direct', httpsEnabled: true, httpsPort: 443 } })
|
||
text = updateFormConfig(text, 'base', ['http', 'tlsMode'], 'proxy')
|
||
assert.deepEqual(readFormConfig(text).http, { tlsMode: 'proxy', httpsEnabled: false, httpsPort: 0, port: 8080 })
|
||
assert.equal(updateFormConfig(text, 'base', ['http', 'httpsEnabled'], true), text)
|
||
const direct = updateFormConfig(text, 'base', ['http', 'tlsMode'], 'direct')
|
||
const disabled = readFormConfig(updateFormConfig(direct, 'base', ['http', 'httpsEnabled'], false))
|
||
assert.equal(disabled.http.httpsEnabled, false)
|
||
assert.equal(disabled.http.httpsPort, 0)
|
||
text = updateFormConfig(text, 'base', ['http', 'port'], 8080)
|
||
assert.equal(readFormConfig(text).http.port, 8080)
|
||
text = updateFormConfig(text, 'base', ['http', 'port'], undefined)
|
||
assert.equal(readFormConfig(text).http.port, null)
|
||
assert.ok(validateFormConfig('base', readFormConfig(text))['http.port'])
|
||
for (const value of ['25', 0, -1, 65536, 1.5, null]) {
|
||
assert.ok(validateFormConfig('mail', { imap: { tlsPort: value } })['imap.tlsPort'])
|
||
}
|
||
assert.ok(validateFormConfig('mail', { imap: { tlsPort: 993 }, pop3: { port: 993, tlsPort: 995 } })['pop3.port'])
|
||
assert.deepEqual(validateFormConfig('mail', {
|
||
listener: { port: 25, starttlsPort: 587, tlsPort: 0, security: 'starttls' },
|
||
imap: { tlsPort: 143 }, pop3: { port: 110, tlsPort: 0 }, policy: { maxMessageBytes: 0 }
|
||
}), {})
|
||
})
|
||
|
||
test('域名校验兼容大小写和末尾点，拒绝重复项、空白和路径', () => {
|
||
const valid = { database: { type: 'sqlite' }, domains: { primary: 'Example.com.', web: 'mail.example.com', accepted: ['example.com'] } }
|
||
assert.deepEqual(validateFormConfig('base', valid), {})
|
||
for (const accepted of [[], ['example.com', 'Example.com.'], [''], [' https://example.com'], ['other.example.com'], 'example.com', [null]]) {
|
||
assert.ok(validateFormConfig('base', { ...valid, domains: { ...valid.domains, accepted } })['domains.accepted'])
|
||
}
|
||
for (const primary of ['https://example.com', 'example.com/path', 'bad..com', '-bad.com', '127.0.0.1', '例子.com']) {
|
||
assert.ok(validateFormConfig('base', { ...valid, domains: { ...valid.domains, primary } })['domains.primary'])
|
||
}
|
||
})
|
||
|
||
test('插件网络列表拒绝无效和重复目标，空设置可编辑且非标准设置不覆盖', () => {
|
||
const make = network => ({ plugins: { telegram_push: { permissions: { network }, settings: null } } })
|
||
const valid = { scheme: 'https', host: 'api.example.com', port: 443 }
|
||
assert.deepEqual(validateFormConfig('plugins', make([valid])), {})
|
||
for (const network of [{}, [null], [{ ...valid, host: '127.0.0.1' }], [{ ...valid, host: 'bad..com' }], [{ ...valid, scheme: 'http' }], [{ ...valid, port: null }], [valid, { ...valid, host: 'API.EXAMPLE.COM.' }]]) {
|
||
assert.ok(validateFormConfig('plugins', make(network))['plugins.telegram_push.permissions.network'])
|
||
}
|
||
const text = JSON.stringify(make([]))
|
||
const updated = readFormConfig(updateFormConfig(text, 'plugins', ['plugins', 'telegram_push', 'settings', 'timeout'], 30))
|
||
assert.equal(updated.plugins.telegram_push.settings.timeout, 30)
|
||
const legacy = JSON.stringify({ plugins: { telegram_push: { settings: ['preserve'] } } })
|
||
assert.equal(updateFormConfig(legacy, 'plugins', ['plugins', 'telegram_push', 'settings', 'timeout'], 30), legacy)
|
||
})
|
||
|
||
test('不同插件超时字段使用各自实际单位，不把毫秒当作秒', () => {
|
||
const groups = getFieldGroups('plugins', { plugins: { spam_block: { settings: { timeout: 10000 } }, telegram_push: { settings: { timeout: 30 } } } })
|
||
const spamTimeout = groups.find(group => group.id === 'spam_block').fields.find(field => field.path.at(-1) === 'timeout')
|
||
const telegramTimeout = groups.find(group => group.id === 'telegram_push').fields.find(field => field.path.at(-1) === 'timeout')
|
||
assert.equal(spamTimeout.label, '请求超时（毫秒）')
|
||
assert.equal(telegramTimeout.label, '请求超时（秒）')
|
||
assert.deepEqual(validateFormConfig('plugins', { plugins: { spam_block: { settings: { timeout: 10000 } } } }), {})
|
||
})
|
||
|
||
test('证书管理方式只展示三种业务模式并同步底层托管配置', () => {
|
||
const tls = { management: 'custom', mode: 'managed_upload', defaultDirectory: 'config/ssl', customDirectory: 'config/ssl/imported', certificateRef: 'config/ssl/imported/cert.pem', privateKeyRef: 'config/ssl/imported/key.pem' }
|
||
assert.deepEqual(validateFormConfig('ssl', { tls }), {})
|
||
const management = getFieldGroups('ssl', { tls }).flatMap(group => group.fields).find(field => field.path.join('.') === 'tls.management')
|
||
assert.deepEqual(management.options.map(option => [option.value, option.label]), [
|
||
['web_server', 'Web 服务器管理'],
|
||
['project', '项目自身管理'],
|
||
['custom', '自定义']
|
||
])
|
||
for (const customDirectory of ['C:/certs', '/etc/ssl', '../certs', 'config/../certs', 'config\\ssl', 'config//ssl']) {
|
||
assert.ok(validateFormConfig('ssl', { tls: { ...tls, customDirectory } })['tls.customDirectory'])
|
||
}
|
||
assert.ok(validateFormConfig('ssl', { tls: { ...tls, privateKeyRef: '' } })['tls.privateKeyRef'])
|
||
assert.ok(validateFormConfig('ssl', { tls: { ...tls, certificateRef: 'config/ssl/outside.pem' } })['tls.certificateRef'])
|
||
let updated = readFormConfig(updateFormConfig(JSON.stringify({ tls }), 'ssl', ['tls', 'management'], 'project'))
|
||
assert.equal(updated.tls.mode, tls.mode)
|
||
assert.equal(updated.tls.customDirectory, tls.customDirectory)
|
||
assert.equal(updated.tls.certificateRef, tls.certificateRef)
|
||
assert.equal(updated.tls.challenge, 'http')
|
||
assert.ok(getFieldGroups('ssl', updated).flatMap(group => group.fields).some(field => field.path.join('.') === 'tls.challenge'))
|
||
assert.ok(!getFieldGroups('ssl', updated).flatMap(group => group.fields).some(field => field.path.join('.') === 'tls.certificateRef'))
|
||
updated = readFormConfig(updateFormConfig(JSON.stringify(updated), 'ssl', ['tls', 'management'], 'web_server'))
|
||
assert.equal(updated.tls.mode, tls.mode)
|
||
assert.equal(updated.tls.customDirectory, tls.customDirectory)
|
||
assert.ok(getFieldGroups('ssl', updated).flatMap(group => group.fields).some(field => field.path.join('.') === 'tls.certificateRef'))
|
||
})
|
||
|
||
test('统一加密方式同步切换 SMTP、IMAP、POP3 与已配置中继', () => {
|
||
for (const [security, expected] of [
|
||
['both', { relay: 587, relaySecurity: 'starttls', smtpStartTLS: 587, smtpTLS: 465, imap: 993, pop3: 110, pop3TLS: 995 }],
|
||
['starttls', { relay: 587, relaySecurity: 'starttls', smtpStartTLS: 587, smtpTLS: 0, imap: 143, pop3: 110, pop3TLS: 0 }],
|
||
['implicit_tls', { relay: 465, relaySecurity: 'implicit_tls', smtpStartTLS: 0, smtpTLS: 465, imap: 993, pop3: 0, pop3TLS: 995 }]
|
||
]) {
|
||
const config = { generation: 9, listener: { port: 2525, starttlsPort: 2587, tlsPort: 2465 }, imap: { tlsPort: 2993 }, pop3: { port: 2110, tlsPort: 2995 }, relay: { relayHost: 'smtp.example.com', relayPort: 2525, from: 'sender@example.com', fromDomain: 'example.com', future: true } }
|
||
let text = JSON.stringify(config)
|
||
getFieldGroups('mail', config)
|
||
assert.equal(JSON.stringify(config), text)
|
||
text = updateFormConfig(text, 'mail', ['listener', 'security'], security)
|
||
const updated = readFormConfig(text)
|
||
assert.deepEqual(updated.listener, { security, port: 25, starttlsPort: expected.smtpStartTLS, tlsPort: expected.smtpTLS })
|
||
assert.equal(updated.imap.tlsPort, expected.imap)
|
||
assert.deepEqual(updated.pop3, { port: expected.pop3, tlsPort: expected.pop3TLS })
|
||
assert.deepEqual(updated.relay, { ...config.relay, security: expected.relaySecurity, relayPort: expected.relay })
|
||
const fields = getFieldGroups('mail', updated).flatMap(group => group.fields)
|
||
assert.equal(fields.find(field => field.path.at(-1) === 'relayPort').recommendedPort, expected.relay)
|
||
assert.equal(fields.find(field => field.path.join('.') === 'imap.tlsPort').label, security === 'starttls' ? 'IMAP 端口（STARTTLS）' : 'IMAP 端口（隐式 TLS）')
|
||
assert.equal(fields.some(field => field.path.join('.') === 'listener.starttlsPort'), security !== 'implicit_tls')
|
||
assert.equal(fields.some(field => field.path.join('.') === 'listener.tlsPort'), security !== 'starttls')
|
||
assert.equal(fields.some(field => field.path.join('.') === 'pop3.port'), security !== 'implicit_tls')
|
||
assert.equal(fields.some(field => field.path.join('.') === 'pop3.tlsPort'), security !== 'starttls')
|
||
text = updateFormConfig(text, 'mail', ['relay', 'relayPort'], 2526)
|
||
assert.equal(readFormConfig(text).relay.security, expected.relaySecurity)
|
||
}
|
||
const untouched = { listener: {}, relay: {} }
|
||
const text = JSON.stringify(untouched)
|
||
getFieldGroups('mail', untouched)
|
||
assert.equal(JSON.stringify(untouched), text)
|
||
const configured = readFormConfig(updateFormConfig(JSON.stringify({ listener: { security: 'starttls' }, relay: {} }), 'mail', ['relay', 'relayHost'], 'smtp.example.com'))
|
||
assert.equal(configured.relay.security, 'starttls')
|
||
assert.equal(configured.relay.relayPort, 587)
|
||
assert.deepEqual(validateFormConfig('mail', {
|
||
listener: { security: 'tls', port: 25, starttlsPort: 0, tlsPort: 465 },
|
||
relay: { relayHost: 'smtp.example.com', relayPort: 465, security: 'tls', from: 'sender@example.com', fromDomain: 'example.com' },
|
||
imap: { tlsPort: 993 }, pop3: { port: 0, tlsPort: 995 }
|
||
}), {})
|
||
const defaultsOnly = readFormConfig(updateFormConfig(JSON.stringify({ listener: {}, relay: { fromDomain: 'example.com' } }), 'mail', ['listener', 'security'], 'starttls'))
|
||
assert.deepEqual(defaultsOnly.relay, { fromDomain: 'example.com', security: 'starttls', relayPort: 587 })
|
||
assert.deepEqual(validateFormConfig('mail', defaultsOnly), {})
|
||
assert.deepEqual(validateFormConfig('mail', { listener: {}, relay: {}, imap: { tlsPort: 993 }, pop3: { port: 110, tlsPort: 995 } }), {})
|
||
assert.ok(validateFormConfig('mail', { listener: { security: 'unknown' }, relay: {}, imap: { tlsPort: 993 }, pop3: { port: 110, tlsPort: 995 } })['listener.security'])
|
||
})
|
||
|
||
test('内置 HTTPS 自动补全端口，反代禁用内置监听，已有自定义 HTTP 端口保留', () => {
|
||
let text = updateFormConfig('{}', 'base', ['http', 'tlsMode'], 'direct')
|
||
assert.deepEqual(readFormConfig(text).http, { tlsMode: 'direct', port: 80, httpsEnabled: true, httpsPort: 443 })
|
||
text = updateFormConfig(text, 'base', ['http', 'httpsEnabled'], false)
|
||
assert.equal(readFormConfig(text).http.httpsPort, 0)
|
||
assert.ok(!getFieldGroups('base', readFormConfig(text)).flatMap(group => group.fields).some(field => field.path.at(-1) === 'httpsPort'))
|
||
text = updateFormConfig(text, 'base', ['http', 'httpsEnabled'], true)
|
||
assert.equal(readFormConfig(text).http.httpsPort, 443)
|
||
text = updateFormConfig(text, 'base', ['http', 'port'], 9080)
|
||
text = updateFormConfig(text, 'base', ['http', 'tlsMode'], 'proxy')
|
||
assert.deepEqual(readFormConfig(text).http, { tlsMode: 'proxy', port: 9080, httpsEnabled: false, httpsPort: 0 })
|
||
assert.equal(updateFormConfig(text, 'base', ['http', 'httpsPort'], 8443), text)
|
||
text = updateFormConfig(text, 'base', ['http', 'tlsMode'], 'direct')
|
||
assert.equal(readFormConfig(text).http.port, 9080)
|
||
assert.equal(readFormConfig(text).http.httpsPort, 443)
|
||
const custom = JSON.stringify({ http: { httpsEnabled: false, httpsPort: 8443, port: 9080 } })
|
||
assert.equal(readFormConfig(updateFormConfig(custom, 'base', ['http', 'tlsMode'], 'direct')).http.httpsPort, 8443)
|
||
})
|
||
|
||
test('加密配置校验拦截监听冲突和未统一的中继加密方式', () => {
|
||
const listeners = {
|
||
listener: { port: 25, starttlsPort: 587, tlsPort: 465 },
|
||
imap: { tlsPort: 993 },
|
||
pop3: { port: 110, tlsPort: 995 }
|
||
}
|
||
for (const port of [80, 0]) {
|
||
assert.ok(validateFormConfig('base', { http: { port, httpsEnabled: true, httpsPort: 80 } })['http.httpsPort'])
|
||
}
|
||
const unified = { ...listeners, listener: { ...listeners.listener, security: 'starttls', tlsPort: 0 }, imap: { tlsPort: 143 }, pop3: { port: 110, tlsPort: 0 } }
|
||
const errors = validateFormConfig('mail', { ...unified, relay: { relayHost: 'smtp.example.com', security: 'starttls', relayPort: 0, from: 'sender@example.com', fromDomain: 'example.com' } })
|
||
assert.ok(errors['relay.relayPort'])
|
||
assert.deepEqual(validateFormConfig('mail', { ...unified, relay: {} }), {})
|
||
assert.deepEqual(validateFormConfig('mail', { ...unified, relay: { security: 'starttls', relayPort: 2525, relayHost: 'smtp.example.com', from: 'sender@example.com', fromDomain: 'example.com' } }), {})
|
||
assert.ok(validateFormConfig('mail', { ...unified, relay: { security: 'implicit_tls', relayPort: 465, relayHost: 'smtp.example.com', from: 'sender@example.com', fromDomain: 'example.com' } })['listener.security'])
|
||
})
|