wehub-resource-sync
130 lines
4.8 KiB
TypeScript
130 lines
4.8 KiB
TypeScript
import test from "node:test";
|
||
import assert from "node:assert/strict";
|
||
import { zipSync, strToU8 } from "fflate";
|
||
import { extractCodexAuthZip } from "../../src/lib/oauth/utils/codexAuthZipExtract.ts";
|
||
import { extractClaudeAuthZip } from "../../src/lib/oauth/utils/claudeAuthZipExtract.ts";
|
||
import { extractJsonZip } from "../../src/lib/oauth/utils/jsonZipExtract.ts";
|
||
|
||
// ──── Helpers ─────────────────────────────────────────────────────────────────
|
||
|
||
function makeZip(files: Record<string, string>): Buffer {
|
||
const entries: Record<string, Uint8Array> = {};
|
||
for (const [name, content] of Object.entries(files)) {
|
||
entries[name] = strToU8(content);
|
||
}
|
||
return Buffer.from(zipSync(entries));
|
||
}
|
||
|
||
const VALID_AUTH = JSON.stringify({ auth_mode: "chatgpt", tokens: {}, OPENAI_API_KEY: null });
|
||
|
||
// ──── Tests ───────────────────────────────────────────────────────────────────
|
||
|
||
test("extractCodexAuthZip: happy path — returns all .json entries", () => {
|
||
const zip = makeZip({
|
||
"auth-a.json": VALID_AUTH,
|
||
"auth-b.json": VALID_AUTH,
|
||
"auth-c.json": VALID_AUTH,
|
||
});
|
||
const files = extractCodexAuthZip(zip);
|
||
assert.equal(files.length, 3);
|
||
const names = files.map((f) => f.name).sort();
|
||
assert.deepEqual(names, ["auth-a.json", "auth-b.json", "auth-c.json"]);
|
||
});
|
||
|
||
test("auth ZIP extractors share the generic JSON ZIP behavior", () => {
|
||
const zip = makeZip({
|
||
"auth-a.json": VALID_AUTH,
|
||
"nested/auth-b.json": VALID_AUTH,
|
||
"README.md": "# Readme",
|
||
});
|
||
|
||
assert.deepEqual(extractCodexAuthZip(zip), extractJsonZip(zip));
|
||
assert.deepEqual(extractClaudeAuthZip(zip), extractJsonZip(zip));
|
||
});
|
||
|
||
test("extractCodexAuthZip: ignores non-.json entries", () => {
|
||
const zip = makeZip({
|
||
"auth-a.json": VALID_AUTH,
|
||
"README.md": "# Readme",
|
||
"config.yaml": "key: value",
|
||
});
|
||
const files = extractCodexAuthZip(zip);
|
||
assert.equal(files.length, 1);
|
||
assert.equal(files[0].name, "auth-a.json");
|
||
});
|
||
|
||
test("extractCodexAuthZip: rejects archive with no .json files", () => {
|
||
const zip = makeZip({ "README.md": "# Readme" });
|
||
assert.throws(() => extractCodexAuthZip(zip), /no \.json files/i);
|
||
});
|
||
|
||
test("extractCodexAuthZip: rejects entry with .. in path", () => {
|
||
const zip = makeZip({ "../../../etc/passwd.json": '{"evil":true}' });
|
||
assert.throws(() => extractCodexAuthZip(zip), /unsafe/i);
|
||
});
|
||
|
||
test("extractCodexAuthZip: rejects absolute path entries", () => {
|
||
const zip = makeZip({ "/etc/passwd.json": '{"evil":true}' });
|
||
assert.throws(() => extractCodexAuthZip(zip), /unsafe/i);
|
||
});
|
||
|
||
test("extractCodexAuthZip: rejects archive exceeding max file count", () => {
|
||
const files: Record<string, string> = {};
|
||
for (let i = 0; i <= 50; i++) {
|
||
files[`auth-${i}.json`] = VALID_AUTH;
|
||
}
|
||
const zip = makeZip(files);
|
||
assert.throws(() => extractCodexAuthZip(zip), /max allowed is 50/i);
|
||
});
|
||
|
||
test("extractCodexAuthZip: respects custom maxFiles option", () => {
|
||
const zip = makeZip({
|
||
"auth-a.json": VALID_AUTH,
|
||
"auth-b.json": VALID_AUTH,
|
||
"auth-c.json": VALID_AUTH,
|
||
});
|
||
assert.throws(() => extractCodexAuthZip(zip, { maxFiles: 2 }), /max allowed is 2/i);
|
||
});
|
||
|
||
test("extractCodexAuthZip: rejects individual file exceeding per-file cap", () => {
|
||
const bigContent = "x".repeat(257 * 1024);
|
||
const zip = makeZip({ "big.json": bigContent });
|
||
assert.throws(() => extractCodexAuthZip(zip, { maxFileSizeBytes: 256 * 1024 }), /exceeds/i);
|
||
});
|
||
|
||
test("extractCodexAuthZip: rejects total size exceeding cap", () => {
|
||
// Each chunk is 4 MB — under the per-file override (5 MB) but 3 × 4 MB = 12 MB > 10 MB total
|
||
const chunk = "x".repeat(4 * 1024 * 1024);
|
||
const zip = makeZip({
|
||
"a.json": chunk,
|
||
"b.json": chunk,
|
||
"c.json": chunk,
|
||
});
|
||
assert.throws(
|
||
() =>
|
||
extractCodexAuthZip(zip, {
|
||
maxFileSizeBytes: 5 * 1024 * 1024,
|
||
maxTotalSizeBytes: 10 * 1024 * 1024,
|
||
}),
|
||
/total/i
|
||
);
|
||
});
|
||
|
||
test("extractCodexAuthZip: content is returned as UTF-8 string", () => {
|
||
const content = JSON.stringify({ hello: "wörld 🌍" });
|
||
const zip = makeZip({ "auth.json": content });
|
||
const files = extractCodexAuthZip(zip);
|
||
assert.equal(files[0].content, content);
|
||
});
|
||
|
||
test("extractCodexAuthZip: uses basename from nested path entries", () => {
|
||
const zip = makeZip({ "subdir/auth-nested.json": VALID_AUTH });
|
||
const files = extractCodexAuthZip(zip);
|
||
assert.equal(files[0].name, "auth-nested.json");
|
||
});
|
||
|
||
test("extractCodexAuthZip: rejects corrupt / non-ZIP buffer", () => {
|
||
const notAZip = Buffer.from("this is not a zip file");
|
||
assert.throws(() => extractCodexAuthZip(notAZip), /could not parse zip/i);
|
||
});
|