wehub-resource-sync
58 lines
2.0 KiB
TypeScript
58 lines
2.0 KiB
TypeScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
|
|
const tokenizedRequest = await import(
|
|
"../../src/app/api/v1/vscode/raw/[token]/tokenizedRequest.ts"
|
|
);
|
|
|
|
function captureWarn<T>(fn: () => T): { result: T; warnings: string[] } {
|
|
const warnings: string[] = [];
|
|
const original = console.warn;
|
|
console.warn = (...args: unknown[]) => {
|
|
warnings.push(args.map((a) => String(a)).join(" "));
|
|
};
|
|
try {
|
|
return { result: fn(), warnings };
|
|
} finally {
|
|
console.warn = original;
|
|
}
|
|
}
|
|
|
|
test.beforeEach(() => {
|
|
tokenizedRequest.__vscodeRawInternals.resetTokenInUrlWarning();
|
|
});
|
|
|
|
test("warns once when a path token is used, then stays quiet (Seg4)", () => {
|
|
const makeReq = () =>
|
|
new Request("http://localhost/api/v1/vscode/raw/sk-secret-token/models");
|
|
|
|
const first = captureWarn(() => tokenizedRequest.withPathTokenApiKey(makeReq()));
|
|
assert.equal(
|
|
first.warnings.some((line) => line.includes("[VSCODE][SECURITY]")),
|
|
true,
|
|
"expected a security warning on the first path-token request"
|
|
);
|
|
|
|
const second = captureWarn(() => tokenizedRequest.withPathTokenApiKey(makeReq()));
|
|
assert.equal(second.warnings.length, 0, "must not warn again within the same process");
|
|
});
|
|
|
|
test("propagates the path token into x-api-key / authorization headers", () => {
|
|
const request = new Request("http://localhost/api/v1/vscode/raw/sk-secret-token/models");
|
|
const { result } = captureWarn(() => tokenizedRequest.withPathTokenApiKey(request));
|
|
|
|
assert.equal(result.headers.get("x-api-key"), "sk-secret-token");
|
|
assert.equal(result.headers.get("authorization"), "Bearer sk-secret-token");
|
|
});
|
|
|
|
test("does not warn when there is no resolvable token", () => {
|
|
// No /vscode segment → inferTokenFromVscodePath returns null and the request passes through.
|
|
const request = new Request("http://localhost/api/v1/models");
|
|
const { result, warnings } = captureWarn(() =>
|
|
tokenizedRequest.withPathTokenApiKey(request)
|
|
);
|
|
|
|
assert.equal(warnings.length, 0);
|
|
assert.equal(result.headers.get("x-api-key"), null);
|
|
});
|