wehub-resource-sync
38 lines
1.8 KiB
TypeScript
Vendored
38 lines
1.8 KiB
TypeScript
Vendored
import assert from "node:assert/strict";
|
|
import { test } from "vitest";
|
|
import { classifyRedisCommand, evaluateRedisCommandSafety, firstRedisCommandToken, parseRedisCommandArgv } from "../src/redis-command.js";
|
|
|
|
test("firstRedisCommandToken normalizes the command name", () => {
|
|
assert.equal(firstRedisCommandToken(" get session:1"), "GET");
|
|
});
|
|
|
|
test("parseRedisCommandArgv handles quoted values and escapes", () => {
|
|
assert.deepEqual(parseRedisCommandArgv('SET session:1 "hello world"'), ["SET", "session:1", "hello world"]);
|
|
assert.deepEqual(parseRedisCommandArgv("SET key line\\nnext;"), ["SET", "key", "line\nnext"]);
|
|
assert.throws(() => parseRedisCommandArgv('GET "unterminated'), /unterminated quote/);
|
|
});
|
|
|
|
test("classifyRedisCommand mirrors DBX redis command safety classes", () => {
|
|
assert.equal(classifyRedisCommand("GET session:1"), "allowed");
|
|
assert.equal(classifyRedisCommand("SET session:1 value"), "write");
|
|
assert.equal(classifyRedisCommand("DEL session:1"), "confirm");
|
|
assert.equal(classifyRedisCommand("KEYS *"), "blocked");
|
|
});
|
|
|
|
test("evaluateRedisCommandSafety blocks write commands when writes are disabled", () => {
|
|
const decision = evaluateRedisCommandSafety("SET session:1 value", { allowWrites: false });
|
|
|
|
assert.equal(decision.allowed, false);
|
|
assert.match(decision.reason ?? "", /read-only/i);
|
|
});
|
|
|
|
test("evaluateRedisCommandSafety requires dangerous mode for blocked commands", () => {
|
|
const blocked = evaluateRedisCommandSafety("KEYS *", { allowWrites: true, allowDangerous: false });
|
|
const allowed = evaluateRedisCommandSafety("KEYS *", { allowWrites: true, allowDangerous: true });
|
|
|
|
assert.equal(blocked.allowed, false);
|
|
assert.match(blocked.reason ?? "", /dangerous/i);
|
|
assert.equal(allowed.allowed, true);
|
|
assert.equal(allowed.skipSafetyCheck, true);
|
|
});
|