b3d876fa85
- compression_concurrency wired to boot config (state.rs) and removed as a dead admin control. - patch_config gains per-key integer/range validation so numerically-valid-but- nonsensical values (-1/NaN/3.5) are rejected instead of silently reverting to default at read time. - clearAuth now also clears the display name (shared-device residual). - e2e/Caddyfile.test mirrors prod security headers + the SSE encode-exclusion so the test stack is representative and can catch header regressions. - .gitignore: ignore root-level Playwright artifacts (test-results/, report). - docs: USER_JOURNEYS §10 and SECURITY-BACKLOG updated to match the implemented read-only-ban behavior and the export-path fix. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
69 lines
2.8 KiB
TypeScript
69 lines
2.8 KiB
TypeScript
/**
|
|
* Shared seed helpers so specs don't each hand-roll the upload/comment create
|
|
* flow. Centralising the API contract (routes, field names, expected statuses)
|
|
* means an API change is a one-file edit, not a 7-file hunt.
|
|
*/
|
|
import { readFileSync } from 'node:fs';
|
|
import { join } from 'node:path';
|
|
import { uploadRaw } from './upload-client';
|
|
import { db } from '../fixtures/db';
|
|
|
|
const BASE = process.env.E2E_FRONTEND_URL ?? 'http://localhost:3101';
|
|
|
|
// A real, decodable JPEG. Magic-bytes-only fakes now get auto-cleaned by the
|
|
// backend when compression fails (a failed transcode refunds quota + deletes the
|
|
// row), which would delete the seeded upload out from under the test. Read lazily
|
|
// at call time (cwd is the e2e dir at runtime, like the gallery-path spec) so test
|
|
// collection can't trip on a module-load read.
|
|
let sampleJpg: Buffer | null = null;
|
|
function sampleImage(): Buffer {
|
|
if (!sampleJpg) {
|
|
sampleJpg = readFileSync(join(process.cwd(), 'fixtures', 'media', 'sample.jpg'));
|
|
}
|
|
return sampleJpg;
|
|
}
|
|
|
|
export type SeedUploadOptions = {
|
|
caption?: string;
|
|
/** Mark compression done so the card is fully rendered in the feed. Default true. */
|
|
visible?: boolean;
|
|
};
|
|
|
|
/** Seed a real, accepted upload owned by `jwt` and return its id. */
|
|
export async function seedUpload(jwt: string, opts: SeedUploadOptions = {}): Promise<string> {
|
|
const res = await uploadRaw(jwt, sampleImage(), {
|
|
filename: 'a.jpg',
|
|
contentType: 'image/jpeg',
|
|
caption: opts.caption,
|
|
});
|
|
if (res.status !== 201) throw new Error(`seedUpload failed: ${res.status} ${await res.text()}`);
|
|
const { id } = await res.json();
|
|
if (opts.visible !== false) await db.setUploadCompressionStatus(id, 'done');
|
|
return id;
|
|
}
|
|
|
|
/** Seed a comment on `uploadId` authored by `jwt`; return its id. */
|
|
export async function seedComment(jwt: string, uploadId: string, body: string): Promise<string> {
|
|
const res = await fetch(`${BASE}/api/v1/upload/${uploadId}/comments`, {
|
|
method: 'POST',
|
|
headers: { Authorization: `Bearer ${jwt}`, 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({ body }),
|
|
});
|
|
if (res.status !== 201) throw new Error(`seedComment failed: ${res.status} ${await res.text()}`);
|
|
return (await res.json()).id;
|
|
}
|
|
|
|
/** Read the comments for an upload as `jwt`. */
|
|
export async function listComments(jwt: string, uploadId: string): Promise<any[]> {
|
|
const res = await fetch(`${BASE}/api/v1/upload/${uploadId}/comments`, {
|
|
headers: { Authorization: `Bearer ${jwt}` },
|
|
});
|
|
return res.json();
|
|
}
|
|
|
|
/** Resolve a single upload row from a feed response whose envelope shape isn't pinned. */
|
|
export function findFeedRow(feed: any, id: string): any {
|
|
const list: any[] = feed.uploads ?? feed.items ?? feed;
|
|
return Array.isArray(list) ? list.find((u: any) => u.id === id) : undefined;
|
|
}
|