base/apis/record_crud_external_auth_test.go at dev

mirror of https://github.com/hanzoai/base.git synced 2026-10-21 03:41:50 +00:00

Files

T

zeekay 3fe483ac1b refactor: remove _hz_ prefix from collection IDs, add brand-neutral logo config

Remove all _hz_ prefixes from collection IDs, internal markers, and test
fixtures. The default users collection is now _users_auth_ instead of
_hz_users_auth_. Internal SQL parser tokens renamed from __hz_join__/__hz_discard__
to __join__/__discard__. Backup prefix changed from @auto_hz_backup_ to
@auto_backup_. Test database updated with correct collection IDs and indexes.
JWT tokens in test files regenerated with new collection IDs.

Add LogoURL field to MetaConfig so the admin UI logo is configurable via
app settings instead of hardcoded. FullPage.svelte and App.svelte sidebar
now read logo and app name from the settings store, falling back to
defaults when not configured.

2026-03-01 23:48:36 -07:00

317 lines

10 KiB

Go

Raw Permalink Blame History

 package apis_test
 import (
 	"net/http"
 	"strings"
 	"testing"
 	"github.com/hanzoai/base/core"
 	"github.com/hanzoai/base/tests"
 )
 func TestRecordCrudExternalAuthList(t *testing.T) {
 	t.Parallel()
 	scenarios := []tests.ApiScenario{
 		{
 			Name:           "guest",
 			Method:         http.MethodGet,
 			URL:            "/api/collections/" + core.CollectionNameExternalAuths + "/records",
 			ExpectedStatus: 200,
 			ExpectedContent: []string{
 				`"page":1`,
 				`"perPage":30`,
 				`"totalItems":0`,
 				`"totalPages":0`,
 				`"items":[]`,
 			},
 			ExpectedEvents: map[string]int{
 				"*":                    0,
 				"OnRecordsListRequest": 1,
 			},
 		},
 		{
 			Name:   "regular auth with externalAuths",
 			Method: http.MethodGet,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records",
 			Headers: map[string]string{
 				// clients, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJ2ODUxcTRyNzkwcmhrbmwiLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiZ2szOTBxZWdzNHk0N3duIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.xCGkWuACPNAEUBLQVK4KKp72HzA2aOtWZnP47iBs5os",
 			},
 			ExpectedStatus: 200,
 			ExpectedContent: []string{
 				`"page":1`,
 				`"perPage":30`,
 				`"totalItems":1`,
 				`"totalPages":1`,
 				`"id":"f1z5b3843pzc964"`,
 			},
 			ExpectedEvents: map[string]int{
 				"*":                    0,
 				"OnRecordsListRequest": 1,
 				"OnRecordEnrich":       1,
 			},
 		},
 		{
 			Name:   "regular auth without externalAuths",
 			Method: http.MethodGet,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records",
 			Headers: map[string]string{
 				// users, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoib2FwNjQwY290NHlydTJzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.h9l_1A2r42IIOOi-5IjuzCGuUhlMmxdFDVhncE3FUqg",
 			},
 			ExpectedStatus: 200,
 			ExpectedContent: []string{
 				`"page":1`,
 				`"perPage":30`,
 				`"totalItems":0`,
 				`"totalPages":0`,
 				`"items":[]`,
 			},
 			ExpectedEvents: map[string]int{
 				"*":                    0,
 				"OnRecordsListRequest": 1,
 			},
 		},
 	}
 	for _, scenario := range scenarios {
 		scenario.Test(t)
 	}
 }
 func TestRecordCrudExternalAuthView(t *testing.T) {
 	t.Parallel()
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "guest",
 			Method:          http.MethodGet,
 			URL:             "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			ExpectedStatus:  404,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "non-owner",
 			Method: http.MethodGet,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			Headers: map[string]string{
 				// clients, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJ2ODUxcTRyNzkwcmhrbmwiLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiZ2szOTBxZWdzNHk0N3duIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.xCGkWuACPNAEUBLQVK4KKp72HzA2aOtWZnP47iBs5os",
 			},
 			ExpectedStatus:  404,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "owner",
 			Method: http.MethodGet,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			Headers: map[string]string{
 				// users, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.AuFTIzCsdLEy-5adFzpjZzbqAdTP6Iu9B1wPBAxLBgo",
 			},
 			ExpectedStatus:  200,
 			ExpectedContent: []string{`"id":"dlmflokuq1xl342"`},
 			ExpectedEvents: map[string]int{
 				"*":                   0,
 				"OnRecordViewRequest": 1,
 				"OnRecordEnrich":      1,
 			},
 		},
 	}
 	for _, scenario := range scenarios {
 		scenario.Test(t)
 	}
 }
 func TestRecordCrudExternalAuthDelete(t *testing.T) {
 	t.Parallel()
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "guest",
 			Method:          http.MethodDelete,
 			URL:             "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			ExpectedStatus:  404,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "non-owner",
 			Method: http.MethodDelete,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			Headers: map[string]string{
 				// clients, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJ2ODUxcTRyNzkwcmhrbmwiLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiZ2szOTBxZWdzNHk0N3duIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.xCGkWuACPNAEUBLQVK4KKp72HzA2aOtWZnP47iBs5os",
 			},
 			ExpectedStatus:  404,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "owner",
 			Method: http.MethodDelete,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			Headers: map[string]string{
 				// users, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.AuFTIzCsdLEy-5adFzpjZzbqAdTP6Iu9B1wPBAxLBgo",
 			},
 			ExpectedStatus: 204,
 			ExpectedEvents: map[string]int{
 				"*":                          0,
 				"OnRecordDeleteRequest":      1,
 				"OnModelDelete":              1,
 				"OnModelDeleteExecute":       1,
 				"OnModelAfterDeleteSuccess":  1,
 				"OnRecordDelete":             1,
 				"OnRecordDeleteExecute":      1,
 				"OnRecordAfterDeleteSuccess": 1,
 			},
 		},
 	}
 	for _, scenario := range scenarios {
 		scenario.Test(t)
 	}
 }
 func TestRecordCrudExternalAuthCreate(t *testing.T) {
 	t.Parallel()
 	body := func() *strings.Reader {
 		return strings.NewReader(`{
 			"recordRef":     "4q1xlclmfloku33",
 			"collectionRef": "_users_auth_",
 			"provider":      "github",
 			"providerId":    "abc"
 		}`)
 	}
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "guest",
 			Method:          http.MethodPost,
 			URL:             "/api/collections/" + core.CollectionNameExternalAuths + "/records",
 			Body:            body(),
 			ExpectedStatus:  403,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "owner regular auth",
 			Method: http.MethodPost,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records",
 			Headers: map[string]string{
 				// users, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJfdXNlcnNfYXV0aF8iLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiNHExeGxjbG1mbG9rdTMzIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.AuFTIzCsdLEy-5adFzpjZzbqAdTP6Iu9B1wPBAxLBgo",
 			},
 			Body:            body(),
 			ExpectedStatus:  403,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "superusers auth",
 			Method: http.MethodPost,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records",
 			Headers: map[string]string{
 				// superusers, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJoYmNfMzE0MjYzNTgyMyIsImV4cCI6MjUyNDYwNDQ2MSwiaWQiOiJzeXdiaGVjbmg0NnJobTAiLCJyZWZyZXNoYWJsZSI6dHJ1ZSwidHlwZSI6ImF1dGgifQ.CXBf8BazmUeg2RnJW8OEs1UFYF41rbCMOa6YZa4wZio",
 			},
 			Body: body(),
 			ExpectedContent: []string{
 				`"recordRef":"4q1xlclmfloku33"`,
 				`"providerId":"abc"`,
 			},
 			ExpectedStatus: 200,
 			ExpectedEvents: map[string]int{
 				"*":                          0,
 				"OnRecordCreateRequest":      1,
 				"OnRecordEnrich":             1,
 				"OnModelCreate":              1,
 				"OnModelCreateExecute":       1,
 				"OnModelAfterCreateSuccess":  1,
 				"OnModelValidate":            1,
 				"OnRecordCreate":             1,
 				"OnRecordCreateExecute":      1,
 				"OnRecordAfterCreateSuccess": 1,
 				"OnRecordValidate":           1,
 			},
 		},
 	}
 	for _, scenario := range scenarios {
 		scenario.Test(t)
 	}
 }
 func TestRecordCrudExternalAuthUpdate(t *testing.T) {
 	t.Parallel()
 	body := func() *strings.Reader {
 		return strings.NewReader(`{
 			"providerId": "abc"
 		}`)
 	}
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "guest",
 			Method:          http.MethodPatch,
 			URL:             "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			Body:            body(),
 			ExpectedStatus:  403,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "owner regular auth",
 			Method: http.MethodPatch,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			Headers: map[string]string{
 				// clients, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJ2ODUxcTRyNzkwcmhrbmwiLCJleHAiOjI1MjQ2MDQ0NjEsImlkIjoiZ2szOTBxZWdzNHk0N3duIiwicmVmcmVzaGFibGUiOnRydWUsInR5cGUiOiJhdXRoIn0.xCGkWuACPNAEUBLQVK4KKp72HzA2aOtWZnP47iBs5os",
 			},
 			Body:            body(),
 			ExpectedStatus:  403,
 			ExpectedContent: []string{`"data":{}`},
 			ExpectedEvents:  map[string]int{"*": 0},
 		},
 		{
 			Name:   "superusers auth",
 			Method: http.MethodPatch,
 			URL:    "/api/collections/" + core.CollectionNameExternalAuths + "/records/dlmflokuq1xl342",
 			Headers: map[string]string{
 				// superusers, [email protected]
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJoYmNfMzE0MjYzNTgyMyIsImV4cCI6MjUyNDYwNDQ2MSwiaWQiOiJzeXdiaGVjbmg0NnJobTAiLCJyZWZyZXNoYWJsZSI6dHJ1ZSwidHlwZSI6ImF1dGgifQ.CXBf8BazmUeg2RnJW8OEs1UFYF41rbCMOa6YZa4wZio",
 			},
 			Body: body(),
 			ExpectedContent: []string{
 				`"id":"dlmflokuq1xl342"`,
 				`"providerId":"abc"`,
 			},
 			ExpectedStatus: 200,
 			ExpectedEvents: map[string]int{
 				"*":                          0,
 				"OnRecordUpdateRequest":      1,
 				"OnRecordEnrich":             1,
 				"OnModelUpdate":              1,
 				"OnModelUpdateExecute":       1,
 				"OnModelAfterUpdateSuccess":  1,
 				"OnModelValidate":            1,
 				"OnRecordUpdate":             1,
 				"OnRecordUpdateExecute":      1,
 				"OnRecordAfterUpdateSuccess": 1,
 				"OnRecordValidate":           1,
 			},
 		},
 	}
 	for _, scenario := range scenarios {
 		scenario.Test(t)
 	}
 }

317 lines 10 KiB Go Raw Permalink Blame History

317 lines

10 KiB

Go

Raw Permalink Blame History