Alexey Milovidov e9e5851a80 Address review: add integration test for enabled /webterminal flow ...

Adds `tests/integration/test_webterminal/` covering the enabled
WebSocket endpoint, as requested in unresolved review feedback. The
existing stateless test `04141_webterminal_disabled.sh` only exercised
the disabled gate; the new integration test enables
`allow_experimental_webterminal` and validates the security-sensitive
auth/handshake paths.

Cases covered:
- `GET /webterminal` serves the HTML page when the gate is open.
- A valid auth frame establishes a session and the embedded
  `clickhouse-client` forwards PTY data as binary WebSocket frames.
- A bad-credentials auth frame does not establish a session - the
  client observes either an EOF or a close frame, never PTY data.
- A first frame that is valid JSON but not an `auth` message triggers
  a `1008` close (`Invalid auth message`).

2026-05-11 11:44:23 +00:00

0 lines

0 B

Python

Raw Permalink Blame History

The file is empty.