2026-07-12 11:06:21 -07:00
|
|
|
"use strict";
|
|
|
|
|
const test = require("node:test");
|
|
|
|
|
const assert = require("node:assert/strict");
|
|
|
|
|
const fs = require("node:fs");
|
|
|
|
|
const source = fs.readFileSync(__dirname + "/engine-v3.js", "utf8");
|
2026-07-15 21:34:27 +08:00
|
|
|
const actions = require(__dirname + "/authorized-actions.js");
|
2026-07-12 11:06:21 -07:00
|
|
|
|
|
|
|
|
test("direct email bypass is removed", () => {
|
|
|
|
|
assert.doesNotMatch(source, /requestEmail|email_mode:\s*requestEmail|直接使用，不查白名单/);
|
|
|
|
|
assert.match(source, /禁止客户端指定邮箱/);
|
|
|
|
|
});
|
|
|
|
|
test("work-session lifecycle endpoints exist", () => {
|
|
|
|
|
for (const route of ["/auth/session/request", "/auth/session/confirm", "/auth/session/exec", "/auth/session/end"]) assert.match(source, new RegExp(route.replaceAll("/", "\\/")));
|
|
|
|
|
});
|
|
|
|
|
test("Zhulan and Canger identities are registered", () => {
|
2026-07-12 22:51:13 -07:00
|
|
|
assert.match(source, /ICE-GL-ZL-001/);
|
2026-07-12 11:06:21 -07:00
|
|
|
assert.match(source, /TCS-GL-009/);
|
|
|
|
|
assert.match(source, /PTS-VA-001-EED/);
|
|
|
|
|
assert.match(source, /ICE-GL-CA001/);
|
|
|
|
|
});
|
2026-07-15 21:34:27 +08:00
|
|
|
test("arbitrary shell commands are not accepted by the authorization flow", () => {
|
|
|
|
|
assert.doesNotMatch(source, /execCmd\(body\.cmd/);
|
|
|
|
|
assert.doesNotMatch(source, /execCmd\(op\.cmd/);
|
|
|
|
|
assert.match(source, /必须指定已登记 action/);
|
|
|
|
|
assert.deepEqual(actions.listActions().map((item) => item.id), ["inspect-gatekeeper", "sync-status"]);
|
|
|
|
|
assert.equal(actions.getAction("not-registered"), null);
|
|
|
|
|
});
|
|
|
|
|
test("Gatekeeper and sync-agent ports are separated", () => {
|
|
|
|
|
assert.match(source, /process\.argv\[2\] \|\| '3911'/);
|
|
|
|
|
const syncConfig = fs.readFileSync(__dirname + "/../../../server-tools/fifth-domain-sync-agent/config.example.json", "utf8");
|
|
|
|
|
assert.match(syncConfig, /"listen_port": 3982/);
|
|
|
|
|
});
|
