pepepper/fluxer
1
0 Fork 0
mirror of https://github.com/fluxerapp/fluxer synced 2026-10-18 13:35:42 +09:00
Code Issues Packages Projects Releases Wiki Activity

ci: add tests (#1141)

Browse Source
This commit is contained in:
Jiralite authored and GitHub committed 2026-06-23 04:41:46 +02:00
1 parent ad99de22bc
commit 545814abc1
152 files changed
+287 -532
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

fluxer_api/src/api/auth/tests/EmailVerificationFlow.test.ts
+6 -1
View File
@@ -30,7 +30,12 @@ describe('Email verification flow', () => {
await harness?.shutdown();
});
it('allows resending verification email and verifying email', async () => {
const account = await createTestAccount(harness);
const account = await createTestAccount(harness, {skipEmailVerification: true});
await createBuilderWithoutAuth(harness)
.post(`/test/users/${account.userId}/security-flags`)
.body({email_verified: false})
.expect(200)
.execute();
await createBuilder(harness, account.token).post('/auth/verify/resend').body({}).expect(204).execute();
const emails = await listTestEmails(harness, {recipient: account.email});
const verificationEmail = findLastTestEmail(emails, 'email_verification');
fluxer_api/src/api/auth/tests/MfaEmailVerificationRequired.test.ts
+11 -2
View File
@@ -22,8 +22,17 @@ describe('MFA requires verified email', () => {
afterAll(async () => {
await harness?.shutdown();
});
it('rejects TOTP enablement for unverified accounts', async () => {
async function createUnverifiedAccount() {
const account = await createTestAccount(harness, {skipEmailVerification: true});
await createBuilder(harness, '')
.post(`/test/users/${account.userId}/security-flags`)
.body({email_verified: false})
.expect(200)
.execute();
return account;
}
it('rejects TOTP enablement for unverified accounts', async () => {
const account = await createUnverifiedAccount();
const secret = createTotpSecret();
const {json} = await createBuilder<ErrorResponse>(harness, account.token)
.post('/users/@me/mfa/totp/enable')
@@ -33,7 +42,7 @@ describe('MFA requires verified email', () => {
expect(json.code).toBe(APIErrorCodes.MFA_EMAIL_VERIFICATION_REQUIRED);
});
it('rejects WebAuthn registration setup for unverified accounts', async () => {
const account = await createTestAccount(harness, {skipEmailVerification: true});
const account = await createUnverifiedAccount();
const {json} = await createBuilder<ErrorResponse>(harness, account.token)
.post('/users/@me/mfa/webauthn/credentials/registration-options')
.body({password: account.password})
fluxer_api/src/api/auth/tests/PhoneVerificationFlow.test.ts
+6
View File
@@ -187,7 +187,9 @@ describe('Phone verification flow', () => {
await allowPhoneVerification(account.userId);
const config = getConfig();
const previousInboundNumber = config.sms.inboundChallengeNumber;
const previousInboundPrefixes = config.abusePolicy.phoneVerification.inboundRequiredPrefixes;
config.sms.inboundChallengeNumber = '+15551234567';
config.abusePolicy.phoneVerification.inboundRequiredPrefixes = ['+998'];
try {
const response = await createBuilder<{
channel: string;
@@ -207,6 +209,7 @@ describe('Phone verification flow', () => {
expect(response.challenge_code).toMatch(/^\d{6}$/);
} finally {
config.sms.inboundChallengeNumber = previousInboundNumber;
config.abusePolicy.phoneVerification.inboundRequiredPrefixes = previousInboundPrefixes;
}
});
it('does not let clients force SMS for inbound-only prefixes', async () => {
@@ -214,7 +217,9 @@ describe('Phone verification flow', () => {
await allowPhoneVerification(account.userId);
const config = getConfig();
const previousInboundNumber = config.sms.inboundChallengeNumber;
const previousInboundPrefixes = config.abusePolicy.phoneVerification.inboundRequiredPrefixes;
config.sms.inboundChallengeNumber = '+15551234567';
config.abusePolicy.phoneVerification.inboundRequiredPrefixes = ['+593'];
try {
const response = await createBuilder<{
channel: string;
@@ -233,6 +238,7 @@ describe('Phone verification flow', () => {
});
} finally {
config.sms.inboundChallengeNumber = previousInboundNumber;
config.abusePolicy.phoneVerification.inboundRequiredPrefixes = previousInboundPrefixes;
}
});
});