KTeam/kt-template-online-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test: 覆盖NapCat WebUI会话密钥校验

Browse Source
This commit is contained in:
sunlei 2026-06-24 13:17:59 +08:00
parent 8ee7866afe
commit 87b0368b9a
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
test/apps/napcat-webui-gateway/session-store.spec.ts
View File

@ -403,7 +403,7 @@ describe('InternalSessionController', () => {
expect(response.body.iframeUrl).not.toContain('127.0.0.1');
});
it('rejects missing or wrong secrets for mutating calls', async () => {
it('rejects missing or wrong secrets for all mutating calls', async () => {
await request(app.getHttpServer())
.post('/internal/sessions')
.send(createSessionInput())
@ -413,6 +413,24 @@ describe('InternalSessionController', () => {
.set('x-kt-gateway-secret', 'wrong-secret')
.send(createSessionInput())
.expect(HttpStatus.UNAUTHORIZED);
await request(app.getHttpServer())
.post('/internal/sessions/session-1/heartbeat')
.send({ adminUserId: 'admin-1' })
.expect(HttpStatus.UNAUTHORIZED);
await request(app.getHttpServer())
.post('/internal/sessions/session-1/heartbeat')
.set('x-kt-gateway-secret', 'wrong-secret')
.send({ adminUserId: 'admin-1' })
.expect(HttpStatus.UNAUTHORIZED);
await request(app.getHttpServer())
.post('/internal/sessions/session-1/revoke')
.send({ adminUserId: 'admin-1' })
.expect(HttpStatus.UNAUTHORIZED);
await request(app.getHttpServer())
.post('/internal/sessions/session-1/revoke')
.set('x-kt-gateway-secret', 'wrong-secret')
.send({ adminUserId: 'admin-1' })
.expect(HttpStatus.UNAUTHORIZED);
await request(app.getHttpServer())
.get('/internal/health')
.expect(HttpStatus.OK);