Perfect_Python500/Webka
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

DUNGEONS-34: add one-command app launcher

Browse Source 
Co-authored-by: multica-agent <github@multica.ai>
This commit is contained in:
perfect_python500
2026-09-06 16:47:05 +05:00
parent 26e6b2247e
commit 2f9f55d600
10 changed files with 374 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
backend/src/tests.rs
View File

@@ -14,6 +14,7 @@ async fn app() -> (App, tempfile::TempDir) {
key: Arc::new(vec![42; 32]),
setup: Arc::new("setup-test".into()),
origin: Arc::new("http://localhost:3000".into()),
allowed_origins: Arc::new(vec![]),
secure: false,
peers: Default::default(),
limits: Default::default(),
@@ -556,3 +557,36 @@ async fn saturated_signaling_queue_fails_closed() {
send(&client, json!({"type":"viewer-left"}));
assert!(*rx.borrow());
}
#[tokio::test]
async fn launcher_origins_are_explicit_and_port_specific() {
let (mut app, _dir) = app().await;
app.allowed_origins = Arc::new(vec![
"http://127.0.0.1:3002".into(),
"http://192.168.1.23:3002".into(),
]);
for (origin, expected) in [
("http://127.0.0.1:3002", StatusCode::UNAUTHORIZED),
("http://192.168.1.23:3002", StatusCode::UNAUTHORIZED),
("http://localhost:3000", StatusCode::UNAUTHORIZED),
("http://192.168.1.23:3003", StatusCode::FORBIDDEN),
("http://evil.example", StatusCode::FORBIDDEN),
("null", StatusCode::FORBIDDEN),
] {
let req = Request::builder()
.method("POST")
.uri("/api/logout")
.header("origin", origin)
.body(Body::empty())
.unwrap();
assert_eq!(
router(app.clone(), "/none".into())
.oneshot(req)
.await
.unwrap()
.status(),
expected,
"{origin}"
);
}
}