67 lines
4.8 KiB
JavaScript
67 lines
4.8 KiB
JavaScript
import test from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import { mkdtempSync, writeFileSync, rmSync } from 'node:fs';
|
|
import { tmpdir } from 'node:os';
|
|
import { join } from 'node:path';
|
|
import { parseArgs, addresses, connectionEnv, readSettings } from './dev-all.mjs';
|
|
|
|
test('default and named host/port options', () => {
|
|
assert.deepEqual(parseArgs([]), { host: '127.0.0.1', port: 3000 });
|
|
assert.deepEqual(parseArgs(['--host', '0.0.0.0', '--port', '3002']), { host: '0.0.0.0', port: 3002 });
|
|
assert.deepEqual(parseArgs(['--port=3002', '--host=localhost']), { host: '127.0.0.1', port: 3002 });
|
|
for (const args of [['--port', '0'], ['--port', '65536'], ['--port', '3abc'], ['--host', 'evil.example'], ['--host'], ['—port', '3002'], ['--unknown']]) assert.throws(() => parseArgs(args));
|
|
});
|
|
const networks = { en0: [{ address: '192.168.1.23', family: 'IPv4', internal: false }], other: [{ address: '8.8.8.8', family: 'IPv4', internal: false }], lo: [{ address: '127.0.0.1', family: 'IPv4', internal: true }] };
|
|
test('LAN listener keeps camera-capable loopback and explicit LAN origins', () => {
|
|
const result = addresses({ host: '0.0.0.0', port: 3002 }, networks, {});
|
|
assert.equal(result.origin, 'http://192.168.1.23:3002');
|
|
assert.equal(result.local, 'http://127.0.0.1:3002');
|
|
assert.deepEqual(result.allowed.sort(), ['http://192.168.1.23:3002', 'http://127.0.0.1:3002', 'http://localhost:3002'].sort());
|
|
assert.ok(!result.allowed.some(origin => origin.includes('0.0.0.0') || origin.includes('8.8.8.8')));
|
|
});
|
|
test('loopback default and IPv6 formatting', () => {
|
|
assert.equal(addresses(parseArgs([]), networks, {}).origin, 'http://localhost:3000');
|
|
assert.deepEqual(addresses({ host: '::1', port: 3002 }, {}, {}).allowed, ['http://localhost:3002', 'http://[::1]:3002']);
|
|
});
|
|
test('explicit HTTPS origin does not silently authorize HTTP aliases', () => {
|
|
const result = addresses({ host: '0.0.0.0', port: 3002 }, networks, { WEBKA_ORIGIN: 'https://webka.local' });
|
|
assert.deepEqual(result.allowed, ['https://webka.local']);
|
|
assert.throws(() => addresses(parseArgs([]), {}, { WEBKA_ORIGIN: 'https://webka.local/login' }));
|
|
assert.throws(() => addresses(parseArgs([]), {}, { WEBKA_ALLOWED_ORIGINS: '*' }));
|
|
});
|
|
|
|
test('homepage mode accepts proxy domain/IP, normalizes HTTPS and exposes the upstream', () => {
|
|
assert.deepEqual(parseArgs(['--homepage', 'camera.example.com', '--port', '3002']), { host: '0.0.0.0', port: 3002, homepage: 'https://camera.example.com' });
|
|
assert.deepEqual(parseArgs(['--homepage=https://192.168.1.10:8443/', '--host=127.0.0.1']), { host: '127.0.0.1', port: 3000, homepage: 'https://192.168.1.10:8443' });
|
|
for (const address of ['', 'http://camera.example.com', 'https://camera.example.com/watch', 'https://a:b@camera.example.com', 'https://camera.example.com?x=1', 'https://camera.example.com#x', 'https://0.0.0.0', 'https://[::]']) assert.throws(() => parseArgs(['--homepage', address]));
|
|
});
|
|
test('saved settings apply, with command-line overrides', () => {
|
|
const settings = { homepage: 'https://camera.example.com', port: 3002 };
|
|
assert.deepEqual(parseArgs([], settings), { host: '0.0.0.0', port: 3002, homepage: settings.homepage });
|
|
assert.deepEqual(parseArgs(['--homepage', 'https://other.example.com', '--port', '3003', '--host', '127.0.0.1'], settings), { host: '127.0.0.1', port: 3003, homepage: 'https://other.example.com' });
|
|
assert.throws(() => parseArgs([], { port: 'invalid' }));
|
|
});
|
|
test('configuration file loads a homepage and rejects malformed or misspelled settings', () => {
|
|
const directory = mkdtempSync(join(tmpdir(), 'webka-settings-'));
|
|
const path = join(directory, 'webka.config.json');
|
|
try {
|
|
assert.deepEqual(readSettings(path), {});
|
|
writeFileSync(path, JSON.stringify({ homepage: 'camera.example.com', port: 3002 }));
|
|
assert.deepEqual(parseArgs([], readSettings(path)), { host: '0.0.0.0', port: 3002, homepage: 'https://camera.example.com' });
|
|
for (const invalid of ['{', 'null', '[]', '{"homePage":"camera.example.com"}']) {
|
|
writeFileSync(path, invalid);
|
|
assert.throws(() => readSettings(path), /webka.config.json/);
|
|
}
|
|
} finally {
|
|
rmSync(directory, { recursive: true, force: true });
|
|
}
|
|
});
|
|
test('homepage wins over old HTTPS/mDNS environment settings without allowing HTTP aliases', () => {
|
|
const env = { WEBKA_MDNS: '1', WEBKA_ORIGIN: 'https://old.local', WEBKA_ALLOWED_ORIGINS: 'http://unsafe.example.com' };
|
|
const config = parseArgs(['--homepage', 'https://camera.example.com:8443', '--port', '3002']);
|
|
const urls = addresses(config, networks, env);
|
|
assert.equal(urls.origin, config.homepage);
|
|
assert.deepEqual(urls.allowed, [config.homepage]);
|
|
assert.deepEqual(connectionEnv(config, urls, env), { WEBKA_BIND: '0.0.0.0:3002', WEBKA_ORIGIN: config.homepage, WEBKA_ALLOWED_ORIGINS: config.homepage, WEBKA_MDNS: '0', WEBKA_PUBLIC_PORT: '8443' });
|
|
});
|