peter
ef99f7b5c7
- /auth/google/connect is a navigation and carries no headers: the tab names the account it was built for in `expect`, checked by the same comparison as the request header (built_for_another_account); a mismatch lands on /?account=changed - the link marker names the OAuth state of its own flow: an older flow coming back no longer spends the marker of the connect still open (which then returned as a plain sign-in) - a 401 account_changed reloads the tab with a one-time flag, and the reloaded tab says it now shows the account signed in - a refused switch to a suspended or not-yet-approved account says so in the signed-in app's words, naming the address a request was recorded for - the prefs merge locks FOR NO KEY UPDATE, so a transaction that only added a row referring to the account does not hold the save up; a test pins the lock - giving up a lost page closes a channel page open over it - e2e README names the chromium-only specs
36 lines
1.7 KiB
TypeScript
36 lines
1.7 KiB
TypeScript
import { readFileSync } from "node:fs";
|
|
import { describe, expect, it } from "vitest";
|
|
|
|
// A tab names the account it was built for, and the server refuses a request from a tab showing
|
|
// another one than the cookie's. Spelled on both sides, so nothing but this test notices a rename:
|
|
// the server would see no header, and a tab left showing the previous account would act as the new
|
|
// one without a word.
|
|
const read = (path: string) => readFileSync(new URL(path, import.meta.url), "utf-8");
|
|
const AUTH = read("../../../../backend/app/auth.py");
|
|
const ROUTES = read("../../../../backend/app/routes/auth.py");
|
|
const CORE = read("./core.ts");
|
|
const CONNECT = read("../googleConnect.ts");
|
|
const ENTRY = read("../entryUrl.ts");
|
|
|
|
describe("the account a tab was built for", () => {
|
|
it("is the header the server checks", () => {
|
|
const backend = /^EXPECTED_ACCOUNT_HEADER = "([^"]+)"$/m.exec(AUTH)?.[1];
|
|
const frontend = /^const EXPECTED_ACCOUNT_HEADER = "([^"]+)";$/m.exec(CORE)?.[1];
|
|
expect(backend).toBeTruthy();
|
|
expect(backend).toBe(frontend?.toLowerCase());
|
|
});
|
|
|
|
it("rides a Google connect as the query parameter the route reads", () => {
|
|
// A navigation carries no headers; a rename on one side would leave the connect unchecked.
|
|
expect(CONNECT).toMatch(/params\.set\("expect", account\)/);
|
|
expect(ROUTES).toMatch(/^ {4}expect: str \| None = None,$/m);
|
|
});
|
|
|
|
it("lands a refused navigation where the reloaded tab says why", () => {
|
|
const landing = /^ACCOUNT_CHANGED_LANDING = "\/\?([^"]+)"$/m.exec(ROUTES)?.[1];
|
|
const flag = /^export const ACCOUNT_CHANGED_FLAG = "([^"]+)";$/m.exec(ENTRY)?.[1];
|
|
expect(landing).toBeTruthy();
|
|
expect(landing).toBe(flag);
|
|
});
|
|
});
|