Release 2.8.0

test/settings-route.test.js

@@ -0,0 +1,120 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+
+require('../src/common');
+
+const registerSettingsRoutes = require('../src/web/routes/settings/routes');
+const { ANNOUNCEMENT_ICON_CATALOG } = require('../src/data/announcement-icons');
+
+test('settings route renders the overview', async () => {
+  const handlers = {};
+  const queries = [];
+  const app = {
+    get(path, ...routeHandlers) {
+      handlers[path] = routeHandlers;
+    },
+    post(path, ...routeHandlers) {
+      handlers['POST ' + path] = routeHandlers;
+    }
+  };
+
+  registerSettingsRoutes(app, {
+    pages: {
+      renderSettingsPage(_settings, _icons, currentUser) {
+        return currentUser && currentUser.id === 7 ? 'settings-page' : 'unexpected';
+      }
+    },
+    pool: {
+      async query(sql, params) {
+        queries.push({ sql, params });
+        return [[]];
+      }
+    },
+    requirePermission(permissionKey) {
+      assert.ok(['system-settings.read', 'system-settings.update'].includes(permissionKey));
+      return function (_req, _res, next) {
+        next();
+      };
+    }
+  });
+
+  const pageResponse = {
+    send(value) {
+      this.body = value;
+    }
+  };
+  await handlers['/settings/system'][1]({ currentUser: { id: 7 }, query: {} }, pageResponse, function (error) {
+    throw error;
+  });
+  assert.equal(pageResponse.body, 'settings-page');
+
+  assert.equal(Object.keys(handlers).length, 2);
+  assert.ok(handlers['/settings/system']);
+  assert.ok(handlers['POST /settings/system']);
+
+  const saveResponse = {
+    redirect(url) {
+      this.redirectedTo = url;
+    }
+  };
+  await handlers['POST /settings/system'][1]({
+    body: { 'suggested_icons[]': ['bell-fill'], image_max_mb: '100', video_max_mb: '1024' },
+      body: { settings_section: 'icons', 'suggested_icons[]': ['bell-fill'] },
+    currentUser: { id: 7 }
+  }, saveResponse, function (error) {
+    throw error;
+  });
+  assert.ok(queries.some(function (entry) { return entry.sql && /DELETE FROM o_app_settings/.test(entry.sql); }));
+  assert.ok(queries.some(function (entry) { return entry.sql && /INSERT INTO o_app_settings/.test(entry.sql); }));
+  assert.match(saveResponse.redirectedTo, /^\/settings\/system\?message=/);
+
+  let tooManyError = null;
+  await handlers['POST /settings/system'][1]({
+    body: { settings_section: 'icons', suggested_icons: ANNOUNCEMENT_ICON_CATALOG.slice(0, 49).map(function (option) { return option.value; }) },
+    currentUser: { id: 7 }
+  }, {}, function (error) {
+    tooManyError = error;
+  });
+  assert.equal(tooManyError.statusCode, 400);
+  assert.match(tooManyError.message, /48/);
+
+  const mediaResponse = {
+    redirect(url) {
+      this.redirectedTo = url;
+    }
+  };
+  await handlers['POST /settings/system'][1]({
+    body: { settings_section: 'media', image_max_mb: '100', video_max_mb: '1024', wysiwyg_image_max_mb: '0.5', allowed_mime_types: ['image/png', 'video/mp4'] },
+    currentUser: { id: 7 }
+  }, mediaResponse, function (error) {
+    throw error;
+  });
+  assert.match(mediaResponse.redirectedTo, /media-uploads/);
+
+  const securityResponse = {
+    redirect(url) {
+      this.redirectedTo = url;
+    }
+  };
+  await handlers['POST /settings/system'][1]({
+    body: { settings_section: 'security', session_lifetime_days: '30', allow_user_session_revocation: '1', max_active_sessions: '5', login_max_attempts: '5', login_lockout_minutes: '15', login_rate_limit_scope: 'both', password_min_length: '12', password_min_categories: '3' },
+    currentUser: { id: 7 }
+  }, securityResponse, function (error) {
+    throw error;
+  });
+  assert.match(securityResponse.redirectedTo, /security-sessions/);
+  assert.ok(queries.some(function (entry) {
+    return entry.sql && entry.sql.includes('INSERT INTO o_app_settings') && entry.params && entry.params[0] === 'security.session_lifetime_days';
+  }));
+  assert.ok(queries.some(function (entry) {
+    return entry.sql && entry.sql.includes('INSERT INTO o_app_settings') && entry.params && entry.params[0] === 'security.password_min_length';
+  }));
+
+  const mediaInsertQueries = queries.filter(function (entry) {
+    return entry.sql && entry.sql.includes('INSERT INTO o_app_settings');
+  });
+  const videoInsert = mediaInsertQueries.find(function (entry) {
+    return entry.params && entry.params[0] === 'uploads.video_max_bytes';
+  });
+  assert.equal(Number(videoInsert.params[1]), 1024 * 1024 * 1024);
+});