Do Siki
d355ce38a7
CI Pipeline with Test Management / 🧪 Run Tests & Generate Reports (push) Waiting to run
CI Pipeline with Test Management / 🐳 Docker Integration Tests (push) Blocked by required conditions
CI Pipeline with Test Management / 🏗️ Build Docker Image (push) Blocked by required conditions
CI Pipeline with Test Management / 📊 Generate Test Summary (push) Blocked by required conditions
Test Reporting & Gherkin Analysis / 🧪 Run Tests & Generate Reports (push) Waiting to run
Test Reporting & Gherkin Analysis / 📊 Analyze Test Coverage (push) Blocked by required conditions
Test Reporting & Gherkin Analysis / 🔄 Sync with Linear (push) Blocked by required conditions
Test Reporting & Gherkin Analysis / ⚡ Performance Monitoring (push) Blocked by required conditions
25 lines
977 B
JavaScript
25 lines
977 B
JavaScript
#!/usr/bin/env node
|
|
|
|
const assert = require('assert/strict');
|
|
|
|
process.env.CMS_USER = 'test-editor';
|
|
process.env.CMS_PASS = 'not-a-real-secret';
|
|
process.env.CMS_DEPLOY_ENV = 'staging';
|
|
const {
|
|
hasValidCredentials,
|
|
hasValidCsrfToken,
|
|
securityConfigIsValid,
|
|
csrfToken,
|
|
} = require('../content-editor');
|
|
|
|
const authorization = Buffer.from('test-editor:not-a-real-secret').toString('base64');
|
|
assert.equal(securityConfigIsValid(), true);
|
|
assert.equal(hasValidCredentials({ headers: { authorization: `Basic ${authorization}` } }), true);
|
|
assert.equal(hasValidCredentials({ headers: { authorization: 'Basic invalid' } }), false);
|
|
assert.equal(hasValidCredentials({ headers: {} }), false);
|
|
assert.equal(hasValidCsrfToken({ headers: { 'x-csrf-token': csrfToken } }), true);
|
|
assert.equal(hasValidCsrfToken({ headers: { 'x-csrf-token': 'invalid-token' } }), false);
|
|
assert.equal(hasValidCsrfToken({ headers: {} }), false);
|
|
|
|
console.log('Content Editor security guard test: OK');
|