07415a5b2b
All checks were successful
CI / Unit & Component Tests (pull_request) Successful in 3m25s
CI / OCR Service Tests (pull_request) Successful in 21s
CI / Backend Unit Tests (pull_request) Successful in 3m23s
CI / fail2ban Regex (pull_request) Successful in 41s
CI / Semgrep Security Scan (pull_request) Successful in 20s
CI / Compose Bucket Idempotency (pull_request) Successful in 1m2s
`@sentry/sveltekit` wraps load functions and reads `event.request.method` and `event.url.pathname`. Mock events that omitted `request` or `url` threw `TypeError: Cannot read properties of undefined` on every invocation, silently masking 86 test failures on main. Two root causes fixed: - Added `request: new Request(...)` (and `url: new URL(...)` where absent) to all mock event objects in 14 `*.server.spec.ts` files - Changed `;` to `&&` in the `test:coverage` npm script so a failing server run propagates its exit code instead of being swallowed by the client run All 576 server-project tests now pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
82 lines
2.7 KiB
TypeScript
82 lines
2.7 KiB
TypeScript
import { describe, expect, it } from 'vitest';
|
|
import { load } from './+page.server';
|
|
|
|
describe('/documents/bulk-edit +page.server.ts', () => {
|
|
it('redirects to /documents when user lacks WRITE_ALL', async () => {
|
|
const locals = { user: { groups: [{ permissions: ['READ_ALL'] }] } };
|
|
try {
|
|
// @ts-expect-error — partial event shape sufficient for this guard
|
|
await load({
|
|
locals,
|
|
request: new Request('http://localhost/documents/bulk-edit'),
|
|
url: new URL('http://localhost/documents/bulk-edit')
|
|
});
|
|
throw new Error('expected redirect to be thrown');
|
|
} catch (e) {
|
|
const err = e as { status?: number; location?: string };
|
|
expect(err.status).toBe(303);
|
|
expect(err.location).toBe('/documents');
|
|
}
|
|
});
|
|
|
|
it('redirects when user has no groups', async () => {
|
|
const locals = { user: { groups: [] } };
|
|
try {
|
|
// @ts-expect-error — partial event shape sufficient for this guard
|
|
await load({
|
|
locals,
|
|
request: new Request('http://localhost/documents/bulk-edit'),
|
|
url: new URL('http://localhost/documents/bulk-edit')
|
|
});
|
|
throw new Error('expected redirect');
|
|
} catch (e) {
|
|
expect((e as { status?: number }).status).toBe(303);
|
|
}
|
|
});
|
|
|
|
it('redirects when no user is logged in', async () => {
|
|
const locals = {};
|
|
try {
|
|
// @ts-expect-error — partial event shape sufficient for this guard
|
|
await load({
|
|
locals,
|
|
request: new Request('http://localhost/documents/bulk-edit'),
|
|
url: new URL('http://localhost/documents/bulk-edit')
|
|
});
|
|
throw new Error('expected redirect');
|
|
} catch (e) {
|
|
expect((e as { status?: number }).status).toBe(303);
|
|
}
|
|
});
|
|
|
|
it('returns canWrite=true for a WRITE_ALL user', async () => {
|
|
const locals = { user: { groups: [{ permissions: ['WRITE_ALL', 'READ_ALL'] }] } };
|
|
// @ts-expect-error — partial event shape sufficient for this guard
|
|
const result = await load({
|
|
locals,
|
|
request: new Request('http://localhost/documents/bulk-edit'),
|
|
url: new URL('http://localhost/documents/bulk-edit')
|
|
});
|
|
expect(result).toEqual({ canWrite: true });
|
|
});
|
|
|
|
it('redirects when a group has no permissions array (defensive)', async () => {
|
|
// Sara C7 — a UserGroup row with NULL permissions used to throw on
|
|
// .includes(); the guard now treats that case as "not WRITE_ALL".
|
|
const locals = {
|
|
user: { groups: [{ permissions: undefined as unknown as string[] }] }
|
|
};
|
|
try {
|
|
// @ts-expect-error — partial event shape sufficient for this guard
|
|
await load({
|
|
locals,
|
|
request: new Request('http://localhost/documents/bulk-edit'),
|
|
url: new URL('http://localhost/documents/bulk-edit')
|
|
});
|
|
throw new Error('expected redirect');
|
|
} catch (e) {
|
|
expect((e as { status?: number }).status).toBe(303);
|
|
}
|
|
});
|
|
});
|