tracker

8.1 KB

1. // tests/browser.mjs — THE GATE of tracker.worldapi.org#1: a real ident copy (own storage,
2. // own mail sink — no live ident, no real mail) and a real headless Chrome prove signed out
3. // -> sign in -> homepage (identity + sign out) -> signed out again.
4. //
5. // Own servers only: ident dev copy .scratch/ident-dev (port from IDENT gate port), this app
6. // (port from TRACKER gate port). Registering the app in ident (name + origin) is done once
7. // over the emit API, exactly what a person does once by hand in ident's /apps page — the
8. // gate then drives the actual login button flow through the real UI in the browser.
9. //
10. // Run: node tests/browser.mjs (exit 0 = all passed)
11. import { spawn } from 'node:child_process';
12. import { readFileSync, writeFileSync, rmSync, mkdirSync } from 'node:fs';
13. import { dirname, join } from 'node:path';
14. import { fileURLToPath } from 'node:url';
15. import { launchBrowser, sleep } from './cdp.mjs';
17. const APP = join(dirname(fileURLToPath(import.meta.url)), '..');
18. const IDENT_DIR = join(APP, '.scratch/ident-dev');
19. const G = join(APP, '.scratch/browser-gate');
20. const IDENT_PORT = 8703, TRACKER_PORT = 8704;
21. const IDENT = 'http://127.0.0.1:' + IDENT_PORT;
22. const TRACKER = 'http://127.0.0.1:' + TRACKER_PORT;
23. const CHROME_PORTS = [8705, 8709];
25. let passed = 0, failed = 0;
26. const check = (name, ok, detail = '') => {
27. if (ok) { passed++; console.log(' ok ' + name); }
28. else { failed++; console.log(' FAIL ' + name + (detail ? ' — ' + detail : '')); }
29. };
31. // ---- servers --------------------------------------------------------------------------
32. const procs = [];
33. function start(cwd, env, log) {
34. const p = spawn(join(cwd, 'bin/hybriel'), ['project.hl'], {
35. cwd, env: { ...process.env, SMTP_HOST: '', SMTP_USER: '', SMTP_PASSWORD: '', ...env },
36. stdio: ['ignore', 'pipe', 'pipe'],
37. });
38. let out = '';
39. p.stdout.on('data', d => { out += d; }); p.stderr.on('data', d => { out += d; });
40. p.on('exit', () => writeFileSync(join(G, log), out));
41. procs.push({ p, log, out: () => out });
42. return p;
43. }
44. async function up(url) {
45. for (let i = 0; i < 80; i++) { try { await fetch(url + '/', { redirect: 'manual' }); return; } catch {} await sleep(250); }
46. throw new Error('server did not come up: ' + url);
47. }
48. function stopAll() { for (const { p } of procs) { try { p.kill(); } catch {} } }
50. rmSync(G, { recursive: true, force: true });
51. mkdirSync(G, { recursive: true });
52. mkdirSync(join(G, 'ident'), { recursive: true });
54. start(IDENT_DIR, {
55. IDENT_PORT: String(IDENT_PORT), IDENT_STORAGE: join(G, 'ident/store'), IDENT_SESSIONS: join(G, 'ident/sess') + '/',
56. IDENT_MAIL_SINK: join(G, 'ident/mail.txt'), IDENT_IP_LIMIT: '1000', IDENT_IP_DAY_LIMIT: '1000', IDENT_WATCH: '0',
57. }, 'ident.log');
58. await up(IDENT);
60. // ---- bootstrap: sign in to the ident dev copy and register THIS app (over the emit API — --
61. // the one-time admin step a person does by hand in ident's /apps page) ------------------
62. let emitI = 0;
63. async function emit(base, event, payload, cookie) {
64. const r = await fetch(base + '/__hl/emit', { method: 'POST', headers: { 'content-type': 'application/json', ...(cookie ? { cookie } : {}) }, body: JSON.stringify({ t: 'emit', i: ++emitI, event, payload }) });
65. const t = await r.text();
66. let j = null; try { j = JSON.parse(t); } catch {}
67. return { status: r.status, cookie: (r.headers.get('set-cookie') || '').split(';')[0], value: j && j.value, raw: t };
68. }
69. const lastCode = (email) => {
70. const lines = readFileSync(join(G, 'ident/mail.txt'), 'utf8').trim().split('\n').filter(l => l.startsWith(email + ' '));
71. return lines.length ? lines[lines.length - 1].split(' ')[1] : null;
72. };
73. async function apiLogin(email) {
74. const q = await fetch(IDENT + '/api/code', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email }) });
75. if (q.status !== 200) throw new Error('code request failed: ' + q.status + ' ' + await q.text());
76. const v = await emit(IDENT, 'verifyCode', [email, lastCode(email), 'UTC']);
77. if (!v.value || !v.value.account || !v.cookie) throw new Error('api login failed: ' + v.raw);
78. return v.cookie;
79. }
80. const adminCookie = await apiLogin('[email protected]');
81. const created = await emit(IDENT, 'appCreate', [{ name: 'tracker gate', origins: [TRACKER] }], adminCookie);
82. if (created.value == null || created.value.error != null) { throw new Error('appCreate failed: ' + created.raw); }
83. const KEY = created.value.app.apiKey, SECRET = created.value.secret;
84. check('registered a test app in the ident dev copy', KEY != null && SECRET != null, created.raw);
86. // ---- start tracker, configured with that key/secret ------------------------------------
87. start(APP, {
88. TRACKER_PORT: String(TRACKER_PORT), TRACKER_URL: TRACKER, IDENT_URL: IDENT,
89. TRACKER_KEY: KEY, TRACKER_SECRET: SECRET, TRACKER_WATCH: '0',
90. }, 'tracker.log');
91. await up(TRACKER);
93. // a fresh document (goto, or a full navigation like window.location.assign) needs its
94. // socket hydrated before a click's `on click` handler is wired — a click that lands before
95. // then falls through to the native, unhandled DOM event (a form's plain GET submit, ident's
96. // own gates hit the same race: tests/apps.mjs `ready()`).
97. async function ready(p) { await p.waitFor('!!window.__hl && window.__hl.socket && window.__hl.socket.readyState === 1', { timeout: 15000, label: 'hydrated' }); }
99. // ---- the real browser: signed out -> sign in -> homepage -> sign out ------------------
100. const browser = await launchBrowser({ debugPortRange: CHROME_PORTS });
101. try {
102. const page = await browser.newPage();
103. page.captureNetwork();
105. await page.goto(TRACKER + '/');
106. await ready(page);
107. check('tracker home, signed out: shows the sign-in link', (await page.text('#signin')) === 'Sign in with ident');
108. check('signed-out home has no identity/sign-out yet', (await page.evaluate("document.getElementById('identity') == null && document.getElementById('signout') == null")) === true);
110. await page.click('#signin');
111. await page.waitFor("location.pathname.startsWith('/signin/')", { timeout: 15000 });
112. await ready(page);
113. check('the login button sent the browser to ident (a fresh /signin/<rid>)', true);
115. await page.type('#email', '[email protected]');
116. await page.click('#sendcode');
117. await page.waitFor("location.pathname.endsWith('/code')", { timeout: 15000 });
118. await ready(page);
119. const code = lastCode('[email protected]');
120. check('ident mailed a one-time code to the sink', code != null, 'mail.txt: ' + readFileSync(join(G, 'ident/mail.txt'), 'utf8'));
121. await page.type('#code', code);
122. await page.click('#verify');
124. // first login for this address: the optional-names welcome form, skip it
125. await page.waitForSelector('#skip', { timeout: 15000 });
126. await page.click('#skip');
128. // one identity, for an app's login request: the choice section, one click
129. await page.waitForSelector('#chooselist .choose', { timeout: 15000 });
130. await page.click('#chooselist .choose');
132. await page.waitFor("location.origin === '" + TRACKER + "'", { timeout: 15000 });
133. await ready(page);
134. check('back on tracker after the exchange', (await page.evaluate('location.origin')) === TRACKER + '' || (await page.evaluate('location.href')).startsWith(TRACKER));
136. const identityText = await page.text('#identity');
137. check('tracker homepage shows the signed-in identity', /^Signed in as \S+$/.test(identityText || ''), identityText);
138. check('the sign-out button is there', (await page.text('#signout')) === 'Sign out');
139. check('the empty homepage has no data (no shows, nothing else)', (await page.text('#empty')) === 'Nothing here yet.');
141. await page.click('#signout');
142. await page.waitForSelector('#signin', { timeout: 15000 });
143. check('sign out returns to the signed-out homepage', (await page.text('#signin')) === 'Sign in with ident');
144. check('signed out again: no identity shown', (await page.evaluate("document.getElementById('identity') == null")) === true);
146. // a reload stays signed out (the app's own session, not just client state)
147. await page.goto(TRACKER + '/');
148. check('reload after sign-out stays signed out', (await page.text('#signin')) === 'Sign in with ident');
150. const problems = page.problems();
151. check('no console errors/warnings', problems.length === 0, page.dumpConsole());
152. } finally {
153. await browser.close();
154. stopAll();
155. }
157. console.log('\n' + passed + ' passed, ' + failed + ' failed');
158. process.exit(failed === 0 ? 0 : 1);