33 lines
1.1 KiB
JavaScript
33 lines
1.1 KiB
JavaScript
import assert from "node:assert/strict";
|
|
import test from "node:test";
|
|
import { parseMulticaCallbackUrl, relayMulticaCallback } from "./multica-callback.js";
|
|
|
|
test("accepts a complete Multica loopback callback", () => {
|
|
const url = parseMulticaCallbackUrl("http://localhost:42957/callback?token=secret&state=nonce");
|
|
assert.equal(url.port, "42957");
|
|
});
|
|
|
|
test("rejects non-loopback callback targets", () => {
|
|
assert.throws(
|
|
() => parseMulticaCallbackUrl("https://example.com/callback?token=secret&state=nonce"),
|
|
/localhost/,
|
|
);
|
|
});
|
|
|
|
test("rejects callbacks without OAuth parameters", () => {
|
|
assert.throws(() => parseMulticaCallbackUrl("http://localhost:42957/callback"), /token/);
|
|
});
|
|
|
|
test("relays the callback without exposing its response", async () => {
|
|
let receivedUrl;
|
|
const result = await relayMulticaCallback(
|
|
"http://127.0.0.1:42957/callback?token=secret&state=nonce",
|
|
async (url) => {
|
|
receivedUrl = url;
|
|
return { ok: true, status: 200 };
|
|
},
|
|
);
|
|
assert.equal(receivedUrl.hostname, "127.0.0.1");
|
|
assert.deepEqual(result, { ok: true });
|
|
});
|