/* * SPDX-FileCopyrightText: 2021 The HedgeDoc developers (see AUTHORS file) * * SPDX-License-Identifier: AGPL-3.0-only */ import { promises as fs } from 'fs'; import { join } from 'path'; import request from 'supertest'; import { ConsoleLoggerService } from '../../src/logger/console-logger.service'; import { Note } from '../../src/notes/note.entity'; import { User } from '../../src/users/user.entity'; import { TestSetup, TestSetupBuilder } from '../test-setup'; import { ensureDeleted } from '../utils'; describe('Media', () => { let testSetup: TestSetup; let uploadPath: string; let testNote: Note; let user: User; beforeAll(async () => { testSetup = await TestSetupBuilder.create().withMockAuth().build(); uploadPath = testSetup.configService.get('mediaConfig').backend.filesystem.uploadPath; testSetup.app.useStaticAssets(uploadPath, { prefix: '/uploads', }); await testSetup.app.init(); const logger = await testSetup.app.resolve(ConsoleLoggerService); logger.log('Switching logger', 'AppBootstrap'); testSetup.app.useLogger(logger); user = await testSetup.userService.createUser('hardcoded', 'Testy'); testNote = await testSetup.notesService.createNote( 'test content', null, 'test_upload_media', ); }); describe('POST /media', () => { it('works', async () => { const uploadResponse = await request(testSetup.app.getHttpServer()) .post('/api/v2/media') .attach('file', 'test/public-api/fixtures/test.png') .set('HedgeDoc-Note', 'test_upload_media') .expect('Content-Type', /json/) .expect(201); const path: string = uploadResponse.body.link; const testImage = await fs.readFile('test/public-api/fixtures/test.png'); const downloadResponse = await request(testSetup.app.getHttpServer()).get( path, ); expect(downloadResponse.body).toEqual(testImage); // Remove /uploads/ from path as we just need the filename. const fileName = path.replace('/uploads/', ''); // delete the file afterwards await fs.unlink(join(uploadPath, fileName)); }); describe('fails:', () => { beforeEach(async () => { await ensureDeleted(uploadPath); }); it('MIME type not supported', async () => { await request(testSetup.app.getHttpServer()) .post('/api/v2/media') .attach('file', 'test/public-api/fixtures/test.zip') .set('HedgeDoc-Note', 'test_upload_media') .expect(400); await expect(fs.access(uploadPath)).rejects.toBeDefined(); }); it('note does not exist', async () => { await request(testSetup.app.getHttpServer()) .post('/api/v2/media') .attach('file', 'test/public-api/fixtures/test.zip') .set('HedgeDoc-Note', 'i_dont_exist') .expect(404); await expect(fs.access(uploadPath)).rejects.toBeDefined(); }); it('mediaBackend error', async () => { await fs.mkdir(uploadPath, { mode: '444', }); await request(testSetup.app.getHttpServer()) .post('/api/v2/media') .attach('file', 'test/public-api/fixtures/test.png') .set('HedgeDoc-Note', 'test_upload_media') .expect('Content-Type', /json/) .expect(500); }); afterEach(async () => { await ensureDeleted(uploadPath); }); }); }); it('DELETE /media/{filename}', async () => { const testImage = await fs.readFile('test/public-api/fixtures/test.png'); const url = await testSetup.mediaService.saveFile( testImage, user, testNote, ); const filename = url.split('/').pop() || ''; await request(testSetup.app.getHttpServer()) .delete('/api/v2/media/' + filename) .expect(204); }); afterAll(async () => { // Delete the upload folder await ensureDeleted(uploadPath); await testSetup.app.close(); }); });