/* * SPDX-FileCopyrightText: 2021 The HedgeDoc developers (see AUTHORS file) * * SPDX-License-Identifier: AGPL-3.0-only */ import { promises as fs } from 'fs'; import { join } from 'path'; import { User } from 'src/users/user.entity'; import request from 'supertest'; import { AuthConfig } from '../../src/config/auth.config'; import { ConsoleLoggerService } from '../../src/logger/console-logger.service'; import { setupSessionMiddleware } from '../../src/utils/session'; import { TestSetup } from '../test-setup'; import { ensureDeleted } from '../utils'; describe('Media', () => { let testSetup: TestSetup; let uploadPath: string; let agent: request.SuperAgentTest; let user: User; beforeAll(async () => { testSetup = await TestSetup.create(); uploadPath = testSetup.configService.get('mediaConfig').backend.filesystem.uploadPath; testSetup.app.useStaticAssets(uploadPath, { prefix: '/uploads', }); const authConfig = testSetup.configService.get('authConfig') as AuthConfig; setupSessionMiddleware(testSetup.app, authConfig); await testSetup.app.init(); const logger = await testSetup.app.resolve(ConsoleLoggerService); logger.log('Switching logger', 'AppBootstrap'); testSetup.app.useLogger(logger); await testSetup.notesService.createNote( 'test content', 'test_upload_media', ); user = await testSetup.userService.createUser('hardcoded', 'Testy'); await testSetup.identityService.createLocalIdentity(user, 'test'); agent = request.agent(testSetup.app.getHttpServer()); await agent .post('/auth/local/login') .send({ username: 'hardcoded', password: 'test' }) .expect(201); }); describe('POST /media', () => { it('works', async () => { const uploadResponse = await agent .post('/media') .attach('file', 'test/private-api/fixtures/test.png') .set('HedgeDoc-Note', 'test_upload_media') .expect('Content-Type', /json/) .expect(201); const path: string = uploadResponse.body.link; const testImage = await fs.readFile('test/private-api/fixtures/test.png'); const downloadResponse = await agent.get(path); expect(downloadResponse.body).toEqual(testImage); // Remove /uploads/ from path as we just need the filename. const fileName = path.replace('/uploads/', ''); // delete the file afterwards await fs.unlink(join(uploadPath, fileName)); }); describe('fails:', () => { beforeEach(async () => { await ensureDeleted(uploadPath); }); it('MIME type not supported', async () => { await agent .post('/media') .attach('file', 'test/private-api/fixtures/test.zip') .set('HedgeDoc-Note', 'test_upload_media') .expect(400); await expect(fs.access(uploadPath)).rejects.toBeDefined(); }); it('note does not exist', async () => { await agent .post('/media') .attach('file', 'test/private-api/fixtures/test.zip') .set('HedgeDoc-Note', 'i_dont_exist') .expect(400); await expect(fs.access(uploadPath)).rejects.toBeDefined(); }); it('mediaBackend error', async () => { await fs.mkdir(uploadPath, { mode: '444', }); await agent .post('/media') .attach('file', 'test/private-api/fixtures/test.png') .set('HedgeDoc-Note', 'test_upload_media') .expect('Content-Type', /json/) .expect(500); }); afterEach(async () => { await ensureDeleted(uploadPath); }); }); }); it('DELETE /media/{filename}', async () => { const testNote = await testSetup.notesService.createNote( 'test content', 'test_delete_media', ); const testImage = await fs.readFile('test/private-api/fixtures/test.png'); const url = await testSetup.mediaService.saveFile( testImage, user, testNote, ); const filename = url.split('/').pop() || ''; await agent.delete('/api/private/media/' + filename).expect(204); }); afterAll(async () => { // Delete the upload folder await ensureDeleted(uploadPath); await testSetup.app.close(); }); });