import { randomUUID } from "crypto"; import { runCommonRouteTests } from "@/pkg/testutil/common-tests"; import { RouteHarness } from "@/pkg/testutil/route-harness"; import { schema } from "@aigxion/db"; import { newId } from "@aigxion/id"; import { describe, expect, test } from "vitest"; import { type V1ApisGetApiResponse } from "./v1_apis_getApi"; runCommonRouteTests({ prepareRequest: async (rh) => { const apiId = newId("api"); await rh.db.insert(schema.apis).values({ id: apiId, name: randomUUID(), workspaceId: rh.resources.userWorkspace.id, }); return { method: "GET", url: `/v1/apis.getApi?apiId=${apiId}`, }; }, }); describe("correct roles", () => { test.each([ { name: "legacy", roles: ["*"] }, { name: "legacy and more", roles: ["*", randomUUID()] }, { name: "wildcard", roles: ["api.*.read_api"] }, { name: "wildcard and more", roles: ["api.*.read_api", randomUUID()] }, { name: "specific apiId", roles: [(apiId: string) => `api.${apiId}.read_api`] }, { name: "specific apiId and more", roles: [(apiId: string) => `api.${apiId}.read_api`, randomUUID()], }, ])("$name", async ({ roles }) => { const h = await RouteHarness.init(); const apiId = newId("api"); await h.db.insert(schema.apis).values({ id: apiId, name: randomUUID(), workspaceId: h.resources.userWorkspace.id, }); const root = await h.createRootKey( roles.map((role) => (typeof role === "string" ? role : role(apiId))), ); const res = await h.get({ url: `/v1/apis.getApi?apiId=${apiId}`, headers: { Authorization: `Bearer ${root.key}`, }, }); expect(res.status).toEqual(200); }); });