hansjone/dsh-im-ops
1
0
Fork 0
mirror of https://github.com/hansjone/dsh-im-ops.git synced 2026-10-10 14:20:45 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(weixin): distinguish loopback Harness denial

Browse source
This commit is contained in:
xmanrui 2026-08-22 22:59:24 +08:00
parent 85aaecf1f2
commit dc10cb22c8
7 changed files with 126 additions and 103 deletions
Download patch file Download diff file Expand all files Collapse all files

23
test/channels/weixin/harness-client.test.mjs
View file

@ -50,8 +50,8 @@ test('all legacy channel clients now use the shared Harness RPC transport', asyn
});
test('shared Harness health checks expose precise safe availability codes', async () => {
const clientWithFetch = (fetchImpl) => new HarnessClient({
baseUrl: 'http://127.0.0.1:3080',
const clientWithFetch = (fetchImpl, baseUrl = 'http://127.0.0.1:3080') => new HarnessClient({
baseUrl,
workspace: '/tmp/default-workspace',
fetchImpl,
});
@ -79,15 +79,20 @@ test('shared Harness health checks expose precise safe availability codes', asyn
return true;
});
for (const [status, responseBody, expectedCode] of [
[401, 'authentication required', 'harness-auth-required'],
[403, 'forbidden', 'harness-host-untrusted'],
[403, 'proxy policy rejected: private detail', 'harness-request-forbidden'],
[404, 'not found', 'harness-api-not-found'],
[500, 'service unavailable', 'harness-http-failed'],
for (const [baseUrl, status, responseBody, expectedCode] of [
['http://127.0.0.1:3080', 401, 'authentication required', 'harness-auth-required'],
['http://127.0.0.1:3080', 407, 'proxy authentication required', 'harness-proxy-auth-required'],
['http://127.0.0.1:3080', 403, 'forbidden', 'harness-loopback-forbidden'],
['http://127.9.8.7:3080', 403, 'forbidden\n', 'harness-loopback-forbidden'],
['http://localhost:3080', 403, 'forbidden', 'harness-loopback-forbidden'],
['http://[::1]:3080', 403, 'forbidden', 'harness-loopback-forbidden'],
['http://harness.internal:3080', 403, 'forbidden', 'harness-host-untrusted'],
['http://127.0.0.1:3080', 403, 'proxy policy rejected: private detail', 'harness-request-forbidden'],
['http://127.0.0.1:3080', 404, 'not found', 'harness-api-not-found'],
['http://127.0.0.1:3080', 500, 'service unavailable', 'harness-http-failed'],
]) {
await assert.rejects(
clientWithFetch(async () => new Response(responseBody, { status })).health(),
clientWithFetch(async () => new Response(responseBody, { status }), baseUrl).health(),
(error) => {
assert.ok(error instanceof HarnessTransportError);
assert.equal(error.code, expectedCode);

2
test/channels/weixin/weixin-controller.test.mjs
View file

@ -349,6 +349,8 @@ test('account config write and runtime preparation failures have distinct safe c
test('known runtime activation codes cross the provisioning boundary unchanged', async () => {
for (const scenario of [
['harness-auth-required', /需要身份认证/],
['harness-proxy-auth-required', /NO_PROXY/],
['harness-loopback-forbidden', /回环地址/],
['harness-host-untrusted', /Host 信任检查/],
['harness-request-forbidden', /代理或网关配置/],
['harness-api-not-found', /找不到 Harness 健康检查接口/],

2
test/channels/weixin/weixin-runtime.test.mjs
View file

@ -338,6 +338,8 @@ test('runtime preserves classified Harness health codes without exposing their c
'harness-connect-failed',
'harness-timeout',
'harness-auth-required',
'harness-proxy-auth-required',
'harness-loopback-forbidden',
'harness-host-untrusted',
'harness-request-forbidden',
'harness-api-not-found',