mirror of
https://github.com/hansjone/oclaw.git
synced 2026-10-13 04:40:44 +08:00
oliver
df97c5e042
Emergency (fallback / sealed-box) admins lost the workspace sidebar and saw "sign-in failed / add API key" on DSH Desktop because the remote.mux opens anonymously at boot and every early call was rejected terminally. - gateway: anonymous workspace/follow reaches dsh-acl's empty baseline; anonymous streams are parked until the carrier aborts instead of failing; anonymous workspace/initializeDefault answers "nothing created" - request-auth: a dead UDS_SESSION cookie no longer shadows a valid WS ticket or bridge (sync + async variants used by all callers) - dsh-acl: /api/* waits (bounded 15s) for the gateway ACL during Host startup instead of 403, so the Desktop welcome read no longer fails - desktop-bootstrap: key/account projection is best-effort per reference - client: emit connection/reset after login so boot-time caches (settings describe mirror -> Settings > Models) re-read under the real principal - sessions: absolute lifetime fixed at 7 days (was min(ttl, 7d) = 30 min); bridge expiry slides with its session; MemoryStore persisted to sessions.json (bearer hash only, userData AES-256-GCM sealed) - README: session lifetime/persistence and DSH compatibility notes Also includes previously uncommitted uds-auth 0.3.x work in this tree. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
71 lines
2.6 KiB
JavaScript
71 lines
2.6 KiB
JavaScript
import { describe, it, after } from 'node:test'
|
|
import assert from 'node:assert/strict'
|
|
import { mkdirSync, writeFileSync } from 'node:fs'
|
|
import { join } from 'node:path'
|
|
import { tmpdir } from 'node:os'
|
|
import {
|
|
LOCAL_ADMIN_BOX_ENV,
|
|
LOCAL_ADMIN_ENV,
|
|
sealLocalAdminBox,
|
|
openLocalAdminBox,
|
|
isLocalAdminBoxConfigured,
|
|
readLocalAdminBox,
|
|
} from '../lib/local-admin.js'
|
|
|
|
describe('local-admin sealed box', () => {
|
|
const prevBox = process.env[LOCAL_ADMIN_BOX_ENV]
|
|
const prevKey = process.env[LOCAL_ADMIN_ENV]
|
|
|
|
after(() => {
|
|
if (prevBox === undefined) delete process.env[LOCAL_ADMIN_BOX_ENV]
|
|
else process.env[LOCAL_ADMIN_BOX_ENV] = prevBox
|
|
if (prevKey === undefined) delete process.env[LOCAL_ADMIN_ENV]
|
|
else process.env[LOCAL_ADMIN_ENV] = prevKey
|
|
})
|
|
|
|
it('seal + open with correct passphrase', () => {
|
|
const passphrase = 'my-local-secret-key'
|
|
const box = sealLocalAdminBox(passphrase)
|
|
assert.ok(box.length > 40)
|
|
const ok = openLocalAdminBox(box, passphrase)
|
|
assert.equal(ok.ok, true)
|
|
assert.equal(ok.empNo, 'administrator')
|
|
})
|
|
|
|
it('wrong passphrase fails decrypt', () => {
|
|
const box = sealLocalAdminBox('correct-passphrase-xx')
|
|
const bad = openLocalAdminBox(box, 'wrong-passphrase-yyy')
|
|
assert.equal(bad.ok, false)
|
|
assert.equal(bad.reason, 'decrypt_failed')
|
|
})
|
|
|
|
it('env box alone does not imply auto-login; only configures unlock', () => {
|
|
delete process.env[LOCAL_ADMIN_BOX_ENV]
|
|
// Isolate from a developer machine's ~/.uds-auth/local-admin.box
|
|
process.env.UDS_AUTH_DATA_DIR = join(tmpdir(), `uds-auth-box-${Date.now()}`)
|
|
assert.equal(isLocalAdminBoxConfigured(), false)
|
|
|
|
const box = sealLocalAdminBox('another-strong-key')
|
|
process.env[LOCAL_ADMIN_BOX_ENV] = box
|
|
assert.equal(isLocalAdminBoxConfigured(), true)
|
|
assert.equal(readLocalAdminBox(), box)
|
|
|
|
// Old KEY env must not unlock without decrypt
|
|
process.env[LOCAL_ADMIN_ENV] = 'aaaaaaaaaaaaaaaa'
|
|
const stillNeedDecrypt = openLocalAdminBox(box, process.env[LOCAL_ADMIN_ENV])
|
|
assert.equal(stillNeedDecrypt.ok, false)
|
|
})
|
|
|
|
it('reads sealed box from profile local-admin.box when env is unset', () => {
|
|
delete process.env[LOCAL_ADMIN_BOX_ENV]
|
|
const dir = join(tmpdir(), `uds-auth-box-file-${Date.now()}`)
|
|
mkdirSync(dir, { recursive: true })
|
|
process.env.UDS_AUTH_DATA_DIR = dir
|
|
assert.equal(isLocalAdminBoxConfigured(), false)
|
|
|
|
const box = sealLocalAdminBox('file-backed-passphrase')
|
|
writeFileSync(join(dir, 'local-admin.box'), box, 'utf8')
|
|
assert.equal(isLocalAdminBoxConfigured(), true)
|
|
assert.equal(readLocalAdminBox(), box)
|
|
})
|
|
})
|