nezumi/9router
1
0
Fork 0
mirror of https://github.com/Nezumi-2711/9router.git synced 2026-09-22 13:38:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: update cli tools

Browse Source
This commit is contained in:
nezumi
2026-07-12 22:44:11 +07:00
parent 43a0c90dac
commit 330eb4d936
37 changed files with 441 additions and 8073 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/unit/dashboard-guard.test.js
+6 -7
View File
@@ -224,14 +224,14 @@ describe("dashboard guard local-only access", () => {
expect(response.body.error).toBe("Local only: CLI token required");
});
it("requires an administrator for CLI Tools", async () => {
it("requires authentication for CLI Tools", async () => {
const response = await proxy(request("/api/cli-tools/antigravity-mitm", {
host: "localhost:20128",
origin: "http://localhost:20128",
}));
expect(response.status).toBe(403);
expect(response.body.error).toBe("Administrator access required");
expect(response.status).toBe(401);
expect(response.body.error).toBe("Unauthorized");
});
it("rejects local-only route from a tunnel host", async () => {
@@ -261,7 +261,7 @@ describe("dashboard guard local-only access", () => {
});
});
describe("dashboard guard CLI Tools administration access", () => {
describe("dashboard guard CLI Tools access", () => {
beforeEach(() => {
vi.clearAllMocks();
mocks.getSettings.mockResolvedValue({});
@@ -272,14 +272,13 @@ describe("dashboard guard CLI Tools administration access", () => {
mocks.verifyDashboardAuthToken.mockResolvedValue(true);
});
it("rejects normal users from host-level CLI Tools operations", async () => {
it("allows local authenticated users to use CLI Tools", async () => {
const response = await proxy(request("/api/cli-tools/claude-settings", {
host: "localhost:20128",
origin: "http://localhost:20128",
}, "user-token"));
expect(response.status).toBe(403);
expect(response.body.error).toBe("Administrator access required");
expect(response).toBe(mocks.nextResponse);
});
it("rejects remote CLI Tools access even with an administrator session", async () => {