nezumi/9router
1
0
Fork 0
mirror of https://github.com/Nezumi-2711/9router.git synced 2026-09-22 13:38:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: update the permission for create and read the api keys

Browse Source
This commit is contained in:
nezumi
2026-07-11 15:28:52 +07:00
parent 8cd10aefdc
commit 4ac342c5a2
15 changed files with 187 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/unit/db-sqlite-vs-lowdb.test.js
+12
View File
@@ -65,6 +65,18 @@ describe("DB SQLite layer — public API parity", () => {
expect(await sqliteDb.getApiKeyById(k.id)).toBeNull();
});
it("apiKeys: scopes retrieval to key owner", async () => {
const ownerOne = await sqliteDb.createUser({ username: "key-owner-one", password: "password", role: "user" });
const ownerTwo = await sqliteDb.createUser({ username: "key-owner-two", password: "password", role: "user" });
const firstKey = await sqliteDb.createApiKey("owner-one-key", "machine-abc", ownerOne.id);
const secondKey = await sqliteDb.createApiKey("owner-two-key", "machine-abc", ownerTwo.id);
const firstOwnerKeys = await sqliteDb.getApiKeysByOwnerId(ownerOne.id);
expect(firstOwnerKeys.map((key) => key.id)).toContain(firstKey.id);
expect(firstOwnerKeys.map((key) => key.id)).not.toContain(secondKey.id);
expect(await sqliteDb.getApiKeyByIdAndOwnerId(firstKey.id, ownerTwo.id)).toBeNull();
});
it("providerConnections: CRUD + reorder by priority", async () => {
const c1 = await sqliteDb.createProviderConnection({ provider: "test", authType: "apikey", name: "a", apiKey: "k1" });
const c2 = await sqliteDb.createProviderConnection({ provider: "test", authType: "apikey", name: "b", apiKey: "k2" });