mirror of
https://github.com/affaan-m/ECC.git
synced 2026-08-17 21:15:40 +02:00
Affaan MustafaandGitHub
cdbb25bf9d
* test: reproduce Discord webhook announcement gap * fix: deliver ECC announcements through channel webhook * test: cover webhook replay and least privilege * fix: make webhook delivery durable and least privilege * test: cover trusted receipts and cross-workflow races * fix: serialize and authenticate announcement receipts
68 lines
3.4 KiB
JavaScript
68 lines
3.4 KiB
JavaScript
const assert = require('node:assert/strict');
|
|
|
|
async function main() {
|
|
const {
|
|
announcementKey,
|
|
buildDiscordPayload,
|
|
findReleaseDiscussion,
|
|
isAnnouncementDiscussion,
|
|
normalizeDiscordWebhookUrl,
|
|
discussionReceiptMarker,
|
|
findDiscussionReceipt,
|
|
discussionReceiptStatus,
|
|
releaseMarker,
|
|
} = await import('../../scripts/discord/announcement-core.mjs');
|
|
|
|
assert.equal(isAnnouncementDiscussion({ category: { name: 'Announcements' } }), true);
|
|
assert.equal(isAnnouncementDiscussion({ category: { name: 'General' } }), false);
|
|
assert.equal(isAnnouncementDiscussion({ category: { name: 'announcements' } }), false);
|
|
|
|
assert.equal(releaseMarker('v2.2.0'), '<!-- ecc-release:v2.2.0 -->');
|
|
const marker = releaseMarker('v2.2.0');
|
|
assert.equal(findReleaseDiscussion([
|
|
{ id: 'untrusted', body: marker, category: { name: 'General' } },
|
|
{ id: 'canonical', body: marker, category: { name: 'Announcements' } },
|
|
], marker).id, 'canonical');
|
|
assert.equal(announcementKey({ repository: 'affaan-m/ECC', discussionId: 'D_kw123' }), 'affaan-m/ECC:discussion:D_kw123');
|
|
|
|
const payload = buildDiscordPayload({
|
|
title: '@everyone ECC 2.2.0',
|
|
body: 'A'.repeat(5000),
|
|
url: 'https://github.com/affaan-m/ECC/discussions/3000',
|
|
key: 'affaan-m/ECC:discussion:D_kw123',
|
|
});
|
|
assert.deepEqual(payload.allowed_mentions, { parse: [] });
|
|
assert.equal(payload.embeds.length, 1);
|
|
assert.ok(payload.embeds[0].description.length <= 4000);
|
|
assert.equal(payload.embeds[0].footer.text, 'ecc:D_kw123');
|
|
assert.equal(payload.embeds[0].url, 'https://github.com/affaan-m/ECC/discussions/3000');
|
|
assert.equal(payload.enforce_nonce, true);
|
|
assert.match(payload.nonce, /^ecc-[a-f0-9]{16}$/);
|
|
|
|
assert.equal(
|
|
normalizeDiscordWebhookUrl('https://discord.com/api/webhooks/123456789012345678/secret-token-long-enough'),
|
|
'https://discord.com/api/webhooks/123456789012345678/secret-token-long-enough?wait=true',
|
|
);
|
|
assert.throws(() => normalizeDiscordWebhookUrl('https://evil.example/api/webhooks/123/token'), /invalid Discord webhook URL/);
|
|
assert.throws(() => normalizeDiscordWebhookUrl('https://user@discord.com/api/webhooks/123456789012345678/secret-token-long-enough'), /invalid Discord webhook URL/);
|
|
assert.throws(() => normalizeDiscordWebhookUrl('https://discord.com:444/api/webhooks/123456789012345678/secret-token-long-enough'), /invalid Discord webhook URL/);
|
|
assert.throws(() => normalizeDiscordWebhookUrl('https://discord.com/api/webhooks/123456789012345678/secret-token-long-enough?leak=1'), /invalid Discord webhook URL/);
|
|
|
|
const receiptMarker = discussionReceiptMarker('affaan-m/ECC:discussion:D_kw123');
|
|
assert.match(receiptMarker, /^<!-- ecc-discord-receipt:[a-f0-9]{32} -->$/);
|
|
assert.equal(findDiscussionReceipt([
|
|
{ id: 'forged', body: `Discord delivery: complete\n${receiptMarker}`, author: { login: 'attacker' } },
|
|
{ id: 'comment-1', body: `Discord delivery: complete\n${receiptMarker}`, author: { login: 'github-actions[bot]' } },
|
|
], receiptMarker).id, 'comment-1');
|
|
assert.equal(findDiscussionReceipt([{ id: 'comment-2', body: 'unrelated' }], receiptMarker), null);
|
|
assert.equal(discussionReceiptStatus({ body: `Discord delivery: pending.\n${receiptMarker}` }), 'pending');
|
|
assert.equal(discussionReceiptStatus({ body: `Discord delivery: complete (message 1).\n${receiptMarker}` }), 'complete');
|
|
|
|
console.log('release announcement core: ok');
|
|
}
|
|
|
|
main().catch(error => {
|
|
console.error(error);
|
|
process.exitCode = 1;
|
|
});
|