homeio

1import type { IncomingMessage } from "node:http";
2import { describe, expect, it, vi } from "vitest";
3
4vi.mock("@lydell/node-pty", () => ({ spawn: vi.fn() }));
5vi.mock("@/lib/server/env", () => ({ serverEnv: {} }));
6vi.mock("@/lib/server/modules/auth/cookies", () => ({ getAuthCookieName: () => "session" }));
7vi.mock("@/lib/server/modules/auth/service", () => ({ authenticateSession: vi.fn() }));
8
9import {
10  buildPtyEnv,
11  isSameOriginUpgrade,
12  resolveLoginShell,
13} from "@/lib/server/modules/terminal/websocket-server";
14
15function upgrade(headers: Record<string, string | undefined>) {
16  return { headers } as unknown as IncomingMessage;
17}
18
19describe("isSameOriginUpgrade", () => {
20  it("lets Homeio's own page open the terminal", () => {
21    expect(
22      isSameOriginUpgrade(upgrade({ host: "192.168.1.10:3000", origin: "http://192.168.1.10:3000" })),
23    ).toBe(true);
24  });
25
26  it("refuses another app on the same server (same site, different port)", () => {
27    expect(
28      isSameOriginUpgrade(upgrade({ host: "192.168.1.10:3000", origin: "http://192.168.1.10:8096" })),
29    ).toBe(false);
30  });
31
32  it("accepts the public host a tunnel or reverse proxy forwards", () => {
33    expect(
34      isSameOriginUpgrade(
35        upgrade({
36          host: "127.0.0.1:3000",
37          "x-forwarded-host": "home.example.com",
38          origin: "https://home.example.com",
39        }),
40      ),
41    ).toBe(true);
42  });
43
44  it("refuses a malformed Origin", () => {
45    expect(isSameOriginUpgrade(upgrade({ host: "home", origin: "not a url" }))).toBe(false);
46  });
47
48  it("leaves non-browser clients to the session check", () => {
49    expect(isSameOriginUpgrade(upgrade({ host: "home" }))).toBe(true);
50  });
51});
52
53describe("buildPtyEnv", () => {
54  it("gives a login shell what systemd leaves out, and no app secrets", () => {
55    const saved = { ...process.env };
56    try {
57      delete process.env.HOME;
58      delete process.env.USER;
59      delete process.env.PATH;
60      process.env.DATABASE_URL = "postgres://secret";
61      process.env.AUTH_SESSION_SECRET = "secret";
62
63      const env = buildPtyEnv("/bin/bash");
64
65      expect(env.TERM).toBe("xterm-256color");
66      expect(env.HOME).toBeTruthy();
67      expect(env.USER).toBeTruthy();
68      expect(env.SHELL).toBe("/bin/bash");
69      expect(env.PATH).toContain("/usr/bin");
70      expect(env.DATABASE_URL).toBeUndefined();
71      expect(env.AUTH_SESSION_SECRET).toBeUndefined();
72    } finally {
73      process.env = saved;
74    }
75  });
76});
77
78describe("resolveLoginShell", () => {
79  it("picks a shell that exists on this machine", () => {
80    expect(resolveLoginShell()).toMatch(/(^|\/)(\w*sh|powershell\.exe)$/);
81  });
82});
83