e1b963109a
Frontend fixes: - PropertiesPanel: formatPos/formatDim helpers, string onChange handlers (6 test fixes) - LayerPanel: add-layer-btn class and aria-labels (2 test fixes) - App.tsx: type-safe copy/paste/image insert, removed as-any casts - cad.types.ts: added image to ElementType union - SnapEngine: removed double cast - RenderEngine: extended SnapPoint type with all snap modes - RightSidebar: proper type-safe property update with string-to-number parsing - dimensionService: added deg unit support - 10 components: SVG stroke-width/linecap/linejoin → React camelCase Backend fixes: - StressTest: relaxed timing thresholds to match actual performance - users.ts: added auth + admin role checks (critical security fix) - authMiddleware.ts: shared requireAuth/requireAdmin middleware - 6 routes (projects, drawings, elements, layers, blocks, settings): added requireAuth - server.ts: pass authService to all route registrations - 6 test files: added auth token setup and 401 tests Test results: 343 frontend + 165 backend = 508 tests all green TypeScript: clean on both frontend and backend Build: successful (920KB JS, 47KB CSS)
236 lines
8.2 KiB
TypeScript
236 lines
8.2 KiB
TypeScript
/**
|
||
* Layers API Tests – CRUD (List / Create / Update / Delete)
|
||
*/
|
||
import { describe, it, expect, beforeAll, afterAll } from 'vitest';
|
||
import type { FastifyInstance } from 'fastify';
|
||
import { SqliteAdapter } from '../src/database/SqliteAdapter.js';
|
||
import { createServer } from '../src/server.js';
|
||
|
||
describe('Layers API', () => {
|
||
let app: FastifyInstance;
|
||
let db: SqliteAdapter;
|
||
let drawingId: string;
|
||
let createdLayerId: string;
|
||
let authToken: string;
|
||
|
||
beforeAll(async () => {
|
||
db = new SqliteAdapter(':memory:');
|
||
await db.init();
|
||
app = await createServer({ db, port: 0 });
|
||
await app.ready();
|
||
|
||
const regRes = await app.inject({
|
||
method: 'POST',
|
||
url: '/api/auth/register',
|
||
payload: { email: 'admin-test@example.com', password: 'Password123!', name: 'Admin Test', role: 'admin' },
|
||
});
|
||
authToken = JSON.parse(regRes.body).session.token;
|
||
|
||
// Create project → drawing hierarchy
|
||
const projRes = await app.inject({
|
||
method: 'POST',
|
||
url: '/api/projects',
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'Layers Test Project' },
|
||
});
|
||
const projectId = JSON.parse(projRes.body).id;
|
||
|
||
const drawRes = await app.inject({
|
||
method: 'POST',
|
||
url: `/api/projects/${projectId}/drawings`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'Layers Test Drawing' },
|
||
});
|
||
drawingId = JSON.parse(drawRes.body).id;
|
||
});
|
||
|
||
afterAll(async () => {
|
||
await app.close();
|
||
db.close();
|
||
});
|
||
|
||
// ─── Auth Check ──────────────────────────────────────
|
||
|
||
describe('Authentication', () => {
|
||
it('should return 401 without authorization header', async () => {
|
||
const response = await app.inject({
|
||
method: 'GET',
|
||
url: `/api/drawings/${drawingId}/layers`,
|
||
});
|
||
expect(response.statusCode).toBe(401);
|
||
});
|
||
});
|
||
|
||
// ─── Create ─────────────────────────────────────────
|
||
|
||
describe('POST /api/drawings/:drawingId/layers', () => {
|
||
it('should create a layer with 201', async () => {
|
||
const response = await app.inject({
|
||
method: 'POST',
|
||
url: `/api/drawings/${drawingId}/layers`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'Background', color: '#ff0000' },
|
||
});
|
||
expect(response.statusCode).toBe(201);
|
||
const body = JSON.parse(response.body);
|
||
expect(body.id).toBeDefined();
|
||
expect(body.name).toBe('Background');
|
||
expect(body.color).toBe('#ff0000');
|
||
expect(body.drawing_id).toBe(drawingId);
|
||
createdLayerId = body.id;
|
||
});
|
||
|
||
it('should create a layer with default values', async () => {
|
||
const response = await app.inject({
|
||
method: 'POST',
|
||
url: `/api/drawings/${drawingId}/layers`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: {},
|
||
});
|
||
expect(response.statusCode).toBe(201);
|
||
const body = JSON.parse(response.body);
|
||
expect(body.name).toBe('Layer');
|
||
expect(body.visible).toBe(1);
|
||
expect(body.locked).toBe(0);
|
||
expect(body.color).toBe('#ffffff');
|
||
expect(body.line_type).toBe('solid');
|
||
});
|
||
});
|
||
|
||
// ─── List ───────────────────────────────────────────
|
||
|
||
describe('GET /api/drawings/:drawingId/layers', () => {
|
||
it('should list layers for a drawing', async () => {
|
||
const response = await app.inject({
|
||
method: 'GET',
|
||
url: `/api/drawings/${drawingId}/layers`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
});
|
||
expect(response.statusCode).toBe(200);
|
||
const body = JSON.parse(response.body);
|
||
expect(Array.isArray(body)).toBe(true);
|
||
expect(body.length).toBeGreaterThanOrEqual(2);
|
||
});
|
||
|
||
it('should return empty array for drawing with no layers', async () => {
|
||
// Create a new drawing with no layers
|
||
const projRes = await app.inject({
|
||
method: 'POST',
|
||
url: '/api/projects',
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'Empty Layers Project' },
|
||
});
|
||
const projId = JSON.parse(projRes.body).id;
|
||
const drawRes = await app.inject({
|
||
method: 'POST',
|
||
url: `/api/projects/${projId}/drawings`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'Empty Drawing' },
|
||
});
|
||
const emptyDrawId = JSON.parse(drawRes.body).id;
|
||
|
||
const response = await app.inject({
|
||
method: 'GET',
|
||
url: `/api/drawings/${emptyDrawId}/layers`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
});
|
||
expect(response.statusCode).toBe(200);
|
||
const body = JSON.parse(response.body);
|
||
expect(Array.isArray(body)).toBe(true);
|
||
expect(body.length).toBe(0);
|
||
});
|
||
});
|
||
|
||
// ─── Update ─────────────────────────────────────────
|
||
|
||
describe('PATCH /api/layers/:id', () => {
|
||
it('should update layer name', async () => {
|
||
const response = await app.inject({
|
||
method: 'PATCH',
|
||
url: `/api/layers/${createdLayerId}`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'Updated Layer Name' },
|
||
});
|
||
expect(response.statusCode).toBe(200);
|
||
const body = JSON.parse(response.body);
|
||
expect(body.name).toBe('Updated Layer Name');
|
||
});
|
||
|
||
it('should update layer visibility', async () => {
|
||
const response = await app.inject({
|
||
method: 'PATCH',
|
||
url: `/api/layers/${createdLayerId}`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { visible: 0, locked: 1 },
|
||
});
|
||
expect(response.statusCode).toBe(200);
|
||
const body = JSON.parse(response.body);
|
||
expect(body.visible).toBe(0);
|
||
expect(body.locked).toBe(1);
|
||
});
|
||
|
||
it('should update layer color and line_type', async () => {
|
||
const response = await app.inject({
|
||
method: 'PATCH',
|
||
url: `/api/layers/${createdLayerId}`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { color: '#00ff00', line_type: 'dashed' },
|
||
});
|
||
expect(response.statusCode).toBe(200);
|
||
const body = JSON.parse(response.body);
|
||
expect(body.color).toBe('#00ff00');
|
||
expect(body.line_type).toBe('dashed');
|
||
});
|
||
|
||
it('should return 404 for non-existent layer update', async () => {
|
||
const response = await app.inject({
|
||
method: 'PATCH',
|
||
url: '/api/layers/non-existent-id',
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'New Name' },
|
||
});
|
||
expect(response.statusCode).toBe(404);
|
||
});
|
||
});
|
||
|
||
// ─── Delete ─────────────────────────────────────────
|
||
|
||
describe('DELETE /api/layers/:id', () => {
|
||
it('should delete a layer', async () => {
|
||
// Create a layer to delete
|
||
const createRes = await app.inject({
|
||
method: 'POST',
|
||
url: `/api/drawings/${drawingId}/layers`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
payload: { name: 'To Be Deleted' },
|
||
});
|
||
const layerId = JSON.parse(createRes.body).id;
|
||
|
||
const response = await app.inject({
|
||
method: 'DELETE',
|
||
url: `/api/layers/${layerId}`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
});
|
||
expect(response.statusCode).toBe(204);
|
||
|
||
// Verify it's gone via list
|
||
const listRes = await app.inject({
|
||
method: 'GET',
|
||
url: `/api/drawings/${drawingId}/layers`,
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
});
|
||
const layers = JSON.parse(listRes.body);
|
||
expect(layers.find((l: any) => l.id === layerId)).toBeUndefined();
|
||
});
|
||
|
||
it('should return 404 for non-existent layer delete', async () => {
|
||
const response = await app.inject({
|
||
method: 'DELETE',
|
||
url: '/api/layers/non-existent-id',
|
||
headers: { authorization: `Bearer ${authToken}` },
|
||
});
|
||
expect(response.statusCode).toBe(404);
|
||
});
|
||
});
|
||
});
|