root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test(FN-4981): complete Step 4 — enforce apiKey guard ordering

Browse Source 
Fusion-Task-Id: FN-4981
Fusion-Task-Lineage: 0b3fae6a-a86b-44d5-94e8-4c94429d4767
This commit is contained in:
Fusion (runfusion.ai)
2026-05-18 04:16:59 -07:00
committed by gsxdsm
parent 765a6fed0a
commit c97ebde1d3
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
packages/dashboard/src/__tests__/routes-secrets-sync.test.ts
View File

@@ -151,6 +151,20 @@ describe("routes secrets sync", () => {
expect((await secrets.revealSecret(secrets.listSecrets("project").find((r) => r.key === "EXISTING")!.id, "project", { agentId: null, userId: null })).plaintextValue).toBe("new");
});
it.each([
["/api/nodes/node-remote-001/secrets/push"],
["/api/nodes/node-remote-001/secrets/pull"],
])("apiKey guard fires before passphrase lookup for %s", async (path) => {
vi.spyOn(CentralCore.prototype, "getNode").mockResolvedValue({ ...remoteNode, url: "http://remote.test", apiKey: "" } as any);
const res = await request(fixture.app, "POST", path, JSON.stringify({}), { "content-type": "application/json" });
expect(res.status).toBe(400);
expect((res.body as any).error).toBe(MISSING_REMOTE_NODE_API_KEY_MESSAGE);
expect((res.body as any).error).not.toBe("passphrase-not-configured");
expect(mockedFetchFromRemoteNode).not.toHaveBeenCalled();
});
it("POST /api/nodes/:id/secrets/pull wrong passphrase", async () => {
await setSyncPassphrase(secrets, "local");
mockedFetchFromRemoteNode.mockResolvedValue(await wrapSecretsBundle([{ key: "K", value: "V", scope: "project", accessPolicy: "prompt", envExportable: false }], "remote") as any);