External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

test: add enterprise feature test coverage

Browse Source 
Tests for SCIM, GDPR lifecycle, legal hold, audit export/archival,
encryption, SIEM forwarding, MFA endpoints, IP allowlist, config
export/import, webhook management, and license validation.
This commit is contained in:
SnapOtter
2026-06-14 16:50:35 +08:00
parent 8403222d08
commit 112df13957
22 changed files with 3352 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/integration/audit-export.test.ts
+60 -1
View File
@@ -73,7 +73,66 @@ describe("audit export", () => {
url: "/api/v1/enterprise/audit/export?format=json",
headers: { authorization: `Bearer ${userToken}` },
});
// Regular users lack audit:read, so they get 403 before the enterprise check
expect(res.statusCode).toBe(403);
});
it("returns 403 for valid json format without enterprise license", async () => {
const res = await testApp.app.inject({
method: "GET",
url: "/api/v1/enterprise/audit/export?format=json",
headers: { authorization: `Bearer ${adminToken}` },
});
expect(res.statusCode).toBe(403);
const body = JSON.parse(res.body);
expect(body.error).toContain("enterprise");
});
it("returns 403 for valid csv format without enterprise license", async () => {
const res = await testApp.app.inject({
method: "GET",
url: "/api/v1/enterprise/audit/export?format=csv",
headers: { authorization: `Bearer ${adminToken}` },
});
expect(res.statusCode).toBe(403);
const body = JSON.parse(res.body);
expect(body.error).toContain("enterprise");
});
it("returns 403 before validating invalid format parameter", async () => {
const res = await testApp.app.inject({
method: "GET",
url: "/api/v1/enterprise/audit/export?format=xml",
headers: { authorization: `Bearer ${adminToken}` },
});
expect(res.statusCode).toBe(403);
});
it("accepts from/to ISO datetime query parameters", async () => {
const res = await testApp.app.inject({
method: "GET",
url: "/api/v1/enterprise/audit/export?format=json&from=2026-01-01T00:00:00Z&to=2026-12-31T23:59:59Z",
headers: { authorization: `Bearer ${adminToken}` },
});
expect(res.statusCode).toBe(403);
const body = JSON.parse(res.body);
expect(body.error).toContain("enterprise");
});
it("returns 403 with default format when format is omitted", async () => {
const res = await testApp.app.inject({
method: "GET",
url: "/api/v1/enterprise/audit/export",
headers: { authorization: `Bearer ${adminToken}` },
});
expect(res.statusCode).toBe(403);
});
it("returns 401 with expired or invalid token", async () => {
const res = await testApp.app.inject({
method: "GET",
url: "/api/v1/enterprise/audit/export?format=json",
headers: { authorization: "Bearer invalid-token-value" },
});
expect(res.statusCode).toBe(401);
});
});