168 lines
9.1 KiB
JavaScript
168 lines
9.1 KiB
JavaScript
"use strict";
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
const vitest_1 = require("vitest");
|
|
const crypto_1 = require("crypto");
|
|
const Integration_1 = require("../domain/entities/Integration");
|
|
const IntegrationType_1 = require("../domain/value-objects/IntegrationType");
|
|
const WebhookEndpoint_1 = require("../domain/entities/WebhookEndpoint");
|
|
const WebhookSecret_1 = require("../domain/value-objects/WebhookSecret");
|
|
const WebhookDispatcher_1 = require("../infrastructure/webhooks/WebhookDispatcher");
|
|
const pino_1 = require("pino");
|
|
// ─── Integration Entity ───────────────────────────────────────────────────────
|
|
(0, vitest_1.describe)('Integration', () => {
|
|
(0, vitest_1.it)('creates with defaults', () => {
|
|
const integration = Integration_1.Integration.create({
|
|
name: 'My Slack',
|
|
type: IntegrationType_1.IntegrationType.slack(),
|
|
config: { webhookUrl: 'https://hooks.slack.com/test' },
|
|
});
|
|
(0, vitest_1.expect)(integration.name).toBe('My Slack');
|
|
(0, vitest_1.expect)(integration.type.value).toBe('slack');
|
|
(0, vitest_1.expect)(integration.enabled).toBe(true);
|
|
(0, vitest_1.expect)(integration.config.webhookUrl).toBe('https://hooks.slack.com/test');
|
|
});
|
|
(0, vitest_1.it)('enable and disable', () => {
|
|
const integration = Integration_1.Integration.create({
|
|
name: 'Test',
|
|
type: IntegrationType_1.IntegrationType.github(),
|
|
config: {},
|
|
});
|
|
integration.disable();
|
|
(0, vitest_1.expect)(integration.enabled).toBe(false);
|
|
integration.enable();
|
|
(0, vitest_1.expect)(integration.enabled).toBe(true);
|
|
});
|
|
(0, vitest_1.it)('updateConfig merges config', () => {
|
|
const integration = Integration_1.Integration.create({
|
|
name: 'Jira',
|
|
type: IntegrationType_1.IntegrationType.jira(),
|
|
config: { host: 'https://old.atlassian.net' },
|
|
});
|
|
integration.updateConfig({ host: 'https://new.atlassian.net', token: 'tok' });
|
|
(0, vitest_1.expect)(integration.config.host).toBe('https://new.atlassian.net');
|
|
(0, vitest_1.expect)(integration.config.token).toBe('tok');
|
|
});
|
|
});
|
|
// ─── IntegrationType ──────────────────────────────────────────────────────────
|
|
(0, vitest_1.describe)('IntegrationType', () => {
|
|
(0, vitest_1.it)('parses all valid types', () => {
|
|
(0, vitest_1.expect)(IntegrationType_1.IntegrationType.fromString('slack').value).toBe('slack');
|
|
(0, vitest_1.expect)(IntegrationType_1.IntegrationType.fromString('github').value).toBe('github');
|
|
(0, vitest_1.expect)(IntegrationType_1.IntegrationType.fromString('jira').value).toBe('jira');
|
|
(0, vitest_1.expect)(IntegrationType_1.IntegrationType.fromString('webhook').value).toBe('webhook');
|
|
});
|
|
(0, vitest_1.it)('throws on invalid type', () => {
|
|
(0, vitest_1.expect)(() => IntegrationType_1.IntegrationType.fromString('unknown')).toThrow();
|
|
});
|
|
});
|
|
// ─── WebhookEndpoint ──────────────────────────────────────────────────────────
|
|
(0, vitest_1.describe)('WebhookEndpoint', () => {
|
|
(0, vitest_1.it)('creates with auto-generated secret', () => {
|
|
const endpoint = WebhookEndpoint_1.WebhookEndpoint.create({ url: 'https://example.com/hook' });
|
|
(0, vitest_1.expect)(endpoint.url).toBe('https://example.com/hook');
|
|
(0, vitest_1.expect)(endpoint.enabled).toBe(true);
|
|
(0, vitest_1.expect)(endpoint.secret.value).toBeTruthy();
|
|
(0, vitest_1.expect)(endpoint.secret.value.length).toBeGreaterThan(20);
|
|
});
|
|
(0, vitest_1.it)('records delivery', () => {
|
|
const endpoint = WebhookEndpoint_1.WebhookEndpoint.create({ url: 'https://example.com/hook' });
|
|
(0, vitest_1.expect)(endpoint.lastStatus).toBeUndefined();
|
|
endpoint.recordDelivery(200);
|
|
(0, vitest_1.expect)(endpoint.lastStatus).toBe(200);
|
|
(0, vitest_1.expect)(endpoint.lastDeliveredAt).toBeDefined();
|
|
});
|
|
});
|
|
// ─── WebhookSecret ────────────────────────────────────────────────────────────
|
|
(0, vitest_1.describe)('WebhookSecret', () => {
|
|
(0, vitest_1.it)('generates a secret', () => {
|
|
const s = WebhookSecret_1.WebhookSecret.generate();
|
|
(0, vitest_1.expect)(s.value.length).toBeGreaterThan(20);
|
|
});
|
|
(0, vitest_1.it)('fromString round-trips', () => {
|
|
const s = WebhookSecret_1.WebhookSecret.fromString('mysecret-at-least-16chars');
|
|
(0, vitest_1.expect)(s.value).toBe('mysecret-at-least-16chars');
|
|
});
|
|
(0, vitest_1.it)('throws when secret too short', () => {
|
|
(0, vitest_1.expect)(() => WebhookSecret_1.WebhookSecret.fromString('short')).toThrow();
|
|
});
|
|
});
|
|
// ─── HMAC signature verification ─────────────────────────────────────────────
|
|
(0, vitest_1.describe)('HMAC webhook signature', () => {
|
|
(0, vitest_1.it)('produces valid sha256 signature', () => {
|
|
const secret = 'test-secret-abc123';
|
|
const body = JSON.stringify({ event: 'finding.created', data: { id: '1' } });
|
|
const sig = (0, crypto_1.createHmac)('sha256', secret).update(body).digest('hex');
|
|
(0, vitest_1.expect)(sig).toBeTruthy();
|
|
// Verify it's a valid hex string of 64 chars (sha256)
|
|
(0, vitest_1.expect)(sig).toMatch(/^[0-9a-f]{64}$/);
|
|
});
|
|
(0, vitest_1.it)('same body + secret → same signature', () => {
|
|
const secret = 'test-secret';
|
|
const body = 'hello world';
|
|
const sig1 = (0, crypto_1.createHmac)('sha256', secret).update(body).digest('hex');
|
|
const sig2 = (0, crypto_1.createHmac)('sha256', secret).update(body).digest('hex');
|
|
(0, vitest_1.expect)(sig1).toBe(sig2);
|
|
});
|
|
(0, vitest_1.it)('different body → different signature', () => {
|
|
const secret = 'test-secret';
|
|
const sig1 = (0, crypto_1.createHmac)('sha256', secret).update('body1').digest('hex');
|
|
const sig2 = (0, crypto_1.createHmac)('sha256', secret).update('body2').digest('hex');
|
|
(0, vitest_1.expect)(sig1).not.toBe(sig2);
|
|
});
|
|
});
|
|
// ─── WebhookDispatcher ───────────────────────────────────────────────────────
|
|
(0, vitest_1.describe)('WebhookDispatcher', () => {
|
|
const logger = (0, pino_1.pino)({ level: 'silent' });
|
|
(0, vitest_1.it)('calls fetch for each enabled endpoint', async () => {
|
|
const secret = WebhookSecret_1.WebhookSecret.fromString('secret123456789abcdef');
|
|
const endpoint = WebhookEndpoint_1.WebhookEndpoint.reconstitute({ url: 'https://example.com/hook', secret, enabled: true, createdAt: new Date() }, { toString: () => 'ep-1', equals: () => false });
|
|
const mockRepo = {
|
|
save: vitest_1.vi.fn(),
|
|
findById: vitest_1.vi.fn(),
|
|
findAll: vitest_1.vi.fn(),
|
|
findEnabled: vitest_1.vi.fn().mockResolvedValue([endpoint]),
|
|
update: vitest_1.vi.fn(),
|
|
delete: vitest_1.vi.fn(),
|
|
};
|
|
const fetchMock = vitest_1.vi.fn().mockResolvedValue({ status: 200, ok: true });
|
|
global.fetch = fetchMock;
|
|
const dispatcher = new WebhookDispatcher_1.WebhookDispatcher(mockRepo, logger);
|
|
const finding = {
|
|
id: 'f-1',
|
|
title: 'XSS in login form',
|
|
severity: 'high',
|
|
type: 'xss',
|
|
description: 'Reflected XSS',
|
|
sessionId: 's-1',
|
|
};
|
|
await dispatcher.dispatchFinding(finding);
|
|
(0, vitest_1.expect)(fetchMock).toHaveBeenCalledOnce();
|
|
const [url, opts] = fetchMock.mock.calls[0];
|
|
(0, vitest_1.expect)(url).toBe('https://example.com/hook');
|
|
(0, vitest_1.expect)(opts.method).toBe('POST');
|
|
const headers = opts.headers;
|
|
(0, vitest_1.expect)(headers['X-ABE-Event']).toBe('finding.created');
|
|
(0, vitest_1.expect)(headers['X-ABE-Signature']).toMatch(/^sha256=[0-9a-f]{64}$/);
|
|
});
|
|
(0, vitest_1.it)('does not throw when no endpoints', async () => {
|
|
const mockRepo = {
|
|
save: vitest_1.vi.fn(),
|
|
findById: vitest_1.vi.fn(),
|
|
findAll: vitest_1.vi.fn(),
|
|
findEnabled: vitest_1.vi.fn().mockResolvedValue([]),
|
|
update: vitest_1.vi.fn(),
|
|
delete: vitest_1.vi.fn(),
|
|
};
|
|
const dispatcher = new WebhookDispatcher_1.WebhookDispatcher(mockRepo, logger);
|
|
const finding = {
|
|
id: 'f-1',
|
|
title: 'Test',
|
|
severity: 'low',
|
|
type: 'info',
|
|
description: 'Test',
|
|
sessionId: 's-1',
|
|
};
|
|
await (0, vitest_1.expect)(dispatcher.dispatchFinding(finding)).resolves.toBeUndefined();
|
|
});
|
|
});
|