josh/electric-cherry
1
0
Fork 0
Code Issues 18 Pull Requests Actions Packages Projects Releases Wiki Activity

Restrict plugin lookups and reuse cached chat reads (Refs #98)

Browse Source
This commit is contained in:
josh
2026-10-17 10:31:13 -04:00
parent b9bc897d6e
commit f3b9699317
8 changed files with 311 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/unit/auth-guard.test.ts
+4 -2
View File
@@ -339,13 +339,15 @@ describe('browser authentication guard', () => {
['GET', '/api/drift'],
['HEAD', '/api/drift'],
['GET', '/api/plugins/github/release'],
['HEAD', '/api/plugins/github/release']
['HEAD', '/api/plugins/github/release'],
['GET', '/api/plugins/updates'],
['HEAD', '/api/plugins/updates']
])('restricts expensive %s %s requests before handler execution', async (method, route) => {
const anonymous = requestFor(route, { method, cookie: null });
expect((await anonymous.invoke()).status).toBe(401);
expect(anonymous.resolve).not.toHaveBeenCalled();
for (const role of ['viewer', 'super_viewer', 'operator', 'admin'] as const) {
for (const role of ['viewer', 'super_viewer', 'operator', 'moderator', 'admin'] as const) {
signIn(role);
const call = requestFor(route, { method });
const allowed = role === 'operator' || role === 'admin';