운영버킷 배포

tests/abc-connection.test.js

@@ -0,0 +1,49 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { verifyAbc } from '../scripts/verify-abc.mjs';
+
+const env = {
+  CLOUDFLARE_API_TOKEN: 'fixture-cloudflare-token', SESSION_SECRET: 'fixture-session-'.repeat(3),
+  ABC_API_KEY: 'fixture-project-key', AUTH_CLIENT_ID: 'fixture-public-pkce-client',
+  ABC_PROJECT_ID: '01a1c543-ab4f-744f-8eff-ab85f2644271', ABC_CHANNEL_ID: '01a1c544-35ac-7674-9bf0-2469bfbe3e52',
+  ORG_CONTEXT_ENABLED: 'true', ORG_CONTEXT_TENANT_IDS: '["038326b6-954a-48a7-a85f-efd83f62b82a"]',
+  ORG_CONTEXT_KEY_ID: 'fixture-key-id', ORG_CONTEXT_KEY_SECRET: 'fixture-key-secret',
+  DEPLOY_COMMIT_SHA: 'a'.repeat(40)
+};
+const fields = [{ key: 'title' }, { key: 'contents' }, {
+  key: 'Category', options: ['ERROR_QNA', 'IMPROVEMENT_QNA', 'GENERAL_QNA'].map((key) => ({ key }))
+}];
+
+test('ABC connection verification reads the configured production channel without writing data', async () => {
+  await verifyAbc(env, async (url, options) => {
+    assert.equal(url, 'https://qa.brsw.kr/api/projects/' + env.ABC_PROJECT_ID + '/channels/' + env.ABC_CHANNEL_ID + '/fields');
+    assert.equal(options.method, 'GET');
+    assert.equal(options.body, undefined);
+    assert.equal(options.redirect, 'error');
+    assert.equal(options.headers['x-api-key'], env.ABC_API_KEY);
+    return Response.json(fields);
+  });
+});
+
+test('ABC connection verification blocks wrong production targets before sending credentials', async () => {
+  let requests = 0;
+  for (const override of [
+    { ABC_API_BASE_URL: 'https://feedback.hmac.kr' },
+    { ABC_CHANNEL_ID: '01900000-0000-7000-8000-000000000002' }
+  ]) {
+    await assert.rejects(verifyAbc({ ...env, ...override }, async () => { requests++; }), /must match the production EGBIM Q&A target/);
+  }
+  assert.equal(requests, 0);
+});
+
+test('ABC connection verification rejects wrong keys and channel schemas without printing credentials', async () => {
+  for (const status of [401, 403, 404]) {
+    await assert.rejects(verifyAbc(env, async () => new Response('', { status })), new RegExp('HTTP ' + status));
+  }
+  await assert.rejects(verifyAbc(env, async () => Response.json([{ key: 'title' }])), /contents, Category/);
+  await assert.rejects(verifyAbc(env, async () => Response.json(fields.map((field) => ({ ...field, options: [] })))), /category options/);
+  await assert.rejects(verifyAbc(env, async () => { throw new Error(env.ABC_API_KEY); }), (error) => {
+    assert.ok(!error.message.includes(env.ABC_API_KEY));
+    return true;
+  });
+});