Files
baron_qa_write/tests/page-comments.test.js
root dbf5dc3611
Deploy EG-BIM QA Gateway / deploy (push) Successful in 40s
fix: show post and comment actions only to the verified author
2026-10-30 15:58:41 +09:00

174 lines
9.6 KiB
JavaScript

import test from 'node:test';
import assert from 'node:assert/strict';
import { readFileSync } from 'node:fs';
import vm from 'node:vm';
const source = readFileSync(new URL('../egbim/app.js', import.meta.url), 'utf8');
const POST = '01900000-0000-7000-8000-000000000001';
const FIRST = '01900000-0000-7000-8000-000000000002';
const SECOND = '01900000-0000-7000-8000-000000000003';
const USER = { requesterId: 'owner', ssoSubject: 'owner', name: '작성자 이름' };
const COMMENTS_KEY = 'baron.qa.comments.egbim';
const comment = (extra = {}) => ({ id: FIRST, author_id: USER.requesterId, author_name: USER.name, content: '원래 댓글', created_at: '2026-10-29T04:14:00Z', ...extra });
function element() {
return {
innerHTML: '', textContent: '', value: '', hidden: false, disabled: false,
listeners: {}, classList: { toggle() {}, add() {}, remove() {} },
addEventListener(name, callback) { this.listeners[name] = callback; },
querySelector() { return null; },
focus() {}, setSelectionRange() {}
};
}
async function detailPage({ comments = [], cachedComments = [], createResponse = {}, patchResponse = {}, authRefresh = false, user = USER, postOwner = USER.requesterId } = {}) {
const elements = new Map([
'#detail', '[data-detail-category]', '[data-detail-title]', '[data-detail-status]',
'[data-detail-date]', '[data-detail-author]', '[data-detail-company]',
'[data-detail-department]', '[data-detail-content]', '[data-detail-secret]',
'#comments', '#commentCount', '#commentForm', '#commentContent',
'#commentError', '#commentSubmit', '[data-comment-edit-input]', '#editButton', '#deleteButton'
].map((selector) => [selector, element()]));
const storage = new Map([[COMMENTS_KEY, JSON.stringify({ [POST]: cachedComments })]]);
const requests = [];
const context = vm.createContext({
window: { QA_CONFIG: {}, location: { origin: 'https://qa.example.test', search: '?id=' + POST }, confirm: () => true },
document: { cookie: '', addEventListener() {}, querySelector: (selector) => elements.get(selector) || null },
sessionStorage: { getItem: () => null },
localStorage: { getItem: (key) => storage.get(key) || null, setItem: (key, value) => storage.set(key, value) },
URL, URLSearchParams, console,
async fetch(path, options) {
requests.push({ path, ...options });
const method = options.method || 'GET';
let body;
if (method === 'POST') body = createResponse;
else if (method === 'PATCH') body = patchResponse;
else if (method === 'DELETE') body = { ok: true };
else if (path.endsWith('/comments')) body = { comments };
else body = { id: POST, title: '문의 제목', contents: '문의 내용', requester_id: postOwner, requester_name: USER.name };
return new Response(JSON.stringify(body));
}
});
vm.runInContext(source.replace(/\}\)\(\);\s*$/, `
globalThis.testPage = { initDetail, setUser(user, refresh) {
resolvedAuthUser = user;
if (refresh) authReady = Promise.resolve(user);
} }; })();`), context);
context.testPage.setUser(user, authRefresh);
await context.testPage.initDetail();
await new Promise((resolve) => setImmediate(resolve));
return {
elements, requests,
html: () => elements.get('#comments').innerHTML,
stored: () => JSON.parse(storage.get(COMMENTS_KEY))[POST],
async click(action, id = FIRST, value = '') {
elements.get('[data-comment-edit-input]').value = value;
const button = { disabled: false, getAttribute: () => id };
await elements.get('#comments').listeners.click({ target: { closest: (selector) => selector === '[data-comment-' + action + ']' ? button : null } });
},
async create(content) {
elements.get('#commentContent').value = content;
await elements.get('#commentForm').listeners.submit({ preventDefault() {} });
}
};
}
test('initial comments show text and owner actions, and never auto-edit a comment without an ID', async () => {
const page = await detailPage({ comments: [comment(), comment({ id: '', content: 'ID 없는 댓글' }), comment({ id: SECOND, author_id: 'another-user' })] });
assert.match(page.html(), /class="comment-content">ID 없는 댓글<\/div>/);
assert.match(page.html(), new RegExp('data-comment-edit="' + FIRST + '"'));
assert.match(page.html(), new RegExp('data-comment-delete="' + FIRST + '"'));
assert.doesNotMatch(page.html(), /data-comment-edit-input|data-comment-save|data-comment-edit=""|data-comment-delete=""/);
assert.doesNotMatch(page.html(), new RegExp('data-comment-(edit|delete)="' + SECOND + '"'));
});
for (const idField of ['id', 'comment_id', 'commentId']) {
test(`a ${idField} response keeps its ID and date through edit, cancel, save, and delete`, async () => {
const page = await detailPage({
comments: [comment({ id: undefined, [idField]: FIRST }), comment({ id: SECOND, content: '다른 댓글' })],
patchResponse: { comment: { content: '수정한 댓글' } }, authRefresh: true
});
assert.doesNotMatch(page.html(), /data-comment-edit-input/);
assert.match(page.html(), new RegExp('data-comment-edit="' + FIRST + '"'));
await page.click('edit');
assert.match(page.html(), /data-comment-edit-input/);
assert.match(page.html(), /class="comment-content">다른 댓글<\/div>/);
assert.equal((page.html().match(/data-comment-edit-input/g) || []).length, 1);
await page.click('cancel');
assert.doesNotMatch(page.html(), /data-comment-edit-input/);
assert.match(page.html(), new RegExp('data-comment-delete="' + FIRST + '"'));
await page.click('edit');
await page.click('save', FIRST, '수정한 댓글');
assert.doesNotMatch(page.html(), /data-comment-edit-input/);
assert.match(page.html(), /class="comment-content">수정한 댓글<\/div>/);
assert.match(page.html(), /2026-10-29 13:14/);
assert.equal(page.stored()[0].id, FIRST);
assert.equal(page.stored()[0].authorId, USER.requesterId);
const patch = page.requests.find((request) => request.method === 'PATCH');
assert.equal(patch.path, '/api/feedbacks/' + POST + '/comments/' + FIRST);
assert.deepEqual(JSON.parse(patch.body), { content: '수정한 댓글' });
await page.click('delete');
assert.doesNotMatch(page.html(), /수정한 댓글/);
assert.match(page.html(), /다른 댓글/);
assert.equal(page.requests.find((request) => request.method === 'DELETE').path, patch.path);
});
}
for (const createResponse of [
{ id: FIRST, comment: { content: '등록한 댓글' } },
{ comment: { comment_id: FIRST, content: '등록한 댓글' } },
{ data: { commentId: FIRST, content: '등록한 댓글' } },
{ id: FIRST }
]) {
test(`a newly created comment displays owner actions using ${JSON.stringify(createResponse)}`, async () => {
const page = await detailPage({ createResponse });
await page.create('등록한 댓글');
assert.match(page.html(), /class="comment-content">등록한 댓글<\/div>/);
assert.match(page.html(), new RegExp('data-comment-edit="' + FIRST + '"'));
assert.match(page.html(), new RegExp('data-comment-delete="' + FIRST + '"'));
assert.doesNotMatch(page.html(), /data-comment-edit-input/);
assert.equal(page.stored()[0].id, FIRST);
assert.equal(page.stored()[0].author, USER.name);
await page.click('edit');
await page.click('cancel');
assert.ok(page.stored()[0].date);
});
}
test('a cached comment without an ID remains read-only when loading the page', async () => {
const page = await detailPage({ cachedComments: [comment({ id: '' })], comments: [comment({ id: '' })], authRefresh: true });
assert.match(page.html(), /class="comment-content">원래 댓글<\/div>/);
assert.doesNotMatch(page.html(), /data-comment-edit|data-comment-delete|data-comment-save/);
assert.equal(page.requests.some((request) => ['PATCH', 'DELETE'].includes(request.method)), false);
});
test('another author post hides both post buttons while the viewer own comment keeps its actions', async () => {
const page = await detailPage({ postOwner: 'another-user', comments: [comment(), comment({ id: SECOND, author_id: 'another-user' })] });
assert.equal(page.elements.get('#editButton').hidden, true);
assert.equal(page.elements.get('#deleteButton').hidden, true);
assert.match(page.html(), new RegExp('data-comment-edit="' + FIRST + '"'));
assert.doesNotMatch(page.html(), new RegExp('data-comment-(edit|delete)="' + SECOND + '"'));
});
test('a matching display name never shows post or comment buttons when author IDs are missing', async () => {
const page = await detailPage({ postOwner: '', comments: [comment({ author_id: '' })] });
assert.equal(page.elements.get('#editButton').hidden, true);
assert.equal(page.elements.get('#deleteButton').hidden, true);
assert.doesNotMatch(page.html(), /data-comment-edit|data-comment-delete/);
});
test('post and comment actions follow only the current primary identity and disappear without a session', async () => {
const page = await detailPage({
user: { ...USER, ssoSubject: 'stale-owner', userUuid: 'stale-owner' },
comments: [comment(), comment({ id: SECOND, author_id: 'stale-owner' })]
});
assert.equal(page.elements.get('#editButton').hidden, false);
assert.equal(page.elements.get('#deleteButton').hidden, false);
assert.match(page.html(), new RegExp('data-comment-edit="' + FIRST + '"'));
assert.doesNotMatch(page.html(), new RegExp('data-comment-(edit|delete)="' + SECOND + '"'));
const anonymous = await detailPage({ user: null, authRefresh: true, comments: [comment()] });
assert.equal(anonymous.elements.get('#editButton').hidden, true);
assert.equal(anonymous.elements.get('#deleteButton').hidden, true);
assert.doesNotMatch(anonymous.html(), /data-comment-edit|data-comment-delete/);
});