70 lines
2.3 KiB
JavaScript
70 lines
2.3 KiB
JavaScript
import { test } from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import { generateKeyPairSync } from 'node:crypto';
|
|
import {
|
|
generateJWT,
|
|
resolveAppCredentials,
|
|
resolveInstallationId,
|
|
} from '../get-bot-token.mjs';
|
|
|
|
test('generateJWT: uses an explicitly selected GitHub App ID as the issuer', () => {
|
|
const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 2048 });
|
|
const token = generateJWT(privateKey, '987654');
|
|
const payload = JSON.parse(Buffer.from(token.split('.')[1], 'base64url').toString('utf8'));
|
|
|
|
assert.equal(payload.iss, '987654');
|
|
});
|
|
|
|
test('resolveAppCredentials: selects an explicit app without mixing legacy credentials', () => {
|
|
assert.deepEqual(resolveAppCredentials({
|
|
GITHUB_APP_ID: '987654',
|
|
GITHUB_APP_PRIVATE_KEY: 'dedicated-key',
|
|
GITHUB_APP_NAME: 'paperclip-evals',
|
|
COMMITPERCLIP_KEY: 'legacy-key',
|
|
}), {
|
|
appId: '987654',
|
|
privateKey: 'dedicated-key',
|
|
appName: 'paperclip-evals',
|
|
});
|
|
});
|
|
|
|
test('resolveAppCredentials: rejects a partially configured explicit app', () => {
|
|
assert.throws(
|
|
() => resolveAppCredentials({
|
|
GITHUB_APP_ID: '987654',
|
|
COMMITPERCLIP_KEY: 'legacy-key',
|
|
}),
|
|
/GITHUB_APP_ID and GITHUB_APP_PRIVATE_KEY must be set together/
|
|
);
|
|
});
|
|
|
|
test('resolveInstallationId: uses the repo installation endpoint when repo context is available', async () => {
|
|
const seenPaths = [];
|
|
const installationId = await resolveInstallationId(async (path) => {
|
|
seenPaths.push(path);
|
|
return { id: 42 };
|
|
}, 'jwt', 'paperclipai/paperclip', 'paperclipai');
|
|
|
|
assert.equal(installationId, 42);
|
|
assert.deepEqual(seenPaths, ['/repos/paperclipai/paperclip/installation']);
|
|
});
|
|
|
|
test('resolveInstallationId: falls back to the matching owner installation', async () => {
|
|
const installationId = await resolveInstallationId(async () => ([
|
|
{ id: 1, account: { login: 'someone-else' } },
|
|
{ id: 7, account: { login: 'PaperclipAI' } },
|
|
]), 'jwt', undefined, 'paperclipai');
|
|
|
|
assert.equal(installationId, 7);
|
|
});
|
|
|
|
test('resolveInstallationId: rejects ambiguous installations without repo or owner context', async () => {
|
|
await assert.rejects(
|
|
resolveInstallationId(async () => ([
|
|
{ id: 1, account: { login: 'org-one' } },
|
|
{ id: 2, account: { login: 'org-two' } },
|
|
]), 'jwt'),
|
|
/Multiple GitHub App installations found/
|
|
);
|
|
});
|