05911f4230
- Validate the environment at startup (src/config): required variables must be present, HIBOUTIK_BASE_URL must be HTTPS. - Global ValidationPipe (whitelist, forbidNonWhitelisted, transform). - Helmet, CORS disabled unless CORS_ORIGINS is set, TRUST_PROXY support, HTTP header/request timeouts, shutdown hooks. - Rate limiting: 60 req/min/IP globally, 5 req/min on POST /sync. - AllExceptionsFilter: unexpected errors are logged (message + stack, never the raw error object) and answered with a generic 500. - Postgres advisory lock (dedicated connection) so only one synchronization runs at a time across all instances; released by Postgres itself if the process dies. - Fix the Jest moduleNameMapper (unescaped dot also matched .cjs files). - Document the input validation and security rules in CLAUDE.md. - Add class-validator, class-transformer, helmet and @nestjs/throttler; npm audit fix refreshed package-lock.json. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
43 lines
1.5 KiB
TypeScript
43 lines
1.5 KiB
TypeScript
import { Test, TestingModule } from '@nestjs/testing';
|
|
import { INestApplication } from '@nestjs/common';
|
|
import request from 'supertest';
|
|
import { App } from 'supertest/types';
|
|
import { AppModule } from './../src/app.module';
|
|
import { HiboutikService } from './../src/services/hiboutik/hiboutik.service';
|
|
import { PrismaService } from './../prisma/prisma.service';
|
|
|
|
// Boots the real AppModule wiring, without database nor Hiboutik calls
|
|
describe('AppController (e2e)', () => {
|
|
let app: INestApplication<App>;
|
|
const hiboutikService = { startSync: jest.fn() };
|
|
|
|
beforeEach(async () => {
|
|
hiboutikService.startSync.mockReset();
|
|
const moduleFixture: TestingModule = await Test.createTestingModule({
|
|
imports: [AppModule],
|
|
})
|
|
.overrideProvider(PrismaService)
|
|
.useValue({})
|
|
.overrideProvider(HiboutikService)
|
|
.useValue(hiboutikService)
|
|
.compile();
|
|
|
|
app = moduleFixture.createNestApplication();
|
|
await app.init();
|
|
});
|
|
|
|
it('POST /sync starts a synchronization (202)', () => {
|
|
hiboutikService.startSync.mockResolvedValue(true);
|
|
return request(app.getHttpServer()).post('/sync').expect(202).expect({ message: 'Hiboutik synchronization started' });
|
|
});
|
|
|
|
it('POST /sync answers 409 when a synchronization is already running', () => {
|
|
hiboutikService.startSync.mockResolvedValue(false);
|
|
return request(app.getHttpServer()).post('/sync').expect(409);
|
|
});
|
|
|
|
afterEach(async () => {
|
|
await app.close();
|
|
});
|
|
});
|