auto-login/tests/utils.test.js

// tests/utils.test.js
// 测试 utils.js 中的纯函数：isDomainMatch（URL 路径匹配）和 escapeHtml（HTML 转义）
// 运行：node --test tests/utils.test.js

const { describe, it } = require("node:test");
const assert = require("node:assert/strict");
const { isDomainMatch, escapeHtml } = require("../dist/utils.js");

describe("isDomainMatch - 纯 hostname 匹配", () => {
  it("精确域名匹配", () => {
    assert.equal(isDomainMatch("https://example.com/login", "example.com"), true);
    assert.equal(isDomainMatch("https://example.com/", "example.com"), true);
    assert.equal(isDomainMatch("https://other.com/", "example.com"), false);
  });

  it("子域名通配符 *.example.com", () => {
    assert.equal(isDomainMatch("https://oa.example.com/", "*.example.com"), true);
    assert.equal(isDomainMatch("https://a.b.example.com/", "*.example.com"), true);
    assert.equal(isDomainMatch("https://example.com/", "*.example.com"), true); // 根域也匹配
    assert.equal(isDomainMatch("https://notexample.com/", "*.example.com"), false);
  });

  it("任意位置通配符", () => {
    assert.equal(isDomainMatch("https://api.dev.example.com/", "api.*.example.com"), true);
    assert.equal(isDomainMatch("https://api.prod.example.com/", "api.*.example.com"), true);
    assert.equal(isDomainMatch("https://web.dev.example.com/", "api.*.example.com"), false);
  });

  it("端口和协议不影响匹配", () => {
    assert.equal(isDomainMatch("http://example.com:8080/path", "example.com"), true);
    assert.equal(isDomainMatch("https://example.com:443/", "example.com"), true);
  });

  it("非法 URL 返回 false", () => {
    assert.equal(isDomainMatch("not-a-url", "example.com"), false);
    assert.equal(isDomainMatch("", "example.com"), false);
    assert.equal(isDomainMatch("https://example.com/", ""), false);
  });
});

describe("isDomainMatch - hostname + path 匹配", () => {
  it("精确路径匹配", () => {
    assert.equal(isDomainMatch("https://oa.com/login", "oa.com/login"), true);
    assert.equal(isDomainMatch("https://oa.com/admin/login", "oa.com/login"), false);
    assert.equal(isDomainMatch("https://oa.com/", "oa.com/login"), false);
  });

  it("路径前缀通配 login/*", () => {
    assert.equal(isDomainMatch("https://oa.com/login", "oa.com/login/*"), true);
    assert.equal(isDomainMatch("https://oa.com/login/step2", "oa.com/login/*"), true);
    assert.equal(isDomainMatch("https://oa.com/login/sub/deep", "oa.com/login/*"), true);
    assert.equal(isDomainMatch("https://oa.com/logins", "oa.com/login/*"), false);
    assert.equal(isDomainMatch("https://oa.com/admin", "oa.com/login/*"), false);
  });

  it("路径全通配 *", () => {
    assert.equal(isDomainMatch("https://oa.com/anything", "oa.com/*"), true);
    assert.equal(isDomainMatch("https://oa.com/", "oa.com/*"), true);
  });

  it("仅 hostname + 空路径匹配该域名所有页面", () => {
    assert.equal(isDomainMatch("https://oa.com/any/path", "oa.com/"), true);
    assert.equal(isDomainMatch("https://oa.com/", "oa.com/"), true);
  });

  it("路径内任意位置通配", () => {
    assert.equal(isDomainMatch("https://site.com/a/123/b", "site.com/a/*/b"), true);
    assert.equal(isDomainMatch("https://site.com/a/xyz/b", "site.com/a/*/b"), true);
    assert.equal(isDomainMatch("https://site.com/a/123/c", "site.com/a/*/b"), false);
  });

  it("path 匹配与子域名通配组合", () => {
    assert.equal(isDomainMatch("https://api.dev.com/login", "*.dev.com/login"), true);
    assert.equal(isDomainMatch("https://web.dev.com/admin", "*.dev.com/login"), false);
    assert.equal(isDomainMatch("https://api.dev.com/login/step2", "*.dev.com/login/*"), true);
  });

  it("带 query 和 hash 的 URL 不影响 path 匹配", () => {
    assert.equal(isDomainMatch("https://oa.com/login?next=/home", "oa.com/login"), true);
    assert.equal(isDomainMatch("https://oa.com/login#section", "oa.com/login"), true);
  });
});

describe("escapeHtml", () => {
  it("转义 5 个特殊字符", () => {
    assert.equal(escapeHtml("<"), "&lt;");
    assert.equal(escapeHtml(">"), "&gt;");
    assert.equal(escapeHtml('"'), "&quot;");
    assert.equal(escapeHtml("'"), "&#39;");
    assert.equal(escapeHtml("&"), "&amp;");
  });

  it("组合转义", () => {
    assert.equal(
      escapeHtml('<a href="x" onclick="alert(\'hi\')">text & more</a>'),
      "&lt;a href=&quot;x&quot; onclick=&quot;alert(&#39;hi&#39;)&quot;&gt;text &amp; more&lt;/a&gt;"
    );
  });

  it("null 和 undefined 返回空串", () => {
    assert.equal(escapeHtml(null), "");
    assert.equal(escapeHtml(undefined), "");
  });

  it("数字会被转成字符串", () => {
    assert.equal(escapeHtml(123), "123");
  });

  it("普通文本不变", () => {
    assert.equal(escapeHtml("hello world"), "hello world");
    assert.equal(escapeHtml("中文测试123"), "中文测试123");
  });
});