public-mirrors/Sharkey
1
0
Fork 0
mirror of https://activitypub.software/TransFem-org/Sharkey.git synced 2025-08-31 22:50:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix test/e2e/api-visibility.ts

Browse source 
impressive that, on plain Misskey, un-authed calls to `notes/show`
will happily return DMs as long as you know the note id
This commit is contained in:
dakkar 2025-05-13 14:48:18 +01:00
parent 7a2958f356
commit 3ce3c42f31
1 changed files with 16 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
packages/backend/test/e2e/api-visibility.ts
View file

@ -149,12 +149,12 @@ describe('API visibility', () => {
test('[show] followers-postを非フォロワーが見れない', async () => {
const res = await show(fol.id, other);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] followers-postを未認証が見れない', async () => {
const res = await show(fol.id);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
// specified
@ -170,17 +170,17 @@ describe('API visibility', () => {
test('[show] specified-postをフォロワーが見れない', async () => {
const res = await show(spe.id, follower);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] specified-postを非フォロワーが見れない', async () => {
const res = await show(spe.id, other);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] specified-postを未認証が見れない', async () => {
const res = await show(spe.id);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
//#endregion
@ -255,12 +255,12 @@ describe('API visibility', () => {
test('[show] followers-replyを非フォロワーが見れない', async () => {
const res = await show(folR.id, other);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] followers-replyを未認証が見れない', async () => {
const res = await show(folR.id);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
// specified
@ -281,17 +281,17 @@ describe('API visibility', () => {
test('[show] specified-replyをフォロワーが見れない', async () => {
const res = await show(speR.id, follower);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] specified-replyを非フォロワーが見れない', async () => {
const res = await show(speR.id, other);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] specified-replyを未認証が見れない', async () => {
const res = await show(speR.id);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
//#endregion
@ -366,12 +366,12 @@ describe('API visibility', () => {
test('[show] followers-mentionを非フォロワーが見れない', async () => {
const res = await show(folM.id, other);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] followers-mentionを未認証が見れない', async () => {
const res = await show(folM.id);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
// specified
@ -387,22 +387,22 @@ describe('API visibility', () => {
test('[show] specified-mentionをされた人が指定されてなかったら見れない', async () => {
const res = await show(speM.id, target2);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] specified-mentionをフォロワーが見れない', async () => {
const res = await show(speM.id, follower);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] specified-mentionを非フォロワーが見れない', async () => {
const res = await show(speM.id, other);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
test('[show] specified-mentionを未認証が見れない', async () => {
const res = await show(speM.id);
assert.strictEqual(res.body.isHidden, true);
assert.strictEqual(res.body.error.code, 'NO_SUCH_NOTE');
});
//#endregion
@ -469,4 +469,3 @@ describe('API visibility', () => {
//#endregion
});
});