Frank
13ea2d7d3e
Red tests first. - tests/homepage_caddy.bats: the homepage site block carries a root hash and a distinct /admin/-scoped admin hash (Q18/Q38), and serves /srv/homepage. - dankclaw/Caddyfile: the homepage block now uses named matchers - @user (not /admin/*) with the shared hash, @admin (/admin/*) with the operator-only hash (REPLACE_WITH_ADMIN_HASH, rendered from CADDY_ADMIN_HASH at deploy). Both placeholders are distinct.
27 lines
863 B
Bash
27 lines
863 B
Bash
#!/usr/bin/env bats
|
|
# Seam: the homepage site block in dankclaw/Caddyfile. It must carry a root
|
|
# basicauth hash and a distinct /admin/-scoped admin hash (Q18/Q19), and serve
|
|
# /srv/homepage. caddy is not on the dev box, so the tests assert the
|
|
# structure statically; the deploy renders the two real hashes from the .env.
|
|
|
|
load helpers
|
|
|
|
setup() {
|
|
CADDY="$REPO_ROOT/dankclaw/Caddyfile"
|
|
}
|
|
|
|
@test "the homepage has a root hash and a distinct admin hash (Q18/Q38)" {
|
|
grep -q "REPLACE_WITH_HASH" "$CADDY"
|
|
grep -q "REPLACE_WITH_ADMIN_HASH" "$CADDY"
|
|
}
|
|
|
|
@test "the admin basicauth is scoped to /admin/ (Q19)" {
|
|
grep -qE "@admin[[:space:]]+path[[:space:]]+/admin/" "$CADDY"
|
|
grep -qE "basicauth[[:space:]]+@admin" "$CADDY"
|
|
}
|
|
|
|
@test "the homepage serves /srv/homepage" {
|
|
grep -q "root \* /srv/homepage" "$CADDY"
|
|
grep -q "file_server" "$CADDY"
|
|
}
|