初始提交：DSH 多租户平台（dshs）

scripts/smoke-domain.mjs

@@ -0,0 +1,126 @@
+// Domain + nginx + proxy-rewrite flow: set/get a custom domain, regenerate its
+// nginx config, admin verification, and the proxy rewriting Location redirects
+// under the /u/<id>/dsh subpath.
+import { mkdirSync, mkdtempSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { buildServer } from '../lib/web/server.js'
+import { resolveConfig } from '../lib/config.js'
+import { hashPassword } from '../lib/web/auth.js'
+
+function assert(condition, message) {
+  if (!condition) throw new Error('ASSERT: ' + message)
+}
+
+const here = dirname(fileURLToPath(import.meta.url))
+const fakeDsh = join(here, 'fake-dsh.mjs')
+const dataRoot = mkdtempSync(join(tmpdir(), 'dsh-smoke-domain-'))
+
+const app = await buildServer(
+  resolveConfig({ port: 0, dbPath: ':memory:', dataRoot, dshCommand: [process.execPath, fakeDsh] }),
+)
+await app.listen({ port: 0 })
+const base = `http://127.0.0.1:${app.server.address().port}`
+
+await app.db.createUser({
+  id: 'u1',
+  username: 'frank',
+  passHash: await hashPassword('frankpass123'),
+  role: 'active',
+  homeDir: '/tmp/u1-home',
+})
+await app.db.createUser({
+  id: 'admin',
+  username: 'admin',
+  passHash: await hashPassword('adminpass123'),
+  role: 'admin',
+  homeDir: '/tmp/admin-home',
+})
+mkdirSync(join(dataRoot, 'users', 'u1', 'ws', 'proj'), { recursive: true })
+
+async function json(path, { method = 'GET', body, cookie } = {}) {
+  const res = await fetch(base + path, {
+    method,
+    headers: {
+      ...(body ? { 'content-type': 'application/json' } : {}),
+      ...(cookie ? { cookie } : {}),
+    },
+    body: body ? JSON.stringify(body) : undefined,
+  })
+  const text = await res.text()
+  return { status: res.status, body: text ? JSON.parse(text) : null, setCookie: res.headers.get('set-cookie') }
+}
+
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms))
+
+try {
+  let r
+  r = await json('/api/auth/login', { method: 'POST', body: { username: 'frank', password: 'frankpass123' } })
+  const cookie = r.setCookie.split(';')[0]
+  r = await json('/api/auth/login', { method: 'POST', body: { username: 'admin', password: 'adminpass123' } })
+  const adminCookie = r.setCookie.split(';')[0]
+
+  r = await json('/api/domain', { cookie })
+  console.log('domain (empty) ->', r.status, r.body)
+  assert(r.status === 200 && r.body.domain === null, 'no domain initially')
+
+  r = await json('/api/domain', { method: 'PUT', cookie, body: { domain: 'http://bad' } })
+  console.log('put invalid    ->', r.status)
+  assert(r.status === 400, 'invalid domain rejected')
+
+  r = await json('/api/domain', { method: 'PUT', cookie, body: { domain: 'ALICE.Example.com' } })
+  console.log('put domain     ->', r.status, r.body?.domain)
+  assert(r.status === 200 && r.body.domain === 'alice.example.com', 'domain normalized + stored')
+  assert(r.body.nginx_config.includes('server_name alice.example.com'), 'config has server_name')
+  assert(r.body.nginx_config.includes('/u/u1/dsh/'), 'config rewrites to user subpath')
+
+  r = await json('/api/domain', { cookie })
+  console.log('domain (get)   ->', r.status, r.body?.domain, 'verified:', r.body?.verified)
+  assert(r.body.domain === 'alice.example.com' && r.body.verified === false, 'domain retrieved, unverified')
+
+  r = await json('/api/nginx/regen', { method: 'POST', cookie })
+  console.log('regen          ->', r.status)
+  assert(r.status === 200 && r.body.nginx_config.includes('server_name alice.example.com'), 'regen returns config')
+
+  r = await json('/api/admin/domains', { cookie: adminCookie })
+  console.log('admin list     ->', r.status, r.body?.domains?.map((d) => `${d.domain}:${d.verified}`))
+  const dom = r.body.domains.find((d) => d.domain === 'alice.example.com')
+  assert(dom && dom.verified === false, 'admin lists unverified domain')
+
+  r = await json(`/api/admin/domains/${dom.id}/verify`, { method: 'POST', cookie: adminCookie })
+  console.log('verify         ->', r.status)
+  assert(r.status === 200, 'admin verifies domain')
+
+  r = await json('/api/admin/domains', { cookie: adminCookie })
+  assert(r.body.domains.find((d) => d.domain === 'alice.example.com').verified === true, 'domain now verified')
+
+  // Proxy Location rewrite.
+  r = await json('/api/dsh/launch', { method: 'POST', cookie, body: { folder: 'proj' } })
+  assert(r.status === 200, 'launch succeeds')
+  let location
+  for (let i = 0; i < 20; i++) {
+    try {
+      const res = await fetch(base + '/u/u1/dsh/redirect', { headers: { cookie }, redirect: 'manual' })
+      if (res.status === 302) {
+        location = res.headers.get('location')
+        break
+      }
+    } catch {
+      // retry until the child is listening
+    }
+    await sleep(100)
+  }
+  console.log('proxy redirect ->', location)
+  assert(location === '/u/u1/dsh/somewhere', 'Location rewritten under subpath')
+
+  console.log('OK: domain + nginx + proxy-rewrite flow passed')
+} finally {
+  await app.close()
+  await sleep(300)
+  try {
+    rmSync(dataRoot, { recursive: true, force: true })
+  } catch {
+    // best-effort cleanup
+  }
+}