mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-06-19 13:21:46 +00:00
Maurice
093e069ccc
* refactor(auth): session token validation and password-change consistency * refactor(journey): entry field allow-list and public share-link consistency * refactor(mcp): align tool authorization with the REST permission checks * chore: input validation and sanitisation touch-ups (uploads, pdf, maps, backup, csp)
166 lines
6.0 KiB
TypeScript
166 lines
6.0 KiB
TypeScript
// FE-COMP-JOURNEYPDF-001 to FE-COMP-JOURNEYPDF-006
|
|
//
|
|
// JourneyBookPDF.tsx exports an async function `downloadJourneyBookPDF(journey)`
|
|
// that renders a PDF preview in an srcdoc iframe overlay (Safari-safe pattern).
|
|
// Tests verify the overlay DOM structure and HTML content.
|
|
|
|
import { describe, it, expect, beforeEach, vi, afterEach } from 'vitest';
|
|
|
|
// Mock `marked` so we don't need the real markdown parser
|
|
vi.mock('marked', () => ({
|
|
marked: {
|
|
parse: (str: string) => `<p>${str}</p>`,
|
|
},
|
|
}));
|
|
|
|
import { downloadJourneyBookPDF } from './JourneyBookPDF';
|
|
import type { JourneyDetail } from '../../store/journeyStore';
|
|
|
|
// ── Helpers ──────────────────────────────────────────────────────────────────
|
|
|
|
function buildJourney(overrides: Partial<JourneyDetail> = {}): JourneyDetail {
|
|
return {
|
|
id: 1,
|
|
user_id: 1,
|
|
title: 'Iceland Ring Road',
|
|
subtitle: 'Two weeks around the island',
|
|
status: 'active',
|
|
cover_image: null,
|
|
cover_gradient: null,
|
|
created_at: Date.now(),
|
|
updated_at: Date.now(),
|
|
entries: [
|
|
{
|
|
id: 10,
|
|
journey_id: 1,
|
|
author_id: 1,
|
|
type: 'entry',
|
|
title: 'Golden Circle',
|
|
story: 'An incredible day of geysers and waterfalls.',
|
|
entry_date: '2026-07-01',
|
|
entry_time: '09:00',
|
|
location_name: 'Thingvellir',
|
|
location_lat: 64.255,
|
|
location_lng: -21.13,
|
|
mood: 'excited',
|
|
weather: 'sunny',
|
|
tags: [],
|
|
pros_cons: { pros: ['Amazing views'], cons: ['Crowded'] },
|
|
visibility: 'private',
|
|
sort_order: 0,
|
|
created_at: Date.now(),
|
|
updated_at: Date.now(),
|
|
source_trip_id: null,
|
|
source_place_id: null,
|
|
source_trip_name: null,
|
|
photos: [
|
|
{
|
|
id: 100,
|
|
entry_id: 10,
|
|
provider: 'local',
|
|
file_path: 'journey/geyser.jpg',
|
|
thumbnail_path: null,
|
|
asset_id: null,
|
|
owner_id: null,
|
|
shared: 0,
|
|
caption: 'Strokkur erupting',
|
|
sort_order: 0,
|
|
created_at: Date.now(),
|
|
},
|
|
],
|
|
},
|
|
],
|
|
trips: [],
|
|
contributors: [],
|
|
stats: { entries: 1, photos: 1, cities: 1 },
|
|
...overrides,
|
|
} as unknown as JourneyDetail;
|
|
}
|
|
|
|
// ── Helpers to inspect the overlay ───────────────────────────────────────────
|
|
|
|
function getOverlay(): HTMLElement | null {
|
|
return document.getElementById('journey-pdf-overlay');
|
|
}
|
|
|
|
function getIframe(): HTMLIFrameElement | null {
|
|
return getOverlay()?.querySelector('iframe') ?? null;
|
|
}
|
|
|
|
// ── Setup ────────────────────────────────────────────────────────────────────
|
|
|
|
afterEach(() => {
|
|
document.getElementById('journey-pdf-overlay')?.remove();
|
|
vi.restoreAllMocks();
|
|
});
|
|
|
|
// ── Tests ────────────────────────────────────────────────────────────────────
|
|
|
|
describe('downloadJourneyBookPDF', () => {
|
|
it('FE-COMP-JOURNEYPDF-001: appends overlay to document body', async () => {
|
|
await downloadJourneyBookPDF(buildJourney());
|
|
expect(getOverlay()).not.toBeNull();
|
|
expect(document.body.contains(getOverlay())).toBe(true);
|
|
});
|
|
|
|
it('FE-COMP-JOURNEYPDF-002: overlay contains an iframe with srcdoc HTML', async () => {
|
|
await downloadJourneyBookPDF(buildJourney());
|
|
const iframe = getIframe();
|
|
expect(iframe).not.toBeNull();
|
|
const html = iframe!.srcdoc;
|
|
expect(html).toContain('<!DOCTYPE html>');
|
|
expect(html).toContain('</html>');
|
|
});
|
|
|
|
it('FE-COMP-JOURNEYPDF-003: overlay has close and save buttons', async () => {
|
|
await downloadJourneyBookPDF(buildJourney());
|
|
const overlay = getOverlay()!;
|
|
expect(overlay.querySelector('#journey-pdf-close')).not.toBeNull();
|
|
expect(overlay.querySelector('#journey-pdf-save')).not.toBeNull();
|
|
});
|
|
|
|
it('FE-COMP-JOURNEYPDF-004: HTML contains the journey title', async () => {
|
|
await downloadJourneyBookPDF(buildJourney());
|
|
const html = getIframe()!.srcdoc;
|
|
expect(html).toContain('Iceland Ring Road');
|
|
});
|
|
|
|
it('FE-COMP-JOURNEYPDF-005: HTML contains entry content', async () => {
|
|
await downloadJourneyBookPDF(buildJourney());
|
|
const html = getIframe()!.srcdoc;
|
|
expect(html).toContain('Golden Circle');
|
|
// Story text is rendered via markdown
|
|
expect(html).toContain('An incredible day of geysers and waterfalls.');
|
|
// Pros/cons verdict cards are included
|
|
expect(html).toContain('Amazing views');
|
|
expect(html).toContain('Crowded');
|
|
});
|
|
|
|
it('FE-COMP-JOURNEYPDF-006: handles empty entries gracefully', async () => {
|
|
const journey = buildJourney({ entries: [] });
|
|
await downloadJourneyBookPDF(journey);
|
|
expect(getOverlay()).not.toBeNull();
|
|
const html = getIframe()!.srcdoc;
|
|
expect(html).toContain('Iceland Ring Road');
|
|
// No entry pages, but cover and closing page are still present
|
|
expect(html).toContain('Journey Book');
|
|
expect(html).toContain('The End');
|
|
});
|
|
|
|
it('FE-COMP-JOURNEYPDF-007: sanitises HTML injected via an entry story and keeps the iframe script-free', async () => {
|
|
const journey = buildJourney();
|
|
journey.entries[0].story = 'Hello <script>alert(1)</script> <img src=x onerror="alert(2)"> world';
|
|
await downloadJourneyBookPDF(journey);
|
|
const iframe = getIframe()!;
|
|
const html = iframe.srcdoc;
|
|
|
|
// The script tag, image beacon and event handler are stripped from the story.
|
|
expect(html).not.toContain('<script');
|
|
expect(html).not.toContain('onerror');
|
|
expect(html).not.toContain('alert(2)');
|
|
// Benign prose survives.
|
|
expect(html).toContain('Hello');
|
|
expect(html).toContain('world');
|
|
});
|
|
});
|