poche-resend-webmail/smoke.sh at master · javimosch/poche-resend-webmail · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
#!/usr/bin/env bash
# Smoke: poche sidecar + seed + BFF auth + list proxy.
set -euo pipefail
cd "$(dirname "$0")"
./build.sh

POCHE_BIN="${POCHE_BIN:-$HOME/ai/poche/poche}"
if [[ ! -x "$POCHE_BIN" ]]; then
  (cd "$HOME/ai/poche" && ./build.sh)
  POCHE_BIN="$HOME/ai/poche/poche"
fi

DB=$(mktemp -d /tmp/poche-resend-webmail-XXXX)
export POCHE_DB="$DB"
export POCHE_URL="http://127.0.0.1:17782"
export POCHE_NO_NUDGE=1
export FEEDBACK_RELAY=off
export WEBMAIL_TOKEN="smoke-token-deadbeef"

INIT=$("$POCHE_BIN" init)
export POCHE_TOKEN=$(printf '%s' "$INIT" | sed -n 's/.*"admin_token":"\([^"]*\)".*/\1/p')
test -n "$POCHE_TOKEN"

"$POCHE_BIN" serve 17782 >/tmp/poche-resend-poche.log 2>&1 &
PPID_POCHE=$!
UI_PID=""
cleanup() { kill $PPID_POCHE ${UI_PID:-} 2>/dev/null || true; rm -rf "$DB"; }
trap cleanup EXIT
sleep 0.5

seed_out=$(./poche-resend-webmail seed -count 40); grep -q '"ok":true' <<<"$seed_out"
./poche-resend-webmail serve -port 3091 >/tmp/poche-resend-ui.log 2>&1 &
UI_PID=$!
sleep 0.4

out=$(curl -sf http://127.0.0.1:3091/api/health); grep -q '"ok":true' <<<"$out"
out=$(curl -sf http://127.0.0.1:3091/api/config); grep -q '"auth"' <<<"$out"
# no token → 401
code=$(curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:3091/api/status)
test "$code" = "401"
out=$(curl -sf -H "Authorization: Bearer $WEBMAIL_TOKEN" http://127.0.0.1:3091/api/status); grep -q 'poche_ok' <<<"$out"
out=$(curl -sf -H "Authorization: Bearer $WEBMAIL_TOKEN" \
  "http://127.0.0.1:3091/api/messages?missing_link=message_tags.message_id:tag=archive&limit=5"); grep -q '"items"' <<<"$out"
out=$(curl -sf -H "Authorization: Bearer $WEBMAIL_TOKEN" http://127.0.0.1:3091/api/tags); grep -q '"items"' <<<"$out"
# webhook without secret accepts
hook_out=$(curl -sf -X POST http://127.0.0.1:3091/webhooks/resend \
  -H 'Content-Type: application/json' \
  -d '{"type":"email.received","data":{"email_id":"nonexistent-smoke"}}'); grep -q '"ok"' <<<"$hook_out"
out=$(curl -sf "http://127.0.0.1:3091/?token=$WEBMAIL_TOKEN"); grep -q 'poche resend webmail' <<<"$out"
guide_out=$(./poche-resend-webmail guide); grep -q 'poche-resend-webmail' <<<"$guide_out"

# compose: auth required, and validation rejects an empty recipient
code=$(curl -s -o /dev/null -w '%{http_code}' -X POST http://127.0.0.1:3091/api/compose -d '{}')
test "$code" = "401"
out=$(curl -s -X POST -H "Authorization: Bearer $WEBMAIL_TOKEN" \
  http://127.0.0.1:3091/api/compose -d '{"subject":"x","text":"y"}'); grep -q 'recipient' <<<"$out"
# sendable addresses endpoint answers for admin
out=$(curl -sf -H "Authorization: Bearer $WEBMAIL_TOKEN" http://127.0.0.1:3091/api/mailbox/addresses); grep -q 'addresses' <<<"$out"
# per-mailbox credentials never surface in mailbox list
./poche-resend-webmail mailbox create --address smoke@intrane.fr --password pw \
  --recovery-email r@intrane.fr >/dev/null
mb_out=$(SMOKE_KEY=re_smoke_secret_value ./poche-resend-webmail mailbox update \
  --address smoke@intrane.fr --resend-key env:SMOKE_KEY); grep -q '"has_resend_key":true' <<<"$mb_out"
list_out=$(./poche-resend-webmail mailbox list)
grep -q 're_smoke_secret_value' <<<"$list_out" && { echo "FAIL: key leaked"; exit 1; }
grep -q '"has_resend_key":true' <<<"$list_out"

echo "OK poche-resend-webmail smoke"