octoturge/MCMapper-Backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Phase 6: multi-server admin panel (server registry + settings)

Browse Source 
Gate a new /api/admin/* route set (register/list/update/delete servers)
behind a single shared MCMAPPER_ADMIN_TOKEN header, and add a /admin
frontend page (Alpine) to unlock, register new servers, and edit
authMode/anonymousChatAllowed/waypointFormat per server — these columns
already existed but were only editable via direct DB edit until now.

Written test-first per the project's TDD workflow: admin.ts's domain
logic, the index.ts route wiring, and a new e2e/tests/admin.spec.ts
covering the token gate and register/edit/delete round trip through the
real browser UI.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015tKdPZt78zbPUZMXWzKEKt
This commit is contained in:
Iwo Strzeboński
2026-08-09 13:06:37 +02:00
parent 7b85f4dff1
commit a134c47152
13 changed files with 634 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
e2e/tests/admin.spec.ts
+75
View File
@@ -0,0 +1,75 @@
// Covers the admin panel's token-unlock flow and server registry management (Phase 6) — the
// api-level admin.ts/index.ts routes are already unit/integration tested, so this focuses on the
// browser-side glue: the token gate, and register/edit/delete round-tripping through the real UI.
import { test, expect } from "@playwright/test";
import { readE2eState } from "../config";
const state = readE2eState();
test.describe("admin panel", () => {
test.use({ storageState: { cookies: [], origins: [] } });
test("wrong token shows an error and does not unlock", async ({ page }) => {
await page.goto("/admin");
await page.getByTestId("admin-token-input").fill("not-the-right-token");
await page.getByTestId("admin-unlock").click();
await expect(page.getByTestId("admin-error")).toBeVisible();
await expect(page.getByTestId("admin-token-input")).toBeVisible();
});
test("correct token unlocks and lists the seeded e2e server", async ({ page }) => {
await page.goto("/admin");
await page.getByTestId("admin-token-input").fill(state.adminToken);
await page.getByTestId("admin-unlock").click();
await expect(page.getByTestId("admin-lock")).toBeVisible();
await expect(page.locator('[data-testid="admin-server-row"][data-server-name="e2e-server"]')).toBeVisible();
});
test("registering a new server adds it to the list with a generated token", async ({ page }) => {
await page.goto("/admin");
await page.getByTestId("admin-token-input").fill(state.adminToken);
await page.getByTestId("admin-unlock").click();
await page.getByTestId("admin-new-name").fill("e2e-admin-created");
await page.getByTestId("admin-new-authmode").selectOption("online");
await page.getByTestId("admin-register-submit").click();
const row = page.locator('[data-testid="admin-server-row"][data-server-name="e2e-admin-created"]');
await expect(row).toBeVisible();
await expect(row.getByTestId("admin-server-token")).not.toHaveText("");
});
test("editing settings and saving persists across a reload", async ({ page }) => {
await page.goto("/admin");
await page.getByTestId("admin-token-input").fill(state.adminToken);
await page.getByTestId("admin-unlock").click();
const row = page.locator('[data-testid="admin-server-row"][data-server-name="e2e-server"]');
await row.getByTestId("admin-server-waypointformat").selectOption("xaero");
await row.getByTestId("admin-server-anonchat").uncheck();
await row.getByTestId("admin-server-save").click();
await expect(row.getByTestId("admin-server-status")).toHaveText("saved");
// The admin token is remembered in localStorage (see admin.js's init()), so a reload
// auto-unlocks again rather than showing the token prompt.
await page.reload();
const reloadedRow = page.locator('[data-testid="admin-server-row"][data-server-name="e2e-server"]');
await expect(reloadedRow.getByTestId("admin-server-waypointformat")).toHaveValue("xaero");
await expect(reloadedRow.getByTestId("admin-server-anonchat")).not.toBeChecked();
});
test("deleting a server removes it from the list", async ({ page }) => {
await page.goto("/admin");
await page.getByTestId("admin-token-input").fill(state.adminToken);
await page.getByTestId("admin-unlock").click();
await page.getByTestId("admin-new-name").fill("e2e-admin-deleteme");
await page.getByTestId("admin-new-authmode").selectOption("offline");
await page.getByTestId("admin-register-submit").click();
const row = page.locator('[data-testid="admin-server-row"][data-server-name="e2e-admin-deleteme"]');
await expect(row).toBeVisible();
await row.getByTestId("admin-server-delete").click();
await expect(row).toHaveCount(0);
});
});