/**
* HTTP API Integration Tests
*/
import { describe, it, expect, beforeAll, afterAll } from 'vitest';
import { createHttpServer } from '../../src/http/server';
import type { AppConfig } from '../../src/types/http';
describe('HTTP API Integration Tests', () => {
let server: any;
const testConfig: AppConfig = {
mode: 'http',
http: {
port: 3001,
host: '127.0.0.1',
apiKeys: ['test-key'],
cors: {
origins: '*',
credentials: false
},
rateLimit: {
max: 100,
window: '1m'
},
logging: {
level: 'error',
pretty: false
},
session: {
timeout: 3600000,
cleanupInterval: 300000
}
}
};
beforeAll(async () => {
server = await createHttpServer(testConfig);
await server.listen({ port: testConfig.http!.port, host: testConfig.http!.host });
});
afterAll(async () => {
await server.close();
});
describe('Health Endpoints', () => {
it('should return health status', async () => {
const response = await server.inject({
method: 'GET',
url: '/api/health'
});
expect(response.statusCode).toBe(200);
const body = JSON.parse(response.body);
expect(body.success).toBe(true);
expect(body.data.status).toBe('healthy');
});
it('should return service info', async () => {
const response = await server.inject({
method: 'GET',
url: '/api/info'
});
expect(response.statusCode).toBe(200);
const body = JSON.parse(response.body);
expect(body.success).toBe(true);
expect(body.data.name).toBe('universal-db-mcp');
expect(body.data.supportedDatabases).toBeInstanceOf(Array);
});
});
describe('Authentication', () => {
it('should reject requests without API key', async () => {
const response = await server.inject({
method: 'POST',
url: '/api/connect',
payload: {
type: 'mysql',
host: 'localhost',
port: 3306
}
});
expect(response.statusCode).toBe(401);
const body = JSON.parse(response.body);
expect(body.success).toBe(false);
expect(body.error.code).toBe('UNAUTHORIZED');
});
it('should reject requests with invalid API key', async () => {
const response = await server.inject({
method: 'POST',
url: '/api/connect',
headers: {
'X-API-Key': 'invalid-key'
},
payload: {
type: 'mysql',
host: 'localhost',
port: 3306
}
});
expect(response.statusCode).toBe(403);
const body = JSON.parse(response.body);
expect(body.success).toBe(false);
expect(body.error.code).toBe('FORBIDDEN');
});
it('should accept requests with valid API key', async () => {
const response = await server.inject({
method: 'POST',
url: '/api/connect',
headers: {
'X-API-Key': 'test-key'
},
payload: {
type: 'sqlite',
filePath: ':memory:'
}
});
// May fail due to actual connection, but should pass auth
expect([200, 500]).toContain(response.statusCode);
});
});
describe('CORS', () => {
it('should include CORS headers', async () => {
const response = await server.inject({
method: 'OPTIONS',
url: '/api/health'
});
expect(response.headers['access-control-allow-origin']).toBeDefined();
expect(response.headers['access-control-allow-methods']).toBeDefined();
});
});
});
