import { test } from 'node:test' import assert from 'node:assert/strict' import { mkdtemp, readFile, writeFile, realpath, rm } from 'node:fs/promises' import { tmpdir } from 'node:os' import { join, resolve } from 'node:path' import { createServer } from 'node:http' import { _electron as electron, expect } from '@playwright/test' import { dataKey } from './service-manager.mjs' test('only the main local app can open the native updater and repeated requests reuse its window', { timeout: 60000 }, async () => { const root = resolve(import.meta.dirname, '..') const home = await realpath(await mkdtemp(join(tmpdir(), 'yaoyao-update-entry-'))) const version = JSON.parse(await readFile(join(root, '.desktop-build/release.json'), 'utf8')).webVersion const identity = { protocol: 1, instanceId: 'update-entry', pid: process.pid, dataKey: dataKey(home), version } // Let Playwright attach to the boot renderer before the fixture changes its URL. let releaseIdentity const identityReady = new Promise(resolve => { releaseIdentity = resolve }) const server = createServer(async (req, res) => { if (req.url === '/desktop/service') { await identityReady; res.setHeader('Content-Type', 'application/json'); res.end(JSON.stringify(identity)) } else { res.setHeader('Content-Type', 'text/html; charset=utf-8'); res.end('Update entry fixture') } }) await new Promise(done => server.listen(0, '127.0.0.1', done)) const origin = `http://127.0.0.1:${server.address().port}` await writeFile(join(home, 'service-instance.json'), JSON.stringify({ ...identity, url: origin, token: 'fixture' })) let app try { app = await electron.launch({ args: [root], cwd: root, env: { ...process.env, HERMES_YAOYAO_DESKTOP_TEST_HOME: home, HERMES_YAOYAO_DESKTOP_PORT: String(server.address().port), HERMES_YAOYAO_DESKTOP_TEST_SYNC: '0' } }) const page = await app.firstWindow() releaseIdentity() await page.waitForURL(origin + '/**') await app.evaluate(({ net }) => { net.fetch = async () => new Response('', { status: 403 }) }) const opened = app.waitForEvent('window') await page.getByRole('button', { name: '检测更新', exact: true }).click() const updates = await opened await expect(updates.getByRole('alert')).toContainText('GitHub 请求受限') await page.evaluate(() => window.yaoyaoDesktop.openUpdates()) assert.equal(app.windows().length, 2) const denied = await app.evaluate(async ({ BrowserWindow }, { origin, preload }) => { const outsider = new BrowserWindow({ show: false, webPreferences: { sandbox: true, contextIsolation: true, preload } }) try { await outsider.loadURL(origin) return await outsider.webContents.executeJavaScript('window.yaoyaoDesktop.openUpdates().then(() => false, () => true)') } finally { outsider.destroy() } }, { origin, preload: join(root, 'desktop/preload.cjs') }) assert.equal(denied, true) assert.equal(server.listening, true) } finally { releaseIdentity() await app?.close().catch(() => {}) await new Promise(done => server.close(done)) await rm(home, { recursive: true, force: true }) } })