swadhinbiswas test(api): add air-gapped mode integration route coverage · 2/18/2026
3337d43
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
import { afterEach, describe, expect, it, vi } from "vitest";
import { POST as externalCiChecksPost } from "@/pages/api/repos/[owner]/[repo]/external-ci/checks";
import { POST as issueTrackerWebhookPost } from "@/pages/api/repos/[owner]/[repo]/integrations/issue-trackers/[provider]/webhook";
import { POST as codeQualityWebhookPost } from "@/pages/api/repos/[owner]/[repo]/integrations/code-quality/webhooks/[provider]";
async function readJson(response: Response): Promise<any> {
return response.json();
}
describe("air-gapped mode API enforcement", () => {
afterEach(() => {
vi.unstubAllEnvs();
});
it("returns 503 for external CI checks when AIR_GAPPED_MODE=true", async () => {
vi.stubEnv("AIR_GAPPED_MODE", "true");
const response = await externalCiChecksPost({
params: { owner: "acme", repo: "demo" },
request: new Request("http://localhost/api/repos/acme/demo/external-ci/checks", {
method: "POST",
}),
} as any);
const body = await readJson(response);
expect(response.status).toBe(503);
expect(body?.error?.code).toBe("AIR_GAPPED_MODE");
});
it("returns normal validation error for external CI checks when AIR_GAPPED_MODE=false", async () => {
vi.stubEnv("AIR_GAPPED_MODE", "false");
const response = await externalCiChecksPost({
params: {},
request: new Request("http://localhost/api/repos/external-ci/checks", {
method: "POST",
}),
} as any);
const body = await readJson(response);
expect(response.status).toBe(400);
expect(body?.error?.code).toBe("BAD_REQUEST");
});
it("returns 503 for issue tracker webhook when AIR_GAPPED_MODE=true", async () => {
vi.stubEnv("AIR_GAPPED_MODE", "true");
const response = await issueTrackerWebhookPost({
params: { provider: "linear" },
url: new URL("http://localhost/api/repos/acme/demo/integrations/issue-trackers/linear/webhook"),
request: new Request("http://localhost/api/repos/acme/demo/integrations/issue-trackers/linear/webhook", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({}),
}),
} as any);
const body = await readJson(response);
expect(response.status).toBe(503);
expect(body?.error?.code).toBe("AIR_GAPPED_MODE");
});
it("returns normal auth error for issue tracker webhook when AIR_GAPPED_MODE=false", async () => {
vi.stubEnv("AIR_GAPPED_MODE", "false");
const response = await issueTrackerWebhookPost({
params: { provider: "linear" },
url: new URL("http://localhost/api/repos/acme/demo/integrations/issue-trackers/linear/webhook"),
request: new Request("http://localhost/api/repos/acme/demo/integrations/issue-trackers/linear/webhook", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({}),
}),
} as any);
const body = await readJson(response);
expect(response.status).toBe(401);
expect(body?.error?.code).toBe("UNAUTHORIZED");
});
it("returns 503 for code quality webhook when AIR_GAPPED_MODE=true", async () => {
vi.stubEnv("AIR_GAPPED_MODE", "true");
const response = await codeQualityWebhookPost({
params: { provider: "codecov" },
url: new URL("http://localhost/api/repos/acme/demo/integrations/code-quality/webhooks/codecov"),
request: new Request("http://localhost/api/repos/acme/demo/integrations/code-quality/webhooks/codecov", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({}),
}),
} as any);
const body = await readJson(response);
expect(response.status).toBe(503);
expect(body?.error?.code).toBe("AIR_GAPPED_MODE");
});
it("returns normal auth error for code quality webhook when AIR_GAPPED_MODE=false", async () => {
vi.stubEnv("AIR_GAPPED_MODE", "false");
const response = await codeQualityWebhookPost({
params: { provider: "codecov" },
url: new URL("http://localhost/api/repos/acme/demo/integrations/code-quality/webhooks/codecov"),
request: new Request("http://localhost/api/repos/acme/demo/integrations/code-quality/webhooks/codecov", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({}),
}),
} as any);
const body = await readJson(response);
expect(response.status).toBe(401);
expect(body?.error?.code).toBe("UNAUTHORIZED");
});
});