surtic86andClaude Opus 5
4530298398
- Config: auth, services, logging, queue and database only repeated the
framework's own files and are gone; the others keep only the keys that
differ (app version, cache serializable_classes, session cookie name,
Markdown mail theme, the shares disk, three Octane values, Livewire's
pagination theme and payload guards).
- Email verification is removed: User never implemented MustVerifyEmail,
so it was never enforced, and SealShare has a single admin and no
registration. CreateNewUser goes with it.
- FileEncryptionService::encryptFile() and generateSalt() were only used
by tests; tests build files with encryptTestFile() in tests/Pest.php.
- The expiration options are defined once, as Share::EXPIRATIONS. "30 Days"
now lasts 30 days instead of a calendar month, and Admin settings only
save a default expiration that is one of the options.
- One-caller helpers are inlined, the uploader reads chunk responses with
XHR's responseType, and starter-kit leftovers are removed.
- Docker: PHP reads the PHP_* limits from the environment itself
(${VAR:-default} in uploads.ini); both entrypoints stop writing the ini.
docker-compose.yml shares the app and scheduler variables through one
anchor. The dev image installs gd for the screenshot publisher and fake
test images.
- Development runs in Docker only: the composer dev script, concurrently,
laravel/pail, laravel/sail, autoprefixer and the shell-quote override
are gone.
- phpunit.xml forces the test environment with <server> entries, so tests
run in the dev container no longer use its real database.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
79 lines
3.1 KiB
PHP
79 lines
3.1 KiB
PHP
<?php
|
|
|
|
use App\Models\ShareFile;
|
|
use App\Models\User;
|
|
use App\Services\FileEncryptionService;
|
|
use App\Services\ShareService;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Tests\TestCase;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Test Case
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The closure you provide to your test functions is always bound to a specific PHPUnit test
|
|
| case class. By default, that class is "PHPUnit\Framework\TestCase". Of course, you may
|
|
| need to change it using the "pest()" function to bind a different classes or traits.
|
|
|
|
|
*/
|
|
|
|
pest()->extend(TestCase::class)
|
|
->use(RefreshDatabase::class)
|
|
->beforeEach(function () {
|
|
// EnsureSetupComplete middleware redirects to /setup unless an admin exists.
|
|
User::factory()->admin()->create(['email' => 'admin-setup@test.com']);
|
|
})
|
|
->in('Feature', 'Browser', 'Screenshots');
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Functions
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| While Pest is very powerful out-of-the-box, you may have some testing code specific to your
|
|
| project that you don't want to repeat in every file. Here you can also expose helpers as
|
|
| global functions to help you to reduce the number of lines of code in your test files.
|
|
|
|
|
*/
|
|
|
|
/**
|
|
* A page of SealShare, once it can be used: loaded, with Alpine and Livewire started. Shared by
|
|
* every file under tests/Browser, so a browser test needs no visit() of its own to define it.
|
|
*/
|
|
function ready(mixed $page): mixed
|
|
{
|
|
return $page->waitForEvent('networkidle')
|
|
->assertScript("document.readyState === 'complete' && typeof window.Alpine !== 'undefined' && typeof window.Livewire !== 'undefined'");
|
|
}
|
|
|
|
/**
|
|
* A chunk of a registered file, encrypted with its share's key and its header's nonce prefix.
|
|
*/
|
|
function encryptedChunk(ShareFile $file, string $plaintext, int $index, bool $isLast): string
|
|
{
|
|
$encryption = app(FileEncryptionService::class);
|
|
$header = $encryption->parseHeader(file_get_contents(app(ShareService::class)->storedFilePath($file), false, null, 0, FileEncryptionService::HEADER_LENGTH));
|
|
|
|
return $encryption->encryptChunk($plaintext, $file->share->encryption_key, $header['noncePrefix'], $index, $isLast);
|
|
}
|
|
|
|
/**
|
|
* Encrypt a whole file in the SEALCHK2 format, as the uploader's browser does chunk by chunk.
|
|
*/
|
|
function encryptTestFile(string $sourcePath, string $destinationPath, string $key, int $chunkSize): void
|
|
{
|
|
$encryption = new FileEncryptionService;
|
|
$header = $encryption->createHeader($chunkSize);
|
|
$noncePrefix = $encryption->parseHeader($header)['noncePrefix'];
|
|
$plaintext = (string) file_get_contents($sourcePath);
|
|
$chunkCount = $encryption->chunkCount(strlen($plaintext), $chunkSize);
|
|
|
|
$chunks = array_map(
|
|
fn (int $index): string => $encryption->encryptChunk(substr($plaintext, $index * $chunkSize, $chunkSize), $key, $noncePrefix, $index, $index === $chunkCount - 1),
|
|
range(0, $chunkCount - 1),
|
|
);
|
|
|
|
file_put_contents($destinationPath, $header.implode('', $chunks));
|
|
}
|