Andreas Reinhold / reiniandClaude Opus 5.5
f9a7839ad3
A share can now hold a private text (a password, a key, a short note) with its files or on its own. The upload page's new "Private text" card takes up to 100 KB; the browser encrypts the text and sends it through the same chunk pipeline as a file, flagged is_text on share_files, so it gets the share's password, expiry, download limit and cleanup. The recipient sees the text only after pressing "Show text", which counts as their download, so a messenger link preview cannot use up a share limited to one download. The text is left out of the file list, the ZIP and the file counts; the admin dashboard marks shares that hold one with "Text". The website gains a Private text feature card and a fifth phone screenshot; every screenshot is retaken. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
83 lines
3.4 KiB
PHP
83 lines
3.4 KiB
PHP
<?php
|
|
|
|
use App\Models\Share;
|
|
use App\Services\QrCodeService;
|
|
use App\Services\ShareService;
|
|
use Illuminate\Http\UploadedFile;
|
|
use Illuminate\Support\Facades\Crypt;
|
|
use Illuminate\Support\Facades\Storage;
|
|
|
|
test('the share created page offers the link as a QR code and through the share sheet', function () {
|
|
$share = Share::factory()->create();
|
|
$url = route('share.download', $share);
|
|
$svg = app(QrCodeService::class)->svg($url);
|
|
|
|
$response = $this->get(route('share.created', $share));
|
|
|
|
$response->assertOk()
|
|
->assertSee($url, false)
|
|
->assertSee('data-test="show-qr-code"', false)
|
|
->assertSee('data-test="share-sheet"', false)
|
|
->assertSee('share-'.$share->token.'.png')
|
|
->assertDontSee('Recipients also need the password.');
|
|
|
|
// Structure, not the 1.x class string: the `data-qr-code` hook directly wraps the service's own
|
|
// SVG, which draws its own white field and quiet zone — no colour class or literal colour here.
|
|
expect($response->getContent())
|
|
->toMatch('#<div[^>]*\bdata-qr-code\b[^>]*>'.preg_quote($svg, '#').'</div>#');
|
|
});
|
|
|
|
test('the QR code dialog reminds that a protected share also needs its password', function () {
|
|
$share = Share::factory()->withPassword()->create();
|
|
|
|
$this->get(route('share.created', $share))
|
|
->assertOk()
|
|
->assertSee('Recipients also need the password.');
|
|
});
|
|
|
|
test('the uploader who just set the password can copy it beside the link, without it being on screen', function () {
|
|
$share = Share::factory()->withPassword()->create();
|
|
|
|
$response = $this->withSession(['share_password' => ['token' => $share->token, 'password' => Crypt::encryptString('violet-orbit-canyon')]])
|
|
->get(route('share.created', $share));
|
|
|
|
$response->assertSee('data-test="share-password"', false)
|
|
->assertSee('Available only this once. Send it separately from the link.');
|
|
|
|
// A masked field holding the password, with the field's copy button at its end.
|
|
expect($response->getContent())
|
|
->toMatch('#<input(?=[^>]*value="violet-orbit-canyon")(?=[^>]*type="password")(?=[^>]*data-test="share-password")[^>]*>#')
|
|
->toMatch('#data-test="share-password".*?data-md-field-copy#s');
|
|
});
|
|
|
|
test('the password is not shown without a flash for this share', function (?string $flashedFor) {
|
|
$share = Share::factory()->withPassword()->create();
|
|
$session = $flashedFor === null ? [] : ['share_password' => ['token' => $flashedFor, 'password' => Crypt::encryptString('violet-orbit-canyon')]];
|
|
|
|
$response = $this->withSession($session)->get(route('share.created', $share));
|
|
|
|
$response->assertOk()
|
|
->assertDontSee('data-test="share-password"', false)
|
|
->assertDontSee('violet-orbit-canyon');
|
|
})->with([
|
|
'no flash (a reload or another visitor)' => [null],
|
|
'a flash for another share' => ['another-share-token'],
|
|
]);
|
|
|
|
test('the Private text stat shows for a share with text, and the Files stat excludes it', function () {
|
|
Storage::fake('shares');
|
|
$share = app(ShareService::class)->createShare(
|
|
[
|
|
['file' => UploadedFile::fake()->createWithContent('one.txt', 'one'), 'relativePath' => null],
|
|
['file' => UploadedFile::fake()->createWithContent('two.txt', 'two'), 'relativePath' => null],
|
|
],
|
|
[],
|
|
'the secret note',
|
|
);
|
|
|
|
$response = $this->get(route('share.created', $share));
|
|
|
|
$response->assertOk()
|
|
->assertSeeInOrder(['Files', '2', 'Private text']);
|
|
});
|