Files
postgres/tests/integration/TableDataSchema.spec.ts
copilot-swe-agent[bot] c1cc95c91b test: Add comprehensive integration tests for CRUD operations and query interface
- Add RecordCRUD.spec.ts with 9 API validation tests
- Add QueryInterface.spec.ts with 10 SQL query validation tests
- Add TableDataSchema.spec.ts with 7 table data/schema API tests
- Update TESTING.md with new test coverage (135 total tests)
- Expand test coverage for authentication, validation, and SQL injection prevention
- All tests validate proper authentication and input validation

Co-authored-by: johndoe6345789 <224850594+johndoe6345789@users.noreply.github.com>
2026-01-08 04:31:31 +00:00

96 lines
2.9 KiB
TypeScript

import { expect, test } from '@playwright/test';
test.describe('Table Data and Schema APIs', () => {
test.describe('List Tables API', () => {
test('should reject list tables without authentication', async ({ page }) => {
const response = await page.request.get('/api/admin/tables');
expect(response.status()).toBe(401);
});
});
test.describe('Get Table Data API', () => {
test('should reject get table data without authentication', async ({ page }) => {
const response = await page.request.post('/api/admin/table-data', {
data: {
tableName: 'test_table',
},
});
expect(response.status()).toBe(401);
});
test('should reject get table data without table name', async ({ page }) => {
const response = await page.request.post('/api/admin/table-data', {
data: {},
});
expect([400, 401]).toContain(response.status());
});
test('should reject get table data with invalid table name', async ({ page }) => {
const response = await page.request.post('/api/admin/table-data', {
data: {
tableName: 'invalid-table!@#',
},
});
expect([400, 401]).toContain(response.status());
});
test('should accept pagination parameters', async ({ page }) => {
const response = await page.request.post('/api/admin/table-data', {
data: {
tableName: 'test_table',
page: 1,
limit: 10,
},
});
// Should either be 401 (no auth) or 404/500 (no table) but not 400 (valid parameters)
expect([401, 404, 500, 200]).toContain(response.status());
});
});
test.describe('Get Table Schema API', () => {
test('should reject get table schema without authentication', async ({ page }) => {
const response = await page.request.post('/api/admin/table-schema', {
data: {
tableName: 'test_table',
},
});
expect(response.status()).toBe(401);
});
test('should reject get table schema without table name', async ({ page }) => {
const response = await page.request.post('/api/admin/table-schema', {
data: {},
});
expect([400, 401]).toContain(response.status());
});
test('should reject get table schema with invalid table name', async ({ page }) => {
const response = await page.request.post('/api/admin/table-schema', {
data: {
tableName: 'invalid!@#',
},
});
expect([400, 401]).toContain(response.status());
});
test('should accept valid table name format', async ({ page }) => {
const response = await page.request.post('/api/admin/table-schema', {
data: {
tableName: 'valid_table_name',
},
});
// Should either be 401 (no auth) or 404/500 (no table) but not 400 (valid format)
expect([401, 404, 500, 200]).toContain(response.status());
});
});
});