mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-06-19 04:03:45 +08:00
f8666b60b0
Rename plugin API key scope resources to use shorter, cleaner names: - automations_trigger → automation (action: post → trigger_automation) - discourse_ai → ai - discourse_data_explorer → data_explorer Includes reversible migrations to update existing api_key_scopes records in the database and updated locale keys to match the new resource names. Also adds safety improvements: - ApiKeyScope#permits? returns false when mapping is nil, gracefully handling renamed or removed scopes - ApiKeyScopeSerializer uses safe navigation to avoid errors for missing scope mappings - Scope resources are now sorted alphabetically in both the API response and the admin UI
62 lines
1.7 KiB
Ruby
Vendored
62 lines
1.7 KiB
Ruby
Vendored
# frozen_string_literal: true
|
|
|
|
describe "API keys scoped to ai#manage_artifacts" do
|
|
before { SiteSetting.discourse_ai_enabled = true }
|
|
|
|
fab!(:admin)
|
|
fab!(:topic_post, :post)
|
|
fab!(:ai_artifact)
|
|
|
|
let(:api_key) do
|
|
key = ApiKey.create!
|
|
ApiKeyScope.create!(resource: "ai", action: "manage_artifacts", api_key_id: key.id)
|
|
key
|
|
end
|
|
|
|
let(:headers) { { "Api-Key" => api_key.key, "Api-Username" => admin.username } }
|
|
|
|
it "can list artifacts" do
|
|
get "/admin/plugins/discourse-ai/ai-artifacts.json", headers: headers
|
|
expect(response.status).to eq(200)
|
|
end
|
|
|
|
it "can show an artifact" do
|
|
get "/admin/plugins/discourse-ai/ai-artifacts/#{ai_artifact.id}.json", headers: headers
|
|
expect(response.status).to eq(200)
|
|
end
|
|
|
|
it "can create an artifact" do
|
|
post "/admin/plugins/discourse-ai/ai-artifacts.json",
|
|
headers: headers,
|
|
params: {
|
|
ai_artifact: {
|
|
user_id: admin.id,
|
|
post_id: topic_post.id,
|
|
name: "Test Artifact",
|
|
html: "<div>hello</div>",
|
|
},
|
|
}
|
|
expect(response.status).to eq(201)
|
|
end
|
|
|
|
it "can update an artifact" do
|
|
put "/admin/plugins/discourse-ai/ai-artifacts/#{ai_artifact.id}.json",
|
|
headers: headers,
|
|
params: {
|
|
ai_artifact: {
|
|
name: "Updated Name",
|
|
},
|
|
}
|
|
expect(response.status).to eq(200)
|
|
end
|
|
|
|
it "can destroy an artifact" do
|
|
delete "/admin/plugins/discourse-ai/ai-artifacts/#{ai_artifact.id}.json", headers: headers
|
|
expect(response.status).to eq(204)
|
|
end
|
|
|
|
it "cannot access unrelated endpoints" do
|
|
get "/latest.json", headers: headers
|
|
expect(response.status).to eq(403)
|
|
end
|
|
end
|
