You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					
					
						
							533 lines
						
					
					
						
							13 KiB
						
					
					
				
			
		
		
	
	
							533 lines
						
					
					
						
							13 KiB
						
					
					
				'use strict'
 | 
						|
const os = require('os')
 | 
						|
const test = require('tap').test
 | 
						|
const FormData = require('form-data')
 | 
						|
const Fastify = require('fastify')
 | 
						|
const multipart = require('./../..')
 | 
						|
const http = require('http')
 | 
						|
const path = require('path')
 | 
						|
const fs = require('fs')
 | 
						|
const concat = require('concat-stream')
 | 
						|
const stream = require('readable-stream')
 | 
						|
const pump = stream.pipeline
 | 
						|
const eos = stream.finished
 | 
						|
 | 
						|
const filePath = path.join(__dirname, '..', '..', 'README.md')
 | 
						|
 | 
						|
test('should parse forms', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(14)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
 | 
						|
  fastify.register(multipart, { limits: { fields: 1 } })
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    t.ok(req.isMultipart())
 | 
						|
 | 
						|
    const mp = req.multipart(handler, function (err) {
 | 
						|
      t.error(err)
 | 
						|
      reply.code(200).send()
 | 
						|
    })
 | 
						|
 | 
						|
    mp.on('field', function (name, value) {
 | 
						|
      t.not(name, 'willbe', 'Busboy fields limit ignored')
 | 
						|
      t.not(value, 'dropped', 'Busboy fields limit ignored')
 | 
						|
      t.equal(name, 'hello')
 | 
						|
      t.equal(value, 'world')
 | 
						|
    })
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      t.equal(filename, 'README.md')
 | 
						|
      t.equal(field, 'upload')
 | 
						|
      t.equal(encoding, '7bit')
 | 
						|
      t.equal(mimetype, 'text/markdown')
 | 
						|
      file.on('fieldsLimit', () => t.ok('field limit reached'))
 | 
						|
      const original = fs.readFileSync(filePath, 'utf8')
 | 
						|
      file.pipe(concat(function (buf) {
 | 
						|
        t.equal(buf.toString(), original)
 | 
						|
      }))
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 200)
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
    const rs = fs.createReadStream(filePath)
 | 
						|
    form.append('upload', rs)
 | 
						|
    form.append('hello', 'world')
 | 
						|
    form.append('willbe', 'dropped')
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should call finished when both files are pumped', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(10)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
 | 
						|
  fastify.register(multipart)
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    let fileCount = 0
 | 
						|
    t.ok(req.isMultipart())
 | 
						|
 | 
						|
    req.multipart(handler, function (err) {
 | 
						|
      t.error(err)
 | 
						|
      t.equal(fileCount, 2)
 | 
						|
      reply.code(200).send()
 | 
						|
    })
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      const saveTo = path.join(os.tmpdir(), path.basename(filename))
 | 
						|
      eos(file, function (err) {
 | 
						|
        t.error(err)
 | 
						|
        fileCount++
 | 
						|
      })
 | 
						|
 | 
						|
      pump(file, fs.createWriteStream(saveTo), function (err) {
 | 
						|
        t.error(err)
 | 
						|
      })
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 200)
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
    form.append('upload', fs.createReadStream(filePath))
 | 
						|
    form.append('upload2', fs.createReadStream(filePath))
 | 
						|
    form.append('hello', 'world')
 | 
						|
    form.append('willbe', 'dropped')
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should call finished if one of the streams closes prematurely', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(5)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
 | 
						|
  fastify.register(multipart)
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    let fileCount = 0
 | 
						|
    t.ok(req.isMultipart())
 | 
						|
 | 
						|
    req.multipart(handler, function () {
 | 
						|
      t.equal(fileCount, 1)
 | 
						|
      reply.code(200).send()
 | 
						|
    })
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      const saveTo = path.join(os.tmpdir(), path.basename(filename))
 | 
						|
      eos(file, function () {
 | 
						|
        fileCount++
 | 
						|
      })
 | 
						|
 | 
						|
      file.on('data', function () {
 | 
						|
        if (fileCount === 0) {
 | 
						|
          this.destroy()
 | 
						|
        }
 | 
						|
      })
 | 
						|
 | 
						|
      pump(file, fs.createWriteStream(saveTo), () => {})
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const stream1 = fs.createReadStream(filePath)
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 200)
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
 | 
						|
    form.append('upload1', stream1, {
 | 
						|
      filename: 'random-data1'
 | 
						|
    })
 | 
						|
    form.append('upload2', stream1, {
 | 
						|
      filename: 'random-data2'
 | 
						|
    })
 | 
						|
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should error if it is not multipart', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(4)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
  fastify.register(multipart)
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    t.notOk(req.isMultipart())
 | 
						|
 | 
						|
    req.multipart(handler, function (err) {
 | 
						|
      t.ok(err)
 | 
						|
      t.equal(err.message, 'the request is not multipart')
 | 
						|
      reply.code(500).send()
 | 
						|
    })
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      t.fail('this should never be called')
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      headers: {
 | 
						|
        'content-type': 'application/json'
 | 
						|
      },
 | 
						|
      path: '/',
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 500)
 | 
						|
    })
 | 
						|
    req.end(JSON.stringify({ hello: 'world' }))
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should error if handler is not a function', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(3)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
  fastify.register(multipart)
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    const handler = null
 | 
						|
 | 
						|
    req.multipart(handler, function (err) {
 | 
						|
      t.ok(err)
 | 
						|
      reply.code(500).send()
 | 
						|
    })
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.equal(res.statusCode, 500)
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should error if callback is not a function', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(3)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
  fastify.register(multipart)
 | 
						|
 | 
						|
  fastify.post('/', function (req) {
 | 
						|
    const callback = null
 | 
						|
    req.multipart(handler, callback)
 | 
						|
 | 
						|
    function handler () {}
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.equal(res.statusCode, 500)
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should error if it is invalid multipart', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(5)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
  fastify.register(multipart)
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    t.ok(req.isMultipart())
 | 
						|
 | 
						|
    req.multipart(handler, function (err) {
 | 
						|
      t.ok(err)
 | 
						|
      t.equal(err.message, 'Multipart: Boundary not found')
 | 
						|
      reply.code(500).send()
 | 
						|
    })
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      t.fail('this should never be called')
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      headers: {
 | 
						|
        'content-type': 'multipart/form-data'
 | 
						|
      },
 | 
						|
      path: '/',
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 500)
 | 
						|
    })
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should override options', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(5)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
 | 
						|
  fastify.register(multipart, { limits: { fileSize: 1 } })
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    const mp = req.multipart(handler, function (err) {
 | 
						|
      t.error(err)
 | 
						|
      reply.code(200).send()
 | 
						|
    }, { limits: { fileSize: 2 } })
 | 
						|
 | 
						|
    t.equal(mp.opts.limits.fileSize, 2, 'options.limits.fileSize was updated successfully')
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      file.pipe(concat(function (buf) { }))
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 200)
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
 | 
						|
    const rs = fs.createReadStream(filePath)
 | 
						|
    form.append('upload', rs)
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should not allow __proto__', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(5)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
 | 
						|
  fastify.register(multipart, { limits: { fields: 1 } })
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    t.ok(req.isMultipart())
 | 
						|
 | 
						|
    const mp = req.multipart(handler, function (err) {
 | 
						|
      t.equal(err.message, '__proto__ is not allowed as field name')
 | 
						|
      reply.code(500).send()
 | 
						|
    })
 | 
						|
 | 
						|
    mp.on('field', function (name, value) {
 | 
						|
      t.fail('should not be called')
 | 
						|
    })
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      t.fail('should not be called')
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 500)
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
    const rs = fs.createReadStream(filePath)
 | 
						|
    form.append('__proto__', rs)
 | 
						|
    // form.append('hello', 'world')
 | 
						|
    // form.append('willbe', 'dropped')
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 | 
						|
 | 
						|
test('should not allow constructor', { skip: process.platform === 'win32' }, function (t) {
 | 
						|
  t.plan(5)
 | 
						|
 | 
						|
  const fastify = Fastify()
 | 
						|
  t.teardown(fastify.close.bind(fastify))
 | 
						|
 | 
						|
  fastify.register(multipart, { limits: { fields: 1 } })
 | 
						|
 | 
						|
  fastify.post('/', function (req, reply) {
 | 
						|
    t.ok(req.isMultipart())
 | 
						|
 | 
						|
    const mp = req.multipart(handler, function (err) {
 | 
						|
      t.equal(err.message, 'constructor is not allowed as field name')
 | 
						|
      reply.code(500).send()
 | 
						|
    })
 | 
						|
 | 
						|
    mp.on('field', function (name, value) {
 | 
						|
      t.fail('should not be called')
 | 
						|
    })
 | 
						|
 | 
						|
    function handler (field, file, filename, encoding, mimetype) {
 | 
						|
      t.fail('should not be called')
 | 
						|
    }
 | 
						|
  })
 | 
						|
 | 
						|
  fastify.listen(0, function () {
 | 
						|
    // request
 | 
						|
    const form = new FormData()
 | 
						|
    const opts = {
 | 
						|
      protocol: 'http:',
 | 
						|
      hostname: 'localhost',
 | 
						|
      port: fastify.server.address().port,
 | 
						|
      path: '/',
 | 
						|
      headers: form.getHeaders(),
 | 
						|
      method: 'POST'
 | 
						|
    }
 | 
						|
 | 
						|
    const req = http.request(opts, (res) => {
 | 
						|
      t.equal(res.statusCode, 500)
 | 
						|
      res.resume()
 | 
						|
      res.on('end', () => {
 | 
						|
        t.pass('res ended successfully')
 | 
						|
      })
 | 
						|
    })
 | 
						|
    const rs = fs.createReadStream(filePath)
 | 
						|
    form.append('constructor', rs)
 | 
						|
    pump(form, req, function (err) {
 | 
						|
      t.error(err, 'client pump: no err')
 | 
						|
    })
 | 
						|
  })
 | 
						|
})
 |