import { describe, it, expect } from "vitest"; import { createStaticHandler } from "react-router"; import { shouldReportServerError } from "../error-reporting"; const ORIGIN = "https://brackt.com"; /** Shaped like the ErrorResponse React Router hands to `handleError`. */ function routeError( status: number, internal: boolean, statusText = "Not Found", ) { return { status, statusText, internal, data: `Error: No route matches URL "/blog/wp/v2/posts/999999"`, }; } function request(path: string, referer?: string, method = "GET") { return new Request(`${ORIGIN}${path}`, { method, headers: referer ? { referer } : {}, }); } describe("shouldReportServerError", () => { it("drops a router 404 for a scanner hitting a URL cold", () => { expect( shouldReportServerError( routeError(404, true), request("/blog/wp/v2/posts/999999"), ), ).toBe(false); }); it("drops a router 404 linked from another site", () => { expect( shouldReportServerError( routeError(404, true), request("/blog/", "https://evil.example/"), ), ).toBe(false); }); it("reports a router 404 linked from one of our own pages", () => { expect( shouldReportServerError( routeError(404, true), request("/leagues/gone", `${ORIGIN}/leagues`), ), ).toBe(true); }); it("drops the 405 from a POST to a route with no action", () => { expect( shouldReportServerError( routeError(405, true, "Method Not Allowed"), request("/", undefined, "POST"), ), ).toBe(false); }); it("reports a 404 the app threw deliberately", () => { expect( shouldReportServerError( routeError(404, false), request("/leagues/missing"), ), ).toBe(true); }); it("reports a 403 the app threw from an ownership check", () => { expect( shouldReportServerError( routeError(403, false, "Forbidden"), request("/admin/sports"), ), ).toBe(true); }); it("reports a router-internal 500", () => { expect( shouldReportServerError( routeError(500, true, "Internal Server Error"), request("/leagues"), ), ).toBe(true); }); it("reports a plain exception", () => { expect( shouldReportServerError(new Error("boom"), request("/leagues")), ).toBe(true); }); it("reports anything that is not a route error response", () => { expect(shouldReportServerError("just a string", request("/leagues"))).toBe( true, ); expect(shouldReportServerError(null, request("/leagues"))).toBe(true); }); it("drops a router 404 whose referer header is not a URL", () => { expect( shouldReportServerError( routeError(404, true), request("/blog/", "not a url"), ), ).toBe(false); }); }); /** * The unit tests above use hand-written error objects. These drive real requests * through React Router so the suite fails if the shape it throws ever changes. */ describe("shouldReportServerError against real React Router errors", () => { const handler = createStaticHandler([ { id: "root", path: "/", children: [{ id: "home", index: true, loader: () => null }], }, ]); async function errorFor(req: Request) { const ctx = await handler.query(req); if (ctx instanceof Response) return null; return Object.values(ctx.errors ?? {})[0] ?? null; } it('drops the 404 for an unmatched URL (No route matches URL "...")', async () => { const req = request("/blog/wp/v2/posts/999999"); const error = await errorFor(req); expect(error).toMatchObject({ status: 404, internal: true }); expect(shouldReportServerError(error, req)).toBe(false); }); it("reports the same 404 when it came from a link on our own site", async () => { const req = request("/nope", `${ORIGIN}/leagues`); expect(shouldReportServerError(await errorFor(req), req)).toBe(true); }); it("drops the 405 from a POST to a route with no action", async () => { const req = request("/", undefined, "POST"); const error = await errorFor(req); expect(error).toMatchObject({ status: 405, internal: true }); expect(shouldReportServerError(error, req)).toBe(false); }); });