matthias.lotz
cdb2aa95e6
🧪 Testing Infrastructure (45 tests, 100% passing) - Implemented Jest + Supertest framework for automated testing - Unit tests: 5 tests for auth middleware (100% coverage) - Integration tests: 40 tests covering admin, consent, migration, upload APIs - Test execution time: ~10 seconds for full suite - Coverage: 26% statements, 15% branches (realistic start) - In-memory SQLite database for isolated testing - Singleton server pattern for fast test execution - Automatic cleanup and teardown 🔒 Admin API Authentication - Bearer token authentication for all admin endpoints - requireAdminAuth middleware with ADMIN_API_KEY validation - Protected routes: /api/admin/*, /api/system/migration/migrate|rollback - Complete authentication guide in AUTHENTICATION.md - HTTP 403 for missing/invalid tokens, 500 if not configured - Ready for production with token rotation support 📋 API Route Documentation - Single Source of Truth: backend/src/routes/routeMappings.js - Comprehensive route overview in backend/src/routes/README.md - Express routing order documented (specific before generic) - Frontend integration guide with authentication examples - OpenAPI auto-generation integrated 🐛 Bug Fixes - Fixed SQLite connection not properly awaited (caused test hangs) - Fixed upload validation checking req.files.file before req.files - Fixed Express route order (consent before admin router) - Fixed test environment using /tmp for uploads (permission issues) 📚 Documentation Updates - Updated README.md with testing and authentication features - Updated README.dev.md with testing section and API development guide - Updated CHANGELOG.md with complete feature documentation - Updated FEATURE_PLAN-autogen-openapi.md (status: 100% complete) - Added frontend/MIGRATION-GUIDE.md for frontend team 🚀 Frontend Impact Frontend needs to add Bearer token to all /api/admin/* calls. See frontend/MIGRATION-GUIDE.md for detailed instructions. Test Status: ✅ 45/45 passing (100%) Backend: ✅ Production ready Frontend: ⚠️ Migration required (see MIGRATION-GUIDE.md)
39 lines
998 B
JavaScript
39 lines
998 B
JavaScript
const { Router } = require('express');
|
|
const { UPLOAD_FS_DIR } = require('../constants');
|
|
const path = require('path');
|
|
|
|
const router = Router();
|
|
|
|
/**
|
|
* @swagger
|
|
* /download/{id}:
|
|
* get:
|
|
* tags: [Download]
|
|
* summary: Download an uploaded image file
|
|
* description: Downloads the original image file by filename
|
|
* parameters:
|
|
* - in: path
|
|
* name: id
|
|
* required: true
|
|
* schema:
|
|
* type: string
|
|
* example: "abc123.jpg"
|
|
* description: Filename of the image to download
|
|
* responses:
|
|
* 200:
|
|
* description: File download initiated
|
|
* content:
|
|
* image/*:
|
|
* schema:
|
|
* type: string
|
|
* format: binary
|
|
* 404:
|
|
* description: File not found
|
|
*/
|
|
router.get('/download/:id', (req, res) => {
|
|
const filePath = path.join(__dirname, '..', UPLOAD_FS_DIR, req.params.id);
|
|
res.download(filePath);
|
|
});
|
|
|
|
module.exports = router;
|