Composable data exposure test suite.
Verifies that sensitive database fields never leak through HTTP responses: - Schema-level: walks JSON Schema output/error schemas for blocklisted property names - Runtime: fires real requests and checks response bodies against field blocklists - Cross-privilege: verifies admin routes return 403 for non-admin users, and non-admin responses exclude admin-only fields
5 declarations
testing/data_exposure.ts view source
(surface: AppSurface, admin_only_fields?: readonly string[]): void Assert that non-admin route output schemas don't contain admin-only fields.
surfaceadmin_only_fieldsreadonly string[]ADMIN_ONLY_FIELD_BLOCKLISTvoid testing/data_exposure.ts view source
(surface: AppSurface, sensitive_fields?: readonly string[]): void Assert that no output schema in the surface contains sensitive field names.
surfacesensitive_fieldsreadonly string[]SENSITIVE_FIELD_BLOCKLISTvoid testing/data_exposure.ts view source
(schema: unknown): Set<string> Recursively collect all property names from a JSON Schema.
Walks properties, items, allOf/anyOf/oneOf, and
additionalProperties to find every declared field name at any depth.
schemaunknownSet<string> testing/data_exposure.ts view source
DataExposureTestOptions Options for describe_data_exposure_tests.
buildBuild the app surface spec (for schema-level checks).
() => AppSurfaceSpecsession_optionsSession config for runtime tests.
SessionOptions<string>create_route_specsRoute spec factory for runtime tests.
(ctx: AppServerContext) => Array<RouteSpec>sensitive_fieldsFields that must never appear in any response. Default: SENSITIVE_FIELD_BLOCKLIST.
ReadonlyArray<string>admin_only_fieldsFields that must not appear in non-admin responses. Default: ADMIN_ONLY_FIELD_BLOCKLIST.
ReadonlyArray<string>app_optionsOptional overrides for AppServerOptions.
Partial<
Omit<AppServerOptions, 'backend' | 'session_options' | 'create_route_specs'>
>db_factoriesDatabase factories to run tests against. Default: pglite only.
Array<DbFactory>skip_routesRoutes to skip, in 'METHOD /path' format.
Array<string>testing/data_exposure.ts view source
(options: DataExposureTestOptions): void Composable data exposure test suite.
Three test groups: 1. Schema-level — walk JSON Schema output/error schemas for sensitive field names 2. Runtime — fire real requests and check response bodies against blocklists 3. Cross-privilege — admin routes return 403 for non-admin, error responses contain no sensitive fields
optionsvoid