alee/stegasoo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enhance smoke test and fix banner alignment

Browse Source 
Smoke test now includes:
- Admin user creation and login
- Regular user creation and workflow
- Encode/decode tests for both user types
- Password recovery QR test
- System health checks

Also fixes Setup Complete banner alignment.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Aaron D. Lee
2026-01-04 19:53:59 -05:00
parent 05e2286d02
commit 00cda4d929
2 changed files with 205 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rpi/first-boot-wizard.sh
View File

@@ -307,7 +307,7 @@ gum style \
--margin "1" \ --margin "1" \
--align center \ --align center \
" . * . . * . * . * . * ." \ " . * . . * . * . * . * ." \
" ___ _____ ___ ___ _ ___ ___ ___" \ " ___ _____ ___ ___ _ ___ ___ ___" \
" / __||_ _|| __| / __| /_\\ / __| / _ \\ / _ \\" \ " / __||_ _|| __| / __| /_\\ / __| / _ \\ / _ \\" \
" \\__ \\ | | | _| | (_ | / _ \\ \\__ \\ | (_) || (_) |" \ " \\__ \\ | | | _| | (_ | / _ \\ \\__ \\ | (_) || (_) |" \
" |___/ |_| |___| \\___//_/ \\_\\|___/ \\___/ \\___/" \ " |___/ |_| |___| \\___//_/ \\_\\|___/ \\___/ \\___/" \

256
rpi/smoke-test.sh
View File

@@ -35,17 +35,23 @@ else
fi fi
# Test credentials # Test credentials
TEST_USER="smoketest" ADMIN_USER="smokeadmin"
TEST_PASS="SmokeTest123!" ADMIN_PASS="SmokeAdmin123!"
REGULAR_USER="smokeuser"
REGULAR_PASS="SmokeUser123!"
# Temp files # Temp files
COOKIE_JAR=$(mktemp) COOKIE_JAR=$(mktemp)
COOKIE_JAR_USER=$(mktemp)
TEST_IMAGE=$(mktemp --suffix=.png) TEST_IMAGE=$(mktemp --suffix=.png)
ENCODED_IMAGE=$(mktemp --suffix=.png) ENCODED_IMAGE=$(mktemp --suffix=.png)
RESPONSE=$(mktemp) RESPONSE=$(mktemp)
ENCODED_IMAGE_USER=$(mktemp --suffix=.png)
QR_IMAGE=$(mktemp --suffix=.png)
cleanup() { cleanup() {
rm -f "$COOKIE_JAR" "$TEST_IMAGE" "$ENCODED_IMAGE" "$RESPONSE" rm -f "$COOKIE_JAR" "$COOKIE_JAR_USER" "$TEST_IMAGE" "$ENCODED_IMAGE" "$ENCODED_IMAGE_USER" "$QR_IMAGE" "$RESPONSE"
} }
trap cleanup EXIT trap cleanup EXIT
@@ -99,7 +105,7 @@ echo ""
# Test 1: Web UI Reachable # Test 1: Web UI Reachable
# ============================================================================= # =============================================================================
echo -e "${BOLD}[1/6] Web UI Accessibility${NC}" echo -e "${BOLD}[1/9] Web UI Accessibility${NC}"
if curl $CURL_OPTS -s -o /dev/null -w "%{http_code}" "$BASE_URL" | grep -q "200\|302"; then if curl $CURL_OPTS -s -o /dev/null -w "%{http_code}" "$BASE_URL" | grep -q "200\|302"; then
pass "Web UI is reachable" pass "Web UI is reachable"
@@ -133,7 +139,7 @@ fi
# ============================================================================= # =============================================================================
echo "" echo ""
echo -e "${BOLD}[2/6] User Setup${NC}" echo -e "${BOLD}[2/9] Admin Setup${NC}"
if [ "$NEEDS_SETUP" = true ]; then if [ "$NEEDS_SETUP" = true ]; then
# Get CSRF token from setup page # Get CSRF token from setup page
@@ -149,9 +155,9 @@ if [ "$NEEDS_SETUP" = true ]; then
HTTP_CODE=$(curl $CURL_OPTS -s -o "$RESPONSE" -w "%{http_code}" \ HTTP_CODE=$(curl $CURL_OPTS -s -o "$RESPONSE" -w "%{http_code}" \
-b "$COOKIE_JAR" -c "$COOKIE_JAR" \ -b "$COOKIE_JAR" -c "$COOKIE_JAR" \
-X POST "$BASE_URL/setup" \ -X POST "$BASE_URL/setup" \
-d "username=$TEST_USER" \ -d "username=$ADMIN_USER" \
-d "password=$TEST_PASS" \ -d "password=$ADMIN_PASS" \
-d "password_confirm=$TEST_PASS" \ -d "password_confirm=$ADMIN_PASS" \
-d "csrf_token=$CSRF_TOKEN") -d "csrf_token=$CSRF_TOKEN")
if [ "$HTTP_CODE" = "302" ] || [ "$HTTP_CODE" = "200" ]; then if [ "$HTTP_CODE" = "302" ] || [ "$HTTP_CODE" = "200" ]; then
@@ -168,42 +174,42 @@ else
fi fi
# ============================================================================= # =============================================================================
# Test 3: Login # Test 3: Admin Login
# ============================================================================= # =============================================================================
echo "" echo ""
echo -e "${BOLD}[3/6] Authentication${NC}" echo -e "${BOLD}[3/9] Admin Authentication${NC}"
# Get login page and CSRF # Get login page and CSRF
LOGIN_PAGE=$(curl $CURL_OPTS -s -c "$COOKIE_JAR" "$BASE_URL/login") LOGIN_PAGE=$(curl $CURL_OPTS -s -c "$COOKIE_JAR" "$BASE_URL/login")
CSRF_TOKEN=$(echo "$LOGIN_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "") CSRF_TOKEN=$(echo "$LOGIN_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "")
# Try login # Try login as admin
HTTP_CODE=$(curl $CURL_OPTS -s -o "$RESPONSE" -w "%{http_code}" \ HTTP_CODE=$(curl $CURL_OPTS -s -o "$RESPONSE" -w "%{http_code}" \
-b "$COOKIE_JAR" -c "$COOKIE_JAR" \ -b "$COOKIE_JAR" -c "$COOKIE_JAR" \
-X POST "$BASE_URL/login" \ -X POST "$BASE_URL/login" \
-d "username=$TEST_USER" \ -d "username=$ADMIN_USER" \
-d "password=$TEST_PASS" \ -d "password=$ADMIN_PASS" \
-d "csrf_token=$CSRF_TOKEN" \ -d "csrf_token=$CSRF_TOKEN" \
-L) -L)
# Check if we're logged in by accessing a protected page # Check if we're logged in by accessing a protected page
if curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/" | grep -qi "encode\|decode\|logout"; then if curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/" | grep -qi "encode\|decode\|logout"; then
pass "Login successful" pass "Admin login successful"
LOGGED_IN=true ADMIN_LOGGED_IN=true
else else
fail "Login failed" fail "Admin login failed"
LOGGED_IN=false ADMIN_LOGGED_IN=false
fi fi
# ============================================================================= # =============================================================================
# Test 4: Encode Page # Test 4: Admin Encode/Decode
# ============================================================================= # =============================================================================
echo "" echo ""
echo -e "${BOLD}[4/6] Encode Functionality${NC}" echo -e "${BOLD}[4/9] Admin Encode/Decode${NC}"
if [ "$LOGGED_IN" = true ]; then if [ "$ADMIN_LOGGED_IN" = true ]; then
ENCODE_PAGE=$(curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/encode") ENCODE_PAGE=$(curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/encode")
if echo "$ENCODE_PAGE" | grep -qi "encode\|message\|image\|upload"; then if echo "$ENCODE_PAGE" | grep -qi "encode\|message\|image\|upload"; then
@@ -220,13 +226,28 @@ if [ "$LOGGED_IN" = true ]; then
-b "$COOKIE_JAR" \ -b "$COOKIE_JAR" \
-X POST "$BASE_URL/encode" \ -X POST "$BASE_URL/encode" \
-F "image=@$TEST_IMAGE" \ -F "image=@$TEST_IMAGE" \
-F "message=Smoke test message" \ -F "message=Admin smoke test" \
-F "csrf_token=$CSRF_TOKEN") -F "csrf_token=$CSRF_TOKEN")
if [ "$HTTP_CODE" = "200" ] && [ -s "$ENCODED_IMAGE" ]; then if [ "$HTTP_CODE" = "200" ] && [ -s "$ENCODED_IMAGE" ]; then
# Check if result is an image
if file "$ENCODED_IMAGE" | grep -qi "image\|PNG\|JPEG"; then if file "$ENCODED_IMAGE" | grep -qi "image\|PNG\|JPEG"; then
pass "Image encoding works" pass "Admin encoding works"
# Now decode it
DECODE_PAGE=$(curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/decode")
CSRF_TOKEN=$(echo "$DECODE_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "")
DECODED=$(curl $CURL_OPTS -s \
-b "$COOKIE_JAR" \
-X POST "$BASE_URL/decode" \
-F "image=@$ENCODED_IMAGE" \
-F "csrf_token=$CSRF_TOKEN")
if echo "$DECODED" | grep -q "Admin smoke test"; then
pass "Admin decoding works"
else
fail "Admin decode failed"
fi
else else
fail "Encoding returned non-image response" fail "Encoding returned non-image response"
fi fi
@@ -234,58 +255,174 @@ if [ "$LOGGED_IN" = true ]; then
fail "Encoding request failed (HTTP $HTTP_CODE)" fail "Encoding request failed (HTTP $HTTP_CODE)"
fi fi
else else
skip "Image encoding (no image tools)" skip "Encode/Decode (no image tools)"
fi fi
else else
skip "Encode tests (not logged in)" skip "Admin encode/decode (not logged in)"
fi fi
# ============================================================================= # =============================================================================
# Test 5: Decode Page # Test 5: Create Regular User
# ============================================================================= # =============================================================================
echo "" echo ""
echo -e "${BOLD}[5/6] Decode Functionality${NC}" echo -e "${BOLD}[5/9] Create Regular User${NC}"
if [ "$LOGGED_IN" = true ]; then if [ "$ADMIN_LOGGED_IN" = true ]; then
DECODE_PAGE=$(curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/decode") # Check if there's a user management page
USERS_PAGE=$(curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/users" 2>/dev/null || echo "")
if echo "$DECODE_PAGE" | grep -qi "decode\|upload\|image"; then if echo "$USERS_PAGE" | grep -qi "user\|create\|add"; then
pass "Decode page loads" CSRF_TOKEN=$(echo "$USERS_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "")
else
fail "Decode page not accessible"
fi
# Try decoding the encoded image HTTP_CODE=$(curl $CURL_OPTS -s -o "$RESPONSE" -w "%{http_code}" \
if [ -s "$ENCODED_IMAGE" ] && file "$ENCODED_IMAGE" | grep -qi "image\|PNG"; then
CSRF_TOKEN=$(echo "$DECODE_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "")
DECODED=$(curl $CURL_OPTS -s \
-b "$COOKIE_JAR" \ -b "$COOKIE_JAR" \
-X POST "$BASE_URL/decode" \ -X POST "$BASE_URL/users/create" \
-F "image=@$ENCODED_IMAGE" \ -d "username=$REGULAR_USER" \
-F "csrf_token=$CSRF_TOKEN") -d "password=$REGULAR_PASS" \
-d "password_confirm=$REGULAR_PASS" \
-d "csrf_token=$CSRF_TOKEN")
if echo "$DECODED" | grep -q "Smoke test message"; then if [ "$HTTP_CODE" = "302" ] || [ "$HTTP_CODE" = "200" ]; then
pass "Message decoded correctly" pass "Regular user created"
elif echo "$DECODED" | grep -qi "message\|result\|decoded"; then USER_CREATED=true
pass "Decode returns result (message may differ)"
else else
fail "Decode did not return expected result" # Try alternate endpoint
HTTP_CODE=$(curl $CURL_OPTS -s -o "$RESPONSE" -w "%{http_code}" \
-b "$COOKIE_JAR" \
-X POST "$BASE_URL/register" \
-d "username=$REGULAR_USER" \
-d "password=$REGULAR_PASS" \
-d "password_confirm=$REGULAR_PASS" \
-d "csrf_token=$CSRF_TOKEN")
if [ "$HTTP_CODE" = "302" ] || [ "$HTTP_CODE" = "200" ]; then
pass "Regular user created (via register)"
USER_CREATED=true
else
fail "Failed to create regular user"
USER_CREATED=false
fi
fi fi
else else
skip "Decode test (no encoded image)" skip "User creation (no user management page)"
USER_CREATED=false
fi fi
else else
skip "Decode tests (not logged in)" skip "User creation (admin not logged in)"
USER_CREATED=false
fi fi
# ============================================================================= # =============================================================================
# Test 6: API/CLI Check # Test 6: Regular User Login & Encode/Decode
# ============================================================================= # =============================================================================
echo "" echo ""
echo -e "${BOLD}[6/6] System Health${NC}" echo -e "${BOLD}[6/9] Regular User Workflow${NC}"
if [ "$USER_CREATED" = true ]; then
# Logout admin first (get fresh session)
curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/logout" > /dev/null
# Login as regular user
LOGIN_PAGE=$(curl $CURL_OPTS -s -c "$COOKIE_JAR_USER" "$BASE_URL/login")
CSRF_TOKEN=$(echo "$LOGIN_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "")
HTTP_CODE=$(curl $CURL_OPTS -s -o "$RESPONSE" -w "%{http_code}" \
-b "$COOKIE_JAR_USER" -c "$COOKIE_JAR_USER" \
-X POST "$BASE_URL/login" \
-d "username=$REGULAR_USER" \
-d "password=$REGULAR_PASS" \
-d "csrf_token=$CSRF_TOKEN" \
-L)
if curl $CURL_OPTS -s -b "$COOKIE_JAR_USER" "$BASE_URL/" | grep -qi "encode\|decode\|logout"; then
pass "Regular user login successful"
# Try encode/decode as regular user
if [ -f "$TEST_IMAGE" ]; then
ENCODE_PAGE=$(curl $CURL_OPTS -s -b "$COOKIE_JAR_USER" "$BASE_URL/encode")
CSRF_TOKEN=$(echo "$ENCODE_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "")
HTTP_CODE=$(curl $CURL_OPTS -s -o "$ENCODED_IMAGE_USER" -w "%{http_code}" \
-b "$COOKIE_JAR_USER" \
-X POST "$BASE_URL/encode" \
-F "image=@$TEST_IMAGE" \
-F "message=User smoke test" \
-F "csrf_token=$CSRF_TOKEN")
if [ "$HTTP_CODE" = "200" ] && [ -s "$ENCODED_IMAGE_USER" ]; then
pass "Regular user encoding works"
else
fail "Regular user encoding failed"
fi
fi
else
fail "Regular user login failed"
fi
else
skip "Regular user workflow (user not created)"
fi
# =============================================================================
# Test 7: Password Recovery QR
# =============================================================================
echo ""
echo -e "${BOLD}[7/9] Password Recovery QR${NC}"
# Re-login as admin
LOGIN_PAGE=$(curl $CURL_OPTS -s -c "$COOKIE_JAR" "$BASE_URL/login")
CSRF_TOKEN=$(echo "$LOGIN_PAGE" | grep -oP 'name="csrf_token"[^>]*value="\K[^"]+' || echo "")
curl $CURL_OPTS -s -o /dev/null \
-b "$COOKIE_JAR" -c "$COOKIE_JAR" \
-X POST "$BASE_URL/login" \
-d "username=$ADMIN_USER" \
-d "password=$ADMIN_PASS" \
-d "csrf_token=$CSRF_TOKEN" \
-L
# Check for recovery QR endpoint
RECOVERY_PAGE=$(curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/recovery" 2>/dev/null || \
curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/settings" 2>/dev/null || \
curl $CURL_OPTS -s -b "$COOKIE_JAR" "$BASE_URL/account" 2>/dev/null || echo "")
if echo "$RECOVERY_PAGE" | grep -qi "recovery\|qr\|backup"; then
pass "Recovery page accessible"
# Try to get QR image
QR_URL=$(echo "$RECOVERY_PAGE" | grep -oP 'src="[^"]*qr[^"]*"' | head -1 | sed 's/src="//;s/"$//' || echo "")
if [ -n "$QR_URL" ]; then
if [[ "$QR_URL" != http* ]]; then
QR_URL="$BASE_URL$QR_URL"
fi
HTTP_CODE=$(curl $CURL_OPTS -s -o "$QR_IMAGE" -w "%{http_code}" -b "$COOKIE_JAR" "$QR_URL")
if [ "$HTTP_CODE" = "200" ] && [ -s "$QR_IMAGE" ]; then
if file "$QR_IMAGE" | grep -qi "image\|PNG"; then
pass "Recovery QR code generated"
else
fail "QR endpoint returned non-image"
fi
else
fail "Failed to fetch QR code"
fi
else
skip "QR code URL not found in page"
fi
else
skip "Password recovery (no recovery page found)"
fi
# =============================================================================
# Test 8: System Health
# =============================================================================
echo ""
echo -e "${BOLD}[8/9] System Health${NC}"
# Check if stegasoo CLI works via SSH (optional) # Check if stegasoo CLI works via SSH (optional)
if command -v sshpass &>/dev/null; then if command -v sshpass &>/dev/null; then
@@ -315,6 +452,20 @@ else
skip "Service check (sshpass not installed)" skip "Service check (sshpass not installed)"
fi fi
# =============================================================================
# Test 9: Cleanup
# =============================================================================
echo ""
echo -e "${BOLD}[9/9] Cleanup${NC}"
# Just verify we can still access the site
if curl $CURL_OPTS -s -o /dev/null -w "%{http_code}" "$BASE_URL" | grep -q "200\|302"; then
pass "Site still accessible after tests"
else
fail "Site not accessible after tests"
fi
# ============================================================================= # =============================================================================
# Summary # Summary
# ============================================================================= # =============================================================================
@@ -333,7 +484,8 @@ fi
echo "" echo ""
echo -e "Target: $BASE_URL" echo -e "Target: $BASE_URL"
echo -e "Test user: $TEST_USER" echo -e "Admin user: $ADMIN_USER"
echo -e "Regular user: $REGULAR_USER"
echo "" echo ""
exit $TESTS_FAILED exit $TESTS_FAILED