do not freeze authApi for testing only

stjude · Jan 14, 2025 · 1682df4 · 1682df4
1 parent 17c5259
commit 1682df4
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/server/src/auth.js b/server/src/auth.js
@@ -227,7 +227,8 @@ async function maySetAuthRoutes(app, basepath = '', _serverconfig = null) {
 		authApi.userCanAccess = () => true
 		authApi.getRequiredCredForDsEmbedder = () => undefined
 		authApi.getPayloadFromHeaderAuth = () => ({})
-		Object.freeze(authApi)
+		// custom auth for testing
+		if (serverconfig.debugmode && !app.doNotFreezeAuth) Object.freeze(authApi)
 		return
 	}
 	try {
@@ -642,6 +643,9 @@ async function maySetAuthRoutes(app, basepath = '', _serverconfig = null) {
 		}
 		return { errors }
 	}
+
+	// custom auth for testing
+	if (serverconfig.debugmode && !app.doNotFreezeAuth) Object.freeze(authApi)
 }
 
 function getSessionId(req, cred) {

diff --git a/server/src/test/auth.unit.spec.js b/server/src/test/auth.unit.spec.js
@@ -26,6 +26,7 @@ const secrets = {
 function appInit() {
 	// mock the express router api
 	const app = {
+		doNotFreezeAuthApi: true,
 		routes: {},
 		middlewares: {},
 		setRoute(method, route, handler) {