[Init] Initial commit - NetMesh terminal manager

electron/bridges/cloudSyncBridge.webdavBasicAuth.test.cjs

@@ -0,0 +1,92 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const http = require("node:http");
+
+const {
+  buildBasicAuthHeader,
+  handleWebdavInitialize,
+} = require("./cloudSyncBridge.cjs");
+
+// Per RFC 7617, Basic Auth credentials are UTF-8 encoded before base64.
+// The upstream `webdav` npm package (via `base-64`) encodes them as Latin1
+// instead, which silently corrupts non-ASCII characters like German umlauts
+// (ö, ä) — exactly the case reported by Hetzner Storage Box users (#891).
+//
+// `ö` (U+00F6):
+//   Latin1 → 1 byte:  F6
+//   UTF-8  → 2 bytes: C3 B6
+const PASSWORD_WITH_UMLAUT = "6?G:ö9yZöäMF+H3";
+const USERNAME = "uHetzner1";
+
+test("buildBasicAuthHeader UTF-8 encodes credentials (RFC 7617)", () => {
+  const header = buildBasicAuthHeader("user", "ö");
+  // UTF-8 base64 of "user:ö" = "user" + ":" + 0xC3 0xB6
+  assert.equal(header, "Basic dXNlcjrDtg==");
+});
+
+test("buildBasicAuthHeader stays compatible with pure-ASCII credentials", () => {
+  // For ASCII, UTF-8 and Latin1 are byte-identical, so the header is unchanged.
+  const header = buildBasicAuthHeader("user", "password");
+  assert.equal(header, "Basic dXNlcjpwYXNzd29yZA==");
+});
+
+function startUtf8BasicAuthServer({ username, password }) {
+  const expected =
+    "Basic " +
+    Buffer.from(`${username}:${password}`, "utf8").toString("base64");
+
+  const server = http.createServer((req, res) => {
+    const got = req.headers["authorization"];
+    if (got !== expected) {
+      res.writeHead(401, {
+        "WWW-Authenticate": 'Basic realm="test", charset="UTF-8"',
+      });
+      res.end("Unauthorized");
+      return;
+    }
+    // Minimal but parseable PROPFIND response so client.exists() resolves true.
+    res.writeHead(207, { "Content-Type": "application/xml; charset=utf-8" });
+    res.end(
+      `<?xml version="1.0" encoding="utf-8"?>
+<D:multistatus xmlns:D="DAV:">
+  <D:response>
+    <D:href>${req.url}</D:href>
+    <D:propstat>
+      <D:prop>
+        <D:displayname>netcatty-vault.json</D:displayname>
+        <D:getlastmodified>Sat, 10 May 2026 00:00:00 GMT</D:getlastmodified>
+        <D:getcontentlength>0</D:getcontentlength>
+        <D:resourcetype/>
+      </D:prop>
+      <D:status>HTTP/1.1 200 OK</D:status>
+    </D:propstat>
+  </D:response>
+</D:multistatus>`,
+    );
+  });
+
+  return new Promise((resolve) => {
+    server.listen(0, "127.0.0.1", () => {
+      const { port } = server.address();
+      resolve({ server, endpoint: `http://127.0.0.1:${port}` });
+    });
+  });
+}
+
+test("handleWebdavInitialize sends UTF-8 Basic Auth (Hetzner umlaut password #891)", async () => {
+  const { server, endpoint } = await startUtf8BasicAuthServer({
+    username: USERNAME,
+    password: PASSWORD_WITH_UMLAUT,
+  });
+  try {
+    const result = await handleWebdavInitialize({
+      endpoint,
+      authType: "password",
+      username: USERNAME,
+      password: PASSWORD_WITH_UMLAUT,
+    });
+    assert.equal(result.resourceId, "/netcatty-vault.json");
+  } finally {
+    await new Promise((resolve) => server.close(resolve));
+  }
+});