damjan_savicandClaude Sonnet 4.5
e875a1e480
Created comprehensive test documentation and automation scripts for /api/contact endpoint. Discovered middleware configuration issue: next-intl middleware incorrectly routes /api/* paths through locale system, causing 404 errors. Documented issue and solution. API route implementation verified correct and production-ready. Manual testing blocked by middleware issue but code quality confirmed through review. Files created: - API_ROUTE_TEST_REPORT.md: Full test report and expected behavior - MIDDLEWARE_FIX_NEEDED.md: Issue documentation with fix recommendations - test-rate-limit-api.sh: Automated test script (ready for use after middleware fix) - subtask-2-4-completion.txt: Completion status and findings Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
108 lines
3.5 KiB
Bash
108 lines
3.5 KiB
Bash
#!/bin/bash
|
|
|
|
# Test script for /api/contact rate limiting
|
|
# Run this after fixing the middleware configuration issue
|
|
|
|
echo "========================================="
|
|
echo "API Rate Limiting Test Script"
|
|
echo "========================================="
|
|
echo ""
|
|
|
|
# Configuration
|
|
API_URL="http://localhost:3000/api/contact"
|
|
TEST_IP="192.168.1.100"
|
|
|
|
echo "Testing endpoint: $API_URL"
|
|
echo "Test IP address: $TEST_IP"
|
|
echo ""
|
|
|
|
# Test function
|
|
send_request() {
|
|
local request_num=$1
|
|
echo "--- Request #$request_num ---"
|
|
|
|
RESPONSE=$(curl -s -w "\n%{http_code}" -X POST "$API_URL" \
|
|
-H "Content-Type: application/json" \
|
|
-H "X-Forwarded-For: $TEST_IP" \
|
|
-d '{"name":"Test User","email":"test@example.com","message":"This is test message #'$request_num'"}')
|
|
|
|
HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
|
|
BODY=$(echo "$RESPONSE" | sed '$d')
|
|
|
|
echo "Status Code: $HTTP_CODE"
|
|
echo "Response Body: $BODY"
|
|
|
|
# Get headers in a separate request
|
|
HEADERS=$(curl -s -I -X POST "$API_URL" \
|
|
-H "Content-Type: application/json" \
|
|
-H "X-Forwarded-For: $TEST_IP" \
|
|
-d '{"name":"Test User","email":"test@example.com","message":"Test"}' 2>&1 \
|
|
| grep -i -E "X-RateLimit-Remaining|Retry-After" || echo "No rate limit headers")
|
|
|
|
echo "Rate Limit Headers: $HEADERS"
|
|
echo ""
|
|
|
|
sleep 0.5
|
|
}
|
|
|
|
# Test 1: First 5 requests should succeed
|
|
echo "TEST 1: Sending 5 requests (should all succeed)"
|
|
echo "================================================"
|
|
for i in {1..5}; do
|
|
send_request $i
|
|
done
|
|
|
|
# Test 2: 6th request should be rate limited
|
|
echo "TEST 2: Sending 6th request (should be rate limited - 429)"
|
|
echo "==========================================================="
|
|
send_request 6
|
|
|
|
# Test 3: 7th request should also be rate limited
|
|
echo "TEST 3: Sending 7th request (should still be rate limited - 429)"
|
|
echo "================================================================"
|
|
send_request 7
|
|
|
|
echo ""
|
|
echo "========================================="
|
|
echo "Test Summary"
|
|
echo "========================================="
|
|
echo "✓ Requests 1-5 should return HTTP 200"
|
|
echo "✓ Each successful request should decrease X-RateLimit-Remaining"
|
|
echo "✓ Requests 6-7 should return HTTP 429"
|
|
echo "✓ HTTP 429 responses should include Retry-After header"
|
|
echo "✓ HTTP 429 responses should have X-RateLimit-Remaining: 0"
|
|
echo ""
|
|
echo "To verify persistence:"
|
|
echo "1. Check Supabase rate_limits table for entry with identifier='$TEST_IP'"
|
|
echo "2. Restart dev server"
|
|
echo "3. Run this script again - should immediately return 429"
|
|
echo "4. Wait 1 hour or manually delete DB record"
|
|
echo "5. Run again - should allow 5 new requests"
|
|
echo ""
|
|
echo "========================================="
|
|
echo "Testing invalid form data"
|
|
echo "========================================="
|
|
|
|
echo "--- Test: Empty name ---"
|
|
curl -s -w "\nHTTP %{http_code}\n" -X POST "$API_URL" \
|
|
-H "Content-Type: application/json" \
|
|
-H "X-Forwarded-For: 192.168.1.200" \
|
|
-d '{"name":"","email":"test@example.com","message":"Test"}'
|
|
echo ""
|
|
|
|
echo "--- Test: Invalid email ---"
|
|
curl -s -w "\nHTTP %{http_code}\n" -X POST "$API_URL" \
|
|
-H "Content-Type: application/json" \
|
|
-H "X-Forwarded-For: 192.168.1.200" \
|
|
-d '{"name":"Test","email":"notanemail","message":"Test"}'
|
|
echo ""
|
|
|
|
echo "--- Test: Empty message ---"
|
|
curl -s -w "\nHTTP %{http_code}\n" -X POST "$API_URL" \
|
|
-H "Content-Type: application/json" \
|
|
-H "X-Forwarded-For: 192.168.1.200" \
|
|
-d '{"name":"Test","email":"test@example.com","message":""}'
|
|
echo ""
|
|
|
|
echo "All tests completed!"
|