Initial

server/test/hosts.test.mjs

@@ -3,8 +3,10 @@ import test from 'node:test';
 import assert from 'node:assert/strict';
 
 const { createHost, listHosts, updateHost, deleteHost, filterVisibleHostIds } = await load('../models/hostModel.js');
+const { createCredential } = await load('../models/credentialModel.js');
 const { createHostGroup, listHostGroups, syncHostGroup } = await load('../models/hostGroupModel.js');
 const { createRunPlan, loadRunPlan } = await load('../models/runPlanModel.js');
+const { createRdpLaunchSession } = await load('../services/rdpGatewayService.js');
 const { db } = await load('../db.js');
 
 const owner = adminUserId();
@@ -52,6 +54,46 @@ test('filterVisibleHostIds drops hosts the user cannot see', () => {
   assert.deepEqual(visibleToOther, [shared.id]);
 });
 
+test('RDP launch creates a short-lived browser session for Windows hosts with visible credentials', () => {
+  const credential = createCredential({
+    name: 'RDP Admin',
+    kind: 'username_password',
+    username: 'CONTOSO\\rdpadmin',
+    secret: 'rdp-secret',
+    visibility: 'shared'
+  }, owner);
+  const host = createHost({
+    name: 'RDP-WIN-01',
+    address: 'rdp-win-01.contoso.local',
+    fqdn: 'rdp-win-01.contoso.local',
+    osFamily: 'windows',
+    transport: 'winrm',
+    credentialId: credential.id,
+    tags: [],
+    visibility: 'shared'
+  }, owner);
+  const session = createRdpLaunchSession(host.id, other);
+  assert.match(session.url, /^\/rdp\/[^/]+$/);
+  assert.equal(session.host.name, 'RDP-WIN-01');
+  assert.equal(session.host.address, 'rdp-win-01.contoso.local');
+  assert.ok(!session.url.includes('rdp-secret'));
+});
+
+test('RDP launch rejects non-Windows hosts or hosts without credentials', () => {
+  const credential = createCredential({
+    name: 'RDP Linux Credential',
+    kind: 'username_password',
+    username: 'linux-user',
+    secret: 'linux-secret',
+    visibility: 'shared'
+  }, owner);
+  const linux = createHost({ name: 'RDP-LINUX-01', address: 'rdp-linux.local', osFamily: 'linux', transport: 'ssh', credentialId: credential.id, tags: [], visibility: 'shared' }, owner);
+  assert.throws(() => createRdpLaunchSession(linux.id, owner), /Windows hosts/i);
+
+  const noCredential = createHost({ name: 'RDP-NOCRED-01', address: 'rdp-nocred.local', osFamily: 'windows', transport: 'winrm', tags: [], visibility: 'shared' }, owner);
+  assert.throws(() => createRdpLaunchSession(noCredential.id, owner), /assigned visible credential/i);
+});
+
 test('manual host groups keep explicit members', () => {
   const host = createHost({ name: 'ManualMember', address: 'manual-member.local', osFamily: 'windows', transport: 'winrm', tags: [], visibility: 'shared' }, owner);
   const group = createHostGroup({ name: 'Manual Group', mode: 'manual', hostIds: [host.id], visibility: 'shared' }, owner);