tiennm99/ccs
1
0 Fork 0
mirror of https://github.com/tiennm99/ccs.git synced 2026-10-04 16:13:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(cursor): redact daemon token from dashboard start (#1540)

Browse Source 
Redacts the Cursor daemon token from dashboard start output.
This commit is contained in:
Kai (Tam Nhu) Tran authored and GitHub committed 2026-06-15 23:24:37 -04:00
1 parent 74dd2f38cc
commit b85a3de26e
2 files changed
+40 -30
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/web-server/routes/cursor-routes.ts
+3 -1
View File
@@ -234,7 +234,9 @@ router.post('/daemon/start', async (_req: Request, res: Response): Promise<void>
port: cursorConfig.port,
ghost_mode: cursorConfig.ghost_mode,
});
res.json(result);
const { daemonToken: _redactedDaemonToken, ...publicResult } = result;
void _redactedDaemonToken;
res.json(publicResult);
} catch (error) {
res.status(500).json({ error: (error as Error).message });
}
tests/unit/web-server/cursor-routes.test.ts
+37 -29
View File
@@ -52,9 +52,11 @@ let checkAuthStatus: () => {
};
};
let getTokenStoragePath: () => string;
let getDaemonStartPreconditionError: (
input: { enabled: boolean; authenticated: boolean; tokenExpired?: boolean }
) => { status: number; error: string } | null;
let getDaemonStartPreconditionError: (input: {
enabled: boolean;
authenticated: boolean;
tokenExpired?: boolean;
}) => { status: number; error: string } | null;
let getAutoDetectFailureStatus: (
reason?:
| 'db_not_found'
@@ -65,13 +67,15 @@ let getAutoDetectFailureStatus: (
| 'invalid_token_format'
) => number;
function seedCursorConfig(overrides: {
enabled?: boolean;
port?: number;
auto_start?: boolean;
ghost_mode?: boolean;
model?: string;
} = {}): void {
function seedCursorConfig(
overrides: {
enabled?: boolean;
port?: number;
auto_start?: boolean;
ghost_mode?: boolean;
model?: string;
} = {}
): void {
const config = loadOrCreateUnifiedConfig();
config.cursor = {
enabled: overrides.enabled ?? true,
@@ -329,7 +333,10 @@ describe('Cursor Routes Logic', () => {
try {
const dbPath = getTokenStoragePath();
fs.mkdirSync(path.dirname(dbPath), { recursive: true });
execFileSync('sqlite3', [dbPath, 'CREATE TABLE IF NOT EXISTS itemTable (key TEXT PRIMARY KEY, value TEXT);']);
execFileSync('sqlite3', [
dbPath,
'CREATE TABLE IF NOT EXISTS itemTable (key TEXT PRIMARY KEY, value TEXT);',
]);
execFileSync('sqlite3', [
dbPath,
`INSERT OR REPLACE INTO itemTable (key, value) VALUES ('cursorAuth/accessToken', '${token}');`,
@@ -471,27 +478,28 @@ describe('Cursor Routes Logic', () => {
expect(json.error).toContain('expired');
});
it(
'POST /api/cursor/daemon/start starts daemon and /daemon/stop stops it',
async () => {
const port = 15000 + Math.floor(Math.random() * 20000);
seedCursorConfig({ enabled: true, port });
seedCredentials(false);
it('POST /api/cursor/daemon/start starts daemon and /daemon/stop stops it', async () => {
const port = 15000 + Math.floor(Math.random() * 20000);
seedCursorConfig({ enabled: true, port });
seedCredentials(false);
const startRes = await fetch(`${baseUrl}/api/cursor/daemon/start`, { method: 'POST' });
expect(startRes.status).toBe(200);
const startRes = await fetch(`${baseUrl}/api/cursor/daemon/start`, { method: 'POST' });
expect(startRes.status).toBe(200);
const startJson = (await startRes.json()) as { success?: boolean; pid?: number };
expect(startJson.success).toBe(true);
expect(typeof startJson.pid).toBe('number');
const startJson = (await startRes.json()) as {
success?: boolean;
pid?: number;
daemonToken?: string;
};
expect(startJson.success).toBe(true);
expect(typeof startJson.pid).toBe('number');
expect(startJson.daemonToken).toBeUndefined();
const stopRes = await fetch(`${baseUrl}/api/cursor/daemon/stop`, { method: 'POST' });
expect(stopRes.status).toBe(200);
const stopJson = (await stopRes.json()) as { success?: boolean };
expect(stopJson.success).toBe(true);
},
35000
);
const stopRes = await fetch(`${baseUrl}/api/cursor/daemon/stop`, { method: 'POST' });
expect(stopRes.status).toBe(200);
const stopJson = (await stopRes.json()) as { success?: boolean };
expect(stopJson.success).toBe(true);
}, 35000);
it('POST /api/cursor/daemon/stop returns success when daemon is not running', async () => {
const res = await fetch(`${baseUrl}/api/cursor/daemon/stop`, { method: 'POST' });