resp = rest.getForEntity("/v3/api-docs", String.class);
+ assertEquals(HttpStatus.OK, resp.getStatusCode());
+ }
+}
diff --git a/mateclaw-server/src/test/java/vip/mate/config/OpenApiLockedDownAccessTest.java b/mateclaw-server/src/test/java/vip/mate/config/OpenApiLockedDownAccessTest.java
new file mode 100644
index 00000000..2ffce683
--- /dev/null
+++ b/mateclaw-server/src/test/java/vip/mate/config/OpenApiLockedDownAccessTest.java
@@ -0,0 +1,59 @@
+package vip.mate.config;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.web.client.TestRestTemplate;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+/**
+ * Production posture: with {@code mateclaw.openapi.expose-ui=false} the Swagger
+ * UI / OpenAPI document paths must NOT be anonymously reachable. They fall under
+ * an explicit {@code hasRole('ADMIN')} rule in {@link SecurityConfig}, so an
+ * unauthenticated request is rejected by the authentication entry point (401)
+ * instead of leaking the full API surface.
+ *
+ * Uses a real embedded servlet container ({@code RANDOM_PORT}) because the app
+ * registers a WebSocket endpoint that requires a servlet {@code ServerContainer},
+ * which the MockMvc-only environment does not provide.
+ */
+@SpringBootTest(
+ webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT,
+ properties = {
+ "spring.flyway.enabled=true",
+ "spring.flyway.locations=classpath:db/migration/h2",
+ "mateclaw.openapi.expose-ui=false"
+ }
+)
+class OpenApiLockedDownAccessTest {
+
+ @Autowired
+ private TestRestTemplate rest;
+
+ @Test
+ @DisplayName("Anonymous OpenAPI JSON is blocked (401) when expose-ui=false")
+ void anonymousApiDocsBlocked() {
+ ResponseEntity resp = rest.getForEntity("/v3/api-docs", String.class);
+ assertEquals(HttpStatus.UNAUTHORIZED, resp.getStatusCode());
+ }
+
+ @Test
+ @DisplayName("Anonymous Swagger UI is blocked (401) when expose-ui=false")
+ void anonymousSwaggerUiBlocked() {
+ ResponseEntity resp = rest.getForEntity("/swagger-ui/index.html", String.class);
+ assertEquals(HttpStatus.UNAUTHORIZED, resp.getStatusCode());
+ }
+
+ @Test
+ @DisplayName("A genuinely public endpoint stays reachable when Swagger is locked")
+ void publicEndpointStillReachable() {
+ // GET /api/v1/settings/language is permitAll (first-paint i18n); proves
+ // the lockdown is scoped to the OpenAPI paths, not a blanket denial.
+ ResponseEntity resp = rest.getForEntity("/api/v1/settings/language", String.class);
+ assertEquals(HttpStatus.OK, resp.getStatusCode());
+ }
+}
diff --git a/mateclaw-server/src/test/java/vip/mate/tool/guard/WorkspacePathGuardShellTest.java b/mateclaw-server/src/test/java/vip/mate/tool/guard/WorkspacePathGuardShellTest.java
index 218d9018..02a58a73 100644
--- a/mateclaw-server/src/test/java/vip/mate/tool/guard/WorkspacePathGuardShellTest.java
+++ b/mateclaw-server/src/test/java/vip/mate/tool/guard/WorkspacePathGuardShellTest.java
@@ -8,6 +8,8 @@ import org.junit.jupiter.api.condition.DisabledOnOs;
import org.junit.jupiter.api.condition.OS;
import vip.mate.tool.builtin.ToolExecutionContext;
+import java.nio.file.Path;
+
import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
import static org.junit.jupiter.api.Assertions.assertThrows;
@@ -26,8 +28,16 @@ class WorkspacePathGuardShellTest {
private static final String WORKSPACE = "/tmp/ws-guard-shell-test";
private static final String SKILL_ROOT = "/tmp/ws-guard-skill-root";
+ // The global fallback sandbox root is process-wide mutable static state that
+ // another test (or the app context, in a full-suite run) may have set. Save
+ // and restore it so the "no workspace configured" cases here are deterministic
+ // rather than depending on whatever the previous test left behind.
+ private Path savedDefaultRoot;
+
@BeforeEach
void setup() {
+ savedDefaultRoot = WorkspacePathGuard.getDefaultRoot();
+ WorkspacePathGuard.setDefaultRoot(null);
ToolExecutionContext.set("conv-test", "test-user", WORKSPACE);
}
@@ -35,6 +45,7 @@ class WorkspacePathGuardShellTest {
void teardown() {
ToolExecutionContext.clear();
WorkspacePathGuard.setSkillRoot(null);
+ WorkspacePathGuard.setDefaultRoot(savedDefaultRoot == null ? null : savedDefaultRoot.toString());
}
// ==================== No-op when sandbox absent ====================