From 3d646156c378c6182e55c673c118c23d53ff0a05 Mon Sep 17 00:00:00 2001
From: alex <alex@alexloehr.net>
Date: Mon, 17 Nov 2025 17:36:00 +0000
Subject: [PATCH] GS-2373

---
 lib/db.js             |    2 
 app.js                |  556 +++++++++++++++++++++++----------------------
 settings.default.json |    1 
 package.json          |   81 +++---
 test/testConnect.js   |   49 +++
 5 files changed, 368 insertions(+), 321 deletions(-)

diff --git a/app.js b/app.js
index 1109749..99240b7 100644
--- a/app.js
+++ b/app.js
@@ -1,7 +1,7 @@
 const path = require("path")
 const fastify = require('fastify')({
-    logger: false,
-    // logger: true
+   logger: false,
+   // logger: true
 })
 const _ = require("lodash")
 const fs = require("node:fs")
@@ -25,19 +25,26 @@
 
 // AUTH
 fastify.addHook("onRequest", async (req, res) => {
-    // custom logging
-    log.info(`${req.method} ${req.url}`);
-    // console.log(req.url)
+   // custom logging
+   log.info(`${req.method} ${req.url}`);
+   // console.log(req.url)
 
-    const token = req.query.token
-    if (token !== settings.authtoken && !req.url.startsWith("/ui/")) {
-        log.error("# AUTH ERROR #", token)
-        await promiseDelay(500) // delay response to avoid denial of service attacks
-        res.code(403)
-        return res.send({status: "error", error: "access denied"})
-    } else {
-        // log.debug("AUTH FOR ", req.url)
-    }
+   const token = req.query.token
+   if (token !== settings.authtoken && !req.url.startsWith("/ui/") && !req.url.startsWith("/api/version")) {
+      log.error("# AUTH ERROR #", token)
+      await promiseDelay(500) // delay response to avoid denial of service attacks
+      res.code(403)
+      return res.send({status: "error", error: "access denied"})
+   } else {
+      // log.debug("AUTH FOR ", req.url)
+   }
+})
+
+/////// VERSION ////////////////////////////////////////////////////////////////
+
+fastify.get("/api/version", async function (req, res) {
+   const {version} = require("./package.json")
+   return res.send({version})
 })
 
 /////// SEARCH ////////////////////////////////////////////////////////////////
@@ -45,304 +52,305 @@
 const searchLib = require("./lib/search")
 const {setStatus} = require("./lib/db")
 searchLib.doIndex().catch(console.error)
-fastify
-    .get("/api/search/user", async function (req, res) {
-        log.info(req.query)
-        const search = req.query?.search
-        if (!search) {
-            return res.code(422).send({status: "error", msg: "no search"})
-        } else {
-            log.info(search)
-            const data = await searchLib.search(search)
-            return res.send(data)
-        }
-    })
-    .post("/api/search/reindex", async function (req, res) {
-        log.info("REINDEX ++++")
-        const start = Date.now()
-        await searchLib.doIndex().catch(console.error)
-        return res.send({
-            status: "ok",
-            msg: `reindexed in ${Date.now() - start} ms`,
-        })
-    })
 
 fastify
+   .get("/api/search/user", async function (req, res) {
+      log.info(req.query)
+      const search = req.query?.search
+      if (!search) {
+         return res.code(422).send({status: "error", msg: "no search"})
+      } else {
+         log.info(search)
+         const data = await searchLib.search(search)
+         return res.send(data)
+      }
+   })
+   .post("/api/search/reindex", async function (req, res) {
+      log.info("REINDEX ++++")
+      const start = Date.now()
+      await searchLib.doIndex().catch(console.error)
+      return res.send({
+         status: "ok",
+         msg: `reindexed in ${Date.now() - start} ms`,
+      })
+   })
 
-    /////// USER ////////////////////////////////////////////////////////////////
 
-    .get('/api/user', async function (req, res) {
-        const {offset, limit, search} = req.query
-        const users = await db.getUsers(offset, limit, search)
-        return res.send(users)
-    })
-    .get("/api/user/count", async function (req, res) {
-        const count = await db.getUserCount()
-        return res.send(count)
-    })
-    .get("/api/user/login/:login", async function (req, res) {
-        const {login} = req.params
-        const user = await db.getUserByLogin(login)
-        if (user) {
-            return res.send(user)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/user/userid/:userid", async function (req, res) {
-        const {userid} = req.params
-        if (!userid || isNaN(Number(userid))) {
-            return res.code(500).send({status: "error", msg: "userid error"})
-        }
-        const user = await db.getUserByUserId(userid)
-        if (user) {
-            return res.send(user)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/user/teilnahmen/:userId", async function (req, res) {
-        let userId = req.params.userId
-        log.debug(`--------${userId}-----------`, typeof userId)
-        if (!userId || isNaN(Number(userId))) {
-            return res.code(500).send({status: "error", msg: "userId error"})
-        }
-        const tn = await db.getUserTeilnahmen(userId)
-        if (tn) {
-            return res.send(tn)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
+/////// USER ////////////////////////////////////////////////////////////////
 
-    .post("/api/user", async function (req, res) {
-        const user = req.body
-        const res2 = await libIlias.importIliasUser(user) // TODO import or update if already available
-        return res.send(res2)
-    })
+fastify
+   .get('/api/user', async function (req, res) {
+      const {offset, limit, search} = req.query
+      const users = await db.getUsers(offset, limit, search)
+      return res.send(users)
+   })
+   .get("/api/user/count", async function (req, res) {
+      const count = await db.getUserCount()
+      return res.send(count)
+   })
+   .get("/api/user/login/:login", async function (req, res) {
+      const {login} = req.params
+      const user = await db.getUserByLogin(login)
+      if (user) {
+         return res.send(user)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/user/userid/:userid", async function (req, res) {
+      const {userid} = req.params
+      if (!userid || isNaN(Number(userid))) {
+         return res.code(500).send({status: "error", msg: "userid error"})
+      }
+      const user = await db.getUserByUserId(userid)
+      if (user) {
+         return res.send(user)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/user/teilnahmen/:userId", async function (req, res) {
+      let userId = req.params.userId
+      log.debug(`--------${userId}-----------`, typeof userId)
+      if (!userId || isNaN(Number(userId))) {
+         return res.code(500).send({status: "error", msg: "userId error"})
+      }
+      const tn = await db.getUserTeilnahmen(userId)
+      if (tn) {
+         return res.send(tn)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
 
-    .delete("/api/user/:usr_id", async function (req, res) {
-        const {usr_id} = req.params
-        if (!usr_id || isNaN(Number(usr_id))) {
-            return res.code(500).send({status: "error", msg: "userId error"})
-        } else {
-            const res2 = await libIlias.deleteUser(usr_id)
-            log.info(res2)
-            return res.send(res2)
-        }
-    })
+   .post("/api/user", async function (req, res) {
+      const user = req.body
+      const res2 = await libIlias.importIliasUser(user) // TODO import or update if already available
+      return res.send(res2)
+   })
 
-    /////// ref_id / obj_id  ////////////////////////////////////////////////////////////////
+   .delete("/api/user/:usr_id", async function (req, res) {
+      const {usr_id} = req.params
+      if (!usr_id || isNaN(Number(usr_id))) {
+         return res.code(500).send({status: "error", msg: "userId error"})
+      } else {
+         const res2 = await libIlias.deleteUser(usr_id)
+         log.info(res2)
+         return res.send(res2)
+      }
+   })
 
-    .get("/api/ref_id/:ref_id", async function (req, res) {
-        const {ref_id} = req.params
-        const data = await db.getObjIdFromRefId(ref_id)
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/obj_id/:obj_id", async function (req, res) {
-        const {obj_id} = req.params
-        let data = await db.getRefIdFromObjId(obj_id)
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
+   /////// ref_id / obj_id  ////////////////////////////////////////////////////////////////
 
-    /////// Kurs ////////////////////////////////////////////////////////////////
+   .get("/api/ref_id/:ref_id", async function (req, res) {
+      const {ref_id} = req.params
+      const data = await db.getObjIdFromRefId(ref_id)
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/obj_id/:obj_id", async function (req, res) {
+      const {obj_id} = req.params
+      let data = await db.getRefIdFromObjId(obj_id)
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
 
-    .get("/api/kurs", async function (req, res) {
-        let data = await db.getKurse()
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/kurs/:refId", async function (req, res) {
-        const {refId} = req.params
-        let data = await db.getKurs(refId)
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/kurs/items/:refId", async function (req, res) {
-        const {refId} = req.params
-        let data = await db.getKursItems2(refId)
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/kurs/:refId/teilnehmer", async function (req, res) {
-        const {refId} = req.params
-        let data = await db.getKursTeilnehmer(refId)
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/kurs/:refId/lp", async function (req, res) {
-        const {refId} = req.params
-        const {obj_id: objId} = await db.getObjIdFromRefId(refId)
+   /////// Kurs ////////////////////////////////////////////////////////////////
 
-        const raw = req.query.raw
-        let data = await db.getKursLp(objId, raw)
+   .get("/api/kurs", async function (req, res) {
+      let data = await db.getKurse()
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/kurs/:refId", async function (req, res) {
+      const {refId} = req.params
+      let data = await db.getKurs(refId)
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/kurs/items/:refId", async function (req, res) {
+      const {refId} = req.params
+      let data = await db.getKursItems2(refId)
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/kurs/:refId/teilnehmer", async function (req, res) {
+      const {refId} = req.params
+      let data = await db.getKursTeilnehmer(refId)
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/kurs/:refId/lp", async function (req, res) {
+      const {refId} = req.params
+      const {obj_id: objId} = await db.getObjIdFromRefId(refId)
 
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    .get("/api/kurs/:refId/teilnehmerByRole", async function (req, res) {
-        const {refId} = req.params
-        const {obj_id} = await db.getObjIdFromRefId(refId)
-        let data = await db.getKursTeilnehmerByRole(obj_id)
-        return res.send(data)
-    })
-    .get("/api/kurs/:refId/roles", async function (req, res) {
-        const {refId} = req.params
-        let data = await db.getKursRoles(refId)
-        return res.send(data)
-    })
-    .get("/api/kurs/:refId/teilnehmer/:userId", async function (req, res) {
-        const {refId, userId} = req.params
-        let data = await db.getSingleKursTeilnehmer(refId, userId)
-        if (data) {
-            return res.send(data)
-        } else {
-            return res.code(404).send({status: "error", msg: "not found"})
-        }
-    })
-    // .get("/api/kurs/:refId/teilnehmer/count", async function (req, res) {
-    //    const {refId} = req.params
-    //    let data = await db.getKursTeilnehmerCount(refId)
-    //    if (data) {
-    //       return res.send(data)
-    //    }
-    //    else {
-    //       return res.code(404).send({status: "error", msg: "not found"})
-    //    }
-    // })
+      const raw = req.query.raw
+      let data = await db.getKursLp(objId, raw)
 
-    /** set passed and status for a kurs TN */
-    .post("/api/kurs/:refId/status/:usrId", async function (req, res) {
-        const {refId, usrId} = req.params
-        const {passed, status} = req.body
-        if (!refId || !usrId || _.isNil(passed) || _.isNil(status)) {
-            throw {
-                statusCode: 400,
-                status: "error",
-                msg: "argument error"
-            }
-        }
-        try {
-            const {obj_id: course_id} = await db.getObjIdFromRefId(refId)
-            const data = await setStatus(course_id, usrId, passed, status)
-            return res.send(data)
-        } catch (ex) {
-            console.error(ex)
-            const msg = ex.msg ?? ex.message ?? ex.toString()
-            if (ex.statusCode) {
-                return res.code(ex.statusCode).send({status: "error", msg, statusCode: ex.statusCode})
-            }
-            return res.code(500).send({status: "error", msg})
-        }
-    })
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   .get("/api/kurs/:refId/teilnehmerByRole", async function (req, res) {
+      const {refId} = req.params
+      const {obj_id} = await db.getObjIdFromRefId(refId)
+      let data = await db.getKursTeilnehmerByRole(obj_id)
+      return res.send(data)
+   })
+   .get("/api/kurs/:refId/roles", async function (req, res) {
+      const {refId} = req.params
+      let data = await db.getKursRoles(refId)
+      return res.send(data)
+   })
+   .get("/api/kurs/:refId/teilnehmer/:userId", async function (req, res) {
+      const {refId, userId} = req.params
+      let data = await db.getSingleKursTeilnehmer(refId, userId)
+      if (data) {
+         return res.send(data)
+      } else {
+         return res.code(404).send({status: "error", msg: "not found"})
+      }
+   })
+   // .get("/api/kurs/:refId/teilnehmer/count", async function (req, res) {
+   //    const {refId} = req.params
+   //    let data = await db.getKursTeilnehmerCount(refId)
+   //    if (data) {
+   //       return res.send(data)
+   //    }
+   //    else {
+   //       return res.code(404).send({status: "error", msg: "not found"})
+   //    }
+   // })
 
-    .get("/api/kurs/:refId/offline", async function (req, res) {
-        const refId = Number(req.params.refId)
+   /** set passed and status for a kurs TN */
+   .post("/api/kurs/:refId/status/:usrId", async function (req, res) {
+      const {refId, usrId} = req.params
+      const {passed, status} = req.body
+      if (!refId || !usrId || _.isNil(passed) || _.isNil(status)) {
+         throw {
+            statusCode: 400,
+            status: "error",
+            msg: "argument error"
+         }
+      }
+      try {
+         const {obj_id: course_id} = await db.getObjIdFromRefId(refId)
+         const data = await setStatus(course_id, usrId, passed, status)
+         return res.send(data)
+      } catch (ex) {
+         console.error(ex)
+         const msg = ex.msg ?? ex.message ?? ex.toString()
+         if (ex.statusCode) {
+            return res.code(ex.statusCode).send({status: "error", msg, statusCode: ex.statusCode})
+         }
+         return res.code(500).send({status: "error", msg})
+      }
+   })
 
-        try {
-            const {obj_id} = await db.getObjIdFromRefId(refId)
-            const res2 = await db.getKursOffline(obj_id)
-            return res.send(res2)
-        } catch (err) {
-            console.error(err)
-            log.error(err.message)
-            return res.code(500).send({status: "error", message: err.message})
-        }
-    })
-    .post("/api/kurs/:refId/offline", async function (req, res) {
-        const refId = Number(req.params.refId)
-        const {offline} = req.body
-        // console.dir(req.body, {depth: null, colors: true, maxArrayLength: null})
+   .get("/api/kurs/:refId/offline", async function (req, res) {
+      const refId = Number(req.params.refId)
 
-        try {
-            const {obj_id} = await db.getObjIdFromRefId(refId)
-            const res2 = await db.setKursOffline(offline, obj_id)
-            return res.send(res2)
-        } catch (err) {
-            console.error(err)
-            log.error(err.message)
-            return res.code(500).send({status: "error", message: err.message})
-        }
-    })
+      try {
+         const {obj_id} = await db.getObjIdFromRefId(refId)
+         const res2 = await db.getKursOffline(obj_id)
+         return res.send(res2)
+      } catch (err) {
+         console.error(err)
+         log.error(err.message)
+         return res.code(500).send({status: "error", message: err.message})
+      }
+   })
+   .post("/api/kurs/:refId/offline", async function (req, res) {
+      const refId = Number(req.params.refId)
+      const {offline} = req.body
+      // console.dir(req.body, {depth: null, colors: true, maxArrayLength: null})
 
-    // abmelden
-    .delete("/api/kurs/:refId/teilnehmer/:usrId", async function (req, res) {
-        const {refId, usrId} = req.params
-        if (!refId || !usrId) throw {status: "error", msg: "refId and usrId requried"}
-        try {
-            const {obj_id: course_id} = await db.getObjIdFromRefId(refId)
-            let data = await libIlias.abmelden(usrId, course_id)
-            // let data = await libIlias.deleteTeilnahme(refId, usrId)
-            if (!data) throw {statusCode: 404, message: "Teilnahme not found"}
-            return res.send(data)
-        } catch (ex) {
-            console.error(ex)
-            const msg = ex.msg ?? ex.message ?? ex.toString()
-            if (ex.statusCode) {
-                return res.code(ex.statusCode).send({status: "error", msg})
-            }
-            return res.code(500).send({status: "error", msg})
-        }
-    })
+      try {
+         const {obj_id} = await db.getObjIdFromRefId(refId)
+         const res2 = await db.setKursOffline(offline, obj_id)
+         return res.send(res2)
+      } catch (err) {
+         console.error(err)
+         log.error(err.message)
+         return res.code(500).send({status: "error", message: err.message})
+      }
+   })
+
+   // abmelden
+   .delete("/api/kurs/:refId/teilnehmer/:usrId", async function (req, res) {
+      const {refId, usrId} = req.params
+      if (!refId || !usrId) throw {status: "error", msg: "refId and usrId requried"}
+      try {
+         const {obj_id: course_id} = await db.getObjIdFromRefId(refId)
+         let data = await libIlias.abmelden(usrId, course_id)
+         // let data = await libIlias.deleteTeilnahme(refId, usrId)
+         if (!data) throw {statusCode: 404, message: "Teilnahme not found"}
+         return res.send(data)
+      } catch (ex) {
+         console.error(ex)
+         const msg = ex.msg ?? ex.message ?? ex.toString()
+         if (ex.statusCode) {
+            return res.code(ex.statusCode).send({status: "error", msg})
+         }
+         return res.code(500).send({status: "error", msg})
+      }
+   })
 
 
 /////// STATIC / SPA ////////////////////////////////////////////////////////////////
 
 
 fastify.register(require('@fastify/static'), {
-    root: path.join(__dirname, 'vue/dist'),
-    prefix: '/ui/', // optional: default '/'
+   root: path.join(__dirname, 'vue/dist'),
+   prefix: '/ui/', // optional: default '/'
 
-    // constraints: { host: 'example.com' } // optional: default {}
+   // constraints: { host: 'example.com' } // optional: default {}
 })
 
 const indexFile = fs.readFileSync(path.join(__dirname, "vue/dist", 'index.html'), 'utf8')
 fastify.setNotFoundHandler(function (req, res) {
-    log.error("!!! Not found")
-    // res.sendFile("vue/dist/index.html")
-    res.type("text/html").send(indexFile)
+   log.error("!!! Not found")
+   // res.sendFile("vue/dist/index.html")
+   res.type("text/html").send(indexFile)
 })
 
 
 /////////////////////////////////////////////////////////////////////////
 
 fastify.listen({port: settings.port}, function (err, address) {
-    console.log(address)
-    log.info(`📡 -=> Listening on ${address}`)
-    if (err) {
-        // fastify.log.error(err)
-        log.error(err)
-        process.exit(1)
-    }
-    // Server is now listening on ${address}
+   console.log(address)
+   log.info(`📡 -=> Listening on ${address}`)
+   if (err) {
+      // fastify.log.error(err)
+      log.error(err)
+      process.exit(1)
+   }
+   // Server is now listening on ${address}
 })
 
 /////////////////////////////////////////////////////////////////////////
 
 async function promiseDelay(ms) {
-    return new Promise(resolve => setTimeout(resolve, ms))
+   return new Promise(resolve => setTimeout(resolve, ms))
 }
 
diff --git a/lib/db.js b/lib/db.js
index a9a41a7..5a27371 100644
--- a/lib/db.js
+++ b/lib/db.js
@@ -87,7 +87,7 @@
 }
 
 async function getUsers(offset = 0, limit = 10, search = null) {
-    log.info("++++++++++ get users", offset, limit, search)
+    // log.info("++++++++++ get users", offset, limit, search)
     limit = Number(limit) || 10
     offset = Number(offset) || 0
     // TODO check args for SQL Injection
diff --git a/package.json b/package.json
index e8c2e4e..cd1d485 100644
--- a/package.json
+++ b/package.json
@@ -1,42 +1,43 @@
 {
-  "name": "globus-ilias-rest",
-  "version": "0.1",
-  "private": true,
-  "author": "Alexander Löhr",
-  "description": "REST API for ILIAS used by POPCORN",
-  "main": "app.js",
-  "scripts": {
-    "start": "node app.js",
-    "dev": "nodemon app.js",
-    "dev-ui": "vite",
-    "build": "vite build",
-    "php": "bash copyPhp"
-  },
-  "dependencies": {
-    "@fastify/compress": "^8.0.1",
-    "@fastify/static": "^8.2.0",
-    "@vueuse/core": "^13.3.0",
-    "@vueuse/router": "^13.3.0",
-    "chai": "^5.2.0",
-    "colors": "^1.4.0",
-    "dayjs": "^1.11.13",
-    "dotenv": "^16.5.0",
-    "enquirer": "^2.4.1",
-    "fastify": "^5.3.3",
-    "flexsearch": "^0.8.205",
-    "lodash": "^4.17.21",
-    "mocha": "^11.6.0",
-    "mysql2": "^3.14.1",
-    "nconf": "^0.13.0",
-    "nodemon": "^3.1.10",
-    "stylus": "^0.64.0",
-    "vue": "^3.5.13",
-    "vue-router": "^4.5.1",
-    "yargs": "^15.4.1"
-  },
-  "devDependencies": {
-    "@vitejs/plugin-vue": "^5.2.3",
-    "vite": "^6.2.4",
-    "vite-plugin-vue-devtools": "^7.7.2"
-  }
+   "name": "globus-ilias-rest",
+   "version": "0.1",
+   "private": true,
+   "author": "Alexander Löhr",
+   "description": "REST API for ILIAS used by POPCORN",
+   "main": "app.js",
+   "scripts": {
+      "start": "node app.js",
+      "dev": "nodemon app.js",
+      "dev-ui": "vite",
+      "build": "vite build",
+      "php": "bash copyPhp",
+      "test-connect": "mocha test/testConnect.js"
+   },
+   "dependencies": {
+      "@fastify/compress": "^8.0.1",
+      "@fastify/static": "^8.2.0",
+      "@vueuse/core": "^13.3.0",
+      "@vueuse/router": "^13.3.0",
+      "chai": "^5.2.0",
+      "colors": "^1.4.0",
+      "dayjs": "^1.11.13",
+      "dotenv": "^16.5.0",
+      "enquirer": "^2.4.1",
+      "fastify": "^5.3.3",
+      "flexsearch": "^0.8.205",
+      "lodash": "^4.17.21",
+      "mocha": "^11.6.0",
+      "mysql2": "^3.14.1",
+      "nconf": "^0.13.0",
+      "nodemon": "^3.1.10",
+      "stylus": "^0.64.0",
+      "vue": "^3.5.13",
+      "vue-router": "^4.5.1",
+      "yargs": "^15.4.1"
+   },
+   "devDependencies": {
+      "@vitejs/plugin-vue": "^5.2.3",
+      "vite": "^6.2.4",
+      "vite-plugin-vue-devtools": "^7.7.2"
+   }
 }
diff --git a/settings.default.json b/settings.default.json
index d21f3f7..badd093 100644
--- a/settings.default.json
+++ b/settings.default.json
@@ -1,6 +1,7 @@
 {
    "authtoken": "jiuGfr432898D90290kjfsldkfn3hh8F",
    "port": 4101,
+   "restUrl": "http://localhost:4101",
    "db": {
       "host": "localhost",
       "port": 33009,
diff --git a/test/testConnect.js b/test/testConnect.js
index 0f54a1d..8102de0 100644
--- a/test/testConnect.js
+++ b/test/testConnect.js
@@ -12,6 +12,10 @@
 
 describe("connection test", function () {
 
+   const urlS = settings.ilias.url
+   const urlD = new URL(urlS)
+   const url = urlD.origin
+
 
    beforeEach(async function () {
    })
@@ -21,10 +25,6 @@
 
    describe("the ILIAS URL", function () {
       it("should be accessible", async function () {
-         const urlS = settings.ilias.url
-         const urlD = new URL(urlS)
-         const url = urlD.origin
-
          const res = await fetch(url)
          expect(res.status).to.equal(200)
          expect(res.statusText.toUpperCase()).to.equal("OK")
@@ -33,8 +33,6 @@
          expect(text).to.contain("ILIAS")
       })
       it("should use https", async function () {
-         const urlS = settings.ilias.url
-         const urlD = new URL(urlS)
          expect(urlD.protocol).to.equal("https:")
       })
    })
@@ -74,6 +72,45 @@
       })
    })
 
+   describe("the rest service", function () {
+      it("should be accessible through GET /version", async function () {
+         const urlR = `${settings.restUrl}/api/version`
+         const res = await fetch(urlR)
+         // console.log(res)
+
+         const data = await res.json()
+         // console.log(data)
+         expect(data).to.be.a("object")
+         expect(data).to.have.property("version")
+         expect(data.version).to.be.a("string")
+      })
+      it("should not be accessible without TOKEN", async function () {
+         const urlR = `${settings.restUrl}/api/user?offset=0&limit=1`
+         const res = await fetch(urlR)
+         expect(res.status).to.equal(403)
+      })
+      it("should be accessible with TOKEN", async function () {
+         const urlR = `${settings.restUrl}/api/user?offset=0&limit=1&token=${settings.authtoken}`
+         const res = await fetch(urlR)
+         expect(res.status).to.equal(200)
+         const data = await res.json()
+         // console.log(data)
+
+         expect(data).to.be.a("object")
+         expect(data.total).to.be.a("number").above(0)
+         expect(data.offset).to.equal(0)
+         expect(data.limit).to.equal(1)
+
+         const data2 = data.data
+         expect(data2).to.be.a("array").and.to.be.lengthOf(1)
+
+         const user = data2[0]
+         expect(user.usr_id).to.be.a("number").above(0)
+         expect(user).to.have.property("login")
+         expect(user).to.have.property("firstname")
+         expect(user).to.have.property("lastname")
+      })
+   })
 
 })
 

--
Gitblit v1.8.0