fix: close browser session lifecycle gaps

2026-09-08 11:12:12 +08:00
parent 8fa006344d
commit ba45382747
12 changed files with 149 additions and 11 deletions
@@ -53,4 +53,21 @@ describe("HTTP API", () => {
    expect(busy.statusCode).toBe(409);
    expect(busy.body).not.toContain("stack");
  });
+
+  it("keeps Fastify body parse errors as safe client errors", async () => {
+    const { app } = createTestApp();
+    apps.push(app);
+    const response = await app.inject({
+      method: "POST",
+      url: "/api/sessions",
+      headers: { "content-type": "application/json" },
+      payload: "",
+    });
+
+    expect(response.statusCode).toBe(400);
+    expect(response.json()).toMatchObject({
+      error: { code: "INVALID_REQUEST_BODY", message: "Request body could not be processed" },
+    });
+    expect(response.body).not.toContain("stack");
+  });
 });