test(github-copilot): mock guarded device flow fetch

steipete · steipete · commit ff73e14638e9 · 2026-05-16T14:23:26.000+01:00
diff --git a/extensions/github-copilot/index.test.ts b/extensions/github-copilot/index.test.ts
@@ -18,6 +18,7 @@ import { afterAll, afterEach, describe, expect, it, vi } from "vitest";
 const mocks = vi.hoisted(() => ({
   githubCopilotLoginCommand: vi.fn(),
   resolveCopilotApiToken: vi.fn(),
+  fetchWithSsrFGuard: vi.fn(),
 }));
 
 vi.mock("./register.runtime.js", () => ({
@@ -27,6 +28,11 @@ vi.mock("./register.runtime.js", () => ({
   fetchCopilotUsage: vi.fn(),
 }));
 
+vi.mock("openclaw/plugin-sdk/ssrf-runtime", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("openclaw/plugin-sdk/ssrf-runtime")>()),
+  fetchWithSsrFGuard: mocks.fetchWithSsrFGuard,
+}));
+
 import plugin from "./index.js";
 
 const tempDirs: string[] = [];
@@ -313,36 +319,33 @@ describe("github-copilot plugin", () => {
         },
       }),
     );
-    const fetchMock = vi.fn(async (input: unknown) => {
-      const target =
-        typeof input === "string"
-          ? input
-          : input instanceof URL
-            ? input.toString()
-            : input instanceof Request
-              ? input.url
-              : String(input);
-      if (target === "https://github.com/login/device/code") {
-        return new Response(
-          JSON.stringify({
-            device_code: "device-code-stub",
-            user_code: "ABCD-1234",
-            verification_uri: "https://github.com/login/device",
-            expires_in: 900,
-            interval: 0,
-          }),
-          { status: 200, headers: { "Content-Type": "application/json" } },
-        );
+    mocks.fetchWithSsrFGuard.mockImplementation(async ({ url }: { url: string }) => {
+      if (url === "https://github.com/login/device/code") {
+        return {
+          response: new Response(
+            JSON.stringify({
+              device_code: "device-code-stub",
+              user_code: "ABCD-1234",
+              verification_uri: "https://github.com/login/device",
+              expires_in: 900,
+              interval: 0,
+            }),
+            { status: 200, headers: { "Content-Type": "application/json" } },
+          ),
+          release: vi.fn(async () => {}),
+        };
       }
-      if (target === "https://github.com/login/oauth/access_token") {
-        return new Response(
-          JSON.stringify({ access_token: "refreshed-token", token_type: "bearer" }),
-          { status: 200, headers: { "Content-Type": "application/json" } },
-        );
+      if (url === "https://github.com/login/oauth/access_token") {
+        return {
+          response: new Response(
+            JSON.stringify({ access_token: "refreshed-token", token_type: "bearer" }),
+            { status: 200, headers: { "Content-Type": "application/json" } },
+          ),
+          release: vi.fn(async () => {}),
+        };
       }
-      throw new Error(`unexpected fetch in github-copilot refresh test: ${target}`);
+      throw new Error(`unexpected fetch in github-copilot refresh test: ${url}`);
     });
-    vi.stubGlobal("fetch", fetchMock);
     const prompter = {
       confirm: vi.fn(async () => true),
       note: vi.fn(),
