feat: init
This commit is contained in:
montaghanmy
@@ -0,0 +1,272 @@
|
||||
import { afterAll, beforeAll, describe, expect, it as _it, it } from "@jest/globals";
|
||||
import { init, TestPlatform } from "../setup";
|
||||
import { TestDbService } from "../utils.prepare.db";
|
||||
import { v1 as uuidv1 } from "uuid";
|
||||
import gr from "../../../src/services/global-resolver";
|
||||
|
||||
export const itRemote = (name: string, cb: (a: any) => void) => {
|
||||
_it(name, async done => {
|
||||
if (gr.services.console.consoleType === "remote") {
|
||||
cb(done);
|
||||
} else {
|
||||
console.warn(`[skipped]: ${name} (console-mode only)`);
|
||||
done();
|
||||
}
|
||||
});
|
||||
};
|
||||
|
||||
describe("The console API auth", () => {
|
||||
const loginUrl = "/internal/services/console/v1/login";
|
||||
const tokenRefreshUrl = "/internal/services/console/v1/token";
|
||||
|
||||
let platform: TestPlatform;
|
||||
|
||||
let testDbService: TestDbService;
|
||||
const companyId = uuidv1();
|
||||
|
||||
const firstEmail = "superman@email.com";
|
||||
|
||||
const firstUserPassword = "superPassw0rd";
|
||||
|
||||
beforeAll(async ends => {
|
||||
platform = await init({
|
||||
services: [
|
||||
"database",
|
||||
"message-queue",
|
||||
"search",
|
||||
"applications",
|
||||
"webserver",
|
||||
"user",
|
||||
"workspaces",
|
||||
"auth",
|
||||
"console",
|
||||
"storage",
|
||||
"counter",
|
||||
"statistics",
|
||||
"platform-services",
|
||||
],
|
||||
});
|
||||
|
||||
await platform.database.getConnector().init();
|
||||
testDbService = await TestDbService.getInstance(platform);
|
||||
await testDbService.createCompany(companyId);
|
||||
const ws0pk = { id: uuidv1(), company_id: companyId };
|
||||
// const ws1pk = { id: uuidv1(), company_id: companyId };
|
||||
await testDbService.createWorkspace(ws0pk);
|
||||
// await testDbService.createWorkspace(ws1pk);
|
||||
await testDbService.createUser([ws0pk], {
|
||||
companyRole: "member",
|
||||
workspaceRole: "moderator",
|
||||
email: firstEmail,
|
||||
firstName: "superman",
|
||||
password: firstUserPassword,
|
||||
});
|
||||
// await testDbService.createUser([ws0pk], "member", "member");
|
||||
// await testDbService.createUser([ws1pk], "member", "member", emailForExistedUser);
|
||||
|
||||
await new Promise(r => setTimeout(r, 1000));
|
||||
|
||||
ends();
|
||||
});
|
||||
|
||||
afterAll(async ends => {
|
||||
await platform.tearDown();
|
||||
ends();
|
||||
});
|
||||
|
||||
describe("Common checks", () => {
|
||||
it("should 400 when required params are missing ", async done => {
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
email: "",
|
||||
password: "",
|
||||
remote_access_token: "",
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(400);
|
||||
expect(response.json()).toMatchObject({
|
||||
statusCode: 400,
|
||||
error: "Bad Request",
|
||||
message: "remote_access_token or email+password are required",
|
||||
});
|
||||
done();
|
||||
});
|
||||
});
|
||||
describe("Auth using token", () => {
|
||||
itRemote("should 403 when token is invalid", async done => {
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
remote_access_token: "12345",
|
||||
},
|
||||
});
|
||||
expect(response.json()).toMatchObject({
|
||||
error: "Forbidden",
|
||||
message: "Bad access token credentials",
|
||||
statusCode: 403,
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
itRemote("should 200 when token is valid", async done => {
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
email: "",
|
||||
password: "",
|
||||
remote_access_token: "a550c8b8b942bd92e447271343ac6b29",
|
||||
},
|
||||
});
|
||||
expect(response.json()).toMatchObject({
|
||||
access_token: {
|
||||
time: expect.any(Number),
|
||||
expiration: expect.any(Number),
|
||||
refresh_expiration: expect.any(Number),
|
||||
value: expect.any(String),
|
||||
refresh: expect.any(String),
|
||||
type: "Bearer",
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
done();
|
||||
});
|
||||
});
|
||||
describe("Auth using email/password", () => {
|
||||
it("should 403 when user doesn't exists", async done => {
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
email: "randomEmail",
|
||||
password: "randomPass",
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
expect(response.json()).toMatchObject({
|
||||
error: "Forbidden",
|
||||
message: "User doesn't exists",
|
||||
statusCode: 403,
|
||||
});
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when password doesn't match", async done => {
|
||||
const user = testDbService.users[0];
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
email: user.email_canonical,
|
||||
password: "randomPass",
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
expect(response.json()).toMatchObject({
|
||||
error: "Forbidden",
|
||||
message: "Password doesn't match",
|
||||
statusCode: 403,
|
||||
});
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when credentials is valid", async done => {
|
||||
const user = testDbService.users[0];
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
email: user.email_canonical,
|
||||
password: firstUserPassword,
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
expect(response.json()).toMatchObject({
|
||||
access_token: {
|
||||
time: expect.any(Number),
|
||||
expiration: expect.any(Number),
|
||||
refresh_expiration: expect.any(Number),
|
||||
value: expect.any(String),
|
||||
refresh: expect.any(String),
|
||||
type: "Bearer",
|
||||
},
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
describe("Token renewal", () => {
|
||||
it("should 200 when refresh from access_token", async done => {
|
||||
const user = testDbService.users[0];
|
||||
|
||||
const firstResponse = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
email: user.email_canonical,
|
||||
password: firstUserPassword,
|
||||
},
|
||||
});
|
||||
|
||||
const firstRes = firstResponse.json().access_token;
|
||||
expect(firstRes.value).toBeTruthy();
|
||||
|
||||
setTimeout(async () => {
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${tokenRefreshUrl}`,
|
||||
headers: {
|
||||
authorization: `Bearer ${firstRes.value}`,
|
||||
},
|
||||
});
|
||||
|
||||
const secondRes = response.json().access_token;
|
||||
|
||||
expect(secondRes.expiration).toBeGreaterThan(firstRes.expiration);
|
||||
expect(secondRes.refresh_expiration).toBeGreaterThan(firstRes.refresh_expiration);
|
||||
|
||||
done();
|
||||
}, 2000);
|
||||
});
|
||||
|
||||
it("should 200 when refresh from refresh_token", async done => {
|
||||
const user = testDbService.users[0];
|
||||
|
||||
const firstResponse = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${loginUrl}`,
|
||||
payload: {
|
||||
email: user.email_canonical,
|
||||
password: firstUserPassword,
|
||||
},
|
||||
});
|
||||
|
||||
const firstRes = firstResponse.json().access_token;
|
||||
expect(firstRes.refresh).toBeTruthy();
|
||||
|
||||
setTimeout(async () => {
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${tokenRefreshUrl}`,
|
||||
headers: {
|
||||
authorization: `Bearer ${firstRes.refresh}`,
|
||||
},
|
||||
});
|
||||
|
||||
const secondRes = response.json().access_token;
|
||||
|
||||
expect(secondRes.expiration).toBeGreaterThan(firstRes.expiration);
|
||||
expect(secondRes.refresh_expiration).toBeGreaterThan(firstRes.refresh_expiration);
|
||||
|
||||
done();
|
||||
}, 2000);
|
||||
});
|
||||
});
|
||||
});
|
||||
Reference in New Issue
Block a user