feat: init
This commit is contained in:
montaghanmy
@@ -0,0 +1,437 @@
|
||||
import { afterAll, beforeAll, describe, expect, it as _it } from "@jest/globals";
|
||||
import { init, TestPlatform } from "../setup";
|
||||
import { TestDbService } from "../utils.prepare.db";
|
||||
import { v1 as uuidv1 } from "uuid";
|
||||
import gr from "../../../src/services/global-resolver";
|
||||
/*
|
||||
THIS TESTS RUNS ONLY FOR THE CONSOLE-MODE (CONSOLE TYPE: INTERNAL)
|
||||
*/
|
||||
|
||||
export const it = (name: string, cb: (a: any) => void) => {
|
||||
_it(name, async done => {
|
||||
if (gr.services.console.consoleType === "internal") {
|
||||
cb(done);
|
||||
} else {
|
||||
console.warn(`[skipped]: ${name} (no-console mode only)`);
|
||||
done();
|
||||
}
|
||||
});
|
||||
};
|
||||
|
||||
describe("The /workspace/pending users API", () => {
|
||||
const url = "/internal/services/workspaces/v1";
|
||||
let platform: TestPlatform;
|
||||
|
||||
let testDbService: TestDbService;
|
||||
|
||||
const nonExistentId = uuidv1();
|
||||
const companyId = uuidv1();
|
||||
|
||||
const firstEmail = "first@test-user.com";
|
||||
const secondEmail = "second@test-user.com";
|
||||
const thirdEmail = "third@test-user.com";
|
||||
const fourthUser = "fourth@test-user.com";
|
||||
const emailForExistedUser = "exist@email.com";
|
||||
|
||||
async function doTheTest() {
|
||||
return Promise.resolve(gr.services.console.consoleType === "remote");
|
||||
}
|
||||
|
||||
beforeAll(async ends => {
|
||||
platform = await init({
|
||||
services: [
|
||||
"user",
|
||||
"database",
|
||||
"message-queue",
|
||||
"webserver",
|
||||
"search",
|
||||
"workspaces",
|
||||
"applications",
|
||||
"auth",
|
||||
"console",
|
||||
"storage",
|
||||
"counter",
|
||||
"statistics",
|
||||
"platform-services",
|
||||
],
|
||||
});
|
||||
|
||||
await platform.database.getConnector().drop();
|
||||
await platform.database.getConnector().init();
|
||||
testDbService = new TestDbService(platform);
|
||||
await testDbService.createCompany(companyId);
|
||||
const ws0pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws1pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws2pk = { id: uuidv1(), company_id: companyId };
|
||||
await testDbService.createWorkspace(ws0pk);
|
||||
await testDbService.createWorkspace(ws1pk);
|
||||
await testDbService.createWorkspace(ws2pk);
|
||||
await testDbService.createUser([ws0pk], { companyRole: "member", workspaceRole: "moderator" });
|
||||
await testDbService.createUser([ws0pk], { companyRole: "member", workspaceRole: "member" });
|
||||
await testDbService.createUser([ws1pk], {
|
||||
companyRole: "member",
|
||||
workspaceRole: "member",
|
||||
email: emailForExistedUser,
|
||||
});
|
||||
await testDbService.createUser([ws2pk], {
|
||||
companyRole: "guest",
|
||||
workspaceRole: "member",
|
||||
email: fourthUser,
|
||||
});
|
||||
|
||||
ends();
|
||||
});
|
||||
|
||||
afterAll(async ends => {
|
||||
await platform.tearDown();
|
||||
ends();
|
||||
});
|
||||
|
||||
describe("Invite users to a workspace by email", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users/invite`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when workspace not found", async done => {
|
||||
const userId = testDbService.users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users/invite`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
invitations: [
|
||||
{
|
||||
email: firstEmail,
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
},
|
||||
],
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when requester is not at least workspace member", async done => {
|
||||
const workspace_id = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspace_id}/users/invite`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
invitations: [
|
||||
{
|
||||
email: firstEmail,
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
},
|
||||
],
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/invite`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
invitations: [
|
||||
{
|
||||
email: firstEmail,
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
},
|
||||
{
|
||||
email: secondEmail,
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
},
|
||||
{
|
||||
email: "exist@email.com",
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
},
|
||||
],
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resources = response.json()["resources"];
|
||||
|
||||
expect(resources.length).toBe(3);
|
||||
|
||||
for (const item of resources) {
|
||||
expect(item).toMatchObject({
|
||||
email: expect.stringMatching(/first@test-user.com|second@test-user.com|exist@email.com/),
|
||||
status: "ok",
|
||||
});
|
||||
}
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should fail in response with already added users", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/invite`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
invitations: [
|
||||
{
|
||||
email: firstEmail,
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
},
|
||||
{
|
||||
email: thirdEmail,
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
},
|
||||
],
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resources = response.json()["resources"];
|
||||
|
||||
expect(resources.length).toBe(2);
|
||||
|
||||
expect(resources[0]).toMatchObject({
|
||||
email: "first@test-user.com",
|
||||
status: "error",
|
||||
});
|
||||
|
||||
expect(resources[1]).toMatchObject({
|
||||
email: "third@test-user.com",
|
||||
status: "ok",
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("Delete a pending user from a workspace", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/pending/${email}`,
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when workspace not found", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const userId = testDbService.users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/pending/${email}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when requester is not at least workspace member", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[0].id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/pending/${email}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should {status:error} when email is absent in pending list", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/pending/non-exist-email`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
expect(response.json()).toMatchObject({
|
||||
status: "error",
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/pending/${email}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
expect(response.json()).toMatchObject({
|
||||
status: "success",
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("Get list of pending users in workspace", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/pending`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when workspace not found", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const userId = testDbService.users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/pending`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when requester is not at least workspace member", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[0].id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/pending`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/pending`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resources = response.json()["resources"];
|
||||
console.log("resources A: ", resources);
|
||||
expect(resources.length).toBe(2);
|
||||
|
||||
expect(resources[0]).toMatchObject({
|
||||
email: "second@test-user.com",
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
});
|
||||
|
||||
expect(resources[1]).toMatchObject({
|
||||
email: "third@test-user.com",
|
||||
role: "member",
|
||||
company_role: "member",
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("existed user should be added instantly", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const email = "first@test-user.com";
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resources = response.json()["resources"];
|
||||
|
||||
console.log("resources B: ", resources);
|
||||
expect(resources.find((a: any) => a.user.email === emailForExistedUser)).toBeDefined();
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,469 @@
|
||||
import { afterAll, beforeAll, describe, expect, it } from "@jest/globals";
|
||||
import { init, TestPlatform } from "../setup";
|
||||
import { TestDbService, uuid } from "../utils.prepare.db";
|
||||
import { v1 as uuidv1 } from "uuid";
|
||||
|
||||
describe("The /workspace users API", () => {
|
||||
const url = "/internal/services/workspaces/v1";
|
||||
let platform: TestPlatform;
|
||||
|
||||
let testDbService: TestDbService;
|
||||
|
||||
const nonExistentId = uuidv1();
|
||||
let companyId = "";
|
||||
|
||||
const checkUserObject = (resource: any) => {
|
||||
expect(resource).toMatchObject({
|
||||
id: expect.any(String),
|
||||
company_id: expect.any(String),
|
||||
workspace_id: expect.any(String),
|
||||
user_id: expect.any(String),
|
||||
created_at: expect.any(Number),
|
||||
role: expect.stringMatching(/moderator|member/),
|
||||
user: {
|
||||
id: expect.any(String),
|
||||
provider: expect.any(String),
|
||||
provider_id: expect.any(String),
|
||||
email: expect.any(String),
|
||||
is_verified: expect.any(Boolean),
|
||||
picture: expect.any(String),
|
||||
first_name: expect.any(String),
|
||||
last_name: expect.any(String),
|
||||
created_at: expect.any(Number),
|
||||
deleted: expect.any(Boolean),
|
||||
status: expect.any(String),
|
||||
last_activity: expect.any(Number),
|
||||
},
|
||||
});
|
||||
};
|
||||
|
||||
beforeAll(async ends => {
|
||||
platform = await init({
|
||||
services: [
|
||||
"database",
|
||||
"message-queue",
|
||||
"search",
|
||||
"webserver",
|
||||
"user",
|
||||
"workspaces",
|
||||
"applications",
|
||||
"auth",
|
||||
"console",
|
||||
"counter",
|
||||
"storage",
|
||||
"statistics",
|
||||
"platform-services",
|
||||
],
|
||||
});
|
||||
|
||||
companyId = platform.workspace.company_id;
|
||||
|
||||
await platform.database.getConnector().init();
|
||||
testDbService = new TestDbService(platform);
|
||||
await testDbService.createCompany(companyId);
|
||||
const ws0pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws1pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws2pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws3pk = { id: uuidv1(), company_id: companyId };
|
||||
await testDbService.createWorkspace(ws0pk);
|
||||
await testDbService.createWorkspace(ws1pk);
|
||||
await testDbService.createWorkspace(ws2pk);
|
||||
await testDbService.createWorkspace(ws3pk);
|
||||
await testDbService.createUser([ws0pk, ws1pk]);
|
||||
await testDbService.createUser([ws2pk], { companyRole: "admin" });
|
||||
await testDbService.createUser([ws2pk], { workspaceRole: "moderator" });
|
||||
await testDbService.createUser([ws2pk], { workspaceRole: "member" });
|
||||
await testDbService.createUser([ws2pk], { workspaceRole: "member" });
|
||||
await testDbService.createUser([], { companyRole: "member" });
|
||||
await testDbService.createUser([ws3pk], { companyRole: "guest", workspaceRole: "member" });
|
||||
ends();
|
||||
});
|
||||
|
||||
afterAll(async ends => {
|
||||
await platform.tearDown();
|
||||
ends();
|
||||
});
|
||||
|
||||
describe("The GET /workspaces/users route", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when workspace not found", async done => {
|
||||
const userId = testDbService.users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resources = response.json()["resources"];
|
||||
|
||||
expect(resources.length).toBeGreaterThan(0);
|
||||
|
||||
for (const resource of resources) {
|
||||
checkUserObject(resource);
|
||||
}
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("The GET /workspaces/users/:user_id route", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const userId = testDbService.users[0].id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users/${userId}`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when workspace not found", async done => {
|
||||
const userId = testDbService.users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users/${userId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/${userId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
checkUserObject(resource);
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("The POST /workspaces/users route (add)", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 user is not workspace moderator", async done => {
|
||||
const userId = testDbService.users[0].id;
|
||||
const anotherUserId = testDbService.users[1].id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
user_id: anotherUserId,
|
||||
role: "moderator",
|
||||
},
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 400 when requested user not in company", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
user_id: nonExistentId,
|
||||
role: "moderator",
|
||||
},
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(400);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 201 when requested already in workspace (ignore)", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
user_id: userId,
|
||||
role: "moderator",
|
||||
},
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(201);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id;
|
||||
const anotherUserId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
let workspaceUsersCount = await testDbService.getWorkspaceUsersCountFromDb(workspaceId);
|
||||
let companyUsersCount = await testDbService.getCompanyUsersCountFromDb(companyId);
|
||||
|
||||
console.log(testDbService.workspaces[2].users);
|
||||
console.log(workspaceUsersCount);
|
||||
|
||||
expect(workspaceUsersCount).toBe(4);
|
||||
// expect(companyUsersCount).toBe(6);
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
user_id: anotherUserId,
|
||||
role: "moderator",
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(201);
|
||||
const resource = response.json()["resource"];
|
||||
checkUserObject(resource);
|
||||
|
||||
workspaceUsersCount = await testDbService.getWorkspaceUsersCountFromDb(workspaceId);
|
||||
companyUsersCount = await testDbService.getCompanyUsersCountFromDb(companyId);
|
||||
expect(workspaceUsersCount).toBe(5);
|
||||
// expect(companyUsersCount).toBe(6);
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("The POST /workspaces/users/:user_id route (update)", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const userId = testDbService.users[0].id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users/${userId}`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 user is not workspace moderator", async done => {
|
||||
const userId = testDbService.users[0].id;
|
||||
const anotherUserId = testDbService.users[1].id;
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/${userId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
user_id: anotherUserId,
|
||||
role: "moderator",
|
||||
},
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when user not found in workspace", async done => {
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id;
|
||||
const anotherWorkspaceUserId = testDbService.workspaces[3].users[0].id;
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/${anotherWorkspaceUserId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
role: "moderator",
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id;
|
||||
const anotherUserId = testDbService.workspaces[2].users[2].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/${anotherUserId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
role: "moderator",
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(201);
|
||||
const resource = response.json()["resource"];
|
||||
checkUserObject(resource);
|
||||
|
||||
expect(resource["role"]).toBe("moderator");
|
||||
|
||||
const usersCount = await testDbService.getWorkspaceUsersCountFromDb(workspaceId);
|
||||
expect(usersCount).toBe(5);
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("The DELETE /workspaces/users/:user_id route", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const anotherUserId = testDbService.users[1].id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}/users/${anotherUserId}`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 user is not workspace moderator", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[3].id;
|
||||
const anotherUserId = testDbService.workspaces[2].users[1].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/${anotherUserId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
console.log(response.body);
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when user not found in workspace", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/${nonExistentId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(404);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when ok", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id;
|
||||
const anotherUserId = testDbService.workspaces[2].users[2].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
let response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/${anotherUserId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(204);
|
||||
|
||||
response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
const resources = response.json()["resources"];
|
||||
expect(resources.find((a: { user_id: uuid }) => a.user_id === anotherUserId)).toBeUndefined();
|
||||
|
||||
const usersCount = await testDbService.getWorkspaceUsersCountFromDb(workspaceId);
|
||||
expect(usersCount).toBe(4);
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,521 @@
|
||||
import { afterAll, beforeAll, describe, expect, it } from "@jest/globals";
|
||||
import { init, TestPlatform } from "../setup";
|
||||
import { TestDbService } from "../utils.prepare.db";
|
||||
import { v1 as uuidv1 } from "uuid";
|
||||
import AuthService from "../../../src/core/platform/services/auth/provider";
|
||||
import { InviteTokenObject } from "../../../src/services/workspaces/web/types";
|
||||
import gr from "../../../src/services/global-resolver";
|
||||
|
||||
describe("The /workspaces API (invite tokens)", () => {
|
||||
const url = "/internal/services/workspaces/v1";
|
||||
let platform: TestPlatform;
|
||||
|
||||
let testDbService: TestDbService;
|
||||
let authServiceApi: AuthService;
|
||||
|
||||
let companyId = uuidv1();
|
||||
|
||||
const startup = async () => {
|
||||
platform = await init({
|
||||
services: [
|
||||
"database",
|
||||
"message-queue",
|
||||
"webserver",
|
||||
"user",
|
||||
"search",
|
||||
"workspaces",
|
||||
"auth",
|
||||
"console",
|
||||
"counter",
|
||||
"storage",
|
||||
"applications",
|
||||
"statistics",
|
||||
"platform-services",
|
||||
],
|
||||
});
|
||||
|
||||
companyId = platform.workspace.company_id;
|
||||
|
||||
await platform.platform.getProvider<AuthService>("auth");
|
||||
testDbService = new TestDbService(platform);
|
||||
await resetDatabase();
|
||||
};
|
||||
|
||||
const shutdown = async () => {
|
||||
await platform.tearDown();
|
||||
};
|
||||
|
||||
const resetDatabase = async () => {
|
||||
// await platform.database.getConnector().init();
|
||||
await platform.database.getConnector().drop();
|
||||
await testDbService.createCompany(companyId, "TestJoinCompany");
|
||||
const ws0pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws1pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws2pk = { id: uuidv1(), company_id: companyId };
|
||||
await testDbService.createWorkspace(ws0pk, "FirstWorkspace");
|
||||
await testDbService.createWorkspace(ws1pk, "SecondWorkspace");
|
||||
await testDbService.createWorkspace(ws2pk, "ThirdWorkspace");
|
||||
await testDbService.createUser([ws0pk, ws1pk]);
|
||||
await testDbService.createUser([ws2pk], { companyRole: "admin" });
|
||||
await testDbService.createUser([ws2pk], { companyRole: undefined, workspaceRole: "moderator" });
|
||||
await testDbService.createUser([], { companyRole: "guest" });
|
||||
};
|
||||
|
||||
const decodeToken = (token: string): InviteTokenObject => {
|
||||
return gr.services.workspaces.decodeInviteToken(token);
|
||||
};
|
||||
|
||||
describe("The GET /tokens/ route", () => {
|
||||
beforeAll(startup);
|
||||
afterAll(shutdown);
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when user is not a workspace member", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userIdFromAnotherWorkspace = platform.currentUser.id;
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userIdFromAnotherWorkspace });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when token doesn't exists yet", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(404);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when user is a workspace member", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
await gr.services.workspaces.createInviteToken(companyId, workspaceId, userId);
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
expect(response.json()).toMatchObject({
|
||||
resources: [
|
||||
{
|
||||
token: expect.any(String),
|
||||
},
|
||||
],
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("The POST /tokens/ route", () => {
|
||||
beforeAll(startup);
|
||||
afterAll(shutdown);
|
||||
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when user is not a workspace member", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userIdFromAnotherWorkspace = platform.currentUser.id;
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userIdFromAnotherWorkspace });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
channels: ["test"],
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when user is a workspace member", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const companyId = testDbService.company.id;
|
||||
const channel = await testDbService.createChannel(userId);
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const beforeResponse = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(beforeResponse.statusCode).toBe(404);
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
channels: [channel.id],
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
expect(response.json()).toMatchObject({
|
||||
resource: {
|
||||
token: expect.any(String),
|
||||
},
|
||||
});
|
||||
|
||||
const createToken = decodeToken(response.json().resource.token);
|
||||
|
||||
const afterResponse = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(afterResponse.statusCode).toBe(200);
|
||||
|
||||
expect(afterResponse.json()).toMatchObject({
|
||||
resources: [
|
||||
{
|
||||
token: expect.any(String),
|
||||
},
|
||||
],
|
||||
});
|
||||
|
||||
const getToken = decodeToken(afterResponse.json().resources[0].token);
|
||||
|
||||
expect(createToken.t).toEqual(getToken.t);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when when recreate token", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const companyId = testDbService.company.id;
|
||||
const channel = await testDbService.createChannel(userId);
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const beforeResponse = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(beforeResponse.statusCode).toBe(200);
|
||||
|
||||
const beforeResponseResource = beforeResponse.json()["resources"][0];
|
||||
|
||||
expect(beforeResponseResource).toMatchObject({
|
||||
token: expect.any(String),
|
||||
});
|
||||
|
||||
const beforeResponseToken = decodeToken(beforeResponseResource.token).t;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
channels: [channel.id],
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const responseResource = response.json()["resource"];
|
||||
|
||||
expect(responseResource).toMatchObject({
|
||||
token: expect.any(String),
|
||||
});
|
||||
|
||||
const responseToken = decodeToken(responseResource.token).t;
|
||||
|
||||
expect(responseToken).not.toEqual(beforeResponseToken);
|
||||
|
||||
const afterResponse = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(afterResponse.statusCode).toBe(200);
|
||||
|
||||
const afterResponseResource = afterResponse.json()["resources"][0];
|
||||
|
||||
expect(afterResponseResource).toMatchObject({
|
||||
token: expect.any(String),
|
||||
});
|
||||
|
||||
const afterResponseToken = decodeToken(afterResponseResource.token).t;
|
||||
|
||||
expect(responseToken).toEqual(afterResponseToken);
|
||||
expect(afterResponseToken).not.toEqual(beforeResponseToken);
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("The DELETE /tokens/ route", () => {
|
||||
beforeAll(startup);
|
||||
afterAll(shutdown);
|
||||
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens/fake1-${new Date().getTime()}`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when user is not a workspace member", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userIdFromAnotherWorkspace = platform.currentUser.id;
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userIdFromAnotherWorkspace });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens/fake2-${new Date().getTime()}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {},
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 204 when user is a workspace member", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
await gr.services.workspaces.createInviteToken(companyId, workspaceId, userId);
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const beforeResponse = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(beforeResponse.statusCode).toBe(200);
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens/${
|
||||
beforeResponse.json().resources[0].token
|
||||
}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(204);
|
||||
|
||||
const afterResponse = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(afterResponse.statusCode).toBe(404);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when deleting token that doesn't exists", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}/users/tokens/fake3-${new Date().getTime()}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {},
|
||||
});
|
||||
expect(response.statusCode).toBe(404);
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("Join workspace using token", () => {
|
||||
let workspaceId;
|
||||
let userId;
|
||||
let companyId;
|
||||
let inviteToken;
|
||||
|
||||
beforeAll(async () => {
|
||||
await startup();
|
||||
companyId = testDbService.company.id;
|
||||
workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
userId = testDbService.workspaces[2].users[0].id;
|
||||
inviteToken = await gr.services.workspaces.createInviteToken(companyId, workspaceId, userId);
|
||||
});
|
||||
afterAll(shutdown);
|
||||
|
||||
it("should 404 when when token not found", async done => {
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/join`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
join: false,
|
||||
token: "SOME FAKE TOKEN",
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when user is not authorized", async done => {
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/join`,
|
||||
// headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
join: false,
|
||||
token: inviteToken.token,
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
company: {
|
||||
name: "TestJoinCompany",
|
||||
},
|
||||
workspace: {
|
||||
name: "FirstWorkspace",
|
||||
},
|
||||
auth_required: true,
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when user is authorized and not joining", async done => {
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/join`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
join: false,
|
||||
token: inviteToken.token,
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
company: {
|
||||
name: "TestJoinCompany",
|
||||
},
|
||||
workspace: {
|
||||
name: "FirstWorkspace",
|
||||
},
|
||||
auth_required: false,
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when user is authorized and joining", async done => {
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/join`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
join: true,
|
||||
token: inviteToken.token,
|
||||
},
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
company: {
|
||||
id: companyId,
|
||||
name: "TestJoinCompany",
|
||||
},
|
||||
workspace: {
|
||||
id: workspaceId,
|
||||
name: "FirstWorkspace",
|
||||
},
|
||||
auth_required: false,
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,513 @@
|
||||
import { afterAll, beforeAll, describe, expect, it } from "@jest/globals";
|
||||
import { init, TestPlatform } from "../setup";
|
||||
import { TestDbService } from "../utils.prepare.db";
|
||||
import { v1 as uuidv1 } from "uuid";
|
||||
|
||||
describe("The /workspaces API", () => {
|
||||
const url = "/internal/services/workspaces/v1";
|
||||
let platform: TestPlatform;
|
||||
|
||||
let testDbService: TestDbService;
|
||||
|
||||
const nonExistentId = uuidv1();
|
||||
let companyId = "";
|
||||
|
||||
beforeAll(async ends => {
|
||||
platform = await init({
|
||||
services: [
|
||||
"database",
|
||||
"message-queue",
|
||||
"webserver",
|
||||
"user",
|
||||
"search",
|
||||
"workspaces",
|
||||
"auth",
|
||||
"console",
|
||||
"counter",
|
||||
"storage",
|
||||
"applications",
|
||||
"statistics",
|
||||
"platform-services",
|
||||
],
|
||||
});
|
||||
|
||||
companyId = platform.workspace.company_id;
|
||||
|
||||
await platform.database.getConnector().init();
|
||||
testDbService = new TestDbService(platform);
|
||||
await testDbService.createCompany(companyId);
|
||||
const ws0pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws1pk = { id: uuidv1(), company_id: companyId };
|
||||
const ws2pk = { id: uuidv1(), company_id: companyId };
|
||||
await testDbService.createWorkspace(ws0pk);
|
||||
await testDbService.createWorkspace(ws1pk);
|
||||
await testDbService.createWorkspace(ws2pk);
|
||||
await testDbService.createUser([ws0pk, ws1pk]);
|
||||
await testDbService.createUser([ws2pk], { companyRole: "admin" });
|
||||
await testDbService.createUser([ws2pk], { companyRole: undefined, workspaceRole: "moderator" });
|
||||
await testDbService.createUser([], { companyRole: "guest" });
|
||||
ends();
|
||||
});
|
||||
|
||||
afterAll(async ends => {
|
||||
await platform.tearDown();
|
||||
ends();
|
||||
});
|
||||
|
||||
describe("The GET /workspaces/ route", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${nonExistentId}/workspaces`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when company not found", async done => {
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${nonExistentId}/workspaces`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when company belongs to user", async done => {
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const companyId = testDbService.company.id;
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resources = response.json()["resources"];
|
||||
|
||||
expect(resources.length).toBe(2);
|
||||
|
||||
for (const resource of resources) {
|
||||
expect(resource).toMatchObject({
|
||||
id: expect.any(String),
|
||||
company_id: expect.any(String),
|
||||
name: expect.any(String),
|
||||
logo: expect.any(String),
|
||||
default: expect.any(Boolean),
|
||||
archived: expect.any(Boolean),
|
||||
role: expect.stringMatching(/moderator|member/),
|
||||
});
|
||||
|
||||
if (resource.stats) {
|
||||
expect(resource.stats).toMatchObject({
|
||||
created_at: expect.any(Number),
|
||||
total_members: 1,
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
describe("The GET /workspaces/:workspace_id route", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${nonExistentId}/workspaces/${workspaceId}`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 404 when workspace not found", async done => {
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${uuidv1()}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(404);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when user not belong to workspace and not company_admin", async done => {
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userIdFromAnotherWorkspace = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userIdFromAnotherWorkspace });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
expect(response.json()).toEqual({
|
||||
error: "Forbidden",
|
||||
message: `You are not belong to workspace ${workspaceId}`,
|
||||
statusCode: 403,
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when user is company_admin", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userIdFromAnotherWorkspace = testDbService.workspaces[2].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userIdFromAnotherWorkspace });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
id: expect.any(String),
|
||||
company_id: expect.any(String),
|
||||
name: expect.any(String),
|
||||
logo: expect.any(String),
|
||||
default: expect.any(Boolean),
|
||||
archived: expect.any(Boolean),
|
||||
});
|
||||
|
||||
if (resource.stats) {
|
||||
expect(resource.stats).toMatchObject({
|
||||
created_at: expect.any(Number),
|
||||
total_members: 1,
|
||||
});
|
||||
}
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when user is belong to workspace", async done => {
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
const userIdFromThisWorkspace = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userIdFromThisWorkspace });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
id: expect.any(String),
|
||||
company_id: expect.any(String),
|
||||
name: expect.any(String),
|
||||
logo: expect.any(String),
|
||||
default: expect.any(Boolean),
|
||||
archived: expect.any(Boolean),
|
||||
role: expect.stringMatching(/moderator|member/),
|
||||
});
|
||||
|
||||
if (resource.stats) {
|
||||
expect(resource.stats).toMatchObject({
|
||||
created_at: expect.any(Number),
|
||||
total_members: 1,
|
||||
});
|
||||
}
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
// create
|
||||
|
||||
describe("The POST /workspaces route (creating workspace)", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when user is not (company member or company admin) ", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const userId = testDbService.users[3].id;
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
name: "Some channel name",
|
||||
logo: "",
|
||||
default: false,
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 201 when workspace created well", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const userId = testDbService.users[0].id;
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
name: "Random channel name",
|
||||
logo: "logo",
|
||||
default: false,
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(201);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
id: expect.any(String),
|
||||
company_id: expect.any(String),
|
||||
name: expect.any(String),
|
||||
logo: expect.any(String),
|
||||
default: expect.any(Boolean),
|
||||
archived: expect.any(Boolean),
|
||||
role: expect.stringMatching(/moderator/),
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
// update
|
||||
|
||||
describe("The POST /workspaces/:workspace_id route (updating workspace)", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}`,
|
||||
payload: { resource: {} },
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when not workspace not found", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: { resource: {} },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when not belong to workspace", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[1].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: { resource: {} },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when not workspace moderator", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[1].workspace.id;
|
||||
const userId = testDbService.workspaces[0].users[0].id;
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: { resource: {} },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when admin of company (full update)", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[0].id; // company owner
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
name: "Another workspace name",
|
||||
logo: "logo",
|
||||
default: false,
|
||||
archived: false,
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
id: workspaceId,
|
||||
company_id: companyId,
|
||||
name: "Another workspace name",
|
||||
logo: expect.any(String),
|
||||
default: false,
|
||||
archived: false,
|
||||
role: "moderator", //Company admin is a moderator
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 200 when moderator of workspace (partial update)", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[1].id; // workspace admin
|
||||
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "POST",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
payload: {
|
||||
resource: {
|
||||
name: "My awesome workspace",
|
||||
default: true,
|
||||
logo: "",
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
|
||||
const resource = response.json()["resource"];
|
||||
|
||||
expect(resource).toMatchObject({
|
||||
id: workspaceId,
|
||||
company_id: companyId,
|
||||
name: "My awesome workspace",
|
||||
logo: expect.any(String),
|
||||
default: true,
|
||||
archived: false,
|
||||
role: "moderator",
|
||||
});
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
|
||||
// delete
|
||||
|
||||
describe("The DELETE /workspaces route", () => {
|
||||
it("should 401 when not authenticated", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${nonExistentId}`,
|
||||
});
|
||||
expect(response.statusCode).toBe(401);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 403 when user is not (company member or company admin) ", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const userId = testDbService.users[3].id;
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
const workspaceId = testDbService.workspaces[0].workspace.id;
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
done();
|
||||
});
|
||||
|
||||
it("should 204 when workspace deleted", async done => {
|
||||
const companyId = testDbService.company.id;
|
||||
const workspaceId = testDbService.workspaces[2].workspace.id;
|
||||
const userId = testDbService.workspaces[2].users[0].id;
|
||||
const jwtToken = await platform.auth.getJWTToken({ sub: userId });
|
||||
|
||||
const response = await platform.app.inject({
|
||||
method: "DELETE",
|
||||
url: `${url}/companies/${companyId}/workspaces/${workspaceId}`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(204);
|
||||
|
||||
const checkResponse = await platform.app.inject({
|
||||
method: "GET",
|
||||
url: `${url}/companies/${companyId}/workspaces`,
|
||||
headers: { authorization: `Bearer ${jwtToken}` },
|
||||
});
|
||||
|
||||
const checkResponseJson = checkResponse.json();
|
||||
|
||||
expect(checkResponseJson.resources.find((a: any) => a.id === workspaceId)).toBe(undefined);
|
||||
|
||||
done();
|
||||
});
|
||||
});
|
||||
});
|
||||
Reference in New Issue
Block a user