mirror of
https://github.com/IT4Change/Ocelot-Social.git
synced 2025-12-13 07:45:56 +00:00
Query of "publicKey" is now tested unauthenticated and authenticated
This commit is contained in:
parent
e5e1f0a9fc
commit
023c636017
@ -314,6 +314,13 @@ describe('change password', () => {
|
|||||||
describe('do not expose private RSA key', () => {
|
describe('do not expose private RSA key', () => {
|
||||||
let headers
|
let headers
|
||||||
let client
|
let client
|
||||||
|
const queryUserPuplicKey = gql`
|
||||||
|
query($queriedUserSlug: String) {
|
||||||
|
User(slug: $queriedUserSlug) {
|
||||||
|
id
|
||||||
|
publicKey
|
||||||
|
}
|
||||||
|
}`
|
||||||
const queryUserPrivateKey = gql`
|
const queryUserPrivateKey = gql`
|
||||||
query($queriedUserSlug: String) {
|
query($queriedUserSlug: String) {
|
||||||
User(slug: $queriedUserSlug) {
|
User(slug: $queriedUserSlug) {
|
||||||
@ -339,15 +346,28 @@ describe('do not expose private RSA key', () => {
|
|||||||
}`, variables
|
}`, variables
|
||||||
)
|
)
|
||||||
}
|
}
|
||||||
describe('unauthenticated query of "publicKey"', () => {
|
|
||||||
it('returns publicKey', () => {
|
// not authenticate
|
||||||
// check that an RSA key pair has been created at all
|
beforeEach(async () => {
|
||||||
|
client = new GraphQLClient(host)
|
||||||
})
|
})
|
||||||
})
|
|
||||||
|
describe('unauthenticated query of "publicKey" (does the RSA key pair get generated at all?)', () => {
|
||||||
|
it('returns publicKey', async () => {
|
||||||
|
await actionGenUserWithKeys()
|
||||||
|
await expect(
|
||||||
|
await client.request(queryUserPuplicKey, { queriedUserSlug: 'apfel-strudel' })
|
||||||
|
).toEqual(expect.objectContaining({
|
||||||
|
User: [{
|
||||||
|
id: 'bcb2d923-f3af-479e-9f00-61b12e864667',
|
||||||
|
publicKey: expect.any(String)
|
||||||
|
}]
|
||||||
|
}))
|
||||||
|
})
|
||||||
|
})
|
||||||
|
|
||||||
describe('unauthenticated query of "privateKey"', () => {
|
describe('unauthenticated query of "privateKey"', () => {
|
||||||
it('throws "Not Authorised!"', async () => {
|
it('throws "Not Authorised!"', async () => {
|
||||||
client = new GraphQLClient(host)
|
|
||||||
|
|
||||||
await actionGenUserWithKeys()
|
await actionGenUserWithKeys()
|
||||||
await expect(
|
await expect(
|
||||||
client.request(queryUserPrivateKey, { queriedUserSlug: 'apfel-strudel' })
|
client.request(queryUserPrivateKey, { queriedUserSlug: 'apfel-strudel' })
|
||||||
@ -361,25 +381,8 @@ describe('unauthenticated query of "publicKey"', () => {
|
|||||||
client = new GraphQLClient(host, { headers })
|
client = new GraphQLClient(host, { headers })
|
||||||
})
|
})
|
||||||
|
|
||||||
describe('authenticated query of "privateKey"', () => {
|
describe('authenticated query of "publicKey"', () => {
|
||||||
it('throws "Not Authorised!"', async () => {
|
|
||||||
await actionGenUserWithKeys()
|
|
||||||
await expect(
|
|
||||||
client.request(queryUserPrivateKey, { queriedUserSlug: 'apfel-strudel' })
|
|
||||||
).rejects.toThrow('Not Authorised')
|
|
||||||
})
|
|
||||||
})
|
|
||||||
|
|
||||||
describe('unauthenticated query of "publicKey" (does the RSA key pair get generated at all?)', () => {
|
|
||||||
it('returns publicKey', async () => {
|
it('returns publicKey', async () => {
|
||||||
const queryUserPuplicKey = gql`
|
|
||||||
query($queriedUserSlug: String) {
|
|
||||||
User(slug: $queriedUserSlug) {
|
|
||||||
id
|
|
||||||
publicKey
|
|
||||||
}
|
|
||||||
}`
|
|
||||||
|
|
||||||
await actionGenUserWithKeys()
|
await actionGenUserWithKeys()
|
||||||
await expect(
|
await expect(
|
||||||
await client.request(queryUserPuplicKey, { queriedUserSlug: 'apfel-strudel' })
|
await client.request(queryUserPuplicKey, { queriedUserSlug: 'apfel-strudel' })
|
||||||
@ -391,4 +394,13 @@ describe('unauthenticated query of "publicKey"', () => {
|
|||||||
}))
|
}))
|
||||||
})
|
})
|
||||||
})
|
})
|
||||||
|
|
||||||
|
describe('authenticated query of "privateKey"', () => {
|
||||||
|
it('throws "Not Authorised!"', async () => {
|
||||||
|
await actionGenUserWithKeys()
|
||||||
|
await expect(
|
||||||
|
client.request(queryUserPrivateKey, { queriedUserSlug: 'apfel-strudel' })
|
||||||
|
).rejects.toThrow('Not Authorised')
|
||||||
|
})
|
||||||
|
})
|
||||||
})
|
})
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user