IT4Change/Ocelot-Social
3
0
Fork 0
mirror of https://github.com/IT4Change/Ocelot-Social.git synced 2025-12-13 07:45:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Harden permissions spec

Browse Source 
If we expect an error to be thrown, the test should fail if no error was
raised.
This commit is contained in:
Robert Schäfer 2019-02-19 22:55:23 +01:00
parent f703164f1d
commit e6a996e0dd
1 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
src/middleware/permissionsMiddleware.spec.js
View File

@ -33,11 +33,14 @@ describe('authorization', () => {
}
describe('not logged in', async () => {
it('rejects', async () => {
await expect(action(headers)).rejects.toThrow('Not Authorised!')
})
it('does not expose the owner\'s email address', async () => {
try {
try{
await action(headers)
} catch (error) {
expect(error.response.errors[0].message).toEqual('Not Authorised!')
} catch(error) {
expect(error.response.data).toEqual({ User: [ { email: null } ] })
}
})
@ -54,15 +57,21 @@ describe('authorization', () => {
})
describe('as someone else', () => {
it('does not expose the owner\'s email address', async () => {
beforeEach(async () => {
headers = await authenticatedHeaders({
email: 'someone@example.org',
password: 'else'
})
try {
})
it('rejects', async () => {
await expect(action(headers)).rejects.toThrow('Not Authorised!')
})
it('does not expose the owner\'s email address', async () => {
try{
await action(headers)
} catch (error) {
expect(error.response.errors[0].message).toEqual('Not Authorised!')
} catch(error) {
expect(error.response.data).toEqual({ User: [ { email: null } ] })
}
})