mirror of
https://github.com/IT4Change/Ocelot-Social.git
synced 2025-12-13 07:45:56 +00:00
207 lines
5.0 KiB
JavaScript
207 lines
5.0 KiB
JavaScript
import Factory from './seed/factories'
|
|
import { GraphQLClient, request } from 'graphql-request'
|
|
import jwt from 'jsonwebtoken'
|
|
import { host, login } from './jest/helpers'
|
|
|
|
const factory = Factory()
|
|
|
|
beforeEach(async () => {
|
|
await factory.create('User', {
|
|
email: 'test@example.org',
|
|
password: '1234'
|
|
})
|
|
})
|
|
|
|
afterEach(async () => {
|
|
await factory.cleanDatabase()
|
|
})
|
|
|
|
describe('isLoggedIn', () => {
|
|
describe('unauthenticated', () => {
|
|
it('returns false', async () => {
|
|
const query = '{ isLoggedIn }'
|
|
await expect(request(host, query)).resolves.toEqual({
|
|
isLoggedIn: false
|
|
})
|
|
})
|
|
})
|
|
})
|
|
|
|
describe('login', () => {
|
|
const mutation = params => {
|
|
const { email, password } = params
|
|
return `
|
|
mutation {
|
|
login(email:"${email}", password:"${password}"){
|
|
token
|
|
}
|
|
}`
|
|
}
|
|
|
|
describe('ask for a `token`', () => {
|
|
describe('with valid email/password combination', () => {
|
|
it('responds with a JWT token', async () => {
|
|
const data = await request(
|
|
host,
|
|
mutation({
|
|
email: 'test@example.org',
|
|
password: '1234'
|
|
})
|
|
)
|
|
const { token } = data.login
|
|
jwt.verify(token, process.env.JWT_SECRET, (err, data) => {
|
|
expect(data.email).toEqual('test@example.org')
|
|
expect(err).toBeNull()
|
|
})
|
|
})
|
|
})
|
|
|
|
describe('with a valid email but incorrect password', () => {
|
|
it('responds with "Incorrect email address or password."', async () => {
|
|
await expect(
|
|
request(
|
|
host,
|
|
mutation({
|
|
email: 'test@example.org',
|
|
password: 'wrong'
|
|
})
|
|
)
|
|
).rejects.toThrow('Incorrect email address or password.')
|
|
})
|
|
})
|
|
|
|
describe('with a non-existing email', () => {
|
|
it('responds with "Incorrect email address or password."', async () => {
|
|
await expect(
|
|
request(
|
|
host,
|
|
mutation({
|
|
email: 'non-existent@example.org',
|
|
password: 'wrong'
|
|
})
|
|
)
|
|
).rejects.toThrow('Incorrect email address or password.')
|
|
})
|
|
})
|
|
})
|
|
})
|
|
|
|
describe('CreatePost', () => {
|
|
describe('unauthenticated', () => {
|
|
let client
|
|
it('throws authorization error', async () => {
|
|
client = new GraphQLClient(host)
|
|
await expect(
|
|
client.request(`mutation {
|
|
CreatePost(
|
|
title: "I am a post",
|
|
content: "Some content"
|
|
) { slug }
|
|
}`)
|
|
).rejects.toThrow('Not Authorised')
|
|
})
|
|
|
|
describe('authenticated', () => {
|
|
let headers
|
|
let response
|
|
beforeEach(async () => {
|
|
headers = await login({ email: 'test@example.org', password: '1234' })
|
|
client = new GraphQLClient(host, { headers })
|
|
response = await client.request(
|
|
`mutation {
|
|
CreatePost(
|
|
title: "A title",
|
|
content: "Some content"
|
|
) { title, content }
|
|
}`,
|
|
{ headers }
|
|
)
|
|
})
|
|
|
|
it('creates a post', () => {
|
|
expect(response).toEqual({
|
|
CreatePost: { title: 'A title', content: 'Some content' }
|
|
})
|
|
})
|
|
|
|
it('assigns the authenticated user as author', async () => {
|
|
const { User } = await client.request(
|
|
`{
|
|
User(email:"test@example.org") {
|
|
contributions {
|
|
title
|
|
}
|
|
}
|
|
}`,
|
|
{ headers }
|
|
)
|
|
expect(User).toEqual([{ contributions: [{ title: 'A title' }] }])
|
|
})
|
|
})
|
|
})
|
|
})
|
|
|
|
describe('report', () => {
|
|
beforeEach(async () => {
|
|
await factory.create('User', {
|
|
email: 'test@example.org',
|
|
password: '1234'
|
|
})
|
|
await factory.create('User', {
|
|
id: 'u2',
|
|
name: 'abusive-user',
|
|
role: 'user',
|
|
email: 'abusive-user@example.org'
|
|
})
|
|
})
|
|
|
|
afterEach(async () => {
|
|
await factory.cleanDatabase()
|
|
})
|
|
|
|
describe('unauthenticated', () => {
|
|
let client
|
|
it('throws authorization error', async () => {
|
|
client = new GraphQLClient(host)
|
|
await expect(
|
|
client.request(`mutation {
|
|
report(
|
|
description: "I don't like this user",
|
|
resource: {
|
|
id: "u2",
|
|
type: user
|
|
}
|
|
) { id, createdAt }
|
|
}`)
|
|
).rejects.toThrow('Not Authorised')
|
|
})
|
|
|
|
describe('authenticated', () => {
|
|
let headers
|
|
let response
|
|
beforeEach(async () => {
|
|
headers = await login({ email: 'test@example.org', password: '1234' })
|
|
client = new GraphQLClient(host, { headers })
|
|
response = await client.request(
|
|
`mutation {
|
|
report(
|
|
description: "I don't like this user",
|
|
resource: {
|
|
id: "u2",
|
|
type: user
|
|
}
|
|
) { id, createdAt }
|
|
}`,
|
|
{ headers }
|
|
)
|
|
})
|
|
it('creates a report', () => {
|
|
let { id, createdAt } = response.report
|
|
expect(response).toEqual({
|
|
report: { id, createdAt }
|
|
})
|
|
})
|
|
})
|
|
})
|
|
})
|