Ocelot-Social/src/graphql-schema.spec.js

import Factory from './seed/factories'
import { GraphQLClient, request } from 'graphql-request'
import jwt from 'jsonwebtoken'
import { host, login } from './jest/helpers'

const factory = Factory()

beforeEach(async () => {
  await factory.create('User', {
    email: 'test@example.org',
    password: '1234'
  })
})

afterEach(async () => {
  await factory.cleanDatabase()
})

describe('isLoggedIn', () => {
  describe('unauthenticated', () => {
    it('returns false', async () => {
      const query = '{ isLoggedIn }'
      await expect(request(host, query)).resolves.toEqual({ isLoggedIn: false })
    })
  })
})

describe('login', () => {
  const mutation = (params) => {
    const { email, password } = params
    return `
      mutation {
        login(email:"${email}", password:"${password}"){
          token
        }
      }`
  }

  describe('ask for a `token`', () => {
    describe('with valid email/password combination', () => {
      it('responds with a JWT token', async () => {
        const data = await request(host, mutation({
          email: 'test@example.org',
          password: '1234'
        }))
        const { token } = data.login
        jwt.verify(token, process.env.JWT_SECRET, (err, data) => {
          expect(data.email).toEqual('test@example.org')
          expect(err).toBeNull()
        })
      })
    })

    describe('with a valid email but incorrect password', () => {
      it('responds with "Incorrect email address or password."', async () => {
        await expect(
          request(host, mutation({
            email: 'test@example.org',
            password: 'wrong'
          }))
        ).rejects.toThrow('Incorrect email address or password.')
      })
    })

    describe('with a non-existing email', () => {
      it('responds with "Incorrect email address or password."', async () => {
        await expect(
          request(host, mutation({
            email: 'non-existent@example.org',
            password: 'wrong'
          }))
        ).rejects.toThrow('Incorrect email address or password.')
      })
    })
  })
})

describe('CreatePost', () => {
  describe('unauthenticated', () => {
    let client
    it('throws authorization error', async () => {
      client = new GraphQLClient(host)
      await expect(client.request(`mutation {
        CreatePost(
          title: "I am a post",
          content: "Some content"
        ) { slug }
      }`)).rejects.toThrow('Not Authorised')
    })

    describe('authenticated', () => {
      let headers
      let response
      beforeEach(async () => {
        headers = await login({ email: 'test@example.org', password: '1234' })
        client = new GraphQLClient(host, { headers })
        response = await client.request(`mutation {
        CreatePost(
          title: "A title",
          content: "Some content"
        ) { title, content }
      }`, { headers })
      })

      it('creates a post', () => {
        expect(response).toEqual({ CreatePost: { title: 'A title', content: 'Some content' } })
      })

      it('assigns the authenticated user as author', async () => {
        const { User } = await client.request(`{
          User(email:"test@example.org") {
            contributions {
              title
            }
          }
        }`, { headers })
        expect(User).toEqual([ { contributions: [ { title: 'A title' } ] } ])
      })
    })
  })
})

describe('report', () => {
  beforeEach(async () => {
    await factory.create('User', {
      email: 'test@example.org',
      password: '1234'
    })
    await factory.create('User', {
      id: 'u2',
      name: 'abusive-user',
      role: 'user',
      email: 'abusive-user@example.org'
    })
  })

  afterEach(async () => {
    await factory.cleanDatabase()
  })

  describe('unauthenticated', () => {
    let client
    it('throws authorization error', async () => {
      client = new GraphQLClient(host)
      await expect(
        client.request(`mutation {
        report(
          description: "I don't like this user",
          resource: {
            id: "u2",
            type: user
          }
        ) { id, createdAt }
      }`)
      ).rejects.toThrow('Not Authorised')
    })

    describe('authenticated', () => {
      let headers
      let response
      beforeEach(async () => {
        headers = await login({ email: 'test@example.org', password: '1234' })
        client = new GraphQLClient(host, { headers })
        response = await client.request(`mutation {
          report(
            description: "I don't like this user",
            resource: {
              id: "u2",
              type: user
            }
            ) { id, createdAt }
          }`,
        { headers }
        )
      })
      it('creates a report', () => {
        let { id, createdAt } = response.report
        expect(response).toEqual({
          report: { id, createdAt }
        })
      })
    })
  })
})