283 lines
10 KiB
JavaScript
283 lines
10 KiB
JavaScript
/* jslint node:true */
|
|
/* global it:false */
|
|
/* global describe:false */
|
|
/* global before:false */
|
|
/* global after:false */
|
|
|
|
'use strict';
|
|
|
|
var config = require('../../config.js'),
|
|
database = require('../../database.js'),
|
|
tokendb = require('../../tokendb.js'),
|
|
expect = require('expect.js'),
|
|
mailer = require('../../mailer.js'),
|
|
superagent = require('superagent'),
|
|
nock = require('nock'),
|
|
server = require('../../server.js');
|
|
|
|
var SERVER_URL = 'http://localhost:' + config.get('port');
|
|
|
|
var USERNAME_0 = 'superaDmIn', PASSWORD = 'Foobar?1337', EMAIL_0 = 'silLY@me.com', EMAIL_0_NEW = 'stupID@me.com', DISPLAY_NAME_0_NEW = 'New Name';
|
|
|
|
describe('Profile API', function () {
|
|
this.timeout(5000);
|
|
|
|
var user_0 = null;
|
|
var token_0;
|
|
|
|
function setup(done) {
|
|
config._reset();
|
|
config.setFqdn('example-profile-test.com');
|
|
|
|
server.start(function (error) {
|
|
expect(!error).to.be.ok();
|
|
|
|
mailer._clearMailQueue();
|
|
|
|
database._clear(function (error) {
|
|
expect(error).to.eql(null);
|
|
|
|
var scope1 = nock(config.apiServerOrigin()).get('/api/v1/boxes/' + config.fqdn() + '/setup/verify?setupToken=somesetuptoken').reply(200, {});
|
|
var scope2 = nock(config.apiServerOrigin()).post('/api/v1/boxes/' + config.fqdn() + '/setup/done?setupToken=somesetuptoken').reply(201, {});
|
|
|
|
superagent.post(SERVER_URL + '/api/v1/cloudron/activate')
|
|
.query({ setupToken: 'somesetuptoken' })
|
|
.send({ username: USERNAME_0, password: PASSWORD, email: EMAIL_0 })
|
|
.end(function (err, res) {
|
|
expect(err).to.eql(null);
|
|
expect(res.statusCode).to.equal(201);
|
|
|
|
// stash for later use
|
|
token_0 = res.body.token;
|
|
|
|
expect(scope1.isDone()).to.be.ok();
|
|
expect(scope2.isDone()).to.be.ok();
|
|
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
}
|
|
|
|
function cleanup(done) {
|
|
database._clear(function (error) {
|
|
expect(!error).to.be.ok();
|
|
|
|
mailer._clearMailQueue();
|
|
|
|
server.stop(done);
|
|
});
|
|
}
|
|
|
|
describe('get profile', function () {
|
|
before(setup);
|
|
after(cleanup);
|
|
|
|
it('fails without token', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/profile/').end(function (error, result) {
|
|
expect(result.statusCode).to.equal(401);
|
|
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails with empty token', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/profile/').query({ access_token: '' }).end(function (error, result) {
|
|
expect(result.statusCode).to.equal(401);
|
|
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails with invalid token', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/profile/').query({ access_token: 'some token' }).end(function (error, result) {
|
|
expect(result.statusCode).to.equal(401);
|
|
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('succeeds', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/profile/').query({ access_token: token_0 }).end(function (error, result) {
|
|
expect(result.statusCode).to.equal(200);
|
|
expect(result.body.username).to.equal(USERNAME_0.toLowerCase());
|
|
expect(result.body.email).to.equal(EMAIL_0.toLowerCase());
|
|
expect(result.body.admin).to.be.ok();
|
|
expect(result.body.displayName).to.be.a('string');
|
|
expect(result.body.password).to.not.be.ok();
|
|
expect(result.body.salt).to.not.be.ok();
|
|
|
|
user_0 = result.body;
|
|
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails with expired token', function (done) {
|
|
var token = tokendb.generateToken();
|
|
var expires = Date.now() - 2000; // 1 sec
|
|
|
|
tokendb.add(token, user_0.id, null, expires, '*', function (error) {
|
|
expect(error).to.not.be.ok();
|
|
|
|
superagent.get(SERVER_URL + '/api/v1/profile').query({ access_token: token }).end(function (error, result) {
|
|
expect(result.statusCode).to.equal(401);
|
|
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('fails with invalid token in auth header', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/profile').set('Authorization', 'Bearer ' + 'x' + token_0).end(function (error, result) {
|
|
expect(result.statusCode).to.equal(401);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('succeeds with token in auth header', function (done) {
|
|
superagent.get(SERVER_URL + '/api/v1/profile').set('Authorization', 'Bearer ' + token_0).end(function (error, result) {
|
|
expect(result.statusCode).to.equal(200);
|
|
expect(result.body.username).to.equal(USERNAME_0.toLowerCase());
|
|
expect(result.body.email).to.equal(EMAIL_0.toLowerCase());
|
|
expect(result.body.admin).to.be.ok();
|
|
expect(result.body.displayName).to.be.a('string');
|
|
expect(result.body.password).to.not.be.ok();
|
|
expect(result.body.salt).to.not.be.ok();
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
|
|
describe('update', function () {
|
|
before(setup);
|
|
after(cleanup);
|
|
|
|
it('change email fails due to missing token', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile')
|
|
.send({ email: EMAIL_0_NEW })
|
|
.end(function (error, result) {
|
|
expect(result.statusCode).to.equal(401);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('change email fails due to invalid email', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile')
|
|
.query({ access_token: token_0 })
|
|
.send({ email: 'foo@bar' })
|
|
.end(function (error, result) {
|
|
expect(result.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('change user succeeds without email nor displayName', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile')
|
|
.query({ access_token: token_0 })
|
|
.send({})
|
|
.end(function (error, result) {
|
|
expect(result.statusCode).to.equal(204);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('change email succeeds', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile')
|
|
.query({ access_token: token_0 })
|
|
.send({ email: EMAIL_0_NEW })
|
|
.end(function (error, result) {
|
|
expect(result.statusCode).to.equal(204);
|
|
|
|
superagent.get(SERVER_URL + '/api/v1/profile')
|
|
.query({ access_token: token_0 })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(200);
|
|
expect(res.body.username).to.equal(USERNAME_0.toLowerCase());
|
|
expect(res.body.email).to.equal(EMAIL_0_NEW.toLowerCase());
|
|
expect(res.body.admin).to.equal(true);
|
|
expect(res.body.displayName).to.equal('');
|
|
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('change displayName succeeds', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile')
|
|
.query({ access_token: token_0 })
|
|
.send({ displayName: DISPLAY_NAME_0_NEW })
|
|
.end(function (error, result) {
|
|
expect(result.statusCode).to.equal(204);
|
|
|
|
superagent.get(SERVER_URL + '/api/v1/profile')
|
|
.query({ access_token: token_0 })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(200);
|
|
expect(res.body.username).to.equal(USERNAME_0.toLowerCase());
|
|
expect(res.body.email).to.equal(EMAIL_0_NEW.toLowerCase());
|
|
expect(res.body.admin).to.be.ok();
|
|
expect(res.body.displayName).to.equal(DISPLAY_NAME_0_NEW);
|
|
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
describe('password change', function () {
|
|
before(setup);
|
|
after(cleanup);
|
|
|
|
it('fails due to missing current password', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile/password')
|
|
.query({ access_token: token_0 })
|
|
.send({ newPassword: 'some wrong password' })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to missing new password', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile/password')
|
|
.query({ access_token: token_0 })
|
|
.send({ password: PASSWORD })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to wrong password', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile/password')
|
|
.query({ access_token: token_0 })
|
|
.send({ password: 'some wrong password', newPassword: 'MOre#$%34' })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(403);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('fails due to invalid password', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile/password')
|
|
.query({ access_token: token_0 })
|
|
.send({ password: PASSWORD, newPassword: 'five' })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(400);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('succeeds', function (done) {
|
|
superagent.post(SERVER_URL + '/api/v1/profile/password')
|
|
.query({ access_token: token_0 })
|
|
.send({ password: PASSWORD, newPassword: 'MOre#$%34' })
|
|
.end(function (err, res) {
|
|
expect(res.statusCode).to.equal(204);
|
|
done();
|
|
});
|
|
});
|
|
});
|
|
});
|