budibase/packages/worker/src/api/routes/tests/auth.spec.js

const setup = require("./utilities")

jest.mock("nodemailer")
const sendMailMock = setup.emailMock()

describe("/api/admin/auth", () => {
  let request = setup.getRequest()
  let config = setup.getConfig()
  let code

  beforeAll(async () => {
    await config.init()
  })

  afterAll(setup.afterAll)

  afterEach(() => {
    jest.clearAllMocks()
  })

  it("should be able to generate password reset email", async () => {
    // initially configure settings
    await config.saveSmtpConfig()
    await config.saveSettingsConfig()
    await config.createUser("test@test.com")
    const res = await request
      .post(`/api/admin/auth/reset`)
      .send({
        email: "test@test.com",
      })
      .expect("Content-Type", /json/)
      .expect(200)
    expect(res.body).toEqual({ message: "Please check your email for a reset link." })
    expect(sendMailMock).toHaveBeenCalled()
    const emailCall = sendMailMock.mock.calls[0][0]
    // after this URL there should be a code
    const parts = emailCall.html.split("http://localhost:10000/builder/auth/reset?code=")
    code = parts[1].split("\"")[0]
    expect(code).toBeDefined()
  })

  it("should allow resetting user password with code", async () => {
    const res = await request
      .post(`/api/admin/auth/reset/update`)
      .send({
        password: "newpassword",
        resetCode: code,
      })
      .expect("Content-Type", /json/)
      .expect(200)
    expect(res.body).toEqual({ message: "password reset successfully." })
  })

  describe("oidc", () => {
    const auth = require("@budibase/auth").auth

    // mock the oidc strategy implementation and return value
    strategyFactory = jest.fn()
    mockStrategyReturn = jest.fn()
    strategyFactory.mockReturnValue(mockStrategyReturn)
    auth.oidc.strategyFactory = strategyFactory

    const passportSpy = jest.spyOn(auth.passport, "authenticate")

    describe("/api/admin/auth/oidc", () => {
      it("should load the oidc config and calculate the correct callback url", async () => {
        const oidcConf = await config.saveOIDCConfig()
      
        await request.get(`/api/admin/auth/oidc`)

        expect(strategyFactory).toBeCalledWith(
          oidcConf.config, 
          "http://127.0.0.1:4003/api/admin/auth/oidc/callback" // calculated url
        )
        
        expect(passportSpy).toBeCalledWith(mockStrategyReturn, {
          scope: ["profile", "email"],
        })

        expect(passportSpy.mock.calls.length).toBe(1);
      })
    })

    describe("/api/admin/auth/oidc/callback", () => {
      it("should do something", async () => {
        const oidcConf = await config.saveOIDCConfig()
        const passportSpy = jest.spyOn(auth.passport, "authenticate")

        await request.get(`/api/admin/auth/oidc/callback`)
      
        expect(passportSpy).toBeCalledWith(mockStrategyReturn, {
          successRedirect: "/", failureRedirect: "/error" 
        }, expect.anything())

        expect(passportSpy.mock.calls.length).toBe(1);
      })
    })

  })
})