import {setupApphierarchy, validUser, basicAppHierarchyCreator_WithFields} from "./specHelpers"; import { parseTemporaryCode, USERS_LOCK_FILE, USERS_LIST_FILE, getUserByName} from "../src/authApi/authCommon"; import {$} from "../src/common"; import {getLock} from "../src/common/lock"; import {permission} from "../src/authApi/permissions"; describe("authApi > enableUser", () => { it("should set access levels when valid levels supplied", async () => { const {authApi, app} = await setupApphierarchy(basicAppHierarchyCreator_WithFields); const u = await validUser(app, authApi, "firstpassword", true); await authApi.setUserAccessLevels(u.name, ["admin2"]); const loadedUser = await getUser(app, authApi, u.name); expect(loadedUser.accessLevels).toEqual(["admin2"]); }); it("should throw error when access level invalid", async () => { const {authApi, app} = await setupApphierarchy(basicAppHierarchyCreator_WithFields); const u = await validUser(app, authApi, "firstpassword", true); expect(authApi.setUserAccessLevels(u.name, ["not valid"])).rejects.toThrow(); const loadedUser = await getUser(app, authApi, u.name); expect(loadedUser.accessLevels).toEqual(["admin"]); }); it("should throw en error when user does not exist", async () => { const {authApi, app} = await setupApphierarchy(basicAppHierarchyCreator_WithFields); const u = await validUser(app, authApi, "firstpassword", true); expect(authApi.setUserAccessLevels("nouser", ["admin"])).rejects.toThrow(); }); it("should throw en error when users file is locked", async () => { const {authApi, app} = await setupApphierarchy(basicAppHierarchyCreator_WithFields); const u = await validUser(app, authApi, "firstpassword", false); await getLock(app, USERS_LOCK_FILE, 10000, 0, 0); let ex; try { await authApi.setUserAccessLevels(u.name, ["admin"]); } catch(e) { ex = e; } expect(ex).toBeDefined(); }); it("should throw error when user user does not have permission", async () => { const {authApi, app} = await setupApphierarchy(basicAppHierarchyCreator_WithFields); const u = await validUser(app, authApi, "firstpassword", false); app.removePermission(permission.setUserAccessLevels.get()); expect(authApi.setUserAccessLevels(u.name, ["admin"])).rejects.toThrow(/Unauthorized/); }); it("should not depend on having any other permissions", async () => { const {authApi, app} = await setupApphierarchy(basicAppHierarchyCreator_WithFields); const u = await validUser(app, authApi, "firstpassword", false); app.withOnlyThisPermission(permission.setUserAccessLevels.get()); await authApi.setUserAccessLevels(u.name, ["admin"]); }); }); const getUser = async (app, authApi, userName) => $(await app.datastore.loadJson(USERS_LIST_FILE), [ users => getUserByName(users, userName) ]);