ilp-plugin-virtual/integration-test/ilp-kit/api/test/auth.test.js

ILP virtual ledger plugin for directly transacting connectors

'use strict'

const appHelper = require('./helpers/app')
const exampleApiData = require('./data/api')

describe('Auth', () => {
  beforeEach(async function () {
    this.agent = await appHelper.create()

    // Create the user
    await this.agent
      .post('/users/alice')
      .send({
        username: 'alice',
        password: 'alice'
      })
      .expect(201)
  })

  describe('/auth/', () => {
    it.skip('login user', async function () {
      // Try to login
      await this.agent
        .post('/auth/login')
        .send({
          username: 'alice',
          password: 'alice'
        })
        .expect(exampleApiData.accounts.alice)
    })

    it.skip('doesn\'t load non-logged-in user', async function () {
      // log out first
      await this.agent
        .post('/auth/logout')
        .send()
        .expect(200)

      // auth load gets currently logged in user
      await this.agent
        .get('/auth/load')
        .send()
        .expect({
          id: 'NotFoundError',
          message: 'No active user session'
        })
    })

    it.skip('doesn\'t give forgotten password to non-existant user', async function () {
      // gets forgotten password for requested resource
      await this.agent
        .post('/auth/forgot-password')
        .send({
          // bob doesn't exist
          resource: 'bob'
        })
        .expect({
          id: 'NotFoundError',
          message: 'Wrong username/email'
        })
    })

    it.skip('returns forgotten password to user', async function () {
      // Try to login
      await this.agent
        .post('/auth/login')
        .send({
          username: 'alice',
          password: 'alice'
        })

      await this.agent
        // now send a password reset message
        .post('/auth/forgot-password')
        .send({
          resource: 'alice'
        })
        .expect(200)
        .expect({})
    })

    it.skip('won\'t change password for nonexistant user', async function () {
      await this.agent
        .post('/auth/change-password')
        .send({
          username: 'bob'
        })
        .expect({
          id: 'NotFoundError',
          message: 'Wrong username'
        })
    })

    it.skip('won\'t change password with non-matching passwords', async function () {
      // log out first
      await this.agent
        .post('/auth/logout')
        .send()
        .expect(200)

      await this.agent
        .post('/auth/change-password')
        .send({
          // sends two passwords but they don't match
          username: 'alice',
          password: 'alice1',
          repeatPassword: 'alice2'
        })
        .expect({
          id: 'PasswordsDontMatchError',
          message: 'Passwords don\'t match'
        })
    })

    it.skip('won\'t change password without code', async function () {
      await this.agent
        .post('/auth/change-password')
        .send({
          // missing 'code' field
          username: 'alice',
          password: 'alice1',
          repeatPassword: 'alice1'
        })
        .expect({
          id: 'InvalidBodyError',
          message: 'Missing code'
        })
    })

    it.skip('won\'t change password with invalid code', async function () {
      await this.agent
        .post('/auth/change-password')
        .send({
          // code needs to be 'date.secret'
          username: 'alice',
          password: 'alice1',
          repeatPassword: 'alice1',
          code: '11'
        })
        .expect({
          id: 'InvalidBodyError',
          message: 'Invalid code'
        })
    })

    it.skip('won\'t change password with wrong code', async function () {
      await this.agent
        .post('/auth/change-password')
        .send({
          // date and secret in code are incorrect
          username: 'alice',
          password: 'alice1',
          repeatPassword: 'alice1',
          code: '1.1'
        })
        .expect({
          id: 'InvalidBodyError',
          message: 'The code has been expired'
        })
    })

    it.skip('won\'t change profile without logging in', async function () {
      // log out first
      await this.agent
        .post('/auth/logout')
        .send()
        .expect(200)

      // try to change profile
      await this.agent
        .post('/auth/profilepic')
        .send({
          files: {
            file: {
              path: 'a.png'
            }
          }
        })
        .expect({
          id: 'NotFoundError',
          message: 'No active user session'
        })
    })

    it.skip('changes profile picture successfully', async function () {
      // Try to login
      await this.agent
        .post('/auth/login')
        .send({
          username: 'alice',
          password: 'alice'
        })

      // send the new profile picture
      await this.agent
        .post('/auth/profilepic')
        .send({
          files: {
            file: {
              path: 'a.png'
            }
          }
        })
        .expect(200)
    })

    it.skip('should log out', async function () {
      // Try to login
      await this.agent
        .post('/auth/login')
        .send({
          username: 'alice',
          password: 'alice'
        })

      await this.agent
        .post('/auth/logout')
        .send()
        .expect(200)
    })
  })
})