const app = require('../../../server/server'); const routes = require('../routes'); const restoreFixtures = require('../../../../../services/db/testing_fixtures'); describe('Auth routes', () => { let sqlStatements = {deletes: ` DELETE FROM salix.user WHERE id = 102; `, inserts: ``, updates: ``}; beforeEach(() => { restoreFixtures(sqlStatements); }); afterAll(() => { restoreFixtures(sqlStatements); }); let User = app.models.User; let loginFunction; let logoutFunction; let res; let req; beforeEach(() => { spyOn(app, 'post'); spyOn(app, 'get').and.callThrough(); routes(app); loginFunction = app.post.calls.mostRecent().args[1]; logoutFunction = app.get.calls.argsFor(2)[1]; res = {}; req = {body: {}}; }); describe('when the user doesnt exist but the client does and the password is correct', () => { it('should create the user login and return the token', done => { spyOn(User, 'upsertWithWhere').and.callThrough(); req.body.user = 'PetterParker'; req.body.password = 'nightmare'; res.json = response => { expect(User.upsertWithWhere).toHaveBeenCalledWith(jasmine.any(Object), jasmine.any(Object), jasmine.any(Function)); expect(response.token).toBeDefined(); done(); }; loginFunction(req, res); }); }); describe('when the user exists and the password is correct', () => { it('should login and return the token', done => { req.body.user = 'developer'; req.body.password = 'nightmare'; res.json = response => { expect(response.token).toBeDefined(); done(); }; loginFunction(req, res); }); it('should define the url to continue upon login', done => { req.body.user = 'developer'; req.body.password = 'nightmare'; req.body.location = 'http://localhost:5000/auth/?apiKey=salix&continue="continueURL"'; res.json = response => { expect(response.continue).toBeDefined(); done(); }; loginFunction(req, res); }); it('should define the loginUrl upon login', done => { req.body.user = 'developer'; req.body.password = 'nightmare'; req.body.location = 'http://localhost:5000/auth/?apiKey=salix'; res.json = response => { expect(response.loginUrl).toBeDefined(); done(); }; loginFunction(req, res); }); it('should logout after login', done => { spyOn(User, 'logout').and.callThrough(); req.accessToken = {id: 'testingTokenId'}; logoutFunction(req, res); res.redirect = url => { expect(User.logout).toHaveBeenCalledWith('testingTokenId', jasmine.any(Function)); expect(url).toBe('/'); done(); }; }); }); describe('when the user is incorrect', () => { it('should return a 401 unauthorized', done => { req.body.user = 'IDontExist'; req.body.password = 'TotallyWrongPassword'; res.status = status => { expect(status).toBe(401); }; res.json = response => { expect(response.message).toBe('Login failed'); done(); }; loginFunction(req, res); }); }); });