deguapp/api/tests/auth.test.ts

import supertest from 'supertest';
import { app } from '../src/app';
import { connectDB, dropDB, dropCollections } from '../src/utils/test_mongodb';

const request = supertest(app);

export const getJWT = async () => {
	try {
		const resReg: any = await request.post('/api/v1/auth/signup').send({
			email: 'test@example.local',
			password: 'admin1234',
			username: 'Test Test'
		});

		const resLog: any = await request.post('/api/auth/login').send({
			email: 'test@example.local',
			password: 'admin1234'
		});
		if (resLog.statusCode != 200) throw 'error while logging in';

		const body = JSON.parse(resLog.text);
		return Promise.resolve(body.data.jwt);
	} catch (err: any) {
		console.log(err);
		return err;
	}
};

/**
 *
 * @returns JWT cookie
 */
export async function login(): Promise<string> {
	const res = await request.post('/api/v1/auth/signin').send({
		email: 'thisistest@host.local',
		password: 'Admin1234'
	});
	return res.headers['set-cookie'];
}

export async function signup(): Promise<boolean> {
	const res = await request.post('/api/v1/auth/signup').send({
		email: 'thisistest@host.local',
		password: 'Admin1234',
		username: 'Test Test'
	});

	if (res.statusCode == 201) return true;
	return false;
}

describe('POST /api/v1/auth/signup', () => {
	describe('should drop validation error', () => {
		it('should drop 400 (empty request))', async () => {
			const res: any = await request.post('/api/v1/auth/signup').send({});
			expect(res.statusCode).toBe(400);
		});

		it('should drop 400 (email))', async () => {
			const res: any = await request.post('/api/v1/auth/signup').send({
				email: '',
				username: 'User Admin',
				password: 'Admin1234'
			});
            console.log(res)
			const body = JSON.parse(res.text);
			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('email');
		});

		it('should drop 400 (username))', async () => {
			const res: any = await request.post('/api/v1/auth/signup').send({
				email: 'admin@localhost.local',
				username: '',
				password: 'Admin1234'
			});
			const body = JSON.parse(res.text);

			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('username');
		});
		it('should drop 400 (password))', async () => {
			const res: any = await request.post('/api/v1/auth/signup').send({
				email: 'admin@localhost.local',
				username: 'User Admin',
				password: ''
			});
			const body = JSON.parse(res.text);

			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('password');
		});
		it('should drop 400 (password - min 8 chars', async () => {
			const res = await request.post('/api/v1/auth/signup').send({
				email: 'admin@localhost.local',
				username: 'User Admin',
				password: 'Admin12'
			});
			const body = JSON.parse(res.text);

			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('password');
		});
		it('should drop 400 (password - min 1 number', async () => {
			const res = await request.post('/api/v1/auth/signup').send({
				email: 'admin@localhost.local',
				username: 'User Admin',
				password: 'Adminadmin'
			});
			const body = JSON.parse(res.text);

			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('password');
		});
		it('should drop 400 (password - min 1 uppercase', async () => {
			const res = await request.post('/api/v1/auth/signup').send({
				email: 'admin@localhost.local',
				username: 'User Admin',
				password: 'admin1234'
			});
			const body = JSON.parse(res.text);

			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('password');
		});
	});

	test('should register an user', async () => {
		const res: any = await request.post('/api/v1/auth/signup').send({
			email: 'thisistest@host.local',
			password: 'Admin1234',
			username: 'Test Test'
		});

		expect(res.statusCode).toBe(201);
	});
});

describe('POST /api/v1/auth/signin', () => {
	const url = '/api/v1/auth/signin';

	describe('should drop an validation error', () => {
		it('should drop 400 (empty)', async () => {
			const res = await request.post(url).send();

			expect(res.statusCode).toBe(400);
		});

		it('should drop 400 (email)', async () => {
			const res = await request.post(url).send({
				password: 'Admin1234'
			});
			const body = JSON.parse(res.text);

			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('email');
		});

		it('should drop 400 (password)', async () => {
			const res = await request.post(url).send({
				email: 'thisistest@host.local'
			});
			const body = JSON.parse(res.text);

			expect(res.statusCode).toBe(400);
			expect(body.data.path).toBe('password');
		});
	});

	test('should drop 401', async () => {
		const res = await request.post(url).send({
			email: 'thisistest@host.local',
			password: 'Test12365465132'
		});

		expect(res.statusCode).toBe(401);
		expect(res.header['set-cookie'][0]).toContain("jwt=; Max-Age=0")
		expect(res.header['set-cookie'][1]).toContain("auth=false")
	});

	test('should login an user', async () => {
		const res: any = await request.post(url).send({
			email: 'thisistest@host.local',
			password: 'Admin1234'
		});

		expect(res.statusCode).toBe(200);
		expect(res.header['set-cookie'][0]).toContain("jwt=")
		expect(res.header['set-cookie'][1]).toContain("auth=true")
	});
});

describe('POST /api/v1/auth/logout', () => {
	const url = '/api/v1/auth/logout';
	test('should drop 401 error', async () => {
		const res = await request.post(url).send({});
		expect(res.statusCode).toBe(401);
	});

	test('should logout an user', async () => {
		const jwt = await login();
		const res = await request.post(url).set('Cookie', jwt).send();

		expect(res.statusCode).toBe(200);
		expect(res.header['set-cookie'][0]).toContain("jwt=; Max-Age=0")
		expect(res.header['set-cookie'][1]).toContain("auth=false")
	});
});

describe('GET /api/v1/auth/status', () => {
	const url = '/api/v1/auth/status';
	test('should return login status 401', async () => {
		const res = await request.get(url).send();
		expect(res.statusCode).toBe(401);
	});
	test('should return login status 200', async () => {
		const jwt = await login();
		const res = await request.get(url).set('Cookie', jwt).send();
		expect(res.statusCode).toBe(200);
		expect(res.body.data.username).toBe("Test Test")
		expect(res.body.data.email).toBe("thisistest@host.local")
		expect(res.body.data.password).toBeUndefined()
	});
});