users.js

var path = require('path');
var Promise = require('bluebird');
var utils = require(path.join(__dirname, '..', 'utils'));
var config = require(path.join(__dirname, '..', 'config'));
var chakram = require(path.join(__dirname, '..', 'chakram')), expect = chakram.expect;
var _ = require('lodash');

// Chai expectations
var chai = require('chai');
var cheerio = require('cheerio');
var chaiCheerio = require('chai-cheerio');
var chaiUrl = require('chai-url');
chai.use(chaiCheerio);
chai.use(chaiUrl);
var chaiExpect = chai.expect;

var methods = require(path.join(__dirname, '..', 'methods'));
var auth = methods.auth;
var users = methods.users;
var email = require(path.join(__dirname, '..', 'email'));
var usersData = require(path.join(__dirname, 'data', 'users.json'));

describe("User Invite", function() {
  var userInfo = {
    username: 'user',
    email: 'test@epochtalk.com',
    password: 'password',
    confirmation: 'password'
  };

  before("start email server", function() {
    return email.serverListen();
  });
  it("Sends an email invitation", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return Promise.join(email.listen(), users.invite(userInfo.email, adminToken));
    })
    .spread(function(email, response) {
      // check response
      expect(response).to.have.status(200);
      expect(response).to.have.property('body');

      var body = response.body;
      expect(response.body).to.have.all.keys([
        'message',
        'confirm_token'
      ]);

      var message = body.message;
      expect(message).to.equal('Successfully Sent Invitation');

      var confirm_token = body.confirm_token;
      expect(confirm_token).to.be.a('string');

      // check email
      expect(email).to.contain.all.keys([ 'subject', 'from', 'to', 'html' ]);
      expect(email.subject).to.contain('You\'ve been sent an invitation');
      expect(email.to).to.have.someProperties({ address: userInfo.email });;
      var $ = cheerio.load(email.html);
      chaiExpect($('body a'))
      .to.have.text('Confirm Account')
      .and.attr('href').which.contains.path('/join');
    });
  });
  it("Does not send an email invitation again", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.invite(userInfo.email, adminToken);
    })
    .then(function(response) {
      // check response
      expect(response).to.have.status(422);
    });
  });
  after("Remove invitation", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.removeInvite(userInfo.email, adminToken);
    });
  });
});

describe("User Invitations List (No invitations)", function() {
  var userInfo = {
    username: 'user',
    email: 'test@epochtalk.com',
    password: 'password',
    confirmation: 'password'
  };

  it("Returns an empty list of invitations", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.invitations({}, adminToken);
    })
    .then(function(response) {
      expect(response).to.have.status(200);

      var body = response.body;
      expect(body).to.have.all.keys([ 'page', 'limit', 'invitations', 'has_more' ]);

      var invitations = body.invitations;
      expect(invitations).to.be.an('array').with.length(0);

      var page = body.page;
      expect(page).to.equal(1);

      var limit = body.limit;
      expect(limit).to.equal(25);

      var hasMore = body.has_more;
      expect(hasMore).to.equal(false);
    });
  });
});

describe("User Invitations List (Single invitation)", function() {
  var userInfo = {
    username: 'user',
    email: 'test@epochtalk.com',
    password: 'password',
    confirmation: 'password'
  };

  before("Create the invitation", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.invite(userInfo.email, adminToken);
    });
  });
  it("Returns the list of invitations with defaults", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.invitations({}, adminToken);
    })
    .then(function(response) {
      expect(response).to.have.status(200);

      var body = response.body;
      expect(body).to.have.all.keys([ 'page', 'limit', 'invitations', 'has_more' ]);

      var invitations = body.invitations;
      expect(invitations).to.be.an('array').with.length(1);

      var page = body.page;
      expect(page).to.equal(1);

      var limit = body.limit;
      expect(limit).to.equal(25);

      var hasMore = body.has_more;
      expect(hasMore).to.equal(false);
    });
  });
  after("Remove invitation", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.removeInvite(userInfo.email, adminToken);
    });
  });
});

describe("User Invitations List (Multiple invitations)", function() {
  // load 50 users from the sample data set
  var userInfos = _.slice(usersData, 0, 50);

  before("Create the invitations", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return Promise.map(userInfos, userInfo => { return users.invite(userInfo.email, adminToken); });
    });
  });
  it("Returns the first page of invitations with defaults", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.invitations({}, adminToken);
    })
    .then(function(response) {
      expect(response).to.have.status(200);

      var body = response.body;
      expect(body).to.have.all.keys([ 'page', 'limit', 'invitations', 'has_more' ]);

      var invitations = body.invitations;
      expect(invitations).to.be.an('array').with.length(25);

      var page = body.page;
      expect(page).to.equal(1);

      var limit = body.limit;
      expect(limit).to.equal(25);

      var hasMore = body.has_more;
      expect(hasMore).to.equal(true);
    });
  });
  it("Returns the second page of invitations", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.invitations({ page: 2 }, adminToken);
    })
    .then(function(response) {
      expect(response).to.have.status(200);

      var body = response.body;
      expect(body).to.have.all.keys([ 'page', 'limit', 'invitations', 'has_more' ]);

      var invitations = body.invitations;
      expect(invitations).to.be.an('array').with.length(25);

      var page = body.page;
      expect(page).to.equal(2);

      var limit = body.limit;
      expect(limit).to.equal(25);

      var hasMore = body.has_more;
      expect(hasMore).to.equal(false);
    });
  });
  after("Remove invitations", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return Promise.map(userInfos, userInfo => { return users.removeInvite(userInfo.email, adminToken); });
    });
  });
});

describe("User Find", function() {
  var userInfo = {
    username: 'user',
    email: 'test@epochtalk.com',
    password: 'password',
    confirmation: 'password'
  };

  before("create the user to find", function() {
    return auth.register(userInfo.username, userInfo.email, userInfo.password, userInfo.confirmation)
    .then(function(response) {
      // save the user id for cleanup
      userInfo.id = response.body.id;
    });
  });
  it("finds a user", function () {
    return users.find(userInfo.username)
    .then(function(response) {
      expect(response).to.have.status(200);
      expect(response).to.have.property('body');

      var body = response.body;
      expect(response.body).to.have.all.keys([
        'activity',
        'avatar',
        'created_at',
        'id',
        'priority',
        'role_name',
        'role_highlight_color',
        'roles',
        'updated_at',
        'username',
        'malicious_score'
      ]);

      var userId = body.id;
      expect(userId).to.be.a.slugid;
    });
  });
  it("doesn't find a nonexistant user", function () {
    return users.find('invalidusername')
    .then(function(response) {
      expect(response).to.have.status(404);
      expect(response).to.have.property('body');

      var body = response.body;
      expect(response.body).to.have.all.keys(['error', 'message', 'statusCode']);

      expect(body.statusCode).to.equal(404);
      expect(body.error).to.equal('Not Found');
    });
  });
  it("doesn't find a crazy user", function () {
    return users.find('j!@#$%^&*()_=[][}{`~')
    .then(function(response) {
      expect(response).to.have.status(404);
      expect(response).to.have.property('body');

      var body = response.body;
      expect(response.body).to.have.all.keys(['error', 'message', 'statusCode']);

      expect(body.statusCode).to.equal(404);
      expect(body.error).to.equal('Not Found');
    });
  });
  after("delete the created user", function() {
    return utils.sudo().then(function(response) {
      var adminToken = response.body.token;
      return users.delete(adminToken, userInfo.id);
    })
  });
});

describe("User Delete", function() {
  var userInfo = {
    username: 'user',
    email: 'test@epochtalk.com',
    password: 'password',
    confirmation: 'password'
  };

  before("create the user to delete", function() {
    return auth.register(userInfo.username, userInfo.email, userInfo.password, userInfo.confirmation);
  });
  it("deletes a user", function () {
    // log in with admin account and get created user id
    var todo = [
      auth.login(utils.admin.username, utils.admin.password),
      users.find(userInfo.username)
    ];
    return chakram.all(todo)
    .spread(function(adminResponse, userResponse) {
      expect(adminResponse).to.have.status(200);
      expect(adminResponse).to.have.property('body');
      expect(adminResponse.body).to.have.property('token');
      var adminToken = adminResponse.body.token;

      expect(userResponse).to.have.status(200);
      expect(userResponse).to.have.property('body');
      expect(userResponse.body).to.have.property('id');
      var userId = userResponse.body.id;

      return users.delete(adminToken, userId);
    })
    .then(function(response) {
      expect(response).to.have.status(200);
      expect(response).to.have.property('body');

      var body = response.body;
      expect(response.body).to.have.all.keys(['username', 'email']);

      var username = body.username;
      expect(username).to.equal(userInfo.username);

      var email = body.email;
      expect(email).to.equal(userInfo.email);
    });
  });
  it("doesn't find a deleted user", function () {
    return users.find(userInfo.username)
    .then(function(response) {
      expect(response).to.have.status(404);
      expect(response).to.have.property('body');

      var body = response.body;
      expect(response.body).to.have.all.keys(['error', 'message', 'statusCode']);

      expect(body.statusCode).to.equal(404);
      expect(body.error).to.equal('Not Found');
    });
  });
  after("stop email server", function() {
    return email.serverClose();
  });
});