mirror of
https://github.com/taobataoma/meanTorrent.git
synced 2026-02-01 03:59:21 +01:00
a871c92556
Removes a duplicate User CRUD test for Profile Picture. There are two reasons for this commit. 1) Duplicate of https://github.com/meanjs/mean/blob/master/modules/users/tests/server/user.server.routes.tests.js#L833-L848 2) This test is problematic in Windows environment. Related to: https://github.com/visionmedia/supertest/issues/230 https://github.com/visionmedia/supertest/issues/258 The latter may be an issue with the `.attach` method not completely loading the file into memory before the 400 status response is sent back due to no User logged in.
903 lines
25 KiB
JavaScript
903 lines
25 KiB
JavaScript
'use strict';
|
|
|
|
var should = require('should'),
|
|
request = require('supertest'),
|
|
path = require('path'),
|
|
mongoose = require('mongoose'),
|
|
User = mongoose.model('User'),
|
|
express = require(path.resolve('./config/lib/express'));
|
|
|
|
/**
|
|
* Globals
|
|
*/
|
|
var app, agent, credentials, user, _user, admin;
|
|
|
|
/**
|
|
* User routes tests
|
|
*/
|
|
describe('User CRUD tests', function () {
|
|
|
|
before(function (done) {
|
|
// Get application
|
|
app = express.init(mongoose);
|
|
agent = request.agent(app);
|
|
|
|
done();
|
|
});
|
|
|
|
beforeEach(function (done) {
|
|
// Create user credentials
|
|
credentials = {
|
|
username: 'username',
|
|
password: 'M3@n.jsI$Aw3$0m3'
|
|
};
|
|
|
|
// Create a new user
|
|
_user = {
|
|
firstName: 'Full',
|
|
lastName: 'Name',
|
|
displayName: 'Full Name',
|
|
email: 'test@test.com',
|
|
username: credentials.username,
|
|
password: credentials.password,
|
|
provider: 'local'
|
|
};
|
|
|
|
user = new User(_user);
|
|
|
|
// Save a user to the test db and create new article
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('should be able to register a new user', function (done) {
|
|
|
|
_user.username = 'register_new_user';
|
|
_user.email = 'register_new_user_@test.com';
|
|
|
|
agent.post('/api/auth/signup')
|
|
.send(_user)
|
|
.expect(200)
|
|
.end(function (signupErr, signupRes) {
|
|
// Handle signpu error
|
|
if (signupErr) {
|
|
return done(signupErr);
|
|
}
|
|
|
|
signupRes.body.username.should.equal(_user.username);
|
|
signupRes.body.email.should.equal(_user.email);
|
|
// Assert a proper profile image has been set, even if by default
|
|
signupRes.body.profileImageURL.should.not.be.empty();
|
|
// Assert we have just the default 'user' role
|
|
signupRes.body.roles.should.be.instanceof(Array).and.have.lengthOf(1);
|
|
signupRes.body.roles.indexOf('user').should.equal(0);
|
|
return done();
|
|
});
|
|
});
|
|
|
|
it('should be able to login successfully and logout successfully', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Logout
|
|
agent.get('/api/auth/signout')
|
|
.expect(302)
|
|
.end(function (signoutErr, signoutRes) {
|
|
if (signoutErr) {
|
|
return done(signoutErr);
|
|
}
|
|
|
|
signoutRes.redirect.should.equal(true);
|
|
|
|
// NodeJS v4 changed the status code representation so we must check
|
|
// before asserting, to be comptabile with all node versions.
|
|
if (process.version.indexOf('v4') === 0) {
|
|
signoutRes.text.should.equal('Found. Redirecting to /');
|
|
} else {
|
|
signoutRes.text.should.equal('Moved Temporarily. Redirecting to /');
|
|
}
|
|
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to retrieve a list of users if not admin', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Request list of users
|
|
agent.get('/api/users')
|
|
.expect(403)
|
|
.end(function (usersGetErr, usersGetRes) {
|
|
if (usersGetErr) {
|
|
return done(usersGetErr);
|
|
}
|
|
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should be able to retrieve a list of users if admin', function (done) {
|
|
user.roles = ['user', 'admin'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Request list of users
|
|
agent.get('/api/users')
|
|
.expect(200)
|
|
.end(function (usersGetErr, usersGetRes) {
|
|
if (usersGetErr) {
|
|
return done(usersGetErr);
|
|
}
|
|
|
|
usersGetRes.body.should.be.instanceof(Array).and.have.lengthOf(1);
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should be able to get a single user details if admin', function (done) {
|
|
user.roles = ['user', 'admin'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Get single user information from the database
|
|
agent.get('/api/users/' + user._id)
|
|
.expect(200)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.should.be.instanceof(Object);
|
|
userInfoRes.body._id.should.be.equal(String(user._id));
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should be able to update a single user details if admin', function (done) {
|
|
user.roles = ['user', 'admin'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Get single user information from the database
|
|
|
|
var userUpdate = {
|
|
firstName: 'admin_update_first',
|
|
lastName: 'admin_update_last',
|
|
roles: ['admin']
|
|
};
|
|
|
|
agent.put('/api/users/' + user._id)
|
|
.send(userUpdate)
|
|
.expect(200)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.should.be.instanceof(Object);
|
|
userInfoRes.body.firstName.should.be.equal('admin_update_first');
|
|
userInfoRes.body.lastName.should.be.equal('admin_update_last');
|
|
userInfoRes.body.roles.should.be.instanceof(Array).and.have.lengthOf(1);
|
|
userInfoRes.body._id.should.be.equal(String(user._id));
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should be able to delete a single user if admin', function (done) {
|
|
user.roles = ['user', 'admin'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
agent.delete('/api/users/' + user._id)
|
|
//.send(userUpdate)
|
|
.expect(200)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.should.be.instanceof(Object);
|
|
userInfoRes.body._id.should.be.equal(String(user._id));
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('forgot password should return 400 for non-existent username', function (done) {
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/forgot')
|
|
.send({
|
|
username: 'some_username_that_doesnt_exist'
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('No account with that username has been found');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('forgot password should return 400 for no username provided', function (done) {
|
|
var provider = 'facebook';
|
|
user.provider = provider;
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/forgot')
|
|
.send({
|
|
username: ''
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('Username field must not be blank');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('forgot password should return 400 for non-local provider set for the user object', function (done) {
|
|
var provider = 'facebook';
|
|
user.provider = provider;
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/forgot')
|
|
.send({
|
|
username: user.username
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('It seems like you signed up using your ' + user.provider + ' account');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('forgot password should be able to reset password for user password reset request', function (done) {
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/forgot')
|
|
.send({
|
|
username: user.username
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
User.findOne({ username: user.username.toLowerCase() }, function(err, userRes) {
|
|
userRes.resetPasswordToken.should.not.be.empty();
|
|
should.exist(userRes.resetPasswordExpires);
|
|
res.body.message.should.be.equal('Failure sending email');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('forgot password should be able to reset the password using reset token', function (done) {
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/forgot')
|
|
.send({
|
|
username: user.username
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
User.findOne({ username: user.username.toLowerCase() }, function(err, userRes) {
|
|
userRes.resetPasswordToken.should.not.be.empty();
|
|
should.exist(userRes.resetPasswordExpires);
|
|
|
|
agent.get('/api/auth/reset/' + userRes.resetPasswordToken)
|
|
.expect(302)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.headers.location.should.be.equal('/password/reset/' + userRes.resetPasswordToken);
|
|
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('forgot password should return error when using invalid reset token', function (done) {
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/forgot')
|
|
.send({
|
|
username: user.username
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
var invalidToken = 'someTOKEN1234567890';
|
|
agent.get('/api/auth/reset/' + invalidToken)
|
|
.expect(302)
|
|
.end(function (err, res) {
|
|
// Handle error
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.headers.location.should.be.equal('/password/reset/invalid');
|
|
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should be able to change user own password successfully', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Change password
|
|
agent.post('/api/users/password')
|
|
.send({
|
|
newPassword: '1234567890Aa$',
|
|
verifyPassword: '1234567890Aa$',
|
|
currentPassword: credentials.password
|
|
})
|
|
.expect(200)
|
|
.end(function (err, res) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('Password changed successfully');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to change user own password if wrong verifyPassword is given', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Change password
|
|
agent.post('/api/users/password')
|
|
.send({
|
|
newPassword: '1234567890Aa$',
|
|
verifyPassword: '1234567890-ABC-123-Aa$',
|
|
currentPassword: credentials.password
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('Passwords do not match');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to change user own password if wrong currentPassword is given', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Change password
|
|
agent.post('/api/users/password')
|
|
.send({
|
|
newPassword: '1234567890Aa$',
|
|
verifyPassword: '1234567890Aa$',
|
|
currentPassword: 'some_wrong_passwordAa$'
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('Current password is incorrect');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to change user own password if no new password is at all given', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Change password
|
|
agent.post('/api/users/password')
|
|
.send({
|
|
newPassword: '',
|
|
verifyPassword: '',
|
|
currentPassword: credentials.password
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('Please provide a new password');
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to change user own password if no new password is at all given', function (done) {
|
|
|
|
// Change password
|
|
agent.post('/api/users/password')
|
|
.send({
|
|
newPassword: '1234567890Aa$',
|
|
verifyPassword: '1234567890Aa$',
|
|
currentPassword: credentials.password
|
|
})
|
|
.expect(400)
|
|
.end(function (err, res) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.message.should.equal('User is not signed in');
|
|
return done();
|
|
});
|
|
});
|
|
|
|
it('should be able to get own user details successfully', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
// Get own user details
|
|
agent.get('/api/users/me')
|
|
.expect(200)
|
|
.end(function (err, res) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
res.body.should.be.instanceof(Object);
|
|
res.body.username.should.equal(user.username);
|
|
res.body.email.should.equal(user.email);
|
|
should.not.exist(res.body.salt);
|
|
should.not.exist(res.body.password);
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to get any user details if not logged in', function (done) {
|
|
// Get own user details
|
|
agent.get('/api/users/me')
|
|
.expect(200)
|
|
.end(function (err, res) {
|
|
if (err) {
|
|
return done(err);
|
|
}
|
|
|
|
should.not.exist(res.body);
|
|
return done();
|
|
});
|
|
});
|
|
|
|
it('should be able to update own user details', function (done) {
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
var userUpdate = {
|
|
firstName: 'user_update_first',
|
|
lastName: 'user_update_last',
|
|
};
|
|
|
|
agent.put('/api/users')
|
|
.send(userUpdate)
|
|
.expect(200)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.should.be.instanceof(Object);
|
|
userInfoRes.body.firstName.should.be.equal('user_update_first');
|
|
userInfoRes.body.lastName.should.be.equal('user_update_last');
|
|
userInfoRes.body.roles.should.be.instanceof(Array).and.have.lengthOf(1);
|
|
userInfoRes.body.roles.indexOf('user').should.equal(0);
|
|
userInfoRes.body._id.should.be.equal(String(user._id));
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to update own user details and add roles if not admin', function (done) {
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
should.not.exist(err);
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
var userUpdate = {
|
|
firstName: 'user_update_first',
|
|
lastName: 'user_update_last',
|
|
roles: ['user', 'admin']
|
|
};
|
|
|
|
agent.put('/api/users')
|
|
.send(userUpdate)
|
|
.expect(200)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.should.be.instanceof(Object);
|
|
userInfoRes.body.firstName.should.be.equal('user_update_first');
|
|
userInfoRes.body.lastName.should.be.equal('user_update_last');
|
|
userInfoRes.body.roles.should.be.instanceof(Array).and.have.lengthOf(1);
|
|
userInfoRes.body.roles.indexOf('user').should.equal(0);
|
|
userInfoRes.body._id.should.be.equal(String(user._id));
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to update own user details with existing username', function (done) {
|
|
|
|
var _user2 = _user;
|
|
|
|
_user2.username = 'user2_username';
|
|
_user2.email = 'user2_email@test.com';
|
|
|
|
var credentials2 = {
|
|
username: 'username2',
|
|
password: 'M3@n.jsI$Aw3$0m3'
|
|
};
|
|
|
|
_user2.username = credentials2.username;
|
|
_user2.password = credentials2.password;
|
|
|
|
var user2 = new User(_user2);
|
|
|
|
user2.save(function (err) {
|
|
should.not.exist(err);
|
|
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials2)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
var userUpdate = {
|
|
firstName: 'user_update_first',
|
|
lastName: 'user_update_last',
|
|
username: user.username
|
|
};
|
|
|
|
agent.put('/api/users')
|
|
.send(userUpdate)
|
|
.expect(400)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
// Call the assertion callback
|
|
userInfoRes.body.message.should.equal('Username already exists');
|
|
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to update own user details with existing email', function (done) {
|
|
|
|
var _user2 = _user;
|
|
|
|
_user2.username = 'user2_username';
|
|
_user2.email = 'user2_email@test.com';
|
|
|
|
var credentials2 = {
|
|
username: 'username2',
|
|
password: 'M3@n.jsI$Aw3$0m3'
|
|
};
|
|
|
|
_user2.username = credentials2.username;
|
|
_user2.password = credentials2.password;
|
|
|
|
var user2 = new User(_user2);
|
|
|
|
user2.save(function (err) {
|
|
should.not.exist(err);
|
|
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials2)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
var userUpdate = {
|
|
firstName: 'user_update_first',
|
|
lastName: 'user_update_last',
|
|
email: user.email
|
|
};
|
|
|
|
agent.put('/api/users')
|
|
.send(userUpdate)
|
|
.expect(400)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
// Call the assertion callback
|
|
userInfoRes.body.message.should.equal('Email already exists');
|
|
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to update own user details if not logged-in', function (done) {
|
|
user.roles = ['user'];
|
|
|
|
user.save(function (err) {
|
|
|
|
should.not.exist(err);
|
|
|
|
var userUpdate = {
|
|
firstName: 'user_update_first',
|
|
lastName: 'user_update_last',
|
|
};
|
|
|
|
agent.put('/api/users')
|
|
.send(userUpdate)
|
|
.expect(400)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.message.should.equal('User is not signed in');
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to update own user profile picture without being logged-in', function (done) {
|
|
|
|
agent.post('/api/users/picture')
|
|
.send({})
|
|
.expect(400)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.message.should.equal('User is not signed in');
|
|
|
|
// Call the assertion callback
|
|
return done();
|
|
});
|
|
});
|
|
|
|
it('should be able to change profile picture if signed in', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
agent.post('/api/users/picture')
|
|
.attach('newProfilePicture', './modules/users/client/img/profile/default.png')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
// Handle change profile picture error
|
|
if (userInfoErr) {
|
|
return done(userInfoErr);
|
|
}
|
|
|
|
userInfoRes.body.should.be.instanceof(Object);
|
|
userInfoRes.body.profileImageURL.should.be.a.String();
|
|
userInfoRes.body._id.should.be.equal(String(user._id));
|
|
|
|
return done();
|
|
});
|
|
});
|
|
});
|
|
|
|
it('should not be able to change profile picture if attach a picture with a different field name', function (done) {
|
|
agent.post('/api/auth/signin')
|
|
.send(credentials)
|
|
.expect(200)
|
|
.end(function (signinErr, signinRes) {
|
|
// Handle signin error
|
|
if (signinErr) {
|
|
return done(signinErr);
|
|
}
|
|
|
|
agent.post('/api/users/picture')
|
|
.attach('fieldThatDoesntWork', './modules/users/client/img/profile/default.png')
|
|
.send(credentials)
|
|
.expect(400)
|
|
.end(function (userInfoErr, userInfoRes) {
|
|
done(userInfoErr);
|
|
});
|
|
});
|
|
});
|
|
|
|
afterEach(function (done) {
|
|
User.remove().exec(done);
|
|
});
|
|
});
|