100154d905
* chore: Move auth tests to http folder * chore: Migrate collection tests to http folder * chore: Move currency tests to http folder
77 lines
2.5 KiB
TypeScript
77 lines
2.5 KiB
TypeScript
import {
|
|
adminHeaders,
|
|
createAdminUser,
|
|
} from "../../../../helpers/create-admin-user"
|
|
import { medusaIntegrationTestRunner } from "medusa-test-utils"
|
|
|
|
jest.setTimeout(30000)
|
|
|
|
medusaIntegrationTestRunner({
|
|
testSuite: ({ dbConnection, getContainer, api }) => {
|
|
beforeEach(async () => {
|
|
await createAdminUser(dbConnection, adminHeaders, getContainer())
|
|
})
|
|
|
|
it.only("test the entire authentication flow", async () => {
|
|
// BREAKING: `/admin/auth` changes to `/auth/user/emailpass`
|
|
const signup = await api.post("/auth/user/emailpass", {
|
|
email: "newadmin@medusa.js",
|
|
password: "secret_password",
|
|
})
|
|
|
|
//BREAKING: In V2, we respond with a JWT token instead of the user object, and a session is not created. you need to call `/auth/session` to create a session
|
|
expect(signup.status).toEqual(200)
|
|
expect(signup.data).toEqual({ token: expect.any(String) })
|
|
|
|
// BREAKING: IN V2 creating a user is separated from creating an auth identity
|
|
const createdUser = await api.post(
|
|
"/admin/users",
|
|
{ email: "newadmin@medusa.js" },
|
|
{ headers: { authorization: `Bearer ${signup.data.token}` } }
|
|
)
|
|
expect(createdUser.status).toEqual(200)
|
|
expect(createdUser.data.user.email).toEqual("newadmin@medusa.js")
|
|
|
|
const login = await api.post("/auth/user/emailpass", {
|
|
email: "newadmin@medusa.js",
|
|
password: "secret_password",
|
|
})
|
|
expect(login.status).toEqual(200)
|
|
expect(login.data).toEqual({ token: expect.any(String) })
|
|
|
|
const createSession = await api.post(
|
|
"/auth/session",
|
|
{},
|
|
{ headers: { authorization: `Bearer ${login.data.token}` } }
|
|
)
|
|
expect(createSession.status).toEqual(200)
|
|
|
|
// extract cookie
|
|
const [cookie] = createSession.headers["set-cookie"][0].split(";")
|
|
expect(cookie).toEqual(expect.stringContaining("connect.sid"))
|
|
|
|
const cookieHeader = {
|
|
headers: { Cookie: cookie },
|
|
}
|
|
|
|
// perform cookie authenticated request
|
|
const authedRequest = await api.get(
|
|
"/admin/products?limit=1",
|
|
cookieHeader
|
|
)
|
|
expect(authedRequest.status).toEqual(200)
|
|
|
|
// sign out
|
|
const signOutRequest = await api.delete("/auth/session", cookieHeader)
|
|
expect(signOutRequest.status).toEqual(200)
|
|
|
|
// attempt to perform authenticated request
|
|
const unAuthedRequest = await api
|
|
.get("/admin/products?limit=1", cookieHeader)
|
|
.catch((e) => e)
|
|
|
|
expect(unAuthedRequest.response.status).toEqual(401)
|
|
})
|
|
},
|
|
})
|