Files
medusa-store/integration-tests/api/__tests__/admin/payment-collection.js
David Preininger 2caff2efc7 feat(medusa): Authentication overhaul (#4064)
* implemented bearer auth

* changed naming strat

* changed session auth to not use jwt

* typo

* changed auth header prefix for admin api token auth

* fixed supporting functions to work with new session type

* removed database calls for bearer auth improving performance

* removed unused deps

* changed auth in tests

* added integration tests

* Accepted suggested change

Co-authored-by: Carlos R. L. Rodrigues <37986729+carlos-r-l-rodrigues@users.noreply.github.com>

* Typo

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* more typos

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* proper formatting

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* removed endregion

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* removed startregion

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* fixed admin JWT integration test

* added more fixes to integration tests

* Update OAS

* Create fluffy-donkeys-hope.md

* created API reference for new auth

* implemented getToken in medusa-js

* Apply suggestions from code review

Co-authored-by: Shahed Nasser <shahednasser@gmail.com>

* Apply suggestions from code review

Co-authored-by: Shahed Nasser <shahednasser@gmail.com>

* deleted files which should be autogenerated

* Update fluffy-donkeys-hope.md

* JSDoc update

Co-authored-by: Oli Juhl <59018053+olivermrbl@users.noreply.github.com>

* added missing route exports

* implemented runtime domain safety in jwt token manager

* fixed jwt manager

* lint get-token files

* Update fluffy-donkeys-hope.md

* Revert "deleted files which should be autogenerated"

This reverts commit cd5e86623b822e6a6ac37322b952143ccc493df9.

* Revert "Apply suggestions from code review"

This reverts commit f02f07ce58fd9fcc2dfc80cadbb9df2665108d65.

* Revert "created API reference for new auth"

This reverts commit c9eafbb36453f5cf8047c79e94f470cb2d023c7d.

* renamed header for sending api access tokens

* medusa-js - changed apiKey header

---------

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>
Co-authored-by: Carlos R. L. Rodrigues <37986729+carlos-r-l-rodrigues@users.noreply.github.com>
Co-authored-by: olivermrbl <oliver@mrbltech.com>
Co-authored-by: Shahed Nasser <shahednasser@gmail.com>
2023-09-25 13:57:44 -04:00

222 lines
5.2 KiB
JavaScript

const path = require("path")
const startServerWithEnvironment =
require("../../../environment-helpers/start-server-with-environment").default
const { useApi } = require("../../../environment-helpers/use-api")
const { useDb } = require("../../../environment-helpers/use-db")
const adminSeeder = require("../../../helpers/admin-seeder")
const {
simplePaymentCollectionFactory,
} = require("../../../factories/simple-payment-collection-factory")
jest.setTimeout(30000)
const adminHeaders = {
headers: {
"x-medusa-access-token": "test_token",
},
}
describe("/admin/payment-collections", () => {
let medusaProcess
let dbConnection
let payCol = null
beforeAll(async () => {
const cwd = path.resolve(path.join(__dirname, "..", ".."))
const [process, connection] = await startServerWithEnvironment({
cwd,
})
dbConnection = connection
medusaProcess = process
})
afterAll(async () => {
const db = useDb()
await db.shutdown()
medusaProcess.kill()
})
describe("GET /admin/payment-collections/:id", () => {
beforeEach(async () => {
await adminSeeder(dbConnection)
payCol = await simplePaymentCollectionFactory(dbConnection, {
description: "paycol description",
amount: 10000,
})
})
afterEach(async () => {
const db = useDb()
return await db.teardown()
})
it("gets payment collection", async () => {
const api = useApi()
const response = await api.get(
`/admin/payment-collections/${payCol.id}`,
adminHeaders
)
expect(response.data.payment_collection).toEqual(
expect.objectContaining({
id: payCol.id,
type: "order_edit",
status: "not_paid",
description: "paycol description",
amount: 10000,
})
)
expect(response.status).toEqual(200)
})
})
describe("POST /admin/payment-collections/:id", () => {
beforeEach(async () => {
await adminSeeder(dbConnection)
payCol = await simplePaymentCollectionFactory(dbConnection, {
description: "paycol description",
amount: 10000,
})
})
afterEach(async () => {
const db = useDb()
return await db.teardown()
})
it("updates a payment collection", async () => {
const api = useApi()
const response = await api.post(
`/admin/payment-collections/${payCol.id}`,
{
description: "new description",
metadata: {
a: 1,
b: [1, 2, "3"],
},
},
adminHeaders
)
expect(response.data.payment_collection).toEqual(
expect.objectContaining({
id: payCol.id,
type: "order_edit",
amount: 10000,
description: "new description",
metadata: {
a: 1,
b: [1, 2, "3"],
},
authorized_amount: null,
})
)
expect(response.status).toEqual(200)
})
})
describe("POST /admin/payment-collections/:id/authorize", () => {
beforeEach(async () => {
await adminSeeder(dbConnection)
payCol = await simplePaymentCollectionFactory(dbConnection, {
description: "paycol description",
amount: 10000,
})
})
afterEach(async () => {
const db = useDb()
return await db.teardown()
})
it("marks a payment collection as authorized", async () => {
const api = useApi()
const response = await api.post(
`/admin/payment-collections/${payCol.id}/authorize`,
undefined,
adminHeaders
)
expect(response.data.payment_collection).toEqual(
expect.objectContaining({
id: payCol.id,
type: "order_edit",
status: "authorized",
description: "paycol description",
amount: 10000,
authorized_amount: 10000,
})
)
expect(response.status).toEqual(200)
})
})
describe("DELETE /admin/payment-collections/:id", () => {
beforeEach(async () => {
await adminSeeder(dbConnection)
payCol = await simplePaymentCollectionFactory(dbConnection, {
description: "paycol description",
amount: 10000,
})
})
afterEach(async () => {
const db = useDb()
return await db.teardown()
})
it("delete a payment collection", async () => {
const api = useApi()
const response = await api.delete(
`/admin/payment-collections/${payCol.id}`,
adminHeaders
)
expect(response.data).toEqual({
id: `${payCol.id}`,
deleted: true,
object: "payment_collection",
})
expect(response.status).toEqual(200)
})
it("throws error when deleting an authorized payment collection", async () => {
const api = useApi()
await api.post(
`/admin/payment-collections/${payCol.id}/authorize`,
undefined,
adminHeaders
)
try {
await api.delete(
`/admin/payment-collections/${payCol.id}`,
adminHeaders
)
expect(1).toBe(2) // should be ignored
} catch (res) {
expect(res.response.data.message).toBe(
"Cannot delete payment collection with status authorized"
)
}
})
})
})