* implemented bearer auth * changed naming strat * changed session auth to not use jwt * typo * changed auth header prefix for admin api token auth * fixed supporting functions to work with new session type * removed database calls for bearer auth improving performance * removed unused deps * changed auth in tests * added integration tests * Accepted suggested change Co-authored-by: Carlos R. L. Rodrigues <37986729+carlos-r-l-rodrigues@users.noreply.github.com> * Typo Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com> * more typos Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com> * proper formatting Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com> * removed endregion Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com> * removed startregion Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com> * fixed admin JWT integration test * added more fixes to integration tests * Update OAS * Create fluffy-donkeys-hope.md * created API reference for new auth * implemented getToken in medusa-js * Apply suggestions from code review Co-authored-by: Shahed Nasser <shahednasser@gmail.com> * Apply suggestions from code review Co-authored-by: Shahed Nasser <shahednasser@gmail.com> * deleted files which should be autogenerated * Update fluffy-donkeys-hope.md * JSDoc update Co-authored-by: Oli Juhl <59018053+olivermrbl@users.noreply.github.com> * added missing route exports * implemented runtime domain safety in jwt token manager * fixed jwt manager * lint get-token files * Update fluffy-donkeys-hope.md * Revert "deleted files which should be autogenerated" This reverts commit cd5e86623b822e6a6ac37322b952143ccc493df9. * Revert "Apply suggestions from code review" This reverts commit f02f07ce58fd9fcc2dfc80cadbb9df2665108d65. * Revert "created API reference for new auth" This reverts commit c9eafbb36453f5cf8047c79e94f470cb2d023c7d. * renamed header for sending api access tokens * medusa-js - changed apiKey header --------- Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com> Co-authored-by: Carlos R. L. Rodrigues <37986729+carlos-r-l-rodrigues@users.noreply.github.com> Co-authored-by: olivermrbl <oliver@mrbltech.com> Co-authored-by: Shahed Nasser <shahednasser@gmail.com>
324 lines
8.8 KiB
JavaScript
324 lines
8.8 KiB
JavaScript
const path = require("path")
|
|
|
|
const setupServer = require("../../../environment-helpers/setup-server")
|
|
const { useApi } = require("../../../environment-helpers/use-api")
|
|
const { initDb, useDb } = require("../../../environment-helpers/use-db")
|
|
|
|
const adminSeeder = require("../../../helpers/admin-seeder")
|
|
const userSeeder = require("../../../helpers/user-seeder")
|
|
|
|
const { simpleBatchJobFactory } = require("../../../factories")
|
|
|
|
jest.setTimeout(50000)
|
|
|
|
const adminReqConfig = {
|
|
headers: {
|
|
"x-medusa-access-token": "test_token",
|
|
},
|
|
}
|
|
|
|
const setupJobDb = async (dbConnection) => {
|
|
await adminSeeder(dbConnection)
|
|
await userSeeder(dbConnection)
|
|
|
|
await simpleBatchJobFactory(dbConnection, {
|
|
id: "job_1",
|
|
type: "product-export",
|
|
created_by: "admin_user",
|
|
})
|
|
await simpleBatchJobFactory(dbConnection, {
|
|
id: "job_2",
|
|
type: "product-export",
|
|
created_by: "admin_user",
|
|
})
|
|
await simpleBatchJobFactory(dbConnection, {
|
|
id: "job_3",
|
|
type: "product-export",
|
|
created_by: "admin_user",
|
|
})
|
|
await simpleBatchJobFactory(dbConnection, {
|
|
id: "job_4",
|
|
type: "product-export",
|
|
status: "awaiting_confirmation",
|
|
created_by: "member-user",
|
|
})
|
|
await simpleBatchJobFactory(dbConnection, {
|
|
id: "job_5",
|
|
type: "product-export",
|
|
status: "completed",
|
|
completed_at: "2022-06-27T22:00:00.000Z",
|
|
created_by: "admin_user",
|
|
})
|
|
}
|
|
|
|
describe("/admin/batch-jobs", () => {
|
|
let medusaProcess
|
|
let dbConnection
|
|
|
|
beforeAll(async () => {
|
|
const cwd = path.resolve(path.join(__dirname, "..", ".."))
|
|
dbConnection = await initDb({ cwd })
|
|
medusaProcess = await setupServer({ cwd })
|
|
})
|
|
|
|
afterAll(async () => {
|
|
const db = useDb()
|
|
await db.shutdown()
|
|
|
|
medusaProcess.kill()
|
|
})
|
|
|
|
describe("GET /admin/batch-jobs", () => {
|
|
beforeEach(async () => {
|
|
await setupJobDb(dbConnection)
|
|
})
|
|
|
|
afterEach(async () => {
|
|
const db = useDb()
|
|
await db.teardown()
|
|
})
|
|
|
|
it("lists batch jobs created by the user", async () => {
|
|
const api = useApi()
|
|
const response = await api.get("/admin/batch-jobs", adminReqConfig)
|
|
|
|
expect(response.status).toEqual(200)
|
|
expect(response.data.batch_jobs.length).toEqual(4)
|
|
expect(response.data).toEqual(
|
|
expect.objectContaining({
|
|
batch_jobs: expect.arrayContaining([
|
|
expect.objectContaining({
|
|
id: "job_5",
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
}),
|
|
expect.objectContaining({
|
|
id: "job_3",
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
}),
|
|
expect.objectContaining({
|
|
id: "job_2",
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
}),
|
|
expect.objectContaining({
|
|
id: "job_1",
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
}),
|
|
]),
|
|
})
|
|
)
|
|
})
|
|
|
|
it("lists batch jobs created by the user and where completed_at is null ", async () => {
|
|
const api = useApi()
|
|
const response = await api.get(
|
|
"/admin/batch-jobs?completed_at=null",
|
|
adminReqConfig
|
|
)
|
|
|
|
expect(response.status).toEqual(200)
|
|
expect(response.data.batch_jobs.length).toEqual(3)
|
|
expect(response.data).toEqual(
|
|
expect.objectContaining({
|
|
batch_jobs: expect.arrayContaining([
|
|
expect.objectContaining({
|
|
id: "job_3",
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
}),
|
|
expect.objectContaining({
|
|
id: "job_2",
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
}),
|
|
expect.objectContaining({
|
|
id: "job_1",
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
}),
|
|
]),
|
|
})
|
|
)
|
|
})
|
|
})
|
|
|
|
describe("GET /admin/batch-jobs/:id", () => {
|
|
beforeEach(async () => {
|
|
await setupJobDb(dbConnection)
|
|
})
|
|
|
|
afterEach(async () => {
|
|
const db = useDb()
|
|
await db.teardown()
|
|
})
|
|
|
|
it("return batch job created by the user", async () => {
|
|
const api = useApi()
|
|
const response = await api.get("/admin/batch-jobs/job_1", adminReqConfig)
|
|
|
|
expect(response.status).toEqual(200)
|
|
expect(response.data.batch_job).toEqual(
|
|
expect.objectContaining({
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
created_by: "admin_user",
|
|
})
|
|
)
|
|
})
|
|
|
|
it("should fail on batch job created by other user", async () => {
|
|
const api = useApi()
|
|
await api.get("/admin/batch-jobs/job_4", adminReqConfig).catch((err) => {
|
|
expect(err.response.status).toEqual(400)
|
|
expect(err.response.data.type).toEqual("not_allowed")
|
|
expect(err.response.data.message).toEqual(
|
|
"Cannot access a batch job that does not belong to the logged in user"
|
|
)
|
|
})
|
|
})
|
|
})
|
|
|
|
describe("POST /admin/batch-jobs/", () => {
|
|
beforeEach(async () => {
|
|
await setupJobDb(dbConnection)
|
|
})
|
|
|
|
afterEach(async () => {
|
|
const db = useDb()
|
|
await db.teardown()
|
|
})
|
|
|
|
it("Creates a batch job", async () => {
|
|
const api = useApi()
|
|
|
|
const response = await api.post(
|
|
"/admin/batch-jobs",
|
|
{
|
|
type: "product-export",
|
|
context: {},
|
|
},
|
|
adminReqConfig
|
|
)
|
|
|
|
expect(response.status).toEqual(201)
|
|
expect(response.data.batch_job).toEqual(
|
|
expect.objectContaining({
|
|
created_by: "admin_user",
|
|
status: "created",
|
|
id: expect.any(String),
|
|
})
|
|
)
|
|
})
|
|
})
|
|
|
|
describe("POST /admin/batch-jobs/:id/confirm", () => {
|
|
beforeEach(async () => {
|
|
await setupJobDb(dbConnection)
|
|
})
|
|
|
|
afterEach(async () => {
|
|
const db = useDb()
|
|
await db.teardown()
|
|
})
|
|
|
|
it("Fails to confirm a batch job created by a different user", async () => {
|
|
const api = useApi()
|
|
|
|
const jobId = "job_4"
|
|
|
|
await api
|
|
.post(`/admin/batch-jobs/${jobId}/confirm`, {}, adminReqConfig)
|
|
.catch((err) => {
|
|
expect(err.response.status).toEqual(400)
|
|
expect(err.response.data.type).toEqual("not_allowed")
|
|
expect(err.response.data.message).toEqual(
|
|
"Cannot access a batch job that does not belong to the logged in user"
|
|
)
|
|
})
|
|
})
|
|
})
|
|
|
|
describe("POST /admin/batch-jobs/:id/cancel", () => {
|
|
beforeEach(async () => {
|
|
await setupJobDb(dbConnection)
|
|
await simpleBatchJobFactory(dbConnection, {
|
|
id: "job_complete",
|
|
type: "product-export",
|
|
created_by: "admin_user",
|
|
completed_at: new Date(),
|
|
})
|
|
})
|
|
|
|
afterEach(async () => {
|
|
const db = useDb()
|
|
await db.teardown()
|
|
})
|
|
|
|
it("Fails to cancel a batch job created by a different user", async () => {
|
|
expect.assertions(3)
|
|
const api = useApi()
|
|
|
|
const jobId = "job_4"
|
|
|
|
await api
|
|
.post(`/admin/batch-jobs/${jobId}/cancel`, {}, adminReqConfig)
|
|
.catch((err) => {
|
|
expect(err.response.status).toEqual(400)
|
|
expect(err.response.data.type).toEqual("not_allowed")
|
|
expect(err.response.data.message).toEqual(
|
|
"Cannot access a batch job that does not belong to the logged in user"
|
|
)
|
|
})
|
|
})
|
|
|
|
it("Fails to cancel a batch job that is already complete", async () => {
|
|
expect.assertions(3)
|
|
const api = useApi()
|
|
|
|
const jobId = "job_complete"
|
|
|
|
await api
|
|
.post(`/admin/batch-jobs/${jobId}/cancel`, {}, adminReqConfig)
|
|
.catch((err) => {
|
|
expect(err.response.status).toEqual(400)
|
|
expect(err.response.data.type).toEqual("not_allowed")
|
|
expect(err.response.data.message).toEqual(
|
|
"Cannot cancel completed batch job"
|
|
)
|
|
})
|
|
})
|
|
|
|
it("Cancels batch job created by the user", async () => {
|
|
const api = useApi()
|
|
|
|
const jobId = "job_1"
|
|
|
|
const response = await api.post(
|
|
`/admin/batch-jobs/${jobId}/cancel`,
|
|
{},
|
|
adminReqConfig
|
|
)
|
|
|
|
expect(response.status).toEqual(200)
|
|
expect(response.data.batch_job).toEqual(
|
|
expect.objectContaining({
|
|
created_at: expect.any(String),
|
|
updated_at: expect.any(String),
|
|
canceled_at: expect.any(String),
|
|
status: "canceled",
|
|
})
|
|
)
|
|
})
|
|
})
|
|
})
|