Files
medusa-store/integration-tests/api/__tests__/admin/store.js
David Preininger 2caff2efc7 feat(medusa): Authentication overhaul (#4064)
* implemented bearer auth

* changed naming strat

* changed session auth to not use jwt

* typo

* changed auth header prefix for admin api token auth

* fixed supporting functions to work with new session type

* removed database calls for bearer auth improving performance

* removed unused deps

* changed auth in tests

* added integration tests

* Accepted suggested change

Co-authored-by: Carlos R. L. Rodrigues <37986729+carlos-r-l-rodrigues@users.noreply.github.com>

* Typo

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* more typos

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* proper formatting

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* removed endregion

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* removed startregion

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>

* fixed admin JWT integration test

* added more fixes to integration tests

* Update OAS

* Create fluffy-donkeys-hope.md

* created API reference for new auth

* implemented getToken in medusa-js

* Apply suggestions from code review

Co-authored-by: Shahed Nasser <shahednasser@gmail.com>

* Apply suggestions from code review

Co-authored-by: Shahed Nasser <shahednasser@gmail.com>

* deleted files which should be autogenerated

* Update fluffy-donkeys-hope.md

* JSDoc update

Co-authored-by: Oli Juhl <59018053+olivermrbl@users.noreply.github.com>

* added missing route exports

* implemented runtime domain safety in jwt token manager

* fixed jwt manager

* lint get-token files

* Update fluffy-donkeys-hope.md

* Revert "deleted files which should be autogenerated"

This reverts commit cd5e86623b822e6a6ac37322b952143ccc493df9.

* Revert "Apply suggestions from code review"

This reverts commit f02f07ce58fd9fcc2dfc80cadbb9df2665108d65.

* Revert "created API reference for new auth"

This reverts commit c9eafbb36453f5cf8047c79e94f470cb2d023c7d.

* renamed header for sending api access tokens

* medusa-js - changed apiKey header

---------

Co-authored-by: Oliver Windall Juhl <59018053+olivermrbl@users.noreply.github.com>
Co-authored-by: Carlos R. L. Rodrigues <37986729+carlos-r-l-rodrigues@users.noreply.github.com>
Co-authored-by: olivermrbl <oliver@mrbltech.com>
Co-authored-by: Shahed Nasser <shahednasser@gmail.com>
2023-09-25 13:57:44 -04:00

243 lines
6.5 KiB
JavaScript

const { Store } = require("@medusajs/medusa")
const path = require("path")
const setupServer = require("../../../environment-helpers/setup-server")
const { useApi } = require("../../../environment-helpers/use-api")
const { initDb, useDb } = require("../../../environment-helpers/use-db")
const adminSeeder = require("../../../helpers/admin-seeder")
jest.setTimeout(30000)
describe("/admin/store", () => {
let dbConnection
const cwd = path.resolve(path.join(__dirname, "..", ".."))
beforeAll(async () => {
dbConnection = await initDb({ cwd })
})
afterAll(async () => {
const db = useDb()
await db.shutdown()
})
describe("Store creation", () => {
let medusaProcess
beforeEach(async () => {
await adminSeeder(dbConnection)
medusaProcess = await setupServer({ cwd })
})
afterEach(async () => {
const db = useDb()
await db.teardown({ forceDelete: ["store"] })
await medusaProcess.kill()
})
it("has created store with default currency", async () => {
const api = useApi()
const response = await api.get("/admin/store", {
headers: { "x-medusa-access-token": "test_token " },
})
expect(response.status).toEqual(200)
expect(response.data.store).toEqual(
expect.objectContaining({
id: expect.any(String),
default_sales_channel_id: expect.any(String),
default_sales_channel: expect.objectContaining({
id: expect.any(String),
}),
name: "Medusa Store",
currencies: expect.arrayContaining([
expect.objectContaining({
code: "usd",
}),
]),
modules: expect.any(Array),
feature_flags: expect.any(Array),
default_currency_code: "usd",
created_at: expect.any(String),
updated_at: expect.any(String),
})
)
})
})
describe("POST /admin/store", () => {
let medusaProcess
beforeEach(async () => {
await adminSeeder(dbConnection)
medusaProcess = await setupServer({ cwd })
const manager = dbConnection.manager
const store = await manager.findOne(Store, {
where: { name: "Medusa Store" },
})
await manager.query(
`INSERT INTO store_currencies (store_id, currency_code) VALUES ('${store.id}', 'dkk')`
)
})
afterEach(async () => {
const db = useDb()
await db.teardown({ forceDelete: ["store"] })
await medusaProcess.kill()
})
it("fails to update default currency if not in store currencies", async () => {
const api = useApi()
try {
await api.post(
"/admin/store",
{
default_currency_code: "eur",
},
{
headers: { "x-medusa-access-token": "test_token " },
}
)
} catch (e) {
expect(e.response.data).toMatchSnapshot({
type: "invalid_data",
message: "Store does not have currency: eur",
})
expect(e.response.status).toBe(400)
}
})
it("fails to remove default currency from currencies without replacing it", async () => {
const api = useApi()
try {
await api.post(
"/admin/store",
{
currencies: ["usd"],
},
{
headers: { "x-medusa-access-token": "test_token " },
}
)
} catch (e) {
expect(e.response.data).toMatchSnapshot({
type: "invalid_data",
message:
"You are not allowed to remove default currency from store currencies without replacing it as well",
})
expect(e.response.status).toBe(400)
}
})
it("successfully updates default currency code", async () => {
const api = useApi()
const response = await api
.post(
"/admin/store",
{
default_currency_code: "dkk",
},
{
headers: { "x-medusa-access-token": "test_token " },
}
)
.catch((err) => console.log(err))
expect(response.status).toEqual(200)
expect(response.data.store).toEqual(
expect.objectContaining({
id: expect.any(String),
name: "Medusa Store",
default_sales_channel_id: expect.any(String),
currencies: expect.arrayContaining([
expect.objectContaining({
code: "usd",
}),
expect.objectContaining({
code: "dkk",
}),
]),
default_currency_code: "dkk",
created_at: expect.any(String),
updated_at: expect.any(String),
})
)
})
it("successfully updates default currency and store currencies", async () => {
const api = useApi()
const response = await api.post(
"/admin/store",
{
default_currency_code: "jpy",
currencies: ["jpy", "usd"],
},
{
headers: { "x-medusa-access-token": "test_token " },
}
)
expect(response.status).toEqual(200)
expect(response.data.store).toEqual(
expect.objectContaining({
id: expect.any(String),
name: "Medusa Store",
default_sales_channel_id: expect.any(String),
currencies: expect.arrayContaining([
expect.objectContaining({
code: "jpy",
}),
expect.objectContaining({
code: "usd",
}),
]),
default_currency_code: "jpy",
created_at: expect.any(String),
updated_at: expect.any(String),
})
)
})
it("successfully updates and store currencies", async () => {
const api = useApi()
const response = await api.post(
"/admin/store",
{
currencies: ["jpy", "usd"],
},
{
headers: { "x-medusa-access-token": "test_token " },
}
)
expect(response.status).toEqual(200)
expect(response.data.store).toEqual(
expect.objectContaining({
id: expect.any(String),
default_sales_channel_id: expect.any(String),
name: "Medusa Store",
currencies: expect.arrayContaining([
expect.objectContaining({
code: "jpy",
}),
expect.objectContaining({
code: "usd",
}),
]),
default_currency_code: "usd",
created_at: expect.any(String),
updated_at: expect.any(String),
})
)
})
})
})