94 lines
2.9 KiB
Erlang
94 lines
2.9 KiB
Erlang
-module(admin_handler_user_verification_token_tests).
|
||
-include_lib("eunit/include/eunit.hrl").
|
||
-include("records.hrl").
|
||
|
||
-define(TABLES, [admin, admin_audit, user, verification, ticket]).
|
||
-define(ADMIN_ID, <<"adm_test_1">>).
|
||
|
||
setup() ->
|
||
eh_test_support:start_mnesia(),
|
||
eh_test_support:ensure_tables(?TABLES),
|
||
eh_test_support:ensure_jwt(),
|
||
eh_test_support:seed_admin(#{id => ?ADMIN_ID}),
|
||
ok.
|
||
|
||
cleanup(_) ->
|
||
eh_test_support:unload_cowboy(),
|
||
eh_test_support:delete_tables(?TABLES),
|
||
eh_test_support:stop_mnesia(),
|
||
ok.
|
||
|
||
admin_user_verification_token_test_() ->
|
||
{foreach, fun setup/0, fun cleanup/1, [
|
||
{"GET – create token", {timeout, 60, fun test_create/0}},
|
||
{"GET – reuse existing token", {timeout, 60, fun test_reuse/0}},
|
||
{"GET – user not found", {timeout, 60, fun test_not_found/0}},
|
||
{"GET – unauthorized", {timeout, 60, fun test_unauthorized/0}},
|
||
{"POST – method not allowed", {timeout, 60, fun test_wrong_method/0}}
|
||
]}.
|
||
|
||
seed_user() ->
|
||
User = eh_test_support:make_user(#{
|
||
id => <<"u_verify">>,
|
||
email => <<"verify@test.local">>,
|
||
nickname => <<"verify">>,
|
||
status => pending
|
||
}),
|
||
ok = mnesia:dirty_write(User),
|
||
User.
|
||
|
||
test_create() ->
|
||
User = seed_user(),
|
||
Id = User#user.id,
|
||
{Status, _, Body} = eh_test_support:call(admin_handler_user_verification_token, #{
|
||
method => <<"GET">>,
|
||
path => <<"/v1/admin/users/", Id/binary, "/verification-token">>,
|
||
bindings => #{id => Id},
|
||
auth => ?ADMIN_ID
|
||
}),
|
||
?assertEqual(200, Status),
|
||
Result = jsx:decode(Body, [return_maps]),
|
||
?assert(is_binary(maps:get(<<"token">>, Result))),
|
||
?assert(is_binary(maps:get(<<"expires_at">>, Result))).
|
||
|
||
test_reuse() ->
|
||
User = seed_user(),
|
||
Id = User#user.id,
|
||
{ok, Token1, _} = core_verification:create_token(Id),
|
||
{Status, _, Body} = eh_test_support:call(admin_handler_user_verification_token, #{
|
||
method => <<"GET">>,
|
||
path => <<"/v1/admin/users/", Id/binary, "/verification-token">>,
|
||
bindings => #{id => Id},
|
||
auth => ?ADMIN_ID
|
||
}),
|
||
?assertEqual(200, Status),
|
||
Result = jsx:decode(Body, [return_maps]),
|
||
?assertEqual(Token1, maps:get(<<"token">>, Result)).
|
||
|
||
test_not_found() ->
|
||
{Status, _, _} = eh_test_support:call(admin_handler_user_verification_token, #{
|
||
method => <<"GET">>,
|
||
path => <<"/v1/admin/users/missing/verification-token">>,
|
||
bindings => #{id => <<"missing">>},
|
||
auth => ?ADMIN_ID
|
||
}),
|
||
?assertEqual(404, Status).
|
||
|
||
test_unauthorized() ->
|
||
{Status, _, _} = eh_test_support:call(admin_handler_user_verification_token, #{
|
||
method => <<"GET">>,
|
||
path => <<"/v1/admin/users/x/verification-token">>,
|
||
bindings => #{id => <<"x">>},
|
||
auth => none
|
||
}),
|
||
?assertEqual(401, Status).
|
||
|
||
test_wrong_method() ->
|
||
{Status, _, _} = eh_test_support:call(admin_handler_user_verification_token, #{
|
||
method => <<"POST">>,
|
||
path => <<"/v1/admin/users/x/verification-token">>,
|
||
bindings => #{id => <<"x">>},
|
||
auth => ?ADMIN_ID
|
||
}),
|
||
?assertEqual(405, Status).
|