atsid/generator-ats-node-webapp

const {expect} = require('chai');
const app = require('../server');
const session = require('supertest-session');

describe('/api/auth', () => {
  let sess = null;
  beforeEach(() => require('../startup_hooks').resolve());
  beforeEach(() => sess = session(app));
  afterEach(() => sess.destroy());

  it('GET emits authentication details', (done) => {
    sess.get('/api/auth/')
      .expect(200)
      .expect('Content-Type', /json/)
      .end((err, res) => {
        const body = res.body;
        expect(err).to.be.null;
        expect(body.options).to.be.an.array;
        expect(body.options.length).to.be.greaterThan(0);
        expect(body.links).to.be.an.object;
        done();
      });
  });

  describe('/current', () => {
    it('GET will emit a 404 if the client is not authenticated', (done) => {
      sess
        .get('/api/auth/current')
        .expect(404)
        .expect('Content-Type', /json/)
        .end((err) => {
          expect(err).to.be.null;
          done();
        });
    });

    it('DELETE will log out current user', () => {
      return new Promise((resolve) => {
        sess.post('/api/auth/local')
          .set('Content-Type', 'application/json')
          .set('Accept', 'application/json')
          .send({email: 'test@atsid.com', password: 'abc123'})
          .expect(200, resolve);
      }).then(() => {
        return new Promise((resolve) => {
          sess.delete('/api/auth/current')
            .set('Content-Type', 'application/json')
            .set('Accept', 'application/json')
            .expect(204, resolve);
        });
      }).then(() => {
        return new Promise((resolve) => {
          sess.get('/api/auth/current')
            .set('Content-Type', 'application/json')
            .set('Accept', 'application/json')
            .expect(404, resolve);
        });
      });
    });
  });

  describe('/local', () => {
    it('POST can authenticate a user', (done) => {
      function checkAuthResponse(err, res) {
        expect(err).to.be.null;
        expect(res.body.email).to.equal('test@atsid.com');
        expect(res.body.password).to.be.undefined;
      }

      sess.post('/api/auth/local')
        .set('Content-Type', 'application/json')
        .set('Accept', 'application/json')
        .send({email: 'test@atsid.com', password: 'abc123'})
        .expect(200, (err, res) => {
          checkAuthResponse(err, res);
          sess.get('/api/auth/current')
            .set('Accept', 'application/json')
            .expect(200, (err2, res2) => {
              checkAuthResponse(err2, res2);
              done();
            });
        });
    });
    it('POST will reject a user with an unknown email address', (done) => {
      sess.post('/api/auth/local')
        .set('Content-Type', 'application/json')
        .set('Accept', 'application/json')
        .send({email: 'bad.dude@haxxors.com', password: 'abc123'})
        .expect(401, done);
    });
    it('POST will reject a user with a bad password', (done) => {
      sess.post('/api/auth/local')
        .set('Content-Type', 'application/json')
        .set('Accept', 'application/json')
        .send({email: 'test@atsid.com', password: 'BOGUS_PASSWORD'})
        .expect(401, done);
    });
  });
});