@actuate-media/cms-core 0.38.0 → 0.40.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/__tests__/api/ai-status.test.d.ts +2 -0
- package/dist/__tests__/api/ai-status.test.d.ts.map +1 -0
- package/dist/__tests__/api/ai-status.test.js +110 -0
- package/dist/__tests__/api/ai-status.test.js.map +1 -0
- package/dist/__tests__/api/users-detail.test.d.ts +2 -0
- package/dist/__tests__/api/users-detail.test.d.ts.map +1 -0
- package/dist/__tests__/api/users-detail.test.js +349 -0
- package/dist/__tests__/api/users-detail.test.js.map +1 -0
- package/dist/__tests__/api/users-invite.test.d.ts +2 -0
- package/dist/__tests__/api/users-invite.test.d.ts.map +1 -0
- package/dist/__tests__/api/users-invite.test.js +221 -0
- package/dist/__tests__/api/users-invite.test.js.map +1 -0
- package/dist/__tests__/auth/invites.test.d.ts +2 -0
- package/dist/__tests__/auth/invites.test.d.ts.map +1 -0
- package/dist/__tests__/auth/invites.test.js +181 -0
- package/dist/__tests__/auth/invites.test.js.map +1 -0
- package/dist/__tests__/auth/reset.test.js +52 -1
- package/dist/__tests__/auth/reset.test.js.map +1 -1
- package/dist/__tests__/auth/roles.test.d.ts +2 -0
- package/dist/__tests__/auth/roles.test.d.ts.map +1 -0
- package/dist/__tests__/auth/roles.test.js +60 -0
- package/dist/__tests__/auth/roles.test.js.map +1 -0
- package/dist/__tests__/auth/team.test.d.ts +2 -0
- package/dist/__tests__/auth/team.test.d.ts.map +1 -0
- package/dist/__tests__/auth/team.test.js +139 -0
- package/dist/__tests__/auth/team.test.js.map +1 -0
- package/dist/__tests__/auth/user-admin.test.d.ts +2 -0
- package/dist/__tests__/auth/user-admin.test.d.ts.map +1 -0
- package/dist/__tests__/auth/user-admin.test.js +162 -0
- package/dist/__tests__/auth/user-admin.test.js.map +1 -0
- package/dist/__tests__/email/sender.test.d.ts +2 -0
- package/dist/__tests__/email/sender.test.d.ts.map +1 -0
- package/dist/__tests__/email/sender.test.js +33 -0
- package/dist/__tests__/email/sender.test.js.map +1 -0
- package/dist/__tests__/middleware.test.js +30 -0
- package/dist/__tests__/middleware.test.js.map +1 -1
- package/dist/__tests__/setup/index.test.js +37 -2
- package/dist/__tests__/setup/index.test.js.map +1 -1
- package/dist/api/handlers.d.ts.map +1 -1
- package/dist/api/handlers.js +1116 -194
- package/dist/api/handlers.js.map +1 -1
- package/dist/auth/index.d.ts +4 -0
- package/dist/auth/index.d.ts.map +1 -1
- package/dist/auth/index.js +2 -0
- package/dist/auth/index.js.map +1 -1
- package/dist/auth/invite-email.d.ts +12 -0
- package/dist/auth/invite-email.d.ts.map +1 -0
- package/dist/auth/invite-email.js +57 -0
- package/dist/auth/invite-email.js.map +1 -0
- package/dist/auth/invites.d.ts +71 -0
- package/dist/auth/invites.d.ts.map +1 -0
- package/dist/auth/invites.js +279 -0
- package/dist/auth/invites.js.map +1 -0
- package/dist/auth/reset.d.ts +6 -0
- package/dist/auth/reset.d.ts.map +1 -1
- package/dist/auth/reset.js +38 -7
- package/dist/auth/reset.js.map +1 -1
- package/dist/auth/roles.d.ts +51 -0
- package/dist/auth/roles.d.ts.map +1 -0
- package/dist/auth/roles.js +159 -0
- package/dist/auth/roles.js.map +1 -0
- package/dist/auth/team.d.ts +86 -0
- package/dist/auth/team.d.ts.map +1 -0
- package/dist/auth/team.js +270 -0
- package/dist/auth/team.js.map +1 -0
- package/dist/auth/user-admin.d.ts +91 -0
- package/dist/auth/user-admin.d.ts.map +1 -0
- package/dist/auth/user-admin.js +250 -0
- package/dist/auth/user-admin.js.map +1 -0
- package/dist/email/sender.d.ts +35 -0
- package/dist/email/sender.d.ts.map +1 -0
- package/dist/email/sender.js +25 -0
- package/dist/email/sender.js.map +1 -0
- package/dist/forms/notify.d.ts.map +1 -1
- package/dist/forms/notify.js +3 -2
- package/dist/forms/notify.js.map +1 -1
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -0
- package/dist/index.js.map +1 -1
- package/dist/middleware.d.ts.map +1 -1
- package/dist/middleware.js +60 -1
- package/dist/middleware.js.map +1 -1
- package/dist/setup/index.d.ts +14 -0
- package/dist/setup/index.d.ts.map +1 -1
- package/dist/setup/index.js +29 -3
- package/dist/setup/index.js.map +1 -1
- package/package.json +11 -1
- package/prisma/migrations/0011_user_roles_owner_viewer/migration.sql +6 -0
- package/prisma/migrations/0012_invites_and_user_lifecycle/migration.sql +40 -0
- package/prisma/schema.prisma +43 -0
|
@@ -0,0 +1,60 @@
|
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
import { toDisplayRole, enumRolesForDisplay, normalizeAssignableRole, isOwnerRole, roleRank, permissionsForRole, ASSIGNABLE_ROLES, } from '../../auth/roles.js';
|
|
3
|
+
describe('role display mapping', () => {
|
|
4
|
+
it('maps legacy roles to product display roles', () => {
|
|
5
|
+
expect(toDisplayRole('OWNER')).toBe('Owner');
|
|
6
|
+
expect(toDisplayRole('ADMIN')).toBe('Admin');
|
|
7
|
+
expect(toDisplayRole('EDITOR')).toBe('Editor');
|
|
8
|
+
expect(toDisplayRole('AUTHOR')).toBe('Editor');
|
|
9
|
+
expect(toDisplayRole('CLIENT')).toBe('Viewer');
|
|
10
|
+
expect(toDisplayRole('VIEWER')).toBe('Viewer');
|
|
11
|
+
expect(toDisplayRole('garbage')).toBe('Viewer');
|
|
12
|
+
});
|
|
13
|
+
it('maps a display filter to the enum values it covers', () => {
|
|
14
|
+
expect(enumRolesForDisplay('Editor')).toEqual(['EDITOR', 'AUTHOR']);
|
|
15
|
+
expect(enumRolesForDisplay('Viewer')).toEqual(['VIEWER', 'CLIENT']);
|
|
16
|
+
expect(enumRolesForDisplay('Owner')).toEqual(['OWNER']);
|
|
17
|
+
expect(enumRolesForDisplay('all')).toBeNull();
|
|
18
|
+
});
|
|
19
|
+
});
|
|
20
|
+
describe('assignable roles', () => {
|
|
21
|
+
it('only allows the four product roles', () => {
|
|
22
|
+
expect(ASSIGNABLE_ROLES).toEqual(['OWNER', 'ADMIN', 'EDITOR', 'VIEWER']);
|
|
23
|
+
expect(normalizeAssignableRole('admin')).toBe('ADMIN');
|
|
24
|
+
expect(normalizeAssignableRole('AUTHOR')).toBeNull();
|
|
25
|
+
expect(normalizeAssignableRole('CLIENT')).toBeNull();
|
|
26
|
+
expect(normalizeAssignableRole('nope')).toBeNull();
|
|
27
|
+
});
|
|
28
|
+
});
|
|
29
|
+
describe('role rank + owner check', () => {
|
|
30
|
+
it('ranks Owner above Admin above Editor above Viewer', () => {
|
|
31
|
+
expect(roleRank('OWNER')).toBeGreaterThan(roleRank('ADMIN'));
|
|
32
|
+
expect(roleRank('ADMIN')).toBeGreaterThan(roleRank('EDITOR'));
|
|
33
|
+
expect(roleRank('EDITOR')).toBeGreaterThan(roleRank('VIEWER'));
|
|
34
|
+
expect(roleRank('AUTHOR')).toBe(roleRank('EDITOR'));
|
|
35
|
+
});
|
|
36
|
+
it('detects the Owner role', () => {
|
|
37
|
+
expect(isOwnerRole('OWNER')).toBe(true);
|
|
38
|
+
expect(isOwnerRole('owner')).toBe(true);
|
|
39
|
+
expect(isOwnerRole('ADMIN')).toBe(false);
|
|
40
|
+
});
|
|
41
|
+
});
|
|
42
|
+
describe('permissions for role', () => {
|
|
43
|
+
it('grants Owner everything and Admin everything except owner-only scopes', () => {
|
|
44
|
+
expect(permissionsForRole('OWNER')).toContain('billing.manage');
|
|
45
|
+
expect(permissionsForRole('OWNER')).toContain('workspace.delete');
|
|
46
|
+
const admin = permissionsForRole('ADMIN');
|
|
47
|
+
expect(admin).toContain('users.invite');
|
|
48
|
+
expect(admin).not.toContain('billing.manage');
|
|
49
|
+
expect(admin).not.toContain('workspace.delete');
|
|
50
|
+
});
|
|
51
|
+
it('limits Editor to content and Viewer to read-only', () => {
|
|
52
|
+
const editor = permissionsForRole('EDITOR');
|
|
53
|
+
expect(editor).toContain('content.publish');
|
|
54
|
+
expect(editor).not.toContain('users.invite');
|
|
55
|
+
expect(editor).not.toContain('settings.manage');
|
|
56
|
+
expect(permissionsForRole('VIEWER')).toEqual(['dashboard.view', 'content.view']);
|
|
57
|
+
expect(permissionsForRole('AUTHOR')).toEqual(permissionsForRole('EDITOR'));
|
|
58
|
+
});
|
|
59
|
+
});
|
|
60
|
+
//# sourceMappingURL=roles.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"roles.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/roles.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,qBAAqB,CAAA;AAE5B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpD,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpD,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC9D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC/D,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QACjE,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QAC/C,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"team.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/team.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,139 @@
|
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
import { buildRecommendations, listTeamMembers, getUserStats, workspaceDomainFromUrl, } from '../../auth/team.js';
|
|
3
|
+
const DAY = 24 * 60 * 60 * 1000;
|
|
4
|
+
function member(over) {
|
|
5
|
+
return {
|
|
6
|
+
id: 'm1',
|
|
7
|
+
name: 'Test User',
|
|
8
|
+
email: 'test@actuatemedia.com',
|
|
9
|
+
initials: 'TU',
|
|
10
|
+
role: 'EDITOR',
|
|
11
|
+
roleName: 'Editor',
|
|
12
|
+
status: 'active',
|
|
13
|
+
mfaEnabled: true,
|
|
14
|
+
mfaRequired: false,
|
|
15
|
+
externalDomain: false,
|
|
16
|
+
authProvider: null,
|
|
17
|
+
lastLoginAt: new Date().toISOString(),
|
|
18
|
+
lastActiveAt: new Date().toISOString(),
|
|
19
|
+
acceptedInviteAt: new Date(Date.now() - 30 * DAY).toISOString(),
|
|
20
|
+
createdAt: new Date(Date.now() - 60 * DAY).toISOString(),
|
|
21
|
+
isCurrentUser: false,
|
|
22
|
+
...over,
|
|
23
|
+
};
|
|
24
|
+
}
|
|
25
|
+
describe('buildRecommendations', () => {
|
|
26
|
+
it('flags an Owner without MFA as critical', () => {
|
|
27
|
+
const recs = buildRecommendations([member({ id: 'o1', roleName: 'Owner', role: 'OWNER', mfaEnabled: false })], [], new Set());
|
|
28
|
+
expect(recs[0].type).toBe('owner_without_mfa');
|
|
29
|
+
expect(recs[0].severity).toBe('critical');
|
|
30
|
+
});
|
|
31
|
+
it('flags an Admin without MFA as high', () => {
|
|
32
|
+
const recs = buildRecommendations([member({ id: 'a1', roleName: 'Admin', role: 'ADMIN', mfaEnabled: false })], [], new Set());
|
|
33
|
+
expect(recs[0].type).toBe('admin_without_mfa');
|
|
34
|
+
expect(recs[0].severity).toBe('high');
|
|
35
|
+
});
|
|
36
|
+
it('combines inactive + external into one high recommendation', () => {
|
|
37
|
+
const recs = buildRecommendations([
|
|
38
|
+
member({
|
|
39
|
+
id: 'x1',
|
|
40
|
+
roleName: 'Viewer',
|
|
41
|
+
role: 'VIEWER',
|
|
42
|
+
externalDomain: true,
|
|
43
|
+
lastLoginAt: new Date(Date.now() - 94 * DAY).toISOString(),
|
|
44
|
+
}),
|
|
45
|
+
], [], new Set());
|
|
46
|
+
expect(recs[0].type).toBe('inactive_user');
|
|
47
|
+
expect(recs[0].severity).toBe('high');
|
|
48
|
+
expect(recs[0].description).toContain('94 days');
|
|
49
|
+
expect(recs[0].description).toContain('external');
|
|
50
|
+
});
|
|
51
|
+
it('flags stale pending invites and sorts highest severity first', () => {
|
|
52
|
+
const recs = buildRecommendations([member({ id: 'a1', roleName: 'Admin', role: 'ADMIN', mfaEnabled: false })], [
|
|
53
|
+
{
|
|
54
|
+
id: 'inv1',
|
|
55
|
+
email: 'old@x.com',
|
|
56
|
+
createdAt: new Date(Date.now() - 10 * DAY).toISOString(),
|
|
57
|
+
},
|
|
58
|
+
], new Set());
|
|
59
|
+
expect(recs).toHaveLength(2);
|
|
60
|
+
expect(recs[0].severity).toBe('high'); // admin_without_mfa before stale_invite (medium)
|
|
61
|
+
expect(recs.some((r) => r.type === 'stale_invite')).toBe(true);
|
|
62
|
+
});
|
|
63
|
+
it('filters out dismissed recommendations', () => {
|
|
64
|
+
const recs = buildRecommendations([member({ id: 'o1', roleName: 'Owner', role: 'OWNER', mfaEnabled: false })], [], new Set(['owner_without_mfa:o1']));
|
|
65
|
+
expect(recs).toHaveLength(0);
|
|
66
|
+
});
|
|
67
|
+
it('does not flag a healthy active member', () => {
|
|
68
|
+
const recs = buildRecommendations([member({})], [], new Set());
|
|
69
|
+
expect(recs).toHaveLength(0);
|
|
70
|
+
});
|
|
71
|
+
});
|
|
72
|
+
describe('listTeamMembers + getUserStats', () => {
|
|
73
|
+
function db(users, invites) {
|
|
74
|
+
return {
|
|
75
|
+
user: { findMany: async () => users },
|
|
76
|
+
invite: {
|
|
77
|
+
findMany: async ({ where } = {}) => invites.filter((i) => !where?.status || i.status === where.status),
|
|
78
|
+
count: async ({ where } = {}) => invites.filter((i) => !where?.status || i.status === where.status).length,
|
|
79
|
+
},
|
|
80
|
+
};
|
|
81
|
+
}
|
|
82
|
+
const baseUser = (over) => ({
|
|
83
|
+
id: 'u',
|
|
84
|
+
name: 'U',
|
|
85
|
+
email: 'u@actuatemedia.com',
|
|
86
|
+
role: 'EDITOR',
|
|
87
|
+
isActive: true,
|
|
88
|
+
totpEnabled: true,
|
|
89
|
+
createdAt: new Date(),
|
|
90
|
+
...over,
|
|
91
|
+
});
|
|
92
|
+
it('excludes users that still have a pending invite', async () => {
|
|
93
|
+
const d = db([
|
|
94
|
+
baseUser({ id: 'u1', email: 'a@actuatemedia.com' }),
|
|
95
|
+
baseUser({ id: 'u2', email: 'pending@actuatemedia.com' }),
|
|
96
|
+
], [{ id: 'i1', email: 'pending@actuatemedia.com', status: 'PENDING' }]);
|
|
97
|
+
const members = await listTeamMembers(d, {}, { workspaceDomain: 'actuatemedia.com' });
|
|
98
|
+
expect(members.map((m) => m.email)).toEqual(['a@actuatemedia.com']);
|
|
99
|
+
});
|
|
100
|
+
it('marks external-domain members', async () => {
|
|
101
|
+
const d = db([baseUser({ id: 'u1', email: 'free@elsewhere.io' })], []);
|
|
102
|
+
const members = await listTeamMembers(d, {}, { workspaceDomain: 'actuatemedia.com' });
|
|
103
|
+
expect(members[0].externalDomain).toBe(true);
|
|
104
|
+
});
|
|
105
|
+
it('counts members, admins, pending invites and seats', async () => {
|
|
106
|
+
const d = db([
|
|
107
|
+
baseUser({ id: 'u1', role: 'OWNER', email: 'owner@actuatemedia.com' }),
|
|
108
|
+
baseUser({ id: 'u2', role: 'ADMIN', email: 'admin@actuatemedia.com' }),
|
|
109
|
+
baseUser({ id: 'u3', role: 'EDITOR', email: 'ed@actuatemedia.com' }),
|
|
110
|
+
baseUser({
|
|
111
|
+
id: 'u4',
|
|
112
|
+
role: 'EDITOR',
|
|
113
|
+
email: 'sus@actuatemedia.com',
|
|
114
|
+
suspendedAt: new Date(),
|
|
115
|
+
}),
|
|
116
|
+
], [{ id: 'i1', email: 'p@actuatemedia.com', status: 'PENDING' }]);
|
|
117
|
+
const stats = await getUserStats(d, { seatLimit: 10 });
|
|
118
|
+
expect(stats.members).toBe(3); // suspended excluded
|
|
119
|
+
expect(stats.admins).toBe(2); // owner + admin
|
|
120
|
+
expect(stats.pendingInvites).toBe(1);
|
|
121
|
+
expect(stats.seatsUsed).toBe(4); // 3 active + 1 pending
|
|
122
|
+
expect(stats.seatsAvailable).toBe(6);
|
|
123
|
+
});
|
|
124
|
+
it('reports unlimited seats when no limit is set', async () => {
|
|
125
|
+
const d = db([baseUser({ id: 'u1' })], []);
|
|
126
|
+
const stats = await getUserStats(d, {});
|
|
127
|
+
expect(stats.seatLimit).toBeNull();
|
|
128
|
+
expect(stats.seatsAvailable).toBeNull();
|
|
129
|
+
});
|
|
130
|
+
});
|
|
131
|
+
describe('workspaceDomainFromUrl', () => {
|
|
132
|
+
it('strips protocol and www', () => {
|
|
133
|
+
expect(workspaceDomainFromUrl('https://www.actuatemedia.com')).toBe('actuatemedia.com');
|
|
134
|
+
expect(workspaceDomainFromUrl('https://app.actuatemedia.com/admin')).toBe('app.actuatemedia.com');
|
|
135
|
+
expect(workspaceDomainFromUrl(null)).toBeNull();
|
|
136
|
+
expect(workspaceDomainFromUrl('not a url')).toBeNull();
|
|
137
|
+
});
|
|
138
|
+
});
|
|
139
|
+
//# sourceMappingURL=team.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"team.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/team.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,sBAAsB,GAEvB,MAAM,oBAAoB,CAAA;AAE3B,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE/B,SAAS,MAAM,CAAC,IAAyB;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,uBAAuB;QAC9B,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,gBAAgB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;QAC/D,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;QACxD,aAAa,EAAE,KAAK;QACpB,GAAG,IAAI;KACR,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E,EAAE,EACF,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E,EAAE,EACF,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,oBAAoB,CAC/B;YACE,MAAM,CAAC;gBACL,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,IAAI;gBACpB,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;aAC3D,CAAC;SACH,EACD,EAAE,EACF,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E;YACE;gBACE,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;aACzD;SACF,EACD,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,iDAAiD;QACxF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E,EAAE,EACF,IAAI,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAClC,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,SAAS,EAAE,CAAC,KAAY,EAAE,OAAc;QACtC,OAAO;YACL,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE;YACrC,MAAM,EAAE;gBACN,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,KAAU,EAAE,EAAE,EAAE,CACtC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;gBACpE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,KAAU,EAAE,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM;aAC5E;SACF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;QAC/B,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,GAAG;QACT,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,GAAG,IAAI;KACR,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CACV;YACE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACnD,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;SAC1D,EACD,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,CAAQ,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACtE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,CAAQ,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,CAAC,GAAG,EAAE,CACV;YACE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;YACtE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;YACtE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YACpE,QAAQ,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,sBAAsB;gBAC7B,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC;SACH,EACD,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAC/D,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,qBAAqB;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,gBAAgB;QAC7C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,uBAAuB;QACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACvF,MAAM,CAAC,sBAAsB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CACvE,sBAAsB,CACvB,CAAA;QACD,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/C,MAAM,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"user-admin.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/user-admin.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,162 @@
|
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
import { parseUserAgent, getUserDetail, listUserSessions, listUserActivity, getUserPermissionView, } from '../../auth/user-admin.js';
|
|
3
|
+
describe('parseUserAgent', () => {
|
|
4
|
+
it('identifies common browser/OS pairs', () => {
|
|
5
|
+
expect(parseUserAgent('Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36')).toEqual({ browser: 'Chrome', os: 'Windows', deviceLabel: 'Chrome on Windows' });
|
|
6
|
+
expect(parseUserAgent('Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15')).toEqual({ browser: 'Safari', os: 'macOS', deviceLabel: 'Safari on macOS' });
|
|
7
|
+
expect(parseUserAgent('Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0')).toEqual({ browser: 'Firefox', os: 'Linux', deviceLabel: 'Firefox on Linux' });
|
|
8
|
+
});
|
|
9
|
+
it('degrades unknown agents instead of guessing', () => {
|
|
10
|
+
expect(parseUserAgent(null)).toEqual({
|
|
11
|
+
browser: 'Unknown',
|
|
12
|
+
os: 'Unknown',
|
|
13
|
+
deviceLabel: 'Unknown device',
|
|
14
|
+
});
|
|
15
|
+
});
|
|
16
|
+
it('prefers Edge over Chrome when both tokens are present', () => {
|
|
17
|
+
const r = parseUserAgent('Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 Edg/124.0');
|
|
18
|
+
expect(r.browser).toBe('Edge');
|
|
19
|
+
});
|
|
20
|
+
});
|
|
21
|
+
describe('getUserDetail', () => {
|
|
22
|
+
function db(overrides = {}) {
|
|
23
|
+
const user = {
|
|
24
|
+
id: 'u1',
|
|
25
|
+
name: 'Dana Chen',
|
|
26
|
+
email: 'dana@actuatemedia.com',
|
|
27
|
+
role: 'OWNER',
|
|
28
|
+
passwordHash: 'x',
|
|
29
|
+
totpEnabled: true,
|
|
30
|
+
mfaRequired: false,
|
|
31
|
+
forcePasswordReset: false,
|
|
32
|
+
failedLoginCount: 0,
|
|
33
|
+
isActive: true,
|
|
34
|
+
emailVerified: true,
|
|
35
|
+
lastLoginAt: new Date('2026-06-01T00:00:00Z'),
|
|
36
|
+
createdAt: new Date('2026-01-01T00:00:00Z'),
|
|
37
|
+
invitedById: null,
|
|
38
|
+
...overrides,
|
|
39
|
+
};
|
|
40
|
+
return {
|
|
41
|
+
user: { findUnique: async ({ where }) => (where.id === user.id ? user : null) },
|
|
42
|
+
oAuthAccount: { findMany: async () => [] },
|
|
43
|
+
document: { count: async () => 3 },
|
|
44
|
+
};
|
|
45
|
+
}
|
|
46
|
+
it('serializes a member into the detail shape', async () => {
|
|
47
|
+
const detail = await getUserDetail(db(), 'u1', {
|
|
48
|
+
workspaceDomain: 'actuatemedia.com',
|
|
49
|
+
currentUserId: 'u1',
|
|
50
|
+
});
|
|
51
|
+
expect(detail).toMatchObject({
|
|
52
|
+
id: 'u1',
|
|
53
|
+
roleName: 'Owner',
|
|
54
|
+
status: 'active',
|
|
55
|
+
mfaEnabled: true,
|
|
56
|
+
passwordSet: true,
|
|
57
|
+
ssoOnly: false,
|
|
58
|
+
externalDomain: false,
|
|
59
|
+
contentOwnedCount: 3,
|
|
60
|
+
isCurrentUser: true,
|
|
61
|
+
});
|
|
62
|
+
});
|
|
63
|
+
it('flags external domains and SSO-only accounts', async () => {
|
|
64
|
+
const detail = await getUserDetail({
|
|
65
|
+
user: {
|
|
66
|
+
findUnique: async () => ({
|
|
67
|
+
id: 'u2',
|
|
68
|
+
name: 'Sara',
|
|
69
|
+
email: 'sara@freelance.io',
|
|
70
|
+
role: 'VIEWER',
|
|
71
|
+
passwordHash: null,
|
|
72
|
+
totpEnabled: false,
|
|
73
|
+
isActive: true,
|
|
74
|
+
createdAt: new Date(),
|
|
75
|
+
}),
|
|
76
|
+
},
|
|
77
|
+
oAuthAccount: { findMany: async () => [{ provider: 'google' }] },
|
|
78
|
+
document: { count: async () => 0 },
|
|
79
|
+
}, 'u2', { workspaceDomain: 'actuatemedia.com' });
|
|
80
|
+
expect(detail?.externalDomain).toBe(true);
|
|
81
|
+
expect(detail?.ssoOnly).toBe(true);
|
|
82
|
+
expect(detail?.oauthProviders).toEqual(['google']);
|
|
83
|
+
});
|
|
84
|
+
it('returns null for a missing user', async () => {
|
|
85
|
+
expect(await getUserDetail(db(), 'nope')).toBeNull();
|
|
86
|
+
});
|
|
87
|
+
it('derives status from lifecycle columns', async () => {
|
|
88
|
+
const suspended = await getUserDetail(db({ suspendedAt: new Date() }), 'u1');
|
|
89
|
+
expect(suspended?.status).toBe('suspended');
|
|
90
|
+
const locked = await getUserDetail(db({ lockedAt: new Date() }), 'u1');
|
|
91
|
+
expect(locked?.status).toBe('locked');
|
|
92
|
+
const gone = await getUserDetail(db({ isActive: false }), 'u1');
|
|
93
|
+
expect(gone?.status).toBe('deactivated');
|
|
94
|
+
});
|
|
95
|
+
});
|
|
96
|
+
describe('listUserSessions', () => {
|
|
97
|
+
it('maps sessions, marks the current one, and computes active', async () => {
|
|
98
|
+
const future = new Date(Date.now() + 86400000);
|
|
99
|
+
const past = new Date(Date.now() - 86400000);
|
|
100
|
+
const db = {
|
|
101
|
+
session: {
|
|
102
|
+
findMany: async () => [
|
|
103
|
+
{
|
|
104
|
+
id: 's1',
|
|
105
|
+
userAgent: 'x Chrome/1 Safari',
|
|
106
|
+
expiresAt: future,
|
|
107
|
+
createdAt: new Date(),
|
|
108
|
+
revokedAt: null,
|
|
109
|
+
},
|
|
110
|
+
{ id: 's2', userAgent: 'x', expiresAt: past, createdAt: new Date(), revokedAt: null },
|
|
111
|
+
{
|
|
112
|
+
id: 's3',
|
|
113
|
+
userAgent: 'x',
|
|
114
|
+
expiresAt: future,
|
|
115
|
+
createdAt: new Date(),
|
|
116
|
+
revokedAt: new Date(),
|
|
117
|
+
},
|
|
118
|
+
],
|
|
119
|
+
},
|
|
120
|
+
};
|
|
121
|
+
const sessions = await listUserSessions(db, 'u1', 's1');
|
|
122
|
+
expect(sessions).toHaveLength(3);
|
|
123
|
+
expect(sessions.find((s) => s.id === 's1')?.current).toBe(true);
|
|
124
|
+
expect(sessions.find((s) => s.id === 's1')?.active).toBe(true);
|
|
125
|
+
expect(sessions.find((s) => s.id === 's2')?.active).toBe(false); // expired
|
|
126
|
+
expect(sessions.find((s) => s.id === 's3')?.active).toBe(false); // revoked
|
|
127
|
+
});
|
|
128
|
+
});
|
|
129
|
+
describe('listUserActivity', () => {
|
|
130
|
+
it('merges actor + target events, de-duplicates, and sorts newest first', async () => {
|
|
131
|
+
const db = {
|
|
132
|
+
auditLog: {
|
|
133
|
+
findMany: async ({ where }) => {
|
|
134
|
+
if (where.userId === 'u1') {
|
|
135
|
+
return [
|
|
136
|
+
{ id: 'a1', event: 'login', userId: 'u1', timestamp: new Date('2026-06-03') },
|
|
137
|
+
{ id: 'a2', event: 'role_changed', userId: 'u1', timestamp: new Date('2026-06-01') },
|
|
138
|
+
];
|
|
139
|
+
}
|
|
140
|
+
// target query
|
|
141
|
+
return [
|
|
142
|
+
{ id: 'a2', event: 'role_changed', timestamp: new Date('2026-06-01') }, // dup id
|
|
143
|
+
{ id: 'a3', event: 'user_suspended', timestamp: new Date('2026-06-05') },
|
|
144
|
+
];
|
|
145
|
+
},
|
|
146
|
+
},
|
|
147
|
+
};
|
|
148
|
+
const events = await listUserActivity(db, 'u1');
|
|
149
|
+
expect(events.map((e) => e.id)).toEqual(['a3', 'a1', 'a2']);
|
|
150
|
+
expect(events.find((e) => e.id === 'a1')?.role).toBe('actor');
|
|
151
|
+
expect(events.find((e) => e.id === 'a3')?.role).toBe('target');
|
|
152
|
+
});
|
|
153
|
+
});
|
|
154
|
+
describe('getUserPermissionView', () => {
|
|
155
|
+
it('returns role, display label, and derived permissions', () => {
|
|
156
|
+
const view = getUserPermissionView('EDITOR');
|
|
157
|
+
expect(view.roleName).toBe('Editor');
|
|
158
|
+
expect(view.permissions).toContain('content.publish');
|
|
159
|
+
expect(view.permissions).not.toContain('users.invite');
|
|
160
|
+
});
|
|
161
|
+
});
|
|
162
|
+
//# sourceMappingURL=user-admin.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"user-admin.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/user-admin.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,0BAA0B,CAAA;AAEjC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CACJ,cAAc,CACZ,6GAA6G,CAC9G,CACF,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAA;QAEjF,MAAM,CACJ,cAAc,CACZ,uHAAuH,CACxH,CACF,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAE7E,MAAM,CACJ,cAAc,CAAC,wEAAwE,CAAC,CACzF,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YACnC,OAAO,EAAE,SAAS;YAClB,EAAE,EAAE,SAAS;YACb,WAAW,EAAE,gBAAgB;SAC9B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,cAAc,CACtB,2GAA2G,CAC5G,CAAA;QACD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,SAAS,EAAE,CAAC,YAAqC,EAAE;QACjD,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,uBAAuB;YAC9B,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,GAAG;YACjB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,KAAK;YAClB,kBAAkB,EAAE,KAAK;YACzB,gBAAgB,EAAE,CAAC;YACnB,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;YAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;YAC3C,WAAW,EAAE,IAAI;YACjB,GAAG,SAAS;SACb,CAAA;QACD,OAAO;YACL,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACpF,YAAY,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;YAC1C,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE;SACnC,CAAA;IACH,CAAC;IAED,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;YAC7C,eAAe,EAAE,kBAAkB;YACnC,aAAa,EAAE,IAAI;SACpB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,KAAK;YACrB,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC;YACE,IAAI,EAAE;gBACJ,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACvB,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,mBAAmB;oBAC1B,IAAI,EAAE,QAAQ;oBACd,YAAY,EAAE,IAAI;oBAClB,WAAW,EAAE,KAAK;oBAClB,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;aACH;YACD,YAAY,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE;YAChE,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE;SACnC,EACD,IAAI,EACJ,EAAE,eAAe,EAAE,kBAAkB,EAAE,CACxC,CAAA;QACD,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC5E,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAA;QAC5C,MAAM,EAAE,GAAG;YACT,OAAO,EAAE;gBACP,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;oBACpB;wBACE,EAAE,EAAE,IAAI;wBACR,SAAS,EAAE,mBAAmB;wBAC9B,SAAS,EAAE,MAAM;wBACjB,SAAS,EAAE,IAAI,IAAI,EAAE;wBACrB,SAAS,EAAE,IAAI;qBAChB;oBACD,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;oBACrF;wBACE,EAAE,EAAE,IAAI;wBACR,SAAS,EAAE,GAAG;wBACd,SAAS,EAAE,MAAM;wBACjB,SAAS,EAAE,IAAI,IAAI,EAAE;wBACrB,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB;iBACF;aACF;SACF,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACvD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAC,UAAU;QAC1E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAC,UAAU;IAC5E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,GAAG;YACT,QAAQ,EAAE;gBACR,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;oBACjC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;wBAC1B,OAAO;4BACL,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE;4BAC7E,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE;yBACrF,CAAA;oBACH,CAAC;oBACD,eAAe;oBACf,OAAO;wBACL,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS;wBACjF,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE;qBACzE,CAAA;gBACH,CAAC;aACF;SACF,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QACrD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sender.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/email/sender.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { describe, it, expect, afterEach, vi } from 'vitest';
|
|
2
|
+
import { setEmailSender, getRegisteredEmailSender, resolveEmailSender } from '../../email/sender.js';
|
|
3
|
+
import { setActuateConfig } from '../../config/runtime.js';
|
|
4
|
+
afterEach(() => {
|
|
5
|
+
setEmailSender(null);
|
|
6
|
+
setActuateConfig(undefined);
|
|
7
|
+
});
|
|
8
|
+
describe('email sender registry', () => {
|
|
9
|
+
it('round-trips a registered sender', () => {
|
|
10
|
+
expect(getRegisteredEmailSender()).toBeNull();
|
|
11
|
+
const sender = { send: vi.fn(async () => { }) };
|
|
12
|
+
setEmailSender(sender);
|
|
13
|
+
expect(getRegisteredEmailSender()).toBe(sender);
|
|
14
|
+
setEmailSender(null);
|
|
15
|
+
expect(getRegisteredEmailSender()).toBeNull();
|
|
16
|
+
});
|
|
17
|
+
it('resolves null when nothing is configured', () => {
|
|
18
|
+
expect(resolveEmailSender()).toBeNull();
|
|
19
|
+
});
|
|
20
|
+
it('resolves the registered sender when no platform adapter is set', () => {
|
|
21
|
+
const sender = { send: vi.fn(async () => { }) };
|
|
22
|
+
setEmailSender(sender);
|
|
23
|
+
expect(resolveEmailSender()).toBe(sender);
|
|
24
|
+
});
|
|
25
|
+
it('prefers the platform adapter over a registered sender', () => {
|
|
26
|
+
const registered = { send: vi.fn(async () => { }) };
|
|
27
|
+
const platform = { send: vi.fn(async () => { }) };
|
|
28
|
+
setEmailSender(registered);
|
|
29
|
+
setActuateConfig({ platform: { email: platform } });
|
|
30
|
+
expect(resolveEmailSender()).toBe(platform);
|
|
31
|
+
});
|
|
32
|
+
});
|
|
33
|
+
//# sourceMappingURL=sender.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sender.test.js","sourceRoot":"","sources":["../../../src/__tests__/email/sender.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE1D,SAAS,CAAC,GAAG,EAAE;IACb,cAAc,CAAC,IAAI,CAAC,CAAA;IACpB,gBAAgB,CAAC,SAAkB,CAAC,CAAA;AACtC,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC7C,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAA;QAC9C,cAAc,CAAC,MAAM,CAAC,CAAA;QACtB,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/C,cAAc,CAAC,IAAI,CAAC,CAAA;QACpB,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAA;QAC9C,cAAc,CAAC,MAAM,CAAC,CAAA;QACtB,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAA;QAClD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAA;QAChD,cAAc,CAAC,UAAU,CAAC,CAAA;QAC1B,gBAAgB,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAW,CAAC,CAAA;QAC5D,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
@@ -47,4 +47,34 @@ describe('createCMSMiddleware route boundary', () => {
|
|
|
47
47
|
expect(res?.status).toBe(403);
|
|
48
48
|
});
|
|
49
49
|
});
|
|
50
|
+
describe('createCMSMiddleware missing CMS_SECRET', () => {
|
|
51
|
+
const origSecret = process.env.CMS_SECRET;
|
|
52
|
+
beforeEach(() => {
|
|
53
|
+
process.env.CMS_SECRET = '';
|
|
54
|
+
});
|
|
55
|
+
afterEach(() => {
|
|
56
|
+
process.env.CMS_SECRET = origSecret;
|
|
57
|
+
});
|
|
58
|
+
function req(path) {
|
|
59
|
+
return new Request(`https://example.com${path}`);
|
|
60
|
+
}
|
|
61
|
+
it('returns an actionable 503 HTML page for the admin UI', async () => {
|
|
62
|
+
const mw = createCMSMiddleware({ admin: { path: '/admin' } });
|
|
63
|
+
const res = await mw(req('/admin'));
|
|
64
|
+
expect(res?.status).toBe(503);
|
|
65
|
+
expect(res?.headers.get('Content-Type')).toContain('text/html');
|
|
66
|
+
const body = await res.text();
|
|
67
|
+
expect(body).toContain('CMS_SECRET');
|
|
68
|
+
// Must not leak any secret value — only the variable name + remediation.
|
|
69
|
+
expect(body).toContain('randomBytes');
|
|
70
|
+
});
|
|
71
|
+
it('still lets the setup API through so the wizard can run before a secret exists', async () => {
|
|
72
|
+
const mw = createCMSMiddleware({ admin: { path: '/admin' } });
|
|
73
|
+
expect(await mw(req('/api/cms/setup/status'))).toBeNull();
|
|
74
|
+
});
|
|
75
|
+
it('does not block public routes when the secret is missing', async () => {
|
|
76
|
+
const mw = createCMSMiddleware({ admin: { path: '/admin' } });
|
|
77
|
+
expect(await mw(req('/about'))).toBeNull();
|
|
78
|
+
});
|
|
79
|
+
});
|
|
50
80
|
//# sourceMappingURL=middleware.test.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"middleware.test.js","sourceRoot":"","sources":["../../src/__tests__/middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEtD;;;;GAIG;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAA;IAEzC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,SAAS,GAAG,CAAC,IAAY;QACvB,OAAO,IAAI,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAA;QACrD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
1
|
+
{"version":3,"file":"middleware.test.js","sourceRoot":"","sources":["../../src/__tests__/middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEtD;;;;GAIG;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAA;IAEzC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,SAAS,GAAG,CAAC,IAAY;QACvB,OAAO,IAAI,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAA;QACrD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAA;IAEzC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,SAAS,GAAG,CAAC,IAAY;QACvB,OAAO,IAAI,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC7D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAG,MAAM,GAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QACpC,yEAAyE;QACzE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC7D,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC7D,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
@@ -1,10 +1,15 @@
|
|
|
1
1
|
import { describe, it, expect, vi } from 'vitest';
|
|
2
|
-
import { checkSetupRequired, createInitialAdmin, isDatabaseUnavailableError, } from '../../setup/index.js';
|
|
2
|
+
import { checkSetupRequired, createInitialAdmin, isDatabaseUnavailableError, isSchemaMissingError, } from '../../setup/index.js';
|
|
3
3
|
function connectionError(code) {
|
|
4
4
|
const err = new Error(`Can't reach database server`);
|
|
5
5
|
err.code = code;
|
|
6
6
|
return err;
|
|
7
7
|
}
|
|
8
|
+
function schemaMissingError() {
|
|
9
|
+
const err = new Error('The table `public.actuate_users` does not exist in the current database.');
|
|
10
|
+
err.code = 'P2021';
|
|
11
|
+
return err;
|
|
12
|
+
}
|
|
8
13
|
describe('isDatabaseUnavailableError', () => {
|
|
9
14
|
it('detects Prisma connection codes', () => {
|
|
10
15
|
expect(isDatabaseUnavailableError(connectionError('P1001'))).toBe(true);
|
|
@@ -37,10 +42,34 @@ describe('checkSetupRequired', () => {
|
|
|
37
42
|
const db = { user: { count: vi.fn().mockRejectedValue(connectionError('ECONNREFUSED')) } };
|
|
38
43
|
await expect(checkSetupRequired(db)).rejects.toThrow(/reach database/i);
|
|
39
44
|
});
|
|
40
|
-
it('still treats non-connection errors as setup-required', async () => {
|
|
45
|
+
it('still treats unknown non-connection errors as setup-required', async () => {
|
|
41
46
|
const db = { user: { count: vi.fn().mockRejectedValue(new Error('table missing')) } };
|
|
42
47
|
await expect(checkSetupRequired(db)).resolves.toEqual({ setupRequired: true, userCount: 0 });
|
|
43
48
|
});
|
|
49
|
+
it('reports migrationsRequired when the tables do not exist yet', async () => {
|
|
50
|
+
const db = { user: { count: vi.fn().mockRejectedValue(schemaMissingError()) } };
|
|
51
|
+
await expect(checkSetupRequired(db)).resolves.toEqual({
|
|
52
|
+
setupRequired: false,
|
|
53
|
+
userCount: 0,
|
|
54
|
+
migrationsRequired: true,
|
|
55
|
+
});
|
|
56
|
+
});
|
|
57
|
+
});
|
|
58
|
+
describe('isSchemaMissingError', () => {
|
|
59
|
+
it('detects Prisma P2021/P2022 codes', () => {
|
|
60
|
+
expect(isSchemaMissingError(schemaMissingError())).toBe(true);
|
|
61
|
+
const colErr = new Error('column missing');
|
|
62
|
+
colErr.code = 'P2022';
|
|
63
|
+
expect(isSchemaMissingError(colErr)).toBe(true);
|
|
64
|
+
});
|
|
65
|
+
it('detects table-missing errors by message', () => {
|
|
66
|
+
expect(isSchemaMissingError(new Error('relation "actuate_users" does not exist'))).toBe(true);
|
|
67
|
+
});
|
|
68
|
+
it('does not flag connection errors or ordinary errors', () => {
|
|
69
|
+
expect(isSchemaMissingError(connectionError('P1001'))).toBe(false);
|
|
70
|
+
expect(isSchemaMissingError(new Error('something else'))).toBe(false);
|
|
71
|
+
expect(isSchemaMissingError(null)).toBe(false);
|
|
72
|
+
});
|
|
44
73
|
});
|
|
45
74
|
describe('createInitialAdmin', () => {
|
|
46
75
|
const validInput = {
|
|
@@ -59,6 +88,12 @@ describe('createInitialAdmin', () => {
|
|
|
59
88
|
};
|
|
60
89
|
await expect(createInitialAdmin(db, validInput)).rejects.toThrow(/reach database/i);
|
|
61
90
|
});
|
|
91
|
+
it('rethrows schema-missing errors so the route can prompt for migrations', async () => {
|
|
92
|
+
const db = {
|
|
93
|
+
$transaction: vi.fn().mockRejectedValue(schemaMissingError()),
|
|
94
|
+
};
|
|
95
|
+
await expect(createInitialAdmin(db, validInput)).rejects.toThrow(/does not exist/i);
|
|
96
|
+
});
|
|
62
97
|
it('returns a friendly error when setup was already completed', async () => {
|
|
63
98
|
const db = {
|
|
64
99
|
$transaction: vi.fn(async (fn) => fn({ user: { count: vi.fn().mockResolvedValue(1) } })),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../../src/__tests__/setup/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,
|
|
1
|
+
{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../../src/__tests__/setup/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,sBAAsB,CAAA;AAE7B,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,6BAA6B,CAA6B,CAAA;IAChF,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;IACf,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,0EAA0E,CAC/C,CAAA;IAC7B,GAAG,CAAC,IAAI,GAAG,OAAO,CAAA;IAClB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvE,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;QACpC,GAAG,CAAC,IAAI,GAAG,iCAAiC,CAAA;QAC5C,MAAM,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,0BAA0B,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC1F,IAAI,CACL,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,0BAA0B,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3E,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QAC5D,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QAC5D,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;IAC/F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,CAAA;QAC1F,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,CAAA;QACrF,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAA;QAC/E,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACpD,aAAa,EAAE,KAAK;YACpB,SAAS,EAAE,CAAC;YACZ,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,gBAAgB,CAA6B,CAAA;QACtE,MAAM,CAAC,IAAI,GAAG,OAAO,CAAA;QACrB,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,oBAAoB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClE,MAAM,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,wBAAwB;KACnC,CAAA;IAED,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,GAAG,EAAE,CAAA;QACb,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,GAAG;YACT,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;SAClE,CAAA;QACD,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,GAAG;YACT,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,CAAC;SAC9D,CAAA;QACD,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,GAAG;YACT,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAC9F,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1D,MAAM,EAAE,GAAG;YACT,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE,CACpC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAC9D;SACF,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACjC,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;SAC7E,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;
|
|
1
|
+
{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAshC5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAiVD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA+4WzD"}
|