@antelopejs/dms 0.0.1

package/dist/test/helpers/attachments.d.ts

@@ -0,0 +1,18 @@
+import { type AxiosInstance } from "axios";
+import { type UploadTokenClaims } from "../../utils/upload-token";
+export declare function nativeUploadToken(client: AxiosInstance, field?: string, mode?: string): Promise<string>;
+export declare function findUploadToken(value: unknown, field: string): string | undefined;
+export interface UploadedAttachment {
+    key: string;
+    uploadUrl: string;
+    headers: Record<string, string>;
+}
+export interface UploadAttachmentRequest {
+    client: AxiosInstance;
+    content: Buffer;
+    mimetype: string;
+    claims: UploadTokenClaims;
+    filename?: string;
+    token?: string;
+}
+export declare function uploadAttachment(request: UploadAttachmentRequest): Promise<UploadedAttachment>;

package/dist/test/helpers/attachments.js

@@ -0,0 +1,57 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nativeUploadToken = nativeUploadToken;
+exports.findUploadToken = findUploadToken;
+exports.uploadAttachment = uploadAttachment;
+const axios_1 = __importDefault(require("axios"));
+const chai_1 = require("chai");
+const upload_token_1 = require("../../utils/upload-token");
+const PRESIGN_URL = "/api/files/presign";
+const HTTP_OK = 200;
+async function nativeUploadToken(client, field = "file", mode = "new") {
+    const response = await client.get("/dms/pagelayout", {
+        params: { slug: "/nativefiles" },
+    });
+    (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+    const form = response.data.components.content.options.formComponents[mode];
+    const token = findUploadToken(form, `/api/native-attachments#${field}`);
+    if (!token)
+        throw new Error(`No upload token for ${mode}/${field}`);
+    return token;
+}
+function findUploadToken(value, field) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const node = value;
+    if (node.attachmentField === field && typeof node.uploadToken === "string")
+        return node.uploadToken;
+    return Object.values(node)
+        .map((child) => findUploadToken(child, field))
+        .find(Boolean);
+}
+async function uploadAttachment(request) {
+    const { client, content, mimetype, claims, filename = "attachment.txt", token, } = request;
+    const response = await client.post(PRESIGN_URL, {
+        filename,
+        size: content.byteLength,
+        mimetype,
+        uploadToken: token || (0, upload_token_1.signUploadToken)(claims),
+    });
+    (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+    const upload = response.data;
+    const uploaded = await axios_1.default.put(upload.uploadUrl, content, {
+        headers: upload.headers,
+        validateStatus: () => true,
+        transformRequest: [(data) => data],
+    });
+    (0, chai_1.expect)(uploaded.status, JSON.stringify(uploaded.data)).to.equal(HTTP_OK);
+    return {
+        key: upload.resourceKey,
+        uploadUrl: upload.uploadUrl,
+        headers: upload.headers,
+    };
+}
+//# sourceMappingURL=attachments.js.map

package/dist/test/helpers/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/test/helpers/attachments.ts"],"names":[],"mappings":";;;;;AAWA,8CAaC;AAED,0CAWC;AAiBD,4CA8BC;AApFD,kDAAkD;AAClD,+BAA8B;AAC9B,2DAGkC;AAElC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,OAAO,GAAG,GAAG,CAAC;AAGb,KAAK,UAAU,iBAAiB,CACrC,MAAqB,EACrB,KAAK,GAAG,MAAM,EACd,IAAI,GAAG,KAAK;IAEZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE;QACnD,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;KACjC,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,eAAe,CAC7B,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACxE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;SACvB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;SAC7C,IAAI,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAiBM,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,EACJ,MAAM,EACN,OAAO,EACP,QAAQ,EACR,MAAM,EACN,QAAQ,GAAG,gBAAgB,EAC3B,KAAK,GACN,GAAG,OAAO,CAAC;IACZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC9C,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,UAAU;QACxB,QAAQ;QACR,WAAW,EAAE,KAAK,IAAI,IAAA,8BAAe,EAAC,MAAM,CAAC;KAC9C,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAoD,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE;QAC1D,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;QAC1B,gBAAgB,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;KACnC,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,WAAW;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC"}

package/dist/test/helpers/auth.d.ts

@@ -0,0 +1,23 @@
+import type { AxiosInstance } from "axios";
+export interface RegisteredUser {
+    email: string;
+    password: string;
+    accessToken: string;
+    refreshToken: string;
+    userId: string;
+}
+export interface SignupOptions {
+    email?: string;
+    password?: string;
+    name?: string;
+    lang?: string;
+    owner?: boolean;
+    roles_ids?: string[];
+    skipEmailValidation?: boolean;
+}
+export declare function registerUser(options?: SignupOptions): Promise<RegisteredUser>;
+export declare function loginUser(email: string, password: string): Promise<{
+    accessToken: string;
+    refreshToken: string;
+}>;
+export declare function authorizedClient(token: string): AxiosInstance;

package/dist/test/helpers/auth.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerUser = registerUser;
+exports.loginUser = loginUser;
+exports.authorizedClient = authorizedClient;
+const fixtures_1 = require("./fixtures");
+const http_1 = require("./http");
+const DEFAULT_PASSWORD = "TestPassw0rd!";
+const DEFAULT_NAME = "Test User";
+const DEFAULT_LANG = "en";
+function randomEmail() {
+    return `test-${Date.now()}-${Math.floor(Math.random() * 1_000_000)}@test.local`;
+}
+async function registerUser(options = {}) {
+    const email = options.email ?? randomEmail();
+    const password = options.password ?? DEFAULT_PASSWORD;
+    const invite = await (0, fixtures_1.seedUserInvite)({
+        email,
+        owner: options.owner,
+        roles_ids: options.roles_ids,
+        skipEmailValidation: options.skipEmailValidation ?? true,
+    });
+    const client = (0, http_1.createClient)();
+    const response = await client.post("/api/auth/signup", {
+        name: options.name ?? DEFAULT_NAME,
+        email,
+        password,
+        lang: options.lang ?? DEFAULT_LANG,
+        token: invite.token,
+    });
+    if (response.status >= 400) {
+        throw new Error(`Signup failed [${response.status}]: ${JSON.stringify(response.data)}`);
+    }
+    return {
+        email,
+        password,
+        accessToken: response.data.access_token,
+        refreshToken: response.data.refresh_token,
+        userId: response.data.user?._id,
+    };
+}
+async function loginUser(email, password) {
+    const client = (0, http_1.createClient)();
+    const response = await client.post("/api/auth/login", { email, password });
+    if (response.status >= 400) {
+        throw new Error(`Login failed [${response.status}]: ${JSON.stringify(response.data)}`);
+    }
+    return {
+        accessToken: response.data.access_token,
+        refreshToken: response.data.refresh_token,
+    };
+}
+function authorizedClient(token) {
+    const client = (0, http_1.createClient)();
+    client.defaults.headers.common.Authorization = `Bearer ${token}`;
+    return client;
+}
+//# sourceMappingURL=auth.js.map

package/dist/test/helpers/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/test/helpers/auth.ts"],"names":[],"mappings":";;AA8BA,oCAmCC;AAED,8BAiBC;AAED,4CAIC;AAzFD,yCAA4C;AAC5C,iCAAsC;AAEtC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,IAAI,CAAC;AAoB1B,SAAS,WAAW;IAClB,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,aAAa,CAAC;AAClF,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,UAAyB,EAAE;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IAEtD,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAc,EAAC;QAClC,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;KACzD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;QACrD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,KAAK;QACL,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;QACzC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG;KAChC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3E,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,iBAAiB,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;KAC1C,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/test/helpers/db.d.ts

@@ -0,0 +1,2 @@
+export declare function resetDatabase(): Promise<void>;
+export declare function countRawDocuments(collectionName: string, filter?: Record<string, unknown>): Promise<number>;

package/dist/test/helpers/db.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetDatabase = resetDatabase;
+exports.countRawDocuments = countRawDocuments;
+const mongodb_1 = require("mongodb");
+const PRESERVED_COLLECTION_PREFIXES = ["system.", "__antelope"];
+const DMS_SCHEMA_DB = "dms-core";
+function getMongoUrl() {
+    const url = process.env.TEST_MONGO_URL;
+    if (!url) {
+        throw new Error("TEST_MONGO_URL is not set - test harness must run setup");
+    }
+    return url;
+}
+function isPreserved(name) {
+    return PRESERVED_COLLECTION_PREFIXES.some((prefix) => name.startsWith(prefix));
+}
+async function resetDatabase() {
+    const client = await mongodb_1.MongoClient.connect(getMongoUrl());
+    try {
+        const db = client.db(DMS_SCHEMA_DB);
+        const collections = await db.collections();
+        await Promise.all(collections
+            .filter((collection) => !isPreserved(collection.collectionName))
+            .map((collection) => collection.deleteMany({})));
+    }
+    finally {
+        await client.close();
+    }
+}
+async function countRawDocuments(collectionName, filter = {}) {
+    const client = await mongodb_1.MongoClient.connect(getMongoUrl());
+    try {
+        const name = `${DMS_SCHEMA_DB}__${collectionName}`;
+        if (!(await client.db(DMS_SCHEMA_DB).listCollections({ name }).hasNext())) {
+            throw new Error(`Missing test collection: ${name}`);
+        }
+        return await client
+            .db(DMS_SCHEMA_DB)
+            .collection(name)
+            .countDocuments(filter);
+    }
+    finally {
+        await client.close();
+    }
+}
+//# sourceMappingURL=db.js.map

package/dist/test/helpers/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../src/test/helpers/db.ts"],"names":[],"mappings":";;AAqBA,sCAaC;AAED,8CAiBC;AArDD,qCAAsC;AAItC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAChE,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CACxB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,aAAa;IACjC,MAAM,MAAM,GAAG,MAAM,qBAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,GAAG,CACf,WAAW;aACR,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;aAC/D,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,cAAsB,EACtB,SAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,MAAM,qBAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,aAAa,KAAK,cAAc,EAAE,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,MAAM;aAChB,EAAE,CAAC,aAAa,CAAC;aACjB,UAAU,CAAC,IAAI,CAAC;aAChB,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/test/helpers/fixtures.d.ts

@@ -0,0 +1,23 @@
+import type { UserInvite } from "@antelopejs/interface-dms/db/tables/user_invites.table";
+import type { User } from "@antelopejs/interface-dms/auth/db/tables/users.table";
+export interface UserInviteSeed {
+    email: string;
+    roles_ids?: string[];
+    language?: string;
+    owner?: boolean;
+    skipEmailValidation?: boolean;
+    lifetimeMs?: number;
+}
+export interface SeededUserInvite {
+    token: string;
+    email: string;
+}
+export declare function seedUserInvite(invite: UserInviteSeed): Promise<SeededUserInvite>;
+export declare function findUserByEmail(email: string): Promise<User>;
+export declare function updateUserByEmail(email: string, update: Partial<User>): Promise<void>;
+export interface GeneralSettingsSeed {
+    has_onboarded?: boolean;
+}
+export declare function seedGeneralSettings(overrides?: GeneralSettingsSeed): Promise<void>;
+export declare function getGeneralSettings(): Promise<Record<string, unknown> | null>;
+export declare function listUserInvitesByEmail(email: string): Promise<UserInvite[]>;

package/dist/test/helpers/fixtures.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.seedUserInvite = seedUserInvite;
+exports.findUserByEmail = findUserByEmail;
+exports.updateUserByEmail = updateUserByEmail;
+exports.seedGeneralSettings = seedGeneralSettings;
+exports.getGeneralSettings = getGeneralSettings;
+exports.listUserInvitesByEmail = listUserInvitesByEmail;
+const node_crypto_1 = require("node:crypto");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("../../db");
+const constants_1 = require("@antelopejs/interface-dms/constants");
+const models_1 = require("@antelopejs/interface-dms/db/models");
+const models_2 = require("@antelopejs/interface-dms/auth/db/models");
+const MILLISECONDS_IN_HOUR = 3_600_000;
+async function seedUserInvite(invite) {
+    const token = (0, node_crypto_1.randomUUID)();
+    const model = (0, interface_database_decorators_1.GetModel)(models_1.UserInviteModel, constants_1.DEFAULT_TENANT_ID);
+    await model.insert({
+        email: invite.email,
+        roles_ids: invite.roles_ids ?? [],
+        language: invite.language ?? "en",
+        token,
+        asTenantOwner: invite.owner ?? false,
+        expiresAt: new Date(Date.now() + (invite.lifetimeMs ?? MILLISECONDS_IN_HOUR)),
+        skipEmailValidation: invite.skipEmailValidation ?? true,
+    });
+    return { token, email: invite.email };
+}
+async function findUserByEmail(email) {
+    const user = await (0, interface_database_decorators_1.GetModel)(models_2.UserModel).getByEmail(email);
+    if (!user) {
+        throw new Error(`User not found: ${email}`);
+    }
+    return user;
+}
+async function updateUserByEmail(email, update) {
+    const model = (0, interface_database_decorators_1.GetModel)(models_2.UserModel);
+    const user = await model.getByEmail(email);
+    if (!user) {
+        throw new Error(`User not found: ${email}`);
+    }
+    await model.update(user._id, update);
+}
+async function seedGeneralSettings(overrides = {}) {
+    const model = (0, interface_database_decorators_1.GetModel)(db_1.SystemStateModel);
+    const current = await model.getConfig();
+    await model.updateConfig({
+        ...current,
+        has_onboarded: overrides.has_onboarded ?? false,
+        updatedAt: new Date(),
+    });
+}
+async function getGeneralSettings() {
+    const config = await (0, interface_database_decorators_1.GetModel)(db_1.SystemStateModel).getConfig();
+    return config ?? null;
+}
+async function listUserInvitesByEmail(email) {
+    const invites = await (0, interface_database_decorators_1.GetModel)(models_1.UserInviteModel, constants_1.DEFAULT_TENANT_ID).getAll();
+    return invites.filter((invite) => invite.email === email);
+}
+//# sourceMappingURL=fixtures.js.map

package/dist/test/helpers/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/test/helpers/fixtures.ts"],"names":[],"mappings":";;AA8BA,wCAiBC;AAED,0CAMC;AAED,8CAUC;AAUD,kDAcC;AAED,gDAMC;AAED,wDAKC;AA1GD,6CAAyC;AACzC,6FAAqE;AACrE,iCAA4C;AAC5C,mEAAwE;AACxE,gEAAsE;AAEtE,qEAAqE;AAGrE,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAqBhC,KAAK,UAAU,cAAc,CAClC,MAAsB;IAEtB,MAAM,KAAK,GAAG,IAAA,wBAAU,GAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,wBAAe,EAAE,6BAAiB,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;QACpC,SAAS,EAAE,IAAI,IAAI,CACjB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC,CACzD;QACD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;KACxD,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,kBAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,MAAqB;IAErB,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,kBAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAUM,KAAK,UAAU,mBAAmB,CACvC,YAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,qBAAgB,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IACxC,MAAM,KAAK,CAAC,YAAY,CAAC;QAKvB,GAAG,OAAO;QACV,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,KAAK;QAC/C,SAAS,EAAE,IAAI,IAAI,EAAE;KAC6B,CAAC,CAAC;AACxD,CAAC;AAEM,KAAK,UAAU,kBAAkB;IAItC,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,qBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;IAC5D,OAAQ,MAA8C,IAAI,IAAI,CAAC;AACjE,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAQ,EAAC,wBAAe,EAAE,6BAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAC5D,CAAC"}

package/dist/test/helpers/http.d.ts

@@ -0,0 +1,3 @@
+import { type AxiosInstance } from "axios";
+export declare function getBaseUrl(): string;
+export declare function createClient(): AxiosInstance;

package/dist/test/helpers/http.js

@@ -0,0 +1,22 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBaseUrl = getBaseUrl;
+exports.createClient = createClient;
+const axios_1 = __importDefault(require("axios"));
+const DEFAULT_BASE_URL = "http://127.0.0.1:5010";
+function getBaseUrl() {
+    return process.env.TEST_API_BASE_URL ?? DEFAULT_BASE_URL;
+}
+function createClient() {
+    return axios_1.default.create({
+        baseURL: getBaseUrl(),
+        validateStatus: () => true,
+        headers: {
+            "x-antelopejs-namespace": "default",
+        },
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/test/helpers/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/test/helpers/http.ts"],"names":[],"mappings":";;;;;AAIA,gCAEC;AAED,oCAQC;AAhBD,kDAAkD;AAElD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD,SAAgB,UAAU;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,gBAAgB,CAAC;AAC3D,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO,eAAK,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,UAAU,EAAE;QACrB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;QAC1B,OAAO,EAAE;YACP,wBAAwB,EAAE,SAAS;SACpC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/test/helpers/logging.d.ts

@@ -0,0 +1,5 @@
+export interface CapturedWarnings {
+    messages: string[];
+    restore: () => void;
+}
+export declare function captureWarnings(): CapturedWarnings;

package/dist/test/helpers/logging.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureWarnings = captureWarnings;
+const logging_1 = require("@antelopejs/interface-core/logging");
+function captureWarnings() {
+    const messages = [];
+    const original = logging_1.Logging.Warn;
+    logging_1.Logging.Warn = (...args) => {
+        messages.push(String(args[0]));
+    };
+    return {
+        messages,
+        restore: () => {
+            logging_1.Logging.Warn = original;
+        },
+    };
+}
+//# sourceMappingURL=logging.js.map

package/dist/test/helpers/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../src/test/helpers/logging.ts"],"names":[],"mappings":";;AAiBA,0CAYC;AA7BD,gEAA6D;AAiB7D,SAAgB,eAAe;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,iBAAO,CAAC,IAAI,CAAC;IAC7B,iBAAyC,CAAC,IAAI,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;QACvE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,GAAG,EAAE;YACX,iBAAyC,CAAC,IAAI,GAAG,QAAQ,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/test/helpers/page-access.d.ts

@@ -0,0 +1,16 @@
+import type { ControllerClass } from "@antelopejs/interface-api";
+import type { RoleModel, TenantMemberModel } from "@antelopejs/interface-dms/db";
+import { type CategoryInfo, type MenuOptions } from "@antelopejs/interface-dms/page";
+import type { TenantAccessGateInfo } from "@antelopejs/interface-dms/tenant-access";
+export interface PageAccessModels {
+    memberModel: TenantMemberModel;
+    roleModel: RoleModel;
+}
+export declare function stubPageAccessModels(grantedPermissions: string[]): PageAccessModels;
+export declare function registerTestPage(controller: ControllerClass): Promise<() => void>;
+export interface TestCategory {
+    category: CategoryInfo;
+    cleanup: () => void;
+}
+export declare function registerTestCategory(id: string, options: MenuOptions): TestCategory;
+export declare function denyingTenantGate(id: string, deniedTenantId: string, code?: string): TenantAccessGateInfo;

package/dist/test/helpers/page-access.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stubPageAccessModels = stubPageAccessModels;
+exports.registerTestPage = registerTestPage;
+exports.registerTestCategory = registerTestCategory;
+exports.denyingTenantGate = denyingTenantGate;
+const interface_core_1 = require("@antelopejs/interface-core");
+const page_1 = require("@antelopejs/interface-dms/page");
+function stubPageAccessModels(grantedPermissions) {
+    return {
+        memberModel: {
+            getByUser: async () => ({ roleIds: ["role-1"] }),
+        },
+        roleModel: {
+            getBy: async () => [{ permissions: grantedPermissions }],
+        },
+    };
+}
+async function registerTestPage(controller) {
+    const meta = (0, interface_core_1.GetMetadata)(controller, page_1.PageMetadata);
+    await meta.Register();
+    const { pageInfo } = meta;
+    if (!pageInfo) {
+        throw new Error("PageMetadata was not initialized");
+    }
+    return () => page_1.internal.RegisterPage.unregister(pageInfo);
+}
+function registerTestCategory(id, options) {
+    const category = (0, page_1.Category)(id, options);
+    return {
+        category,
+        cleanup: () => page_1.internal.RegisterCategory.unregister(category),
+    };
+}
+function denyingTenantGate(id, deniedTenantId, code = `${id}.denied`) {
+    return {
+        id,
+        order: 0,
+        gate: (_userId, tenantId) => tenantId === deniedTenantId
+            ? { allowed: false, code }
+            : { allowed: true },
+    };
+}
+//# sourceMappingURL=page-access.js.map

package/dist/test/helpers/page-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-access.js","sourceRoot":"","sources":["../../../src/test/helpers/page-access.ts"],"names":[],"mappings":";;AA6BA,oDAWC;AAMD,4CAUC;AAYD,oDASC;AAMD,8CAaC;AA1FD,+DAAyD;AAKzD,yDAMwC;AAYxC,SAAgB,oBAAoB,CAClC,kBAA4B;IAE5B,OAAO;QACL,WAAW,EAAE;YACX,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SACjB;QACjC,SAAS,EAAE;YACT,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;SACjC;KAC1B,CAAC;AACJ,CAAC;AAMM,KAAK,UAAU,gBAAgB,CACpC,UAA2B;IAE3B,MAAM,IAAI,GAAG,IAAA,4BAAW,EAAC,UAAU,EAAE,mBAAY,CAAC,CAAC;IACnD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,EAAE,CAAC,eAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAYD,SAAgB,oBAAoB,CAClC,EAAU,EACV,OAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAA,eAAQ,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,GAAG,EAAE,CAAC,eAAqB,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC;KAC3E,CAAC;AACJ,CAAC;AAMD,SAAgB,iBAAiB,CAC/B,EAAU,EACV,cAAsB,EACtB,IAAI,GAAG,GAAG,EAAE,SAAS;IAErB,OAAO;QACL,EAAE;QACF,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAC1B,QAAQ,KAAK,cAAc;YACzB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;YAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;KACxB,CAAC;AACJ,CAAC"}

package/dist/test/integration/auth/login.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/auth/login.test.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const auth_1 = require("../../helpers/auth");
+const db_1 = require("../../helpers/db");
+const http_1 = require("../../helpers/http");
+describe.skip("[integration] auth/login", () => {
+    beforeEach(async () => {
+        await (0, db_1.resetDatabase)();
+    });
+    it("logs in a registered user and returns a bearer token", async () => {
+        const user = await (0, auth_1.registerUser)();
+        const client = (0, http_1.createClient)();
+        const response = await client.post("/api/auth/login", {
+            email: user.email,
+            password: user.password,
+        });
+        (0, chai_1.expect)(response.status).to.equal(200);
+        (0, chai_1.expect)(response.data.token_type).to.equal("Bearer");
+        (0, chai_1.expect)(response.data.access_token).to.be.a("string").and.not.empty;
+        (0, chai_1.expect)(response.data.refresh_token).to.be.a("string").and.not.empty;
+        (0, chai_1.expect)(response.data.user?.email).to.equal(user.email);
+    });
+    it("rejects a wrong password with 401", async () => {
+        const user = await (0, auth_1.registerUser)();
+        const client = (0, http_1.createClient)();
+        const response = await client.post("/api/auth/login", {
+            email: user.email,
+            password: "WrongPassw0rd!",
+        });
+        (0, chai_1.expect)(response.status).to.equal(401);
+    });
+    it("rejects an unknown email with 401", async () => {
+        const client = (0, http_1.createClient)();
+        const response = await client.post("/api/auth/login", {
+            email: "nobody@test.local",
+            password: "WhateverP@ss1",
+        });
+        (0, chai_1.expect)(response.status).to.equal(401);
+    });
+    it("rejects a malformed payload with 400", async () => {
+        const client = (0, http_1.createClient)();
+        const response = await client.post("/api/auth/login", {
+            email: "not-an-email",
+            password: "x",
+        });
+        (0, chai_1.expect)(response.status).to.equal(400);
+    });
+    it("rejects a missing password with 400", async () => {
+        const client = (0, http_1.createClient)();
+        const response = await client.post("/api/auth/login", {
+            email: "user@test.local",
+        });
+        (0, chai_1.expect)(response.status).to.equal(400);
+    });
+});
+//# sourceMappingURL=login.test.js.map

package/dist/test/integration/auth/login.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/login.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,6CAAkD;AAClD,yCAAiD;AACjD,6CAAkD;AAMlD,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;IAC7C,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACpE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,GAAG;SACd,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/refresh.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/auth/refresh.test.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const jsonwebtoken_1 = require("jsonwebtoken");
+const auth_1 = require("../../helpers/auth");
+const db_1 = require("../../helpers/db");
+const http_1 = require("../../helpers/http");
+const REFRESH_URL = "/api/auth/refresh";
+const LOGOUT_URL = "/api/auth/logout";
+const SUCCESS_STATUS = 200;
+const UNAUTH_STATUS = 401;
+const NO_CONTENT_STATUS = 204;
+const BEARER = "Bearer";
+const FAKE_USER_ID = "000000000000000000000000";
+const FAKE_NAMESPACE = "default";
+const FAKE_SECRET = "fake-secret";
+const EXPIRED_EXPIRES_IN = -1;
+function buildExpiredToken() {
+    return (0, jsonwebtoken_1.sign)({ id: FAKE_USER_ID, namespace: FAKE_NAMESPACE }, FAKE_SECRET, {
+        expiresIn: EXPIRED_EXPIRES_IN,
+    });
+}
+describe.skip("[integration] auth/refresh", () => {
+    beforeEach(async () => {
+        await (0, db_1.resetDatabase)();
+    });
+    it("returns a new access token from a valid refresh token", async () => {
+        const user = await (0, auth_1.registerUser)();
+        const client = (0, http_1.createClient)();
+        const response = await client.post(REFRESH_URL, {
+            token: user.refreshToken,
+        });
+        (0, chai_1.expect)(response.status).to.equal(SUCCESS_STATUS);
+        (0, chai_1.expect)(response.data.token_type).to.equal(BEARER);
+        (0, chai_1.expect)(response.data.access_token).to.be.a("string").and.not.empty;
+        (0, chai_1.expect)(response.data.refresh_token).to.be.a("string").and.not.empty;
+    });
+    it("rejects an expired refresh token referencing an unknown user with 401", async () => {
+        const client = (0, http_1.createClient)();
+        const response = await client.post(REFRESH_URL, {
+            token: buildExpiredToken(),
+        });
+        (0, chai_1.expect)(response.status).to.equal(UNAUTH_STATUS);
+    });
+    it("rejects a refresh token whose session has been revoked with 401", async () => {
+        const user = await (0, auth_1.registerUser)();
+        const authClient = (0, auth_1.authorizedClient)(user.accessToken);
+        const logoutResponse = await authClient.post(LOGOUT_URL, {
+            token: user.refreshToken,
+        });
+        (0, chai_1.expect)(logoutResponse.status).to.equal(NO_CONTENT_STATUS);
+        const client = (0, http_1.createClient)();
+        const response = await client.post(REFRESH_URL, {
+            token: user.refreshToken,
+        });
+        (0, chai_1.expect)(response.status).to.equal(UNAUTH_STATUS);
+    });
+});
+//# sourceMappingURL=refresh.test.js.map

package/dist/test/integration/auth/refresh.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/refresh.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,+CAAoC;AACpC,6CAAoE;AACpE,yCAAiD;AACjD,6CAAkD;AAElD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC;AACxB,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC;AAE9B,SAAS,iBAAiB;IACxB,OAAO,IAAA,mBAAI,EAAC,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE;QACxE,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAC;AACL,CAAC;AAMD,QAAQ,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC/C,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,KAAK,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,UAAU,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE;YACvD,KAAK,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,KAAK,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/sessions.test.d.ts

@@ -0,0 +1 @@
+export {};