@antelopejs/dms 0.7.21 → 0.8.1

package/frontend-vue/tests/template-tokens.test.ts

@@ -0,0 +1,235 @@
+// @vitest-environment jsdom
+/**
+ * Every option naming a value with a token writes it `{{<scope>.<key>}}`, and
+ * every URL or link option fills the page's `{{params.X}}` / `{{query.X}}`
+ * the same way: an `api` or `exportJob` target as a `page` one, a
+ * confirmation's `from`, a block's links, a form's `backTo`.
+ */
+import { createApp, defineComponent, h, reactive, type App } from "vue";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { useActionTargets } from "../layers/dms-ui/app/build/composables/actions/useActionTargets";
+import {
+  interpolateRowText,
+  interpolateUrl,
+} from "../layers/dms-core/app/utils/url-interpolation";
+import { HttpMethod } from "../layers/dms-core/app/types/http";
+import {
+  replaceUrlVariables,
+  resolveLinkVariables,
+} from "../layers/dms-ui/app/build/utils/urlVariables";
+import {
+  pageLink,
+  pageRequestUrl,
+} from "../layers/dms-ui/app/build/composables/page/pageUrlValues";
+import { buttonLinkProps } from "../layers/dms-ui/app/build/utils/link";
+import { resolveConfirmDialog } from "../layers/dms-ui/app/build/composables/confirm/confirmDialogTexts";
+import type { CustomButton } from "../layers/dms-ui/app/composables/table-view/types/custom-button";
+import type { CustomRowAction } from "../layers/dms-ui/app/types/row-action";
+
+const route = reactive<{ path: string; query: Record<string, unknown> }>({
+  path: "/modules/shop/stores/s1",
+  query: {},
+});
+const api = vi.fn();
+const runJob = vi.fn();
+let app: App | undefined;
+
+function mountTargets() {
+  let targets: ReturnType<typeof useActionTargets> | undefined;
+  app = createApp(
+    defineComponent({
+      setup() {
+        targets = useActionTargets({
+          api: api as never,
+          pageId: "store-page",
+          componentId: "orders",
+          handleApiError: vi.fn(),
+        });
+        return () => h("div");
+      },
+    }),
+  );
+  app.mount(document.createElement("div"));
+  return targets!;
+}
+
+beforeEach(() => {
+  route.query = { store: "north", period: "7d" };
+  api.mockReset().mockResolvedValue(undefined);
+  runJob.mockReset().mockResolvedValue(undefined);
+  vi.stubGlobal("useToast", () => ({ add: vi.fn() }));
+  vi.stubGlobal("useTranslation", () => ({
+    processI18n: (text: string) => text,
+    processApiMessage: (text: string) => text,
+  }));
+  vi.stubGlobal("useI18n", () => ({ t: (key: string) => key }));
+  vi.stubGlobal("useModal", () => ({ open: vi.fn() }));
+  vi.stubGlobal("useDrawer", () => ({ open: vi.fn() }));
+  vi.stubGlobal("useExportJob", () => ({ runJob }));
+  vi.stubGlobal("useConfirm", () => ({ confirm: vi.fn(async () => true) }));
+  vi.stubGlobal("useAuthFetch", () => ({
+    $authFetch: Object.assign(vi.fn(), { raw: vi.fn() }),
+  }));
+  vi.stubGlobal("interpolateUrl", interpolateUrl);
+  vi.stubGlobal("HttpMethod", HttpMethod);
+  vi.stubGlobal("useDmsRoute", () => route);
+  vi.stubGlobal("useSiteLayout", () => ({
+    findMatchingRoute: () => ({ params: { id: "s1" } }),
+  }));
+});
+
+afterEach(() => {
+  app?.unmount();
+  app = undefined;
+  vi.restoreAllMocks();
+  vi.unstubAllGlobals();
+});
+
+describe("token syntax", () => {
+  const context = {
+    routeParams: { id: "s 1" },
+    routeQuery: { store: "north" },
+    response: { data: { id: "o-9" } },
+  };
+
+  it("allows spaces inside the braces, as the server's filter tokens do", () => {
+    expect(
+      replaceUrlVariables(
+        "/s/{{ params.id }}?store={{  query.store }}",
+        context,
+      ),
+    ).toBe("/s/s%201?store=north");
+  });
+
+  it("reaches into a response with a dotted path", () => {
+    expect(replaceUrlVariables("/orders/{{response.data.id}}", context)).toBe(
+      "/orders/o-9",
+    );
+  });
+
+  it("resolves a redirect's response and page tokens, dropping an empty pair", () => {
+    expect(
+      resolveLinkVariables(
+        "/orders/{{response.data.id}}?store={{query.store}}&tab={{query.tab}}",
+        context,
+      ),
+    ).toBe("/orders/o-9?store=north");
+  });
+
+  it("names a row field with {{row.X}}, a dotted path reaching into it", () => {
+    const row = { _id: "a 1", customer: { name: "Ada" } };
+    expect(interpolateUrl("/o/{{row._id}}/{{ row.customer.name }}", row)).toBe(
+      "/o/a%201/Ada",
+    );
+    expect(interpolateRowText("{{row._id}}.csv", row)).toBe("a 1.csv");
+  });
+
+  it("does not take a single-brace name for a row field", () => {
+    expect(interpolateUrl("/o/{_id}", { _id: "a" })).toBe("/o/{_id}");
+  });
+
+  it("leaves another scope's token whole when filling a row", () => {
+    expect(
+      interpolateUrl("/s/{{params.id}}/o/{{row._id}}", { _id: "a" }),
+    ).toBe("/s/{{params.id}}/o/a");
+  });
+});
+
+describe("page tokens in links and requested routes", () => {
+  it("fills a block link, leaving out a pair the page has no value for", () => {
+    expect(pageLink("/stores/{{params.id}}?store={{query.store}}")).toBe(
+      "/stores/s1?store=north",
+    );
+    expect(pageLink("/orders?tab={{query.tab}}")).toBe("/orders");
+    expect(buttonLinkProps("/stores/{{params.id}}/orders")).toEqual({
+      to: "/stores/s1/orders",
+    });
+  });
+
+  it("does not request a route while one of its tokens has no value", () => {
+    expect(pageRequestUrl("/api/stores/{{params.id}}/rotate")).toBe(
+      "/api/stores/s1/rotate",
+    );
+    expect(pageRequestUrl("/api/x?tab={{query.tab}}")).toBeUndefined();
+  });
+
+  it("fills a confirmation's secondary target with the page, then the row", async () => {
+    const runTarget = vi.fn();
+    const dialog = resolveConfirmDialog(
+      {
+        title: "Remove",
+        secondaryAction: {
+          label: "Download",
+          target: {
+            type: "download",
+            url: "/api/stores/{{params.id}}/orders/{{row._id}}",
+            filename: "{{query.store}}-{{row.name}}.json",
+          },
+        },
+      },
+      { _id: "o1", name: "order" },
+      (key) => key,
+      runTarget,
+    );
+    await dialog.secondaryAction!.run();
+    expect(runTarget).toHaveBeenCalledWith({
+      type: "download",
+      url: "/api/stores/s1/orders/o1",
+      filename: "north-order.json",
+    });
+  });
+});
+
+describe("an action target's URL", () => {
+  it("fills an api target on a row with the page's values, then the row's", async () => {
+    const action: CustomRowAction = {
+      label: "Refund",
+      target: {
+        type: "api",
+        url: "/api/stores/{{params.id}}/orders/{{row._id}}/refund?store={{query.store}}",
+        successMessage: "Refunded",
+      },
+    };
+    mountTargets().handleCustomRowAction(action, { _id: "o 1" });
+    await vi.waitFor(() => expect(api).toHaveBeenCalled());
+    expect(api.mock.calls[0]![0]).toBe(
+      "/api/stores/s1/orders/o%201/refund?store=north",
+    );
+  });
+
+  it("fills an api target on a toolbar button, without a row", async () => {
+    const button: CustomButton = {
+      id: "sync",
+      label: "Sync",
+      target: {
+        type: "api",
+        url: "/api/stores/{{params.id}}/sync?period={{query.period}}",
+        successMessage: "Synced",
+      },
+    };
+    mountTargets().handleCustomButton(button);
+    await vi.waitFor(() => expect(api).toHaveBeenCalled());
+    expect(api.mock.calls[0]![0]).toBe("/api/stores/s1/sync?period=7d");
+  });
+
+  it("fills an export job's start, status and download URLs", async () => {
+    const button: CustomButton = {
+      id: "export",
+      label: "Export",
+      target: {
+        type: "exportJob",
+        url: "/api/stores/{{params.id}}/export?store={{query.store}}",
+        statusUrl: "/api/stores/{{params.id}}/export/{{job.id}}",
+        downloadUrl: "/api/stores/{{params.id}}/export/{{ job.id }}/file",
+      },
+    };
+    mountTargets().handleCustomButton(button);
+    await vi.waitFor(() => expect(runJob).toHaveBeenCalled());
+    const job = runJob.mock.calls[0]![0];
+    expect(job.startUrl).toBe("/api/stores/s1/export?store=north");
+    expect(job.statusUrl({ jobId: "j1" })).toBe("/api/stores/s1/export/j1");
+    expect(job.downloadUrl({ jobId: "j1" })).toBe(
+      "/api/stores/s1/export/j1/file",
+    );
+  });
+});

package/frontend-vue/tests/tone.test.ts

@@ -1,6 +1,4 @@
 // @vitest-environment jsdom
-import { readFileSync, readdirSync, statSync } from "node:fs";
-import { join, relative } from "node:path";
 import { describe, expect, it } from "vitest";
 import { createSSRApp } from "vue";
 import { renderToString } from "vue/server-renderer";
@@ -10,15 +8,6 @@ import {
   isDmsTone,
 } from "../layers/dms-ui/app/build/utils/tone";
 
-const FORMER_TONE = /tone"?\s*[=:][^\n]*["']accent["']/i;
-
-function walk(directory: string): string[] {
-  return readdirSync(directory).flatMap((name) => {
-    const path = join(directory, name);
-    return statSync(path).isDirectory() ? walk(path) : [path];
-  });
-}
-
 describe("Tone", () => {
   it("knows the semantic tones only", () => {
     expect(isDmsTone("success")).toBe(true);
@@ -34,12 +23,4 @@ describe("Tone", () => {
       expect(html).toContain(name);
     }
   });
-
-  it("is never passed as accent by a DMS component", () => {
-    const offenders = walk(join(process.cwd(), "layers"))
-      .filter((path) => path.endsWith(".vue"))
-      .filter((path) => FORMER_TONE.test(readFileSync(path, "utf8")))
-      .map((path) => relative(process.cwd(), path));
-    expect(offenders).toEqual([]);
-  });
 });

package/frontend-vue/tests/url-interpolation.test.ts

@@ -4,25 +4,25 @@ import { interpolateUrl } from "../layers/dms-core/app/utils/url-interpolation";
 describe("interpolateUrl", () => {
   it("fills row fields into the URL, encoded", () => {
     expect(
-      interpolateUrl("/items/{_id}/tag/{name}", { _id: "a1", name: "a b/c" }),
+      interpolateUrl("/items/{{row._id}}/tag/{{row.name}}", { _id: "a1", name: "a b/c" }),
     ).toBe("/items/a1/tag/a%20b%2Fc");
   });
 
   it("keeps the colon of a tenant-scoped id readable", () => {
     expect(
-      interpolateUrl("/members/{_id}/owner", { _id: "default:29fd-11" }),
+      interpolateUrl("/members/{{row._id}}/owner", { _id: "default:29fd-11" }),
     ).toBe("/members/default:29fd-11/owner");
   });
 
   it("leaves a missing field empty", () => {
-    expect(interpolateUrl("/items/{missing}", {})).toBe("/items/");
+    expect(interpolateUrl("/items/{{row.missing}}", {})).toBe("/items/");
   });
 
   it("keeps web and mail links", () => {
-    expect(interpolateUrl("https://acme.dev/{slug}", { slug: "a" })).toBe(
+    expect(interpolateUrl("https://acme.dev/{{row.slug}}", { slug: "a" })).toBe(
       "https://acme.dev/a",
     );
-    expect(interpolateUrl("mailto:{email}", { email: "a@b.c" })).toBe(
+    expect(interpolateUrl("mailto:{{row.email}}", { email: "a@b.c" })).toBe(
       "mailto:a%40b.c",
     );
   });
@@ -34,7 +34,7 @@ describe("interpolateUrl", () => {
       "data:text/html,x",
       "vbscript:x",
     ]) {
-      expect(interpolateUrl("{site}", { site })).toBe("");
+      expect(interpolateUrl("{{row.site}}", { site })).toBe("");
     }
   });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antelopejs/dms",
-  "version": "0.7.21",
+  "version": "0.8.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/AntelopeJS/dms.git"
@@ -37,7 +37,7 @@
     "@antelopejs/interface-data-api": ">=0.2.0 <1.0.0",
     "@antelopejs/interface-database": ">=0.1.8 <1.0.0",
     "@antelopejs/interface-database-decorators": ">=0.1.7 <1.0.0",
-    "@antelopejs/interface-dms": ">=0.5.13 <0.6.0",
+    "@antelopejs/interface-dms": ">=0.6.0 <0.7.0",
     "@antelopejs/interface-email": ">=0.0.5 <1.0.0",
     "@antelopejs/interface-file-storage": ">=0.1.3 <1.0.0",
     "archiver": "^7.0.1",
@@ -110,10 +110,10 @@
     "frontend:dev": "pnpm --dir playground frontend:dev",
     "lint:fix": "oxlint --fix --max-warnings=1000000 && oxfmt . && pnpm --dir frontend-vue lint:fix",
     "lint": "oxlint && oxfmt --check . && pnpm --dir frontend-vue lint && antelopejs-check-interface-ranges",
-    "typecheck": "pnpm --filter @antelopejs/interface-dms build && tsc --noEmit",
-    "test": "pnpm run build && ajs module test .",
-    "test:unit": "pnpm run build && DMS_TEST_DIR=dist/test/unit ajs module test .",
-    "test:integration": "pnpm run build && DMS_TEST_DIR=dist/test/integration ajs module test .",
+    "typecheck": "node scripts/unless-prebuilt.mjs pnpm --filter @antelopejs/interface-dms build && tsc --noEmit",
+    "test": "node scripts/unless-prebuilt.mjs pnpm run build && ajs module test .",
+    "test:unit": "node scripts/unless-prebuilt.mjs pnpm run build && DMS_TEST_DIR=dist/test/unit ajs module test .",
+    "test:integration": "node scripts/unless-prebuilt.mjs pnpm run build && DMS_TEST_DIR=dist/test/integration ajs module test .",
     "test:watch": "tsc -w & tsc-alias -w",
     "release": "pnpm --filter @antelopejs/interface-dms build && pnpm --dir frontend-vue install --frozen-lockfile && release-it",
     "country-database": "node scripts/fetch-country-database.mjs",

package/skills/dms/SKILL.md

@@ -33,7 +33,8 @@ For the framework underneath (the core, `ajs` CLI, interfaces as versioned contr
   frontend renders it. **Components fetch their own data** via URLs (`fetchUrl`, `submitUrl`, …) —
   routes often declared `@Get`/`@Post` on the same page class; the backend stays the source of truth.
   A URL names the record of its page with `{{params.id}}` / `{{query.X}}` (filled from the page URL, percent-encoded;
-  nothing is fetched while one is unresolved), and `.watch(FormEvents.SUBMIT_SUCCESS,
+  nothing is fetched while one is unresolved) — every token is `{{<scope>.<key>}}`: `params`, `query`, `row` (an
+  action's row), `response` (a form's redirect), and the same page tokens work in every URL and link option, and `.watch(FormEvents.SUBMIT_SUCCESS,
   BlockFunctions.REFRESH_PAGE)` makes the page's data blocks (table views included) re-fetch after a form saves;
   `periodScope` binds a card, chart, list block, `Meter` or `TableView.fromSource` to a `PeriodSelector`
   (which keeps its period in the page URL, `?<id>.period=`), and

package/skills/dms-pages/REFERENCE.md

@@ -54,10 +54,10 @@ own drawer in a `CustomComponent`.
 To read rows one after the other next to the table (a request log), use a `sidePanel`
 target instead: a non-modal panel docked on the right whose header the DMS draws (title,
 `rowTitle` naming the row from its fields, `positionLabel` "x of y", previous / next, J / K, close), `?record=` kept by default (`deepLink: false` opts out), a "not found" state on a 404 (`notFound: { title, description }`) and the table's
-`rowClick: "single"` (a `TableView.fromSource` table reads a deep-linked row beyond its first page through `fetchRowUrl: "/api/x/{id}"`) — never bridge the table's DOM to build one —
+`rowClick: "single"` (a `TableView.fromSource` table reads a deep-linked row beyond its first page through `fetchRowUrl: "/api/x/{{row.id}}"`) — never bridge the table's DOM to build one —
 `docs/04.components/06.tables/8.row-drawers.md#side-panel`.
 A button downloading a file the user's session may read (`/api/...`) takes a `download`
-target, `{ url, filename? }`, with the same `{field}` / `{{query.X}}` tokens — never a Vue
+target, `{ url, filename? }`, with the same `{{row.field}}` / `{{query.X}}` tokens — never a Vue
 header button or an `api` target for it — `docs/07.interfaces/3.base/2.types.md`.
 
 A row that must stay on top of a table under any sort (a base language, a default

package/skills/dms-project/SKILL.md

@@ -82,7 +82,6 @@ export function construct(config: Config): void {
   registerAllPermissions();  // RegisterPermission(...) — see dms-auth
   RegisterHook(Hook.DATABASE_INITIALIZED, async () => {
     await initDatabase();
-    return undefined;
   });
 }
 export async function start(): Promise<void> {

package/dist/test/integration/auth/login.test.js

@@ -1,57 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const chai_1 = require("chai");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const http_1 = require("../../helpers/http");
-describe.skip("[integration] auth/login", () => {
-    beforeEach(async () => {
-        await (0, db_1.resetDatabase)();
-    });
-    it("logs in a registered user and returns a bearer token", async () => {
-        const user = await (0, auth_1.registerUser)();
-        const client = (0, http_1.createClient)();
-        const response = await client.post("/api/auth/login", {
-            email: user.email,
-            password: user.password,
-        });
-        (0, chai_1.expect)(response.status).to.equal(200);
-        (0, chai_1.expect)(response.data.token_type).to.equal("Bearer");
-        (0, chai_1.expect)(response.data.access_token).to.be.a("string").and.not.empty;
-        (0, chai_1.expect)(response.data.refresh_token).to.be.a("string").and.not.empty;
-        (0, chai_1.expect)(response.data.user?.email).to.equal(user.email);
-    });
-    it("rejects a wrong password with 401", async () => {
-        const user = await (0, auth_1.registerUser)();
-        const client = (0, http_1.createClient)();
-        const response = await client.post("/api/auth/login", {
-            email: user.email,
-            password: "WrongPassw0rd!",
-        });
-        (0, chai_1.expect)(response.status).to.equal(401);
-    });
-    it("rejects an unknown email with 401", async () => {
-        const client = (0, http_1.createClient)();
-        const response = await client.post("/api/auth/login", {
-            email: "nobody@test.local",
-            password: "WhateverP@ss1",
-        });
-        (0, chai_1.expect)(response.status).to.equal(401);
-    });
-    it("rejects a malformed payload with 400", async () => {
-        const client = (0, http_1.createClient)();
-        const response = await client.post("/api/auth/login", {
-            email: "not-an-email",
-            password: "x",
-        });
-        (0, chai_1.expect)(response.status).to.equal(400);
-    });
-    it("rejects a missing password with 400", async () => {
-        const client = (0, http_1.createClient)();
-        const response = await client.post("/api/auth/login", {
-            email: "user@test.local",
-        });
-        (0, chai_1.expect)(response.status).to.equal(400);
-    });
-});
-//# sourceMappingURL=login.test.js.map

package/dist/test/integration/auth/login.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/login.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,6CAAkD;AAClD,yCAAiD;AACjD,6CAAkD;AAMlD,QAAQ,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;IAC7C,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACpE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,GAAG;SACd,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACpD,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/refresh.test.js

@@ -1,59 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const chai_1 = require("chai");
-const jsonwebtoken_1 = require("jsonwebtoken");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const http_1 = require("../../helpers/http");
-const REFRESH_URL = "/api/auth/refresh";
-const LOGOUT_URL = "/api/auth/logout";
-const SUCCESS_STATUS = 200;
-const UNAUTH_STATUS = 401;
-const NO_CONTENT_STATUS = 204;
-const BEARER = "Bearer";
-const FAKE_USER_ID = "000000000000000000000000";
-const FAKE_NAMESPACE = "default";
-const FAKE_SECRET = "fake-secret";
-const EXPIRED_EXPIRES_IN = -1;
-function buildExpiredToken() {
-    return (0, jsonwebtoken_1.sign)({ id: FAKE_USER_ID, namespace: FAKE_NAMESPACE }, FAKE_SECRET, {
-        expiresIn: EXPIRED_EXPIRES_IN,
-    });
-}
-describe.skip("[integration] auth/refresh", () => {
-    beforeEach(async () => {
-        await (0, db_1.resetDatabase)();
-    });
-    it("returns a new access token from a valid refresh token", async () => {
-        const user = await (0, auth_1.registerUser)();
-        const client = (0, http_1.createClient)();
-        const response = await client.post(REFRESH_URL, {
-            token: user.refreshToken,
-        });
-        (0, chai_1.expect)(response.status).to.equal(SUCCESS_STATUS);
-        (0, chai_1.expect)(response.data.token_type).to.equal(BEARER);
-        (0, chai_1.expect)(response.data.access_token).to.be.a("string").and.not.empty;
-        (0, chai_1.expect)(response.data.refresh_token).to.be.a("string").and.not.empty;
-    });
-    it("rejects an expired refresh token referencing an unknown user with 401", async () => {
-        const client = (0, http_1.createClient)();
-        const response = await client.post(REFRESH_URL, {
-            token: buildExpiredToken(),
-        });
-        (0, chai_1.expect)(response.status).to.equal(UNAUTH_STATUS);
-    });
-    it("rejects a refresh token whose session has been revoked with 401", async () => {
-        const user = await (0, auth_1.registerUser)();
-        const authClient = (0, auth_1.authorizedClient)(user.accessToken);
-        const logoutResponse = await authClient.post(LOGOUT_URL, {
-            token: user.refreshToken,
-        });
-        (0, chai_1.expect)(logoutResponse.status).to.equal(NO_CONTENT_STATUS);
-        const client = (0, http_1.createClient)();
-        const response = await client.post(REFRESH_URL, {
-            token: user.refreshToken,
-        });
-        (0, chai_1.expect)(response.status).to.equal(UNAUTH_STATUS);
-    });
-});
-//# sourceMappingURL=refresh.test.js.map

package/dist/test/integration/auth/refresh.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/refresh.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,+CAAoC;AACpC,6CAAoE;AACpE,yCAAiD;AACjD,6CAAkD;AAElD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC;AACxB,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC;AAE9B,SAAS,iBAAiB;IACxB,OAAO,IAAA,mBAAI,EAAC,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE;QACxE,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAC;AACL,CAAC;AAMD,QAAQ,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC/C,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,KAAK,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAElC,MAAM,UAAU,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE;YACvD,KAAK,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,KAAK,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC,CAAC;QAEH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/sessions.test.js

@@ -1,58 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const chai_1 = require("chai");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const http_1 = require("../../helpers/http");
-const SESSIONS_URL = "/settings/user/profile/sessions";
-const LOGOUT_URL = "/api/auth/logout";
-const UNAUTH_STATUS = 401;
-const SUCCESS_STATUS = 200;
-const NO_CONTENT_STATUS = 204;
-describe.skip("[integration] auth/sessions", () => {
-    beforeEach(async () => {
-        await (0, db_1.resetDatabase)();
-    });
-    it("lists the current session after login", async () => {
-        const user = await (0, auth_1.registerUser)({ owner: true });
-        const session = await (0, auth_1.loginUser)(user.email, user.password);
-        const client = (0, auth_1.authorizedClient)(session.accessToken);
-        const response = await client.get(SESSIONS_URL);
-        (0, chai_1.expect)(response.status).to.equal(SUCCESS_STATUS);
-        (0, chai_1.expect)(response.data).to.be.an("array");
-        (0, chai_1.expect)(response.data.length).to.be.at.least(1);
-        const current = response.data.find((entry) => entry.isCurrent);
-        (0, chai_1.expect)(current).to.exist;
-    });
-    it("logout deletes the current session from the sessions list", async () => {
-        const user = await (0, auth_1.registerUser)({ owner: true });
-        const session = await (0, auth_1.loginUser)(user.email, user.password);
-        const client = (0, auth_1.authorizedClient)(session.accessToken);
-        const beforeLogout = await client.get(SESSIONS_URL);
-        (0, chai_1.expect)(beforeLogout.status).to.equal(SUCCESS_STATUS);
-        const initialCount = beforeLogout.data.length;
-        const currentBefore = beforeLogout.data.find((entry) => entry.isCurrent);
-        (0, chai_1.expect)(currentBefore).to.exist;
-        const logoutResponse = await client.post(LOGOUT_URL, {
-            token: session.refreshToken,
-        });
-        (0, chai_1.expect)(logoutResponse.status).to.equal(NO_CONTENT_STATUS);
-        const fallbackClient = (0, auth_1.authorizedClient)(user.accessToken);
-        const afterLogout = await fallbackClient.get(SESSIONS_URL);
-        (0, chai_1.expect)(afterLogout.status).to.equal(SUCCESS_STATUS);
-        (0, chai_1.expect)(afterLogout.data.length).to.equal(initialCount - 1);
-        const revokedStillPresent = afterLogout.data.some((entry) => entry._id === currentBefore._id);
-        (0, chai_1.expect)(revokedStillPresent).to.equal(false);
-    });
-    it("rejects unauthenticated GET /sessions with 401", async () => {
-        const client = (0, http_1.createClient)();
-        const response = await client.get(SESSIONS_URL);
-        (0, chai_1.expect)(response.status).to.equal(UNAUTH_STATUS);
-    });
-    it("rejects unauthenticated DELETE /sessions with 401", async () => {
-        const client = (0, http_1.createClient)();
-        const response = await client.delete(SESSIONS_URL);
-        (0, chai_1.expect)(response.status).to.equal(UNAUTH_STATUS);
-    });
-});
-//# sourceMappingURL=sessions.test.js.map

package/dist/test/integration/auth/sessions.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessions.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/sessions.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,6CAA+E;AAC/E,yCAAiD;AACjD,6CAAkD;AAElD,MAAM,YAAY,GAAG,iCAAiC,CAAC;AACvD,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAM9B,QAAQ,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAChD,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAChC,CAAC,KAA6B,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CACnD,CAAC;QACF,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9C,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAC1C,CAAC,KAA6B,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CACnD,CAAC;QACF,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;QAE/B,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;YACnD,KAAK,EAAE,OAAO,CAAC,YAAY;SAC5B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE1D,MAAM,cAAc,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAA,aAAM,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;QAC3D,MAAM,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAC/C,CAAC,KAAsB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG,CAC5D,CAAC;QACF,IAAA,aAAM,EAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEnD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}