@budibase/worker 2.1.40-alpha.4 → 2.1.41

package/src/api/routes/global/tests/users.spec.ts

@@ -6,12 +6,14 @@ import {
   mocks,
   structures,
   TENANT_1,
+  API,
 } from "../../../../tests"
 const sendMailMock = mocks.email.mock()
 import { events, tenancy } from "@budibase/backend-core"
 
 describe("/api/global/users", () => {
   const config = new TestConfiguration()
+  const api = new API(config)
 
   beforeAll(async () => {
     await config.beforeAll()
@@ -28,10 +30,7 @@ describe("/api/global/users", () => {
   describe("invite", () => {
     it("should be able to generate an invitation", async () => {
       const email = structures.users.newEmail()
-      const { code, res } = await config.api.users.sendUserInvite(
-        sendMailMock,
-        email
-      )
+      const { code, res } = await api.users.sendUserInvite(sendMailMock, email)
 
       expect(res.body).toEqual({ message: "Invitation has been sent." })
       expect(sendMailMock).toHaveBeenCalled()
@@ -40,7 +39,7 @@ describe("/api/global/users", () => {
     })
 
     it("should not be able to generate an invitation for existing user", async () => {
-      const { code, res } = await config.api.users.sendUserInvite(
+      const { code, res } = await api.users.sendUserInvite(
         sendMailMock,
         config.defaultUser!.email,
         400
@@ -54,12 +53,9 @@ describe("/api/global/users", () => {
 
     it("should be able to create new user from invite", async () => {
       const email = structures.users.newEmail()
-      const { code } = await config.api.users.sendUserInvite(
-        sendMailMock,
-        email
-      )
+      const { code } = await api.users.sendUserInvite(sendMailMock, email)
 
-      const res = await config.api.users.acceptInvite(code)
+      const res = await api.users.acceptInvite(code)
 
       expect(res.body._id).toBeDefined()
       const user = await config.getUser(email)
@@ -78,7 +74,7 @@ describe("/api/global/users", () => {
       })
       const request = [newUserInvite(), newUserInvite()]
 
-      const res = await config.api.users.sendMultiUserInvite(request)
+      const res = await api.users.sendMultiUserInvite(request)
 
       const body = res.body as InviteUsersResponse
       expect(body.successful.length).toBe(2)
@@ -90,7 +86,7 @@ describe("/api/global/users", () => {
     it("should not be able to generate an invitation for existing user", async () => {
       const request = [{ email: config.defaultUser!.email, userInfo: {} }]
 
-      const res = await config.api.users.sendMultiUserInvite(request)
+      const res = await api.users.sendMultiUserInvite(request)
 
       const body = res.body as InviteUsersResponse
       expect(body.successful.length).toBe(0)
@@ -106,7 +102,7 @@ describe("/api/global/users", () => {
       const user = await config.createUser()
       jest.clearAllMocks()
 
-      const response = await config.api.users.bulkCreateUsers([user])
+      const response = await api.users.bulkCreateUsers([user])
 
       expect(response.created?.successful.length).toBe(0)
       expect(response.created?.unsuccessful.length).toBe(1)
@@ -119,7 +115,7 @@ describe("/api/global/users", () => {
       jest.resetAllMocks()
 
       await tenancy.doInTenant(TENANT_1, async () => {
-        const response = await config.api.users.bulkCreateUsers([user])
+        const response = await api.users.bulkCreateUsers([user])
 
         expect(response.created?.successful.length).toBe(0)
         expect(response.created?.unsuccessful.length).toBe(1)
@@ -130,11 +126,11 @@ describe("/api/global/users", () => {
 
     it("should ignore accounts using the same email", async () => {
       const account = structures.accounts.account()
-      const resp = await config.api.accounts.saveMetadata(account)
+      const resp = await api.accounts.saveMetadata(account)
       const user = structures.users.user({ email: resp.email })
       jest.clearAllMocks()
 
-      const response = await config.api.users.bulkCreateUsers([user])
+      const response = await api.users.bulkCreateUsers([user])
 
       expect(response.created?.successful.length).toBe(0)
       expect(response.created?.unsuccessful.length).toBe(1)
@@ -147,11 +143,7 @@ describe("/api/global/users", () => {
       const admin = structures.users.adminUser()
       const user = structures.users.user()
 
-      const response = await config.api.users.bulkCreateUsers([
-        builder,
-        admin,
-        user,
-      ])
+      const response = await api.users.bulkCreateUsers([builder, admin, user])
 
       expect(response.created?.successful.length).toBe(3)
       expect(response.created?.successful[0].email).toBe(builder.email)
@@ -168,7 +160,7 @@ describe("/api/global/users", () => {
     it("should be able to create a basic user", async () => {
       const user = structures.users.user()
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       expect(events.user.created).toBeCalledTimes(1)
       expect(events.user.updated).not.toBeCalled()
@@ -179,7 +171,7 @@ describe("/api/global/users", () => {
     it("should be able to create an admin user", async () => {
       const user = structures.users.adminUser()
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       expect(events.user.created).toBeCalledTimes(1)
       expect(events.user.updated).not.toBeCalled()
@@ -190,7 +182,7 @@ describe("/api/global/users", () => {
     it("should be able to create a builder user", async () => {
       const user = structures.users.builderUser()
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       expect(events.user.created).toBeCalledTimes(1)
       expect(events.user.updated).not.toBeCalled()
@@ -205,7 +197,7 @@ describe("/api/global/users", () => {
         app_456: "role2",
       }
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       const savedUser = await config.getUser(user.email)
       expect(events.user.created).toBeCalledTimes(1)
@@ -221,7 +213,7 @@ describe("/api/global/users", () => {
       delete user._id
       delete user._rev
 
-      const response = await config.api.users.saveUser(user, 400)
+      const response = await api.users.saveUser(user, 400)
 
       expect(response.body.message).toBe(`Unavailable`)
       expect(events.user.created).toBeCalledTimes(0)
@@ -233,7 +225,7 @@ describe("/api/global/users", () => {
 
       await tenancy.doInTenant(TENANT_1, async () => {
         delete user._id
-        const response = await config.api.users.saveUser(user, 400)
+        const response = await api.users.saveUser(user, 400)
 
         expect(response.body.message).toBe(`Unavailable`)
         expect(events.user.created).toBeCalledTimes(0)
@@ -245,7 +237,7 @@ describe("/api/global/users", () => {
       const account = structures.accounts.cloudAccount()
       mocks.accounts.getAccount.mockReturnValueOnce(account)
 
-      const response = await config.api.users.saveUser(user, 400)
+      const response = await api.users.saveUser(user, 400)
 
       expect(response.body.message).toBe(`Unavailable`)
       expect(events.user.created).toBeCalledTimes(0)
@@ -253,23 +245,31 @@ describe("/api/global/users", () => {
 
     it("should not be able to create a user with the same email and different casing", async () => {
       const user = structures.users.user()
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       user.email = user.email.toUpperCase()
-      await config.api.users.saveUser(user, 400)
+      await api.users.saveUser(user, 400)
 
       expect(events.user.created).toBeCalledTimes(1)
     })
 
     it("should not be able to bulk create a user with the same email and different casing", async () => {
       const user = structures.users.user()
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       user.email = user.email.toUpperCase()
-      await config.api.users.bulkCreateUsers([user])
+      await api.users.bulkCreateUsers([user])
 
       expect(events.user.created).toBeCalledTimes(1)
     })
+
+    it("should not allow a non-admin user to create a new user", async () => {
+      const nonAdmin = await config.createUser(structures.users.builderUser())
+      await config.createSession(nonAdmin)
+
+      const newUser = structures.users.user()
+      await api.users.saveUser(newUser, 403, config.authHeaders(nonAdmin))
+    })
   })
 
   describe("update", () => {
@@ -277,7 +277,7 @@ describe("/api/global/users", () => {
       const user = await config.createUser()
       jest.clearAllMocks()
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       expect(events.user.created).not.toBeCalled()
       expect(events.user.updated).toBeCalledTimes(1)
@@ -292,7 +292,7 @@ describe("/api/global/users", () => {
 
       user.forceResetPassword = true
       user.password = "tempPassword"
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       expect(events.user.created).not.toBeCalled()
       expect(events.user.updated).toBeCalledTimes(1)
@@ -305,7 +305,7 @@ describe("/api/global/users", () => {
       const user = await config.createUser()
       jest.clearAllMocks()
 
-      await config.api.users.saveUser(structures.users.adminUser(user))
+      await api.users.saveUser(structures.users.adminUser(user))
 
       expect(events.user.created).not.toBeCalled()
       expect(events.user.updated).toBeCalledTimes(1)
@@ -317,7 +317,7 @@ describe("/api/global/users", () => {
       const user = await config.createUser()
       jest.clearAllMocks()
 
-      await config.api.users.saveUser(structures.users.builderUser(user))
+      await api.users.saveUser(structures.users.builderUser(user))
 
       expect(events.user.created).not.toBeCalled()
       expect(events.user.updated).toBeCalledTimes(1)
@@ -331,7 +331,7 @@ describe("/api/global/users", () => {
       user.admin!.global = false
       user.builder!.global = false
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       expect(events.user.created).not.toBeCalled()
       expect(events.user.updated).toBeCalledTimes(1)
@@ -344,7 +344,7 @@ describe("/api/global/users", () => {
       jest.clearAllMocks()
       user.builder!.global = false
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       expect(events.user.created).not.toBeCalled()
       expect(events.user.updated).toBeCalledTimes(1)
@@ -360,7 +360,7 @@ describe("/api/global/users", () => {
         app_456: "role2",
       }
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       const savedUser = await config.getUser(user.email)
       expect(events.user.created).not.toBeCalled()
@@ -380,7 +380,7 @@ describe("/api/global/users", () => {
       jest.clearAllMocks()
       user.roles = {}
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       const savedUser = await config.getUser(user.email)
       expect(events.user.created).not.toBeCalled()
@@ -403,7 +403,7 @@ describe("/api/global/users", () => {
         app_456: "role2-edit",
       }
 
-      await config.api.users.saveUser(user)
+      await api.users.saveUser(user)
 
       const savedUser = await config.getUser(user.email)
       expect(events.user.created).not.toBeCalled()
@@ -419,20 +419,28 @@ describe("/api/global/users", () => {
       const user = await config.createUser(structures.users.user({ email }))
       user.email = "new@test.com"
 
-      const response = await config.api.users.saveUser(user, 400)
+      const response = await api.users.saveUser(user, 400)
 
       const dbUser = await config.getUser(email)
       user.email = email
       expect(user).toStrictEqual(dbUser)
       expect(response.body.message).toBe("Email address cannot be changed")
     })
+
+    it("should allow a non-admin user to update an existing user", async () => {
+      const existingUser = await config.createUser(structures.users.user())
+      const nonAdmin = await config.createUser(structures.users.builderUser())
+      await config.createSession(nonAdmin)
+
+      await api.users.saveUser(existingUser, 200, config.authHeaders(nonAdmin))
+    })
   })
 
   describe("bulk (delete)", () => {
     it("should not be able to bulk delete current user", async () => {
       const user = await config.defaultUser!
 
-      const response = await config.api.users.bulkDeleteUsers([user._id!], 400)
+      const response = await api.users.bulkDeleteUsers([user._id!], 400)
 
       expect(response.message).toBe("Unable to delete self.")
       expect(events.user.deleted).not.toBeCalled()
@@ -444,7 +452,7 @@ describe("/api/global/users", () => {
       account.budibaseUserId = user._id!
       mocks.accounts.getAccountByTenantId.mockReturnValue(account)
 
-      const response = await config.api.users.bulkDeleteUsers([user._id!])
+      const response = await api.users.bulkDeleteUsers([user._id!])
 
       expect(response.deleted?.successful.length).toBe(0)
       expect(response.deleted?.unsuccessful.length).toBe(1)
@@ -462,7 +470,7 @@ describe("/api/global/users", () => {
       const builder = structures.users.builderUser()
       const admin = structures.users.adminUser()
       const user = structures.users.user()
-      const createdUsers = await config.api.users.bulkCreateUsers([
+      const createdUsers = await api.users.bulkCreateUsers([
         builder,
         admin,
         user,
@@ -471,7 +479,7 @@ describe("/api/global/users", () => {
       const toDelete = createdUsers.created?.successful.map(
         u => u._id!
       ) as string[]
-      const response = await config.api.users.bulkDeleteUsers(toDelete)
+      const response = await api.users.bulkDeleteUsers(toDelete)
 
       expect(response.deleted?.successful.length).toBe(3)
       expect(response.deleted?.unsuccessful.length).toBe(0)
@@ -486,7 +494,7 @@ describe("/api/global/users", () => {
       const user = await config.createUser()
       jest.clearAllMocks()
 
-      await config.api.users.deleteUser(user._id!)
+      await api.users.deleteUser(user._id!)
 
       expect(events.user.deleted).toBeCalledTimes(1)
       expect(events.user.permissionBuilderRemoved).not.toBeCalled()
@@ -497,7 +505,7 @@ describe("/api/global/users", () => {
       const user = await config.createUser(structures.users.adminUser())
       jest.clearAllMocks()
 
-      await config.api.users.deleteUser(user._id!)
+      await api.users.deleteUser(user._id!)
 
       expect(events.user.deleted).toBeCalledTimes(1)
       expect(events.user.permissionBuilderRemoved).toBeCalledTimes(1)
@@ -508,7 +516,7 @@ describe("/api/global/users", () => {
       const user = await config.createUser(structures.users.builderUser())
       jest.clearAllMocks()
 
-      await config.api.users.deleteUser(user._id!)
+      await api.users.deleteUser(user._id!)
 
       expect(events.user.deleted).toBeCalledTimes(1)
       expect(events.user.permissionBuilderRemoved).toBeCalledTimes(1)
@@ -520,7 +528,7 @@ describe("/api/global/users", () => {
       const account = structures.accounts.cloudAccount()
       mocks.accounts.getAccount.mockReturnValueOnce(account)
 
-      const response = await config.api.users.deleteUser(user._id!, 400)
+      const response = await api.users.deleteUser(user._id!, 400)
 
       expect(response.body.message).toBe("Account holder cannot be deleted")
     })
@@ -531,7 +539,7 @@ describe("/api/global/users", () => {
       account.email = user.email
       mocks.accounts.getAccount.mockReturnValueOnce(account)
 
-      const response = await config.api.users.deleteUser(user._id!, 400)
+      const response = await api.users.deleteUser(user._id!, 400)
 
       expect(response.body.message).toBe("Unable to delete self.")
     })

package/src/api/routes/global/{users.ts → users.js}

@@ -1,15 +1,17 @@
-import Router from "@koa/router"
-import * as controller from "../../controllers/global/users"
-import { auth } from "@budibase/backend-core"
-import Joi from "joi"
-import cloudRestricted from "../../../middleware/cloudRestricted"
-import { users } from "../validation"
-import * as selfController from "../../controllers/global/self"
+const Router = require("@koa/router")
+const controller = require("../../controllers/global/users")
+const { joiValidator } = require("@budibase/backend-core/auth")
+const { adminOnly } = require("@budibase/backend-core/auth")
+const Joi = require("joi")
+const cloudRestricted = require("../../../middleware/cloudRestricted")
+const { users } = require("../validation")
+const selfController = require("../../controllers/global/self")
+const { builderOrAdmin } = require("@budibase/backend-core/auth")
 
-const router: Router = new Router()
+const router = new Router()
 
 function buildAdminInitValidation() {
-  return auth.joiValidator.body(
+  return joiValidator.body(
     Joi.object({
       email: Joi.string().required(),
       password: Joi.string(),
@@ -22,7 +24,7 @@ function buildAdminInitValidation() {
 
 function buildInviteValidation() {
   // prettier-ignore
-  return auth.joiValidator.body(Joi.object({
+  return joiValidator.body(Joi.object({
     email: Joi.string().required(),
     userInfo: Joi.object().optional(),
   }).required())
@@ -30,7 +32,7 @@ function buildInviteValidation() {
 
 function buildInviteMultipleValidation() {
   // prettier-ignore
-  return auth.joiValidator.body(Joi.array().required().items(
+  return joiValidator.body(Joi.array().required().items(
     Joi.object({
       email: Joi.string(),
       userInfo: Joi.object().optional(),
@@ -38,9 +40,17 @@ function buildInviteMultipleValidation() {
   ))
 }
 
+const createUserAdminOnly = (ctx, next) => {
+  if (!ctx.request.body._id) {
+    return adminOnly(ctx, next)
+  } else {
+    return builderOrAdmin(ctx, next)
+  }
+}
+
 function buildInviteAcceptValidation() {
   // prettier-ignore
-  return auth.joiValidator.body(Joi.object({
+  return joiValidator.body(Joi.object({
     inviteCode: Joi.string().required(),
     password: Joi.string().required(),
   }).required().unknown(true))
@@ -49,35 +59,31 @@ function buildInviteAcceptValidation() {
 router
   .post(
     "/api/global/users",
-    auth.adminOnly,
+    createUserAdminOnly,
     users.buildUserSaveValidation(),
     controller.save
   )
   .post(
     "/api/global/users/bulk",
-    auth.adminOnly,
+    adminOnly,
     users.buildUserBulkUserValidation(),
     controller.bulkUpdate
   )
 
-  .get("/api/global/users", auth.builderOrAdmin, controller.fetch)
-  .post("/api/global/users/search", auth.builderOrAdmin, controller.search)
-  .delete("/api/global/users/:id", auth.adminOnly, controller.destroy)
-  .get(
-    "/api/global/users/count/:appId",
-    auth.builderOrAdmin,
-    controller.countByApp
-  )
+  .get("/api/global/users", builderOrAdmin, controller.fetch)
+  .post("/api/global/users/search", builderOrAdmin, controller.search)
+  .delete("/api/global/users/:id", adminOnly, controller.destroy)
+  .get("/api/global/users/count/:appId", builderOrAdmin, controller.countByApp)
   .get("/api/global/roles/:appId")
   .post(
     "/api/global/users/invite",
-    auth.adminOnly,
+    adminOnly,
     buildInviteValidation(),
     controller.invite
   )
   .post(
     "/api/global/users/multi/invite",
-    auth.adminOnly,
+    adminOnly,
     buildInviteMultipleValidation(),
     controller.inviteMultiple
   )
@@ -96,7 +102,7 @@ router
   )
   .get("/api/global/users/tenant/:id", controller.tenantUserLookup)
   // global endpoint but needs to come at end (blocks other endpoints otherwise)
-  .get("/api/global/users/:id", auth.builderOrAdmin, controller.find)
+  .get("/api/global/users/:id", builderOrAdmin, controller.find)
   // DEPRECATED - use new versions with self API
   .get("/api/global/users/self", selfController.getSelf)
   .post(
@@ -105,4 +111,4 @@ router
     selfController.updateSelf
   )
 
-export = router
+module.exports = router

package/src/api/routes/global/{workspaces.ts → workspaces.js}

@@ -1,13 +1,14 @@
-import Router from "@koa/router"
-import * as controller from "../../controllers/global/workspaces"
-import { auth } from "@budibase/backend-core"
-import Joi from "joi"
+const Router = require("@koa/router")
+const controller = require("../../controllers/global/workspaces")
+const { joiValidator } = require("@budibase/backend-core/auth")
+const { adminOnly } = require("@budibase/backend-core/auth")
+const Joi = require("joi")
 
-const router: Router = new Router()
+const router = new Router()
 
 function buildWorkspaceSaveValidation() {
   // prettier-ignore
-  return auth.joiValidator.body(Joi.object({
+  return joiValidator.body(Joi.object({
     _id: Joi.string().optional(),
     _rev: Joi.string().optional(),
     name: Joi.string().required(),
@@ -26,12 +27,12 @@ function buildWorkspaceSaveValidation() {
 router
   .post(
     "/api/global/workspaces",
-    auth.adminOnly,
+    adminOnly,
     buildWorkspaceSaveValidation(),
     controller.save
   )
-  .delete("/api/global/workspaces/:id", auth.adminOnly, controller.destroy)
+  .delete("/api/global/workspaces/:id", adminOnly, controller.destroy)
   .get("/api/global/workspaces", controller.fetch)
   .get("/api/global/workspaces/:id", controller.find)
 
-export = router
+module.exports = router

package/src/api/routes/index.ts

@@ -1,4 +1,3 @@
-import Router from "@koa/router"
 import { api } from "@budibase/pro"
 import userRoutes from "./global/users"
 import configRoutes from "./global/configs"
@@ -17,7 +16,7 @@ import accountRoutes from "./system/accounts"
 import restoreRoutes from "./system/restore"
 
 let userGroupRoutes = api.groups
-export const routes: Router[] = [
+export const routes = [
   configRoutes,
   userRoutes,
   workspaceRoutes,

package/src/api/routes/system/accounts.ts

@@ -2,7 +2,7 @@ import Router from "@koa/router"
 import * as controller from "../../controllers/system/accounts"
 import { middleware } from "@budibase/backend-core"
 
-const router: Router = new Router()
+const router = new Router()
 
 router
   .put(

package/src/api/routes/system/environment.js

@@ -0,0 +1,8 @@
+const Router = require("@koa/router")
+const controller = require("../../controllers/system/environment")
+
+const router = new Router()
+
+router.get("/api/system/environment", controller.fetch)
+
+module.exports = router

package/src/api/routes/system/migrations.ts

@@ -2,7 +2,7 @@ import Router from "@koa/router"
 import * as migrationsController from "../../controllers/system/migrations"
 import { auth } from "@budibase/backend-core"
 
-const router: Router = new Router()
+const router = new Router()
 
 router
   .post(

package/src/api/routes/system/restore.ts

@@ -1,7 +1,7 @@
 import * as controller from "../../controllers/system/restore"
 import Router from "@koa/router"
 
-const router: Router = new Router()
+const router = new Router()
 
 router.post("/api/system/restored", controller.systemRestored)
 

package/src/api/routes/system/status.js

@@ -0,0 +1,8 @@
+const Router = require("@koa/router")
+const controller = require("../../controllers/system/status")
+
+const router = new Router()
+
+router.get("/api/system/status", controller.fetch)
+
+module.exports = router

package/src/api/routes/system/tenants.js

@@ -0,0 +1,12 @@
+const Router = require("@koa/router")
+const controller = require("../../controllers/system/tenants")
+const { adminOnly } = require("@budibase/backend-core/auth")
+
+const router = new Router()
+
+router
+  .get("/api/system/tenants/:tenantId/exists", controller.exists)
+  .get("/api/system/tenants", adminOnly, controller.fetch)
+  .delete("/api/system/tenants/:tenantId", adminOnly, controller.delete)
+
+module.exports = router

package/src/api/routes/system/tests/accounts.spec.ts

@@ -1,9 +1,10 @@
 import sdk from "../../../../sdk"
-import { TestConfiguration, structures } from "../../../../tests"
+import { TestConfiguration, structures, API } from "../../../../tests"
 import { v4 as uuid } from "uuid"
 
 describe("accounts", () => {
   const config = new TestConfiguration()
+  const api = new API(config)
 
   beforeAll(async () => {
     await config.beforeAll()
@@ -22,7 +23,7 @@ describe("accounts", () => {
       it("saves account metadata", async () => {
         let account = structures.accounts.account()
 
-        const response = await config.api.accounts.saveMetadata(account)
+        const response = await api.accounts.saveMetadata(account)
 
         const id = sdk.accounts.formatAccountMetadataId(account.accountId)
         const metadata = await sdk.accounts.getMetadata(id)
@@ -33,9 +34,9 @@ describe("accounts", () => {
     describe("destroyMetadata", () => {
       it("destroys account metadata", async () => {
         const account = structures.accounts.account()
-        await config.api.accounts.saveMetadata(account)
+        await api.accounts.saveMetadata(account)
 
-        await config.api.accounts.destroyMetadata(account.accountId)
+        await api.accounts.destroyMetadata(account.accountId)
 
         const deleted = await sdk.accounts.getMetadata(account.accountId)
         expect(deleted).toBe(undefined)
@@ -44,7 +45,7 @@ describe("accounts", () => {
       it("destroys account metadata that does not exist", async () => {
         const id = uuid()
 
-        const response = await config.api.accounts.destroyMetadata(id)
+        const response = await api.accounts.destroyMetadata(id)
 
         expect(response.status).toBe(204)
       })