@contember/engine-server 1.2.0-alpha.3 → 1.2.0-alpha.4

package/src/bootstrap/Initializer.ts

@@ -17,7 +17,6 @@ export class Initializer {
 		await tenantContainer.migrationsRunner.run(logger.write.bind(logger))
 		logger.groupEnd()
 
-		const systemContainer = groupContainer.systemContainer
 		const projects: string[] = []
 
 		const tenantProjects = await tenantContainer.projectManager.getProjects(tenantContainer.databaseContext)
@@ -32,7 +31,6 @@ export class Initializer {
 			}
 			const project = projectContainer.project
 			projects.push(project.slug)
-			await systemContainer.projectInitializer.initialize(projectContainer.systemDatabaseContextFactory, project, logger)
 			logger.groupEnd()
 		}
 		// eslint-disable-next-line no-console

package/tests/e2e/assume-identity.test.ts

@@ -0,0 +1,127 @@
+import { test } from 'vitest'
+import { createTester, gql } from '../src/tester'
+import { addProjectMember, signIn, signUp } from '../src/requests'
+import { createSchema, SchemaDefinition as def } from '@contember/schema-definition'
+import { AllowAllPermissionFactory } from '@contember/schema-utils'
+
+namespace TagModel {
+	export class Tag {
+		label = def.stringColumn()
+	}
+}
+
+
+test('Content API: assume identity', async () => {
+	const tester = await createTester(createSchema(TagModel, schema => {
+		return {
+			...schema,
+			acl: {
+				roles: {
+					test: {
+						entities: new AllowAllPermissionFactory().create(schema.model),
+						variables: {},
+						system: {
+							history: true,
+							assumeIdentity: true,
+						},
+					},
+				},
+			},
+		}
+	}))
+
+	const email = `john+${Date.now()}@doe.com`
+	const identityId = await signUp(email)
+	const authKey = await signIn(email)
+	await addProjectMember(identityId, tester.projectSlug, { role: 'test', variables: [] })
+
+	const assumedIdentityId = '65e049e7-4b22-487a-a93b-528b3127d967'
+	await tester(
+		gql`
+			mutation {
+				createTag(data: {label: "foo bar"}) {
+					ok
+				}
+			}
+		`,
+		{ authorizationToken: authKey },
+	)
+		.set('X-Contember-assume-identity', assumedIdentityId)
+		.expect(200)
+
+
+	await tester(
+		gql`
+			query {
+				events {
+					tableName
+					identityId
+				}
+			}
+		`,
+		{ authorizationToken: authKey, path: `/system/${tester.projectSlug}` },
+	)
+		.expect({ data: { events: [{ tableName: 'tag', identityId: assumedIdentityId }] } })
+		.expect(200)
+})
+
+
+test('Content API: assume identity is declined', async () => {
+	const tester = await createTester(createSchema(TagModel, schema => {
+		return {
+			...schema,
+			acl: {
+				roles: {
+					foo: {
+						entities: {},
+						variables: {},
+						system: {
+							assumeIdentity: true,
+						},
+					},
+					test: {
+						entities: new AllowAllPermissionFactory().create(schema.model),
+						variables: {},
+						system: {
+							history: true,
+						},
+					},
+				},
+			},
+		}
+	}))
+
+	const email = `john+${Date.now()}@doe.com`
+	const identityId = await signUp(email)
+	const authKey = await signIn(email)
+	await addProjectMember(identityId, tester.projectSlug, { role: 'test', variables: [] })
+
+	const assumedIdentityId = '65e049e7-4b22-487a-a93b-528b3127d967'
+	await tester(
+		gql`
+			mutation {
+				createTag(data: {label: "foo bar"}) {
+					ok
+				}
+			}
+		`,
+		{ authorizationToken: authKey },
+	)
+		.set('X-Contember-assume-identity', assumedIdentityId)
+		.expect(200)
+
+
+	await tester(
+		gql`
+			query {
+				events {
+					tableName
+					identityId
+				}
+			}
+		`,
+		{ authorizationToken: authKey, path: `/system/${tester.projectSlug}` },
+	)
+		.expect({ data: { events: [{ tableName: 'tag', identityId }] } })
+		.expect(200)
+})

package/tests/src/requests.ts

@@ -1,6 +1,6 @@
 import { executeGraphql, gql, loginToken } from './tester'
 import { assert } from 'vitest'
-import { Membership } from '@contember/engine-tenant-api'
+import { Acl } from '@contember/schema'
 
 export const signIn = async (email: string, password = '123456'): Promise<string> => {
 	const response = await executeGraphql(
@@ -51,13 +51,22 @@ export const signUp = async (email: string, password = '123456') => {
 }
 
 
-export const addProjectMember = async (identityId: string, projectSlug: string, membership: Membership = { role: 'admin', variables: [] }) => {
+export const addProjectMember = async (identityId: string, projectSlug: string, membership: Acl.Membership = { role: 'admin', variables: [] }) => {
 	await executeGraphql(
 		'/tenant',
 		gql`
 			mutation ($identity: String!, $projectSlug: String!, $membership: MembershipInput!) {
 				addProjectMember(identityId: $identity, projectSlug: $projectSlug, memberships: [$membership]) {
 					ok
+					error {
+						code
+						developerMessage
+						membershipValidation {
+							code
+							role
+							variable
+						}
+					}
 				}
 			}
 		`,
@@ -67,6 +76,6 @@ export const addProjectMember = async (identityId: string, projectSlug: string,
 	)
 		.expect(200)
 		.expect(response => {
-			assert.deepStrictEqual(response.body.data, { addProjectMember: { ok: true } })
+			assert.deepStrictEqual(response.body.data, { addProjectMember: { ok: true, error: null } })
 		})
 }