@flusys/nestjs-auth 7.1.0 → 8.0.0

package/cjs/services/user-permission.service.spec.js

@@ -1,254 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _common = require("@nestjs/common");
-const _classes = require("@flusys/nestjs-shared/classes");
-const _repositorymock = require("@test-utils/mocks/repository.mock");
-const _userpermissionservice = require("./user-permission.service");
-const _usercompanypermissionentity = require("../entities/user-company-permission.entity");
-function buildPermission(overrides = {}) {
-    return {
-        id: 'perm-uuid-1',
-        userId: 'user-1',
-        permissionType: _usercompanypermissionentity.PermissionType.COMPANY,
-        targetId: 'company-1',
-        isActive: true,
-        createdAt: new Date(),
-        updatedAt: new Date(),
-        ...overrides
-    };
-}
-describe('UserPermissionService', ()=>{
-    let service;
-    let mockRepo;
-    let mockPermissionSyncAdapter;
-    beforeEach(()=>{
-        mockRepo = (0, _repositorymock.createMockRepository)();
-        // The shared query builder mock does not include join helpers used by this service.
-        Object.assign(mockRepo.createQueryBuilder(), {
-            innerJoin: jest.fn().mockReturnThis(),
-            leftJoinAndSelect: jest.fn().mockReturnThis()
-        });
-        const mockDataSourceProvider = (0, _repositorymock.createMockDataSourceProvider)(mockRepo);
-        mockPermissionSyncAdapter = {
-            onCompanyDeleted: jest.fn(),
-            onBranchDeleted: jest.fn(),
-            onUserCompanyAccessRevoked: jest.fn(),
-            onUserBranchAccessRevoked: jest.fn()
-        };
-        service = new _userpermissionservice.UserPermissionService(mockDataSourceProvider, mockPermissionSyncAdapter);
-    });
-    describe('findUserPermissions', ()=>{
-        it('finds company permissions with the company relation', async ()=>{
-            mockRepo.find.mockResolvedValue([
-                buildPermission()
-            ]);
-            const result = await service.findUserPermissions('user-1', _usercompanypermissionentity.PermissionType.COMPANY);
-            expect(result).toHaveLength(1);
-            expect(mockRepo.find).toHaveBeenCalledWith(expect.objectContaining({
-                where: {
-                    userId: 'user-1',
-                    permissionType: _usercompanypermissionentity.PermissionType.COMPANY
-                },
-                relations: [
-                    'company'
-                ]
-            }));
-        });
-        it('finds branch permissions with the branch relation', async ()=>{
-            mockRepo.find.mockResolvedValue([]);
-            await service.findUserPermissions('user-1', _usercompanypermissionentity.PermissionType.BRANCH);
-            expect(mockRepo.find).toHaveBeenCalledWith(expect.objectContaining({
-                relations: [
-                    'branch'
-                ]
-            }));
-        });
-    });
-    describe('assignPermission', ()=>{
-        it('creates and saves a new permission when none exists', async ()=>{
-            mockRepo.findOne.mockResolvedValue(null);
-            mockRepo.create.mockReturnValue(buildPermission());
-            mockRepo.save.mockResolvedValue(buildPermission());
-            await service.assignPermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY);
-            expect(mockRepo.create).toHaveBeenCalledWith({
-                userId: 'user-1',
-                permissionType: _usercompanypermissionentity.PermissionType.COMPANY,
-                targetId: 'company-1'
-            });
-            expect(mockRepo.save).toHaveBeenCalled();
-        });
-        it('throws ConflictException when the permission already exists', async ()=>{
-            mockRepo.findOne.mockResolvedValue(buildPermission());
-            await expect(service.assignPermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY)).rejects.toThrow(_common.ConflictException);
-            expect(mockRepo.save).not.toHaveBeenCalled();
-        });
-        it('translates a duplicate-entry database error into ConflictException', async ()=>{
-            mockRepo.findOne.mockResolvedValue(null);
-            mockRepo.create.mockReturnValue(buildPermission());
-            mockRepo.save.mockRejectedValue({
-                code: 'ER_DUP_ENTRY',
-                message: 'Duplicate entry'
-            });
-            await expect(service.assignPermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY)).rejects.toThrow(_common.ConflictException);
-        });
-        it('rethrows unrelated database errors from save', async ()=>{
-            mockRepo.findOne.mockResolvedValue(null);
-            mockRepo.create.mockReturnValue(buildPermission());
-            const dbError = new Error('connection lost');
-            mockRepo.save.mockRejectedValue(dbError);
-            await expect(service.assignPermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY)).rejects.toThrow('connection lost');
-        });
-    });
-    describe('revokePermission', ()=>{
-        it('throws NotFoundException when the permission does not exist', async ()=>{
-            mockRepo.findOne.mockResolvedValue(null);
-            await expect(service.revokePermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY)).rejects.toThrow(_common.NotFoundException);
-        });
-        it('removes a company permission and cascades revocation to its branches', async ()=>{
-            const companyPermission = buildPermission({
-                permissionType: _usercompanypermissionentity.PermissionType.COMPANY
-            });
-            mockRepo.findOne.mockResolvedValue(companyPermission);
-            mockRepo.remove.mockResolvedValue(companyPermission);
-            const branchPermission = buildPermission({
-                id: 'perm-branch-1',
-                permissionType: _usercompanypermissionentity.PermissionType.BRANCH,
-                targetId: 'branch-1'
-            });
-            mockRepo.createQueryBuilder().getMany.mockResolvedValue([
-                branchPermission
-            ]);
-            await service.revokePermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY);
-            expect(mockRepo.remove).toHaveBeenCalledWith(companyPermission);
-            expect(mockRepo.remove).toHaveBeenCalledWith([
-                branchPermission
-            ]);
-            expect(mockPermissionSyncAdapter.onUserCompanyAccessRevoked).toHaveBeenCalledWith('user-1', 'company-1');
-            expect(mockPermissionSyncAdapter.onUserBranchAccessRevoked).toHaveBeenCalledWith('user-1', 'branch-1', 'company-1');
-        });
-        it('removes a branch permission and notifies the sync adapter with its company id', async ()=>{
-            const branchPermission = buildPermission({
-                permissionType: _usercompanypermissionentity.PermissionType.BRANCH,
-                targetId: 'branch-1',
-                branch: {
-                    companyId: 'company-1'
-                }
-            });
-            mockRepo.findOne.mockResolvedValue(branchPermission);
-            mockRepo.remove.mockResolvedValue(branchPermission);
-            await service.revokePermission('user-1', 'branch-1', _usercompanypermissionentity.PermissionType.BRANCH);
-            expect(mockRepo.remove).toHaveBeenCalledWith(branchPermission);
-            expect(mockPermissionSyncAdapter.onUserBranchAccessRevoked).toHaveBeenCalledWith('user-1', 'branch-1', 'company-1');
-        });
-        it('does not notify the sync adapter for a branch permission with no resolvable company', async ()=>{
-            const branchPermission = buildPermission({
-                permissionType: _usercompanypermissionentity.PermissionType.BRANCH,
-                targetId: 'branch-1',
-                branch: undefined
-            });
-            mockRepo.findOne.mockResolvedValue(branchPermission);
-            mockRepo.remove.mockResolvedValue(branchPermission);
-            await service.revokePermission('user-1', 'branch-1', _usercompanypermissionentity.PermissionType.BRANCH);
-            expect(mockPermissionSyncAdapter.onUserBranchAccessRevoked).not.toHaveBeenCalled();
-        });
-        it('works without a permission sync adapter configured', async ()=>{
-            service = new _userpermissionservice.UserPermissionService((0, _repositorymock.createMockDataSourceProvider)(mockRepo), undefined);
-            const companyPermission = buildPermission({
-                permissionType: _usercompanypermissionentity.PermissionType.COMPANY
-            });
-            mockRepo.findOne.mockResolvedValue(companyPermission);
-            mockRepo.remove.mockResolvedValue(companyPermission);
-            mockRepo.createQueryBuilder().getMany.mockResolvedValue([]);
-            await expect(service.revokePermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY)).resolves.toBeUndefined();
-        });
-    });
-    describe('findUserCompanies', ()=>{
-        it('delegates to findUserPermissions with COMPANY type', async ()=>{
-            mockRepo.find.mockResolvedValue([
-                buildPermission()
-            ]);
-            const result = await service.findUserCompanies('user-1');
-            expect(result).toHaveLength(1);
-            expect(mockRepo.find).toHaveBeenCalledWith(expect.objectContaining({
-                where: {
-                    userId: 'user-1',
-                    permissionType: _usercompanypermissionentity.PermissionType.COMPANY
-                }
-            }));
-        });
-    });
-    describe('findUserBranches', ()=>{
-        it('queries branch permissions for a user without a company filter', async ()=>{
-            mockRepo.createQueryBuilder().getMany.mockResolvedValue([]);
-            await service.findUserBranches('user-1');
-            const qb = mockRepo.createQueryBuilder();
-            expect(qb.where).toHaveBeenCalledWith('permission.userId = :userId', {
-                userId: 'user-1'
-            });
-            expect(qb.andWhere).toHaveBeenCalledWith('permission.permissionType = :type', {
-                type: _usercompanypermissionentity.PermissionType.BRANCH
-            });
-        });
-        it('applies an additional company filter when companyId is provided', async ()=>{
-            mockRepo.createQueryBuilder().getMany.mockResolvedValue([]);
-            await service.findUserBranches('user-1', 'company-1');
-            const qb = mockRepo.createQueryBuilder();
-            expect(qb.andWhere).toHaveBeenCalledWith('branch.companyId = :companyId', {
-                companyId: 'company-1'
-            });
-        });
-    });
-    describe('domain events', ()=>{
-        let publish;
-        beforeEach(()=>{
-            publish = jest.fn().mockResolvedValue(undefined);
-            _classes.EventBusRegistry.reset();
-            _classes.EventBusRegistry.setBus({
-                publish,
-                subscribe: jest.fn(),
-                close: jest.fn()
-            });
-            _classes.EventBusRegistry.configureModule('auth', {
-                enabled: true
-            });
-        });
-        afterEach(()=>{
-            _classes.EventBusRegistry.reset();
-        });
-        it('publishes permission-granted after a new assignment', async ()=>{
-            mockRepo.findOne.mockResolvedValue(null);
-            mockRepo.create.mockReturnValue(buildPermission());
-            mockRepo.save.mockResolvedValue(buildPermission());
-            await service.assignPermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY);
-            expect(publish).toHaveBeenCalledWith(expect.objectContaining({
-                name: 'auth.user_company_permission.permission-granted',
-                payload: expect.objectContaining({
-                    ids: [
-                        'company-1'
-                    ],
-                    metadata: expect.objectContaining({
-                        targetUserId: 'user-1',
-                        permissionType: _usercompanypermissionentity.PermissionType.COMPANY
-                    })
-                })
-            }));
-        });
-        it('does not publish when the assignment is rejected as a duplicate', async ()=>{
-            mockRepo.findOne.mockResolvedValue(buildPermission());
-            await expect(service.assignPermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY)).rejects.toThrow(_common.ConflictException);
-            expect(publish).not.toHaveBeenCalled();
-        });
-        it('does not publish when the auth module has events disabled', async ()=>{
-            _classes.EventBusRegistry.configureModule('auth', {
-                enabled: false
-            });
-            mockRepo.findOne.mockResolvedValue(null);
-            mockRepo.create.mockReturnValue(buildPermission());
-            mockRepo.save.mockResolvedValue(buildPermission());
-            await service.assignPermission('user-1', 'company-1', _usercompanypermissionentity.PermissionType.COMPANY);
-            expect(publish).not.toHaveBeenCalled();
-        });
-    });
-});