@getjones/test-infra 5.2.14 → 5.2.16

package/src/saas/internal-api/auth/api/auth.service.js

@@ -1,217 +1,217 @@
-const { getEnv, requiredValidation, getSystemUserIdentity, addUserIdentity } = require('../../../../env');
-const { credentials } = getEnv();
-
-const httpResponseStatusCodes = require('../../../../common/httpResponseStatusCodes.json');
-
-const authApi = require('./auth.api');
-const timeUtils = require('../../../../common/utils/timeUtils');
-
-const RETRYABLE_LOGIN_STATUSES = [
-	httpResponseStatusCodes.BAD_GATEWAY,
-	httpResponseStatusCodes.SERVICE_UNAVAILABLE,
-	httpResponseStatusCodes.GATEWAY_TIMEOUT
-];
-const MAX_LOGIN_ATTEMPTS = 3;
-const LOGIN_RETRY_STEP_TIMEOUT = 2000;
-const LOGIN_RETRY_RANGE_TIMEOUT = 5000;
-
-// Parallel callers for the same user share one login request
-const pendingLogins = new Map();
-
-const getAuthCookie = async (email, password) => {
-	const systemUser = getSystemUserIdentity(email);
-
-	if (systemUser) {
-		return systemUser.cookie;
-	}
-
-	if (!pendingLogins.has(email)) {
-		const login = loginAndCacheCookie(email, password).finally(() => pendingLogins.delete(email));
-		pendingLogins.set(email, login);
-	}
-
-	return pendingLogins.get(email);
-};
-
-const loginWithRetry = async (email, password) => {
-	for (let attempt = 1; ; attempt++) {
-		const response = await authApi.login(email, password);
-
-		if (!RETRYABLE_LOGIN_STATUSES.includes(response.status) || attempt === MAX_LOGIN_ATTEMPTS) {
-			return response;
-		}
-
-		console.warn(`Login for ${email} failed with status ${response.status}, retrying`);
-		const retryRandomTimeout = attempt * LOGIN_RETRY_STEP_TIMEOUT + Math.random() * LOGIN_RETRY_RANGE_TIMEOUT;
-		await timeUtils.waitFor(retryRandomTimeout).mSeconds;
-	}
-};
-
-const loginAndCacheCookie = async (email, password) => {
-	try {
-		const response = await loginWithRetry(email, password);
-
-		if (response.status !== httpResponseStatusCodes.OK) {
-			throw Error(`Error: ${JSON.stringify(response.data)}`);
-		}
-
-		const authCookie = response.headers['set-cookie'].find(item => item.startsWith('JonesToken='));
-
-		addUserIdentity(email, authCookie, response.data.user.id);
-
-		return authCookie;
-	} catch (error) {
-		throw new Error(`Failed to login with email: ${email}\nError: ${error}`);
-	}
-};
-
-const verifyEmail = email => {
-	return authApi.verifyEmail(email);
-};
-
-const createOneTimeSession = email => {
-	return authApi.createOneTimeSession(email);
-};
-
-const getHubUserCookie = async (email, oneTimeCode) => {
-	try {
-		const response = await authApi.verifyUser(email, oneTimeCode);
-
-		if (response.status !== httpResponseStatusCodes.OK && response.status !== httpResponseStatusCodes.NO_CONTENT) {
-			throw Error(`Error: ${JSON.stringify(response.data)}`);
-		}
-
-		const authCookie = response.headers['set-cookie'].find(item => item.startsWith('JonesToken='));
-
-		return authCookie;
-	} catch (error) {
-		throw new Error(`Failed to login to vendor hub by email:${email}`, error);
-	}
-};
-
-const getIcsCookie = () => {
-	const { superUser, superUserPassword } = credentials;
-
-	requiredValidation({
-		'credentials.superUser': superUser,
-		'credentials.superUserPassword': superUserPassword
-	});
-	return getAuthCookie(superUser, superUserPassword);
-};
-
-const getAuditorCookie = () => {
-	const { auditorUser, auditorPassword } = credentials;
-	requiredValidation({
-		'credentials.auditorUser': auditorUser,
-		'credentials.auditorPassword': auditorPassword
-	});
-	return getAuthCookie(auditorUser, auditorPassword);
-};
-
-const getOperatorCookie = () => {
-	const { operatorUser, operatorPassword } = credentials;
-	requiredValidation({
-		'credentials.operatorUser': operatorUser,
-		'credentials.operatorPassword': operatorPassword
-	});
-	return getAuthCookie(operatorUser, operatorPassword);
-};
-
-const login = (email, password) => {
-	return authApi.login(email, password);
-};
-
-const twoFAResendCode = (email, pendingSessionToken) => {
-	return authApi.twoFAResendCode(email, pendingSessionToken);
-};
-
-const twoFAVerify = (email, code, pendingSessionToken) => {
-	return authApi.twoFAVerify(email, code, pendingSessionToken);
-};
-
-const getAuthenticatedUser = context => {
-	return authApi.getAuthenticatedUser(context);
-};
-
-// The id the backend stamps into the session on login — the same value
-// getLoggedInUserId() resolves from the JWT. Available only after the email
-// has logged in (getAuthCookie caches it); returns null otherwise.
-const getUserId = email => {
-	const identity = getSystemUserIdentity(email);
-	return identity ? identity.id : null;
-};
-
-const isHubUser = async (email, { expectError } = {}) => {
-	const response = await authApi.isHubUser(email);
-
-	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`is-hub-user failed for ${email}: ${JSON.stringify(response.data)}`);
-	}
-
-	return response.data;
-};
-
-const resetPassword = async (password, linkData, { expectError = false } = {}) => {
-	const response = await authApi.resetPassword(password, linkData);
-
-	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
-		throw Error(`Failed to reset password. Status code: ${response.status}`);
-	}
-
-	return response;
-};
-
-// Reads the user_login_attempt row via the ICS-secured test-only endpoint.
-// A 404 (no row ever created) is a distinct state from a cleared row (200, counter 0, null dates);
-// pass { expectError: true } to receive the raw response and tell them apart, otherwise the
-// wrapper throws on any non-200 rather than flattening a 404 into a zeroed row.
-const getLoginAttempts = async (email, { expectError } = {}) => {
-	const response = await authApi.getLoginAttempts(email, await getIcsCookie());
-
-	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`getLoginAttempts failed for ${email}: ${JSON.stringify(response.data)}`);
-	}
-
-	return expectError ? response : response.data;
-};
-
-// Backdates the failed-login timestamps for an existing row. The endpoint returns 204 No Content.
-const backdateLoginAttempt = async (email, { dateLastFailedLogin, dateFirstFailedLogin } = {}) => {
-	const response = await authApi.backdateLoginAttempt(
-		{ email, dateLastFailedLogin, dateFirstFailedLogin }, await getIcsCookie());
-
-	if (response.status !== httpResponseStatusCodes.NO_CONTENT && response.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`backdateLoginAttempt failed for ${email}: ${JSON.stringify(response.data)}`);
-	}
-};
-
-// Clears the user_login_attempt row for an email via the ICS-secured test-only endpoint.
-// Idempotent: the endpoint returns 204 whether or not a row existed, so this is safe to call
-// on non-existent-email subjects when resetting lockout state between runs.
-const deleteLoginAttempt = async email => {
-	const response = await authApi.deleteLoginAttempt(email, await getIcsCookie());
-
-	if (response.status !== httpResponseStatusCodes.NO_CONTENT && response.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`deleteLoginAttempt failed for ${email}: ${JSON.stringify(response.data)}`);
-	}
-};
-
-module.exports = {
-	getAuthCookie,
-	verifyEmail,
-	createOneTimeSession,
-	getHubUserCookie,
-	getIcsCookie,
-	getAuditorCookie,
-	getOperatorCookie,
-	login,
-	twoFAResendCode,
-	twoFAVerify,
-	getAuthenticatedUser,
-	getUserId,
-	isHubUser,
-	resetPassword,
-	getLoginAttempts,
-	backdateLoginAttempt,
-	deleteLoginAttempt
-};
+const { getEnv, requiredValidation, getSystemUserIdentity, addUserIdentity } = require('../../../../env');
+const { credentials } = getEnv();
+
+const httpResponseStatusCodes = require('../../../../common/httpResponseStatusCodes.json');
+
+const authApi = require('./auth.api');
+const timeUtils = require('../../../../common/utils/timeUtils');
+
+const RETRYABLE_LOGIN_STATUSES = [
+	httpResponseStatusCodes.BAD_GATEWAY,
+	httpResponseStatusCodes.SERVICE_UNAVAILABLE,
+	httpResponseStatusCodes.GATEWAY_TIMEOUT
+];
+const MAX_LOGIN_ATTEMPTS = 3;
+const LOGIN_RETRY_STEP_TIMEOUT = 2000;
+const LOGIN_RETRY_RANGE_TIMEOUT = 5000;
+
+// Parallel callers for the same user share one login request
+const pendingLogins = new Map();
+
+const getAuthCookie = async (email, password) => {
+	const systemUser = getSystemUserIdentity(email);
+
+	if (systemUser) {
+		return systemUser.cookie;
+	}
+
+	if (!pendingLogins.has(email)) {
+		const login = loginAndCacheCookie(email, password).finally(() => pendingLogins.delete(email));
+		pendingLogins.set(email, login);
+	}
+
+	return pendingLogins.get(email);
+};
+
+const loginWithRetry = async (email, password) => {
+	for (let attempt = 1; ; attempt++) {
+		const response = await authApi.login(email, password);
+
+		if (!RETRYABLE_LOGIN_STATUSES.includes(response.status) || attempt === MAX_LOGIN_ATTEMPTS) {
+			return response;
+		}
+
+		console.warn(`Login for ${email} failed with status ${response.status}, retrying`);
+		const retryRandomTimeout = attempt * LOGIN_RETRY_STEP_TIMEOUT + Math.random() * LOGIN_RETRY_RANGE_TIMEOUT;
+		await timeUtils.waitFor(retryRandomTimeout).mSeconds;
+	}
+};
+
+const loginAndCacheCookie = async (email, password) => {
+	try {
+		const response = await loginWithRetry(email, password);
+
+		if (response.status !== httpResponseStatusCodes.OK) {
+			throw Error(`Error: ${JSON.stringify(response.data)}`);
+		}
+
+		const authCookie = response.headers['set-cookie'].find(item => item.startsWith('JonesToken='));
+
+		addUserIdentity(email, authCookie, response.data.user.id);
+
+		return authCookie;
+	} catch (error) {
+		throw new Error(`Failed to login with email: ${email}\nError: ${error}`);
+	}
+};
+
+const verifyEmail = email => {
+	return authApi.verifyEmail(email);
+};
+
+const createOneTimeSession = email => {
+	return authApi.createOneTimeSession(email);
+};
+
+const getHubUserCookie = async (email, oneTimeCode) => {
+	try {
+		const response = await authApi.verifyUser(email, oneTimeCode);
+
+		if (response.status !== httpResponseStatusCodes.OK && response.status !== httpResponseStatusCodes.NO_CONTENT) {
+			throw Error(`Error: ${JSON.stringify(response.data)}`);
+		}
+
+		const authCookie = response.headers['set-cookie'].find(item => item.startsWith('JonesToken='));
+
+		return authCookie;
+	} catch (error) {
+		throw new Error(`Failed to login to vendor hub by email:${email}`, error);
+	}
+};
+
+const getIcsCookie = () => {
+	const { superUser, superUserPassword } = credentials;
+
+	requiredValidation({
+		'credentials.superUser': superUser,
+		'credentials.superUserPassword': superUserPassword
+	});
+	return getAuthCookie(superUser, superUserPassword);
+};
+
+const getAuditorCookie = () => {
+	const { auditorUser, auditorPassword } = credentials;
+	requiredValidation({
+		'credentials.auditorUser': auditorUser,
+		'credentials.auditorPassword': auditorPassword
+	});
+	return getAuthCookie(auditorUser, auditorPassword);
+};
+
+const getOperatorCookie = () => {
+	const { operatorUser, operatorPassword } = credentials;
+	requiredValidation({
+		'credentials.operatorUser': operatorUser,
+		'credentials.operatorPassword': operatorPassword
+	});
+	return getAuthCookie(operatorUser, operatorPassword);
+};
+
+const login = (email, password) => {
+	return authApi.login(email, password);
+};
+
+const twoFAResendCode = (email, pendingSessionToken) => {
+	return authApi.twoFAResendCode(email, pendingSessionToken);
+};
+
+const twoFAVerify = (email, code, pendingSessionToken) => {
+	return authApi.twoFAVerify(email, code, pendingSessionToken);
+};
+
+const getAuthenticatedUser = context => {
+	return authApi.getAuthenticatedUser(context);
+};
+
+// The id the backend stamps into the session on login — the same value
+// getLoggedInUserId() resolves from the JWT. Available only after the email
+// has logged in (getAuthCookie caches it); returns null otherwise.
+const getUserId = email => {
+	const identity = getSystemUserIdentity(email);
+	return identity ? identity.id : null;
+};
+
+const isHubUser = async (email, { expectError } = {}) => {
+	const response = await authApi.isHubUser(email);
+
+	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`is-hub-user failed for ${email}: ${JSON.stringify(response.data)}`);
+	}
+
+	return response.data;
+};
+
+const resetPassword = async (password, linkData, { expectError = false } = {}) => {
+	const response = await authApi.resetPassword(password, linkData);
+
+	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
+		throw Error(`Failed to reset password. Status code: ${response.status}`);
+	}
+
+	return response;
+};
+
+// Reads the user_login_attempt row via the ICS-secured test-only endpoint.
+// A 404 (no row ever created) is a distinct state from a cleared row (200, counter 0, null dates);
+// pass { expectError: true } to receive the raw response and tell them apart, otherwise the
+// wrapper throws on any non-200 rather than flattening a 404 into a zeroed row.
+const getLoginAttempts = async (email, { expectError } = {}) => {
+	const response = await authApi.getLoginAttempts(email, await getIcsCookie());
+
+	if (!expectError && response.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`getLoginAttempts failed for ${email}: ${JSON.stringify(response.data)}`);
+	}
+
+	return expectError ? response : response.data;
+};
+
+// Backdates the failed-login timestamps for an existing row. The endpoint returns 204 No Content.
+const backdateLoginAttempt = async (email, { dateLastFailedLogin, dateFirstFailedLogin } = {}) => {
+	const response = await authApi.backdateLoginAttempt(
+		{ email, dateLastFailedLogin, dateFirstFailedLogin }, await getIcsCookie());
+
+	if (response.status !== httpResponseStatusCodes.NO_CONTENT && response.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`backdateLoginAttempt failed for ${email}: ${JSON.stringify(response.data)}`);
+	}
+};
+
+// Clears the user_login_attempt row for an email via the ICS-secured test-only endpoint.
+// Idempotent: the endpoint returns 204 whether or not a row existed, so this is safe to call
+// on non-existent-email subjects when resetting lockout state between runs.
+const deleteLoginAttempt = async email => {
+	const response = await authApi.deleteLoginAttempt(email, await getIcsCookie());
+
+	if (response.status !== httpResponseStatusCodes.NO_CONTENT && response.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`deleteLoginAttempt failed for ${email}: ${JSON.stringify(response.data)}`);
+	}
+};
+
+module.exports = {
+	getAuthCookie,
+	verifyEmail,
+	createOneTimeSession,
+	getHubUserCookie,
+	getIcsCookie,
+	getAuditorCookie,
+	getOperatorCookie,
+	login,
+	twoFAResendCode,
+	twoFAVerify,
+	getAuthenticatedUser,
+	getUserId,
+	isHubUser,
+	resetPassword,
+	getLoginAttempts,
+	backdateLoginAttempt,
+	deleteLoginAttempt
+};

package/src/saas/internal-api/auth/index.js

@@ -1,3 +1,3 @@
-const services = require('./api/auth.service');
-
-module.exports = { services };
+const services = require('./api/auth.service');
+
+module.exports = { services };

package/src/saas/internal-api/certificial/api/certificial.api.js

@@ -1,15 +1,15 @@
-const requests = require('../../../../common/requests/cookieAuth/requests');
-const { backendUrl, threadSchedulerSecret } = require('../../../../env').getEnv();
-
-const Endpoints = {
-	enrollments: `${backendUrl}/schedulerJob/certificial/enrollments`
-};
-
-// Authenticated by x-scheduler-secret, not a cookie, so no ics context is passed.
-const getEnrollments = recordIds => {
-	const headers = { 'x-scheduler-secret': threadSchedulerSecret };
-
-	return requests.getRequestHandler(Endpoints.enrollments, { recordIds: recordIds.toString() }, null, headers);
-};
-
-module.exports = { getEnrollments };
+const requests = require('../../../../common/requests/cookieAuth/requests');
+const { backendUrl, threadSchedulerSecret } = require('../../../../env').getEnv();
+
+const Endpoints = {
+	enrollments: `${backendUrl}/schedulerJob/certificial/enrollments`
+};
+
+// Authenticated by x-scheduler-secret, not a cookie, so no ics context is passed.
+const getEnrollments = recordIds => {
+	const headers = { 'x-scheduler-secret': threadSchedulerSecret };
+
+	return requests.getRequestHandler(Endpoints.enrollments, { recordIds: recordIds.toString() }, null, headers);
+};
+
+module.exports = { getEnrollments };

package/src/saas/internal-api/certificial/api/certificial.service.js

@@ -1,24 +1,24 @@
-const certificialApi = require('./certificial.api');
-const httpResponseStatusCodes = require('../../../../common/httpResponseStatusCodes.json');
-
-// One row per requested record id. A record with no enrollment comes back with null fields, not a 404.
-const getEnrollmentStates = async recordIds => {
-	const response = await certificialApi.getEnrollments(recordIds);
-
-	if (response.status !== httpResponseStatusCodes.OK) {
-		throw new Error(`Failed to read Certificial enrollment state for records ${recordIds}, response status - ${response.status}`);
-	}
-
-	return response.data;
-};
-
-const getEnrollmentState = async recordId => {
-	const [enrollmentState] = await getEnrollmentStates([recordId]);
-
-	return enrollmentState;
-};
-
-module.exports = {
-	getEnrollmentStates,
-	getEnrollmentState
-};
+const certificialApi = require('./certificial.api');
+const httpResponseStatusCodes = require('../../../../common/httpResponseStatusCodes.json');
+
+// One row per requested record id. A record with no enrollment comes back with null fields, not a 404.
+const getEnrollmentStates = async recordIds => {
+	const response = await certificialApi.getEnrollments(recordIds);
+
+	if (response.status !== httpResponseStatusCodes.OK) {
+		throw new Error(`Failed to read Certificial enrollment state for records ${recordIds}, response status - ${response.status}`);
+	}
+
+	return response.data;
+};
+
+const getEnrollmentState = async recordId => {
+	const [enrollmentState] = await getEnrollmentStates([recordId]);
+
+	return enrollmentState;
+};
+
+module.exports = {
+	getEnrollmentStates,
+	getEnrollmentState
+};

package/src/saas/internal-api/certificial/consts.js

@@ -1,8 +1,8 @@
-// PENDING means Certificial never answered, so the row is never auto-retried.
-const ENROLLMENT_STATUSES = {
-	PENDING: 'PENDING',
-	ENROLLED: 'ENROLLED',
-	REJECTED: 'REJECTED'
-};
-
-module.exports = { ENROLLMENT_STATUSES };
+// PENDING means Certificial never answered, so the row is never auto-retried.
+const ENROLLMENT_STATUSES = {
+	PENDING: 'PENDING',
+	ENROLLED: 'ENROLLED',
+	REJECTED: 'REJECTED'
+};
+
+module.exports = { ENROLLMENT_STATUSES };

package/src/saas/internal-api/certificial/index.js

@@ -1,4 +1,4 @@
-const services = require('./api/certificial.service');
-const consts = require('./consts');
-
-module.exports = { services, consts };
+const services = require('./api/certificial.service');
+const consts = require('./consts');
+
+module.exports = { services, consts };