@next-k8s/tickets 1.0.16 → 1.0.20

package/src/routes/__test__/update.test.ts

@@ -1,11 +1,12 @@
 import request from 'supertest'
 import mongoose from 'mongoose'
+import { getTokenCookie } from '@next-k8s/common'
 
 import app from '../../app'
-import { createTicket, getTokenCookie } from '../../test/utils'
+import { createTicket } from '../../test/utils'
 import natsClient from '../../nats-client'
 
-describe('[Update Ticket] Route: /api/tickets/:id', () => {
+describe('[Update Ticket] Route: PUT /api/tickets/:id', () => {
   it('should throw a NotFoundError if the ticket does not exist', async () => {
     const id = new mongoose.Types.ObjectId().toHexString()
     const cookie = await getTokenCookie({ id: new mongoose.Types.ObjectId().toHexString() })
@@ -33,19 +34,20 @@ describe('[Update Ticket] Route: /api/tickets/:id', () => {
   })
 
   it('should throw an UnauthorizedError if user does not own the ticket', async () => {
-    const cookie = await getTokenCookie({ id: new mongoose.Types.ObjectId().toHexString() })
+    const users = [
+      await getTokenCookie({ id: new mongoose.Types.ObjectId().toHexString() }),
+      await getTokenCookie({ id: new mongoose.Types.ObjectId().toHexString() })
+    ]
 
     const response = await request(app)
       .post(`/api/tickets`)
-      .set('Cookie', [cookie])
+      .set('Cookie', [users[0]])
       .send({ title: 'Test Event', price: 20000 })
       .expect(201)
 
-    const newCookie = await getTokenCookie({ id: new mongoose.Types.ObjectId().toHexString() })
-
     await request(app)
       .put(`/api/tickets/${response.body.ticket.id}`)
-      .set('Cookie', [newCookie])
+      .set('Cookie', [users[1]])
       .send({ title: 'Test Event', price: 23000 })
       .expect(401)
   })

package/src/routes/update.ts

@@ -18,7 +18,7 @@ router.put('/api/tickets/:id', requireAuth, validateInput, validateRequest, asyn
   if (!isValidObjectId(req.params.id)) throw new BadRequestError('Invalid Ticket ID')
   const ticket = await Ticket.findById(req.params.id)
   if (!ticket) throw new NotFoundError()
-  if (ticket.owner !== req.currentUser!.id) throw new UnauthorizedError()
+  if (ticket.owner.toHexString() !== req.currentUser!.id) throw new UnauthorizedError()
   const { title, price } = req.body
   ticket.set({ title, price })
   await ticket.save()

package/src/test/utils.ts

@@ -1,14 +1,5 @@
-import jwt from 'jsonwebtoken'
-import mongoose from 'mongoose'
 import request from 'supertest'
 
-export const getTokenCookie = async () => {
-  const payload = { id: new mongoose.Types.ObjectId().toHexString(), email: 'test@test.com' }
-  const token = jwt.sign(payload, process.env.JWT_KEY!)
-  const cookie = Buffer.from(JSON.stringify({ jwt: token })).toString('base64')
-  return `session=${cookie}`
-}
-
 export const createTicket = (app: Express.Application, cookie?: string, title = 'Test Event', price = 20000, expectedStatusCode = 201) => {
   return request(app)
     .post('/api/tickets')