@nextsparkjs/theme-default 0.1.0-beta.20 → 0.1.0-beta.21

package/tests/cypress/src/controllers/UsersAPIController.js

@@ -0,0 +1,242 @@
+/**
+ * UsersAPIController - Controller for interacting with the Users API
+ * Encapsulates all CRUD operations for /api/v1/users endpoints
+ *
+ * NOTE: Users is a GLOBAL entity - does NOT require x-team-id header
+ *
+ * Requires:
+ * - API Key with users:read, users:write scopes (or superadmin with *)
+ */
+const BaseAPIController = require('./BaseAPIController')
+const entitiesConfig = require('../../fixtures/entities.json')
+
+const { slug } = entitiesConfig.entities.users
+
+class UsersAPIController extends BaseAPIController {
+  /**
+   * @param {string} baseUrl - Base URL for API requests
+   * @param {string|null} apiKey - API key for authentication
+   * NOTE: Does NOT accept teamId - users is a global entity
+   */
+  constructor(baseUrl = 'http://localhost:5173', apiKey = null) {
+    // NO pasar teamId (null) para entidades globales
+    super(baseUrl, apiKey, null, { slug })
+  }
+
+  // ============================================================
+  // SEMANTIC ALIASES (for backward compatibility)
+  // ============================================================
+
+  /**
+   * GET /api/v1/users - Get list of users
+   * @param {Object} options - Query options
+   * @param {number} [options.page] - Page number
+   * @param {number} [options.limit] - Results per page
+   * @param {string} [options.role] - Filter by role ('member', 'superadmin')
+   * @param {string} [options.metas] - Metadata parameter ('all', 'key1,key2', etc.)
+   * @param {Object} [options.headers] - Additional headers
+   * @returns {Cypress.Chainable} Cypress response
+   */
+  getUsers(options = {}) {
+    return this.list(options)
+  }
+
+  /**
+   * GET /api/v1/users/{id} - Get specific user by ID or email
+   * @param {string} identifier - User ID or email
+   * @param {Object} options - Additional options
+   * @returns {Cypress.Chainable} Cypress response
+   */
+  getUserById(identifier, options = {}) {
+    return this.getById(identifier, options)
+  }
+
+  /**
+   * POST /api/v1/users - Create new user
+   * @param {Object} userData - User data
+   * @param {string} userData.email - User email (required)
+   * @param {string} userData.firstName - User first name (required)
+   * @param {string} userData.lastName - User last name (required)
+   * @param {string} userData.country - User country (required, min 2 chars)
+   * @param {string} [userData.image] - User image URL
+   * @param {string} [userData.language] - User language (default: "en")
+   * @param {string} [userData.timezone] - User timezone (default: "UTC")
+   * @param {string} [userData.role] - User role (default: "member")
+   * @param {Object} options - Additional options
+   * @returns {Cypress.Chainable} Cypress response
+   */
+  createUser(userData, options = {}) {
+    return this.create(userData, options)
+  }
+
+  /**
+   * PATCH /api/v1/users/{id} - Update user
+   * @param {string} identifier - User ID or email
+   * @param {Object} updateData - Data to update
+   * @param {Object} options - Additional options
+   * @returns {Cypress.Chainable} Cypress response
+   */
+  updateUser(identifier, updateData, options = {}) {
+    return this.update(identifier, updateData, options)
+  }
+
+  /**
+   * DELETE /api/v1/users/{id} - Delete user
+   * @param {string} identifier - User ID or email
+   * @param {Object} options - Additional options
+   * @returns {Cypress.Chainable} Cypress response
+   */
+  deleteUser(identifier, options = {}) {
+    return this.delete(identifier, options)
+  }
+
+  // ============================================================
+  // DATA GENERATORS
+  // ============================================================
+
+  /**
+   * Generate random user data for testing
+   * Required by BaseAPIController.createTestEntity()
+   * @param {Object} overrides - Specific data to override
+   * @returns {Object} Generated user data
+   */
+  generateRandomData(overrides = {}) {
+    return this.generateRandomUserData(overrides)
+  }
+
+  /**
+   * Generate random user data for testing
+   * @param {Object} overrides - Specific data to override
+   * @returns {Object} Generated user data
+   */
+  generateRandomUserData(overrides = {}) {
+    const timestamp = Date.now()
+    const randomId = Math.random().toString(36).substring(2, 8)
+
+    return {
+      email: `testuser_${timestamp}_${randomId}@nextspark.dev`,
+      firstName: `TestUser${randomId}`,
+      lastName: 'Cypress',
+      country: 'US',
+      role: 'member',
+      language: 'en',
+      timezone: 'UTC',
+      ...overrides
+    }
+  }
+
+  /**
+   * Create a test user and return its data
+   * @param {Object} userData - User data (optional)
+   * @returns {Cypress.Chainable} Promise resolving with created user data
+   */
+  createTestUser(userData = {}) {
+    return this.createTestEntity(userData)
+  }
+
+  /**
+   * Clean up a test user (delete it)
+   * @param {string} identifier - User ID or email
+   * @returns {Cypress.Chainable} Delete response
+   */
+  cleanupTestUser(identifier) {
+    return this.cleanup(identifier)
+  }
+
+  // ============================================================
+  // ENTITY-SPECIFIC VALIDATORS
+  // ============================================================
+
+  /**
+   * Validate user object structure
+   * @param {Object} user - User object
+   * @param {boolean} allowMetas - If metas property is allowed
+   */
+  validateUserObject(user, allowMetas = false) {
+    // Base fields from BaseAPIController
+    this.validateBaseEntityFields(user)
+
+    // Required entity fields
+    expect(user).to.have.property('email')
+    expect(user.email).to.be.a('string')
+
+    expect(user).to.have.property('firstName')
+    expect(user.firstName).to.be.a('string')
+
+    expect(user).to.have.property('role')
+    expect(user.role).to.be.oneOf(['member', 'colaborator', 'admin', 'superadmin'])
+
+    expect(user).to.have.property('emailVerified')
+    expect(user.emailVerified).to.be.a('boolean')
+
+    // Optional fields that can be null
+    if (user.name !== null && user.name !== undefined) {
+      expect(user.name).to.be.a('string')
+    }
+
+    if (user.lastName !== null && user.lastName !== undefined) {
+      expect(user.lastName).to.be.a('string')
+    }
+
+    if (user.country !== null && user.country !== undefined) {
+      expect(user.country).to.be.a('string')
+    }
+
+    if (user.timezone !== null && user.timezone !== undefined) {
+      expect(user.timezone).to.be.a('string')
+    }
+
+    if (user.language !== null && user.language !== undefined) {
+      expect(user.language).to.be.a('string')
+    }
+
+    if (user.image !== null && user.image !== undefined) {
+      expect(user.image).to.be.a('string')
+    }
+
+    // Validate metas if present
+    if (allowMetas && user.hasOwnProperty('metas')) {
+      expect(user.metas).to.be.an('object')
+    }
+  }
+
+  // ============================================================
+  // METADATA HELPERS
+  // ============================================================
+
+  /**
+   * Generate sample metadata for testing
+   * @param {string} type - Type of metadata ('uiPreferences', 'securityPreferences', 'notificationPreferences')
+   * @returns {Object} Sample metadata
+   */
+  generateSampleMetadata(type = 'uiPreferences') {
+    const sampleMetas = {
+      uiPreferences: {
+        theme: 'dark',
+        sidebarCollapsed: false,
+        language: 'en',
+        density: 'comfortable'
+      },
+      securityPreferences: {
+        twoFactorEnabled: false,
+        sessionTimeout: 3600,
+        trustedDevices: []
+      },
+      notificationPreferences: {
+        emailEnabled: true,
+        pushEnabled: false,
+        digestFrequency: 'daily'
+      }
+    }
+
+    return { [type]: sampleMetas[type] || sampleMetas.uiPreferences }
+  }
+}
+
+// Export class for use in tests
+module.exports = UsersAPIController
+
+// For global use in Cypress
+if (typeof window !== 'undefined') {
+  window.UsersAPIController = UsersAPIController
+}

package/tests/cypress/src/controllers/index.js

@@ -0,0 +1,25 @@
+/**
+ * Cypress API Controllers
+ *
+ * Centralized exports for all API controllers.
+ * All controllers extend BaseAPIController and guarantee:
+ * - Consistent Authorization header handling
+ * - Consistent x-team-id header handling (when teamId configured)
+ * - Standard CRUD operations
+ * - Common validators
+ */
+
+module.exports = {
+  // Base class
+  BaseAPIController: require('./BaseAPIController'),
+
+  // Entity-specific controllers (team-scoped)
+  TasksAPIController: require('./TaskAPIController'),
+  CustomersAPIController: require('./CustomerAPIController'),
+  PostsAPIController: require('./PostsAPIController'),
+  PagesAPIController: require('./PagesAPIController'),
+
+  // Entity-specific controllers (global - no team required)
+  UsersAPIController: require('./UsersAPIController'),
+  ApiKeysAPIController: require('./ApiKeysAPIController')
+}

package/tests/cypress/src/core/AuthPOM.ts

@@ -0,0 +1,450 @@
+/**
+ * AuthPOM - Page Object Model for authentication pages
+ *
+ * Provides methods for:
+ * - Login (email/password, Google OAuth)
+ * - Signup (email/password, Google OAuth)
+ * - Password reset flow
+ * - Email verification
+ * - Dev keyring (quick login in development)
+ *
+ * @example
+ * const auth = new AuthPOM()
+ * auth.visitLogin()
+ *     .login('user@example.com', 'password')
+ *     .waitForDashboard()
+ */
+
+import { BasePOM } from './BasePOM'
+import { cySelector } from '../selectors'
+
+export interface SignupData {
+  firstName: string
+  lastName: string
+  email: string
+  password: string
+  confirmPassword?: string
+}
+
+export class AuthPOM extends BasePOM {
+  // ============================================
+  // SELECTORS (from centralized selectors.ts)
+  // ============================================
+
+  get selectors() {
+    return {
+      // Login - Structure
+      loginCard: cySelector('auth.login.card'),
+      loginHeader: cySelector('auth.login.header'),
+      loginFooter: cySelector('auth.login.footer'),
+      loginForm: cySelector('auth.login.form'),
+      loginOptions: cySelector('auth.login.options'),
+      // Login - Inputs
+      loginEmail: cySelector('auth.login.emailInput'),
+      loginPassword: cySelector('auth.login.passwordInput'),
+      loginEmailError: cySelector('auth.login.emailError'),
+      loginPasswordError: cySelector('auth.login.passwordError'),
+      // Login - Buttons
+      loginSubmit: cySelector('auth.login.submit'),
+      loginGoogle: cySelector('auth.login.googleSignin'),
+      loginShowEmail: cySelector('auth.login.showEmail'),
+      loginHideEmail: cySelector('auth.login.hideEmail'),
+      // Login - Links & Misc
+      loginForgotPassword: cySelector('auth.login.forgotPassword'),
+      loginSignupLink: cySelector('auth.login.signupLink'),
+      loginInviteBanner: cySelector('auth.login.inviteBanner'),
+      loginError: cySelector('auth.login.errorAlert'),
+      loginRememberCheckbox: cySelector('auth.login.rememberCheckbox'),
+
+      // Signup
+      signupForm: cySelector('auth.signup.form'),
+      signupFirstName: cySelector('auth.signup.firstName'),
+      signupLastName: cySelector('auth.signup.lastName'),
+      signupEmail: cySelector('auth.signup.email'),
+      signupPassword: cySelector('auth.signup.password'),
+      signupConfirmPassword: cySelector('auth.signup.confirmPassword'),
+      signupSubmit: cySelector('auth.signup.submitButton'),
+      signupGoogle: cySelector('auth.signup.googleButton'),
+      signupLoginLink: cySelector('auth.signup.loginLink'),
+      signupInviteBanner: cySelector('auth.signup.inviteBanner'),
+      signupError: cySelector('auth.signup.error'),
+
+      // Forgot Password
+      forgotPasswordForm: cySelector('auth.forgotPassword.form'),
+      forgotPasswordEmail: cySelector('auth.forgotPassword.email'),
+      forgotPasswordSubmit: cySelector('auth.forgotPassword.submitButton'),
+      forgotPasswordBack: cySelector('auth.forgotPassword.backToLogin'),
+      forgotPasswordSuccess: cySelector('auth.forgotPassword.successMessage'),
+      forgotPasswordSuccessBack: cySelector('auth.forgotPassword.successBack'),
+      forgotPasswordRetry: cySelector('auth.forgotPassword.retryButton'),
+      forgotPasswordError: cySelector('auth.forgotPassword.error'),
+
+      // Reset Password
+      resetPasswordForm: cySelector('auth.resetPassword.form'),
+      resetPasswordPassword: cySelector('auth.resetPassword.password'),
+      resetPasswordConfirm: cySelector('auth.resetPassword.confirmPassword'),
+      resetPasswordSubmit: cySelector('auth.resetPassword.submitButton'),
+      resetPasswordError: cySelector('auth.resetPassword.error'),
+
+      // Verify Email
+      verifyEmailContainer: cySelector('auth.verifyEmail.container'),
+      verifyEmailResend: cySelector('auth.verifyEmail.resendButton'),
+      verifyEmailSuccess: cySelector('auth.verifyEmail.successMessage'),
+      verifyEmailError: cySelector('auth.verifyEmail.error'),
+
+      // Dev Keyring
+      devKeyring: cySelector('auth.devKeyring.container'),
+      devKeyringTrigger: cySelector('auth.devKeyring.trigger'),
+      devKeyringContent: cySelector('auth.devKeyring.content'),
+      devKeyringUser: (index: number) =>
+        cySelector('auth.devKeyring.user', { index }),
+
+      // Logout (from dashboard)
+      userMenuTrigger: cySelector('dashboard.topnav.userMenuTrigger'),
+      logoutAction: cySelector('dashboard.topnav.menuAction', { action: 'signOut' }),
+      mobileLogout: cySelector('dashboard.topnav.mobileSignout')
+    }
+  }
+
+  // ============================================
+  // FACTORY METHOD
+  // ============================================
+
+  static create(): AuthPOM {
+    return new AuthPOM()
+  }
+
+  // ============================================
+  // NAVIGATION
+  // ============================================
+
+  visitLogin() {
+    cy.visit('/login')
+    return this
+  }
+
+  visitSignup() {
+    cy.visit('/signup')
+    return this
+  }
+
+  visitForgotPassword() {
+    cy.visit('/forgot-password')
+    return this
+  }
+
+  visitResetPassword(token: string) {
+    cy.visit(`/reset-password?token=${token}`)
+    return this
+  }
+
+  // ============================================
+  // LOGIN ACTIONS
+  // ============================================
+
+  /**
+   * Login with email and password
+   */
+  login(email: string, password: string) {
+    cy.get(this.selectors.loginEmail).clear().type(email)
+    cy.get(this.selectors.loginPassword).clear().type(password)
+    cy.get(this.selectors.loginSubmit).click()
+    return this
+  }
+
+  /**
+   * Click on "Show email login" button (if email form is hidden by default)
+   */
+  showEmailLogin() {
+    cy.get(this.selectors.loginShowEmail).click()
+    return this
+  }
+
+  /**
+   * Click Google login button
+   */
+  loginWithGoogle() {
+    cy.get(this.selectors.loginGoogle).click()
+    return this
+  }
+
+  /**
+   * Click forgot password link
+   */
+  clickForgotPassword() {
+    cy.get(this.selectors.loginForgotPassword).click()
+    return this
+  }
+
+  /**
+   * Click signup link from login page
+   */
+  clickSignupLink() {
+    cy.get(this.selectors.loginSignupLink).click()
+    return this
+  }
+
+  // ============================================
+  // SIGNUP ACTIONS
+  // ============================================
+
+  /**
+   * Fill and submit signup form
+   */
+  signup(data: SignupData) {
+    cy.get(this.selectors.signupFirstName).clear().type(data.firstName)
+    cy.get(this.selectors.signupLastName).clear().type(data.lastName)
+    cy.get(this.selectors.signupEmail).clear().type(data.email)
+    cy.get(this.selectors.signupPassword).clear().type(data.password)
+    if (data.confirmPassword) {
+      cy.get(this.selectors.signupConfirmPassword).clear().type(data.confirmPassword)
+    }
+    cy.get(this.selectors.signupSubmit).click()
+    return this
+  }
+
+  /**
+   * Click Google signup button
+   */
+  signupWithGoogle() {
+    cy.get(this.selectors.signupGoogle).click()
+    return this
+  }
+
+  /**
+   * Click login link from signup page
+   */
+  clickLoginLink() {
+    cy.get(this.selectors.signupLoginLink).click()
+    return this
+  }
+
+  // ============================================
+  // FORGOT PASSWORD ACTIONS
+  // ============================================
+
+  /**
+   * Request password reset
+   */
+  requestPasswordReset(email: string) {
+    cy.get(this.selectors.forgotPasswordEmail).clear().type(email)
+    cy.get(this.selectors.forgotPasswordSubmit).click()
+    return this
+  }
+
+  /**
+   * Go back to login from forgot password
+   */
+  backToLogin() {
+    cy.get(this.selectors.forgotPasswordBack).click()
+    return this
+  }
+
+  // ============================================
+  // RESET PASSWORD ACTIONS
+  // ============================================
+
+  /**
+   * Reset password with new password
+   */
+  resetPassword(password: string, confirmPassword?: string) {
+    cy.get(this.selectors.resetPasswordPassword).clear().type(password)
+    cy.get(this.selectors.resetPasswordConfirm)
+      .clear()
+      .type(confirmPassword || password)
+    cy.get(this.selectors.resetPasswordSubmit).click()
+    return this
+  }
+
+  // ============================================
+  // EMAIL VERIFICATION ACTIONS
+  // ============================================
+
+  /**
+   * Resend verification email
+   */
+  resendVerificationEmail() {
+    cy.get(this.selectors.verifyEmailResend).click()
+    return this
+  }
+
+  // ============================================
+  // DEV KEYRING ACTIONS
+  // ============================================
+
+  /**
+   * Open dev keyring dropdown
+   */
+  openDevKeyring() {
+    cy.get(this.selectors.devKeyringTrigger).click()
+    return this
+  }
+
+  /**
+   * Login as a dev user by index
+   */
+  loginAsDevUser(index: number) {
+    this.openDevKeyring()
+    cy.get(this.selectors.devKeyringUser(index)).click()
+    return this
+  }
+
+  /**
+   * Quick login using dev keyring (combines opening and clicking)
+   */
+  devLogin(userIndex: number = 0) {
+    return this.loginAsDevUser(userIndex)
+  }
+
+  // ============================================
+  // LOGOUT ACTIONS
+  // ============================================
+
+  /**
+   * Logout from the application (clicks user menu, then signOut action)
+   */
+  logout() {
+    cy.get(this.selectors.userMenuTrigger).click()
+    cy.get(this.selectors.logoutAction).click()
+    return this
+  }
+
+  /**
+   * Logout from mobile menu
+   */
+  logoutMobile() {
+    cy.get(this.selectors.mobileLogout).click()
+    return this
+  }
+
+  // ============================================
+  // WAITS
+  // ============================================
+
+  /**
+   * Wait for login form to be visible
+   */
+  waitForLoginForm() {
+    cy.get(this.selectors.loginForm, { timeout: 10000 }).should('be.visible')
+    return this
+  }
+
+  /**
+   * Wait for signup form to be visible
+   */
+  waitForSignupForm() {
+    cy.get(this.selectors.signupForm, { timeout: 10000 }).should('be.visible')
+    return this
+  }
+
+  /**
+   * Wait for redirect to dashboard after successful login
+   */
+  waitForDashboard() {
+    cy.url({ timeout: 15000 }).should('include', '/dashboard')
+    return this
+  }
+
+  /**
+   * Wait for password reset success message
+   */
+  waitForPasswordResetSuccess() {
+    cy.get(this.selectors.forgotPasswordSuccess, { timeout: 10000 }).should('be.visible')
+    return this
+  }
+
+  // ============================================
+  // ASSERTIONS
+  // ============================================
+
+  /**
+   * Assert login form is visible
+   */
+  assertLoginFormVisible() {
+    cy.get(this.selectors.loginForm).should('be.visible')
+    return this
+  }
+
+  /**
+   * Assert signup form is visible
+   */
+  assertSignupFormVisible() {
+    cy.get(this.selectors.signupForm).should('be.visible')
+    return this
+  }
+
+  /**
+   * Assert login error is shown
+   */
+  assertLoginError(message?: string) {
+    cy.get(this.selectors.loginError).should('be.visible')
+    if (message) {
+      cy.get(this.selectors.loginError).should('contain.text', message)
+    }
+    return this
+  }
+
+  /**
+   * Assert signup error is shown
+   */
+  assertSignupError(message?: string) {
+    cy.get(this.selectors.signupError).should('be.visible')
+    if (message) {
+      cy.get(this.selectors.signupError).should('contain.text', message)
+    }
+    return this
+  }
+
+  /**
+   * Assert forgot password error is shown
+   */
+  assertForgotPasswordError(message?: string) {
+    cy.get(this.selectors.forgotPasswordError).should('be.visible')
+    if (message) {
+      cy.get(this.selectors.forgotPasswordError).should('contain.text', message)
+    }
+    return this
+  }
+
+  /**
+   * Assert invite banner is visible
+   */
+  assertInviteBannerVisible() {
+    cy.get(this.selectors.loginInviteBanner).should('be.visible')
+    return this
+  }
+
+  /**
+   * Assert user is on login page
+   */
+  assertOnLoginPage() {
+    cy.url().should('include', '/login')
+    return this
+  }
+
+  /**
+   * Assert user is on signup page
+   */
+  assertOnSignupPage() {
+    cy.url().should('include', '/signup')
+    return this
+  }
+
+  /**
+   * Assert user is on dashboard
+   */
+  assertOnDashboard() {
+    cy.url().should('include', '/dashboard')
+    return this
+  }
+
+  /**
+   * Assert dev keyring is visible (dev environment only)
+   */
+  assertDevKeyringVisible() {
+    cy.get(this.selectors.devKeyring).should('be.visible')
+    return this
+  }
+}
+
+export default AuthPOM