@remit/backend 0.0.143 → 0.0.145

package/src/handlers/account-synced-services.test.ts

@@ -1,245 +0,0 @@
-import assert from "node:assert/strict";
-import { afterEach, beforeEach, describe, it } from "node:test";
-import type {
-	AccountResponse,
-	AccountService as AccountServiceName,
-} from "@remit/api-openapi-types";
-import type { AccountItem } from "@remit/data-ports";
-import {
-	AccountAuthType,
-	AccountService,
-	ConnectionState,
-} from "@remit/domain-enums";
-import {
-	AccountConfigRepo,
-	AccountRepo,
-	AccountSettingRepo,
-	ConfigImportRepo,
-	MailboxRepo,
-} from "@remit/drizzle-service";
-import { createShippedSqliteDb } from "@remit/drizzle-service/test-sqlite";
-import { MICROSOFT_SERVICE_SCOPES } from "@remit/mail-oauth-service";
-import type { APIGatewayProxyEvent, APIGatewayProxyResult } from "aws-lambda";
-import type { Context } from "openapi-backend";
-import { deriveAccountConfigId } from "../auth.js";
-import { handleError } from "../error.js";
-import { formatResponse } from "../response.js";
-import {
-	_resetForTest,
-	type RemitClient,
-	setClient,
-} from "../service/data-client.js";
-import { AccountDetailOperations, AccountOperations } from "./account.js";
-import { ConfigOperations } from "./config.js";
-
-const SUB = "cognito-sub-1180";
-const ACCOUNT_CONFIG_ID = deriveAccountConfigId(SUB);
-
-type Handler = (
-	context: Context,
-	event: APIGatewayProxyEvent,
-) => Promise<unknown>;
-
-const getConfig = ConfigOperations.ConfigOperations_getConfig as Handler;
-const createAccount =
-	AccountOperations.AccountOperations_createAccount as Handler;
-const updateAccount =
-	AccountDetailOperations.AccountDetailOperations_updateAccount as Handler;
-
-const event = (body?: unknown): APIGatewayProxyEvent =>
-	({
-		body: body === undefined ? null : JSON.stringify(body),
-		requestContext: { authorizer: { claims: { sub: SUB } } },
-	}) as unknown as APIGatewayProxyEvent;
-
-const context = (params: Record<string, string> = {}): Context =>
-	({ request: { params } }) as unknown as Context;
-
-const respond = async (
-	run: () => Promise<unknown>,
-): Promise<APIGatewayProxyResult> =>
-	run().then(
-		(body) => formatResponse(body as Record<string, unknown>),
-		(error: unknown) => handleError(error),
-	);
-
-const bodyOf = <T>(response: APIGatewayProxyResult): T =>
-	JSON.parse(response.body) as T;
-
-let accounts: AccountRepo;
-let close: () => void;
-
-const seedAccount = (
-	authType: AccountItem["authType"],
-	grantedServices: AccountServiceName[] = authType ===
-	AccountAuthType.OauthMicrosoft
-		? [AccountService.Mail]
-		: [],
-) =>
-	accounts.create({
-		accountConfigId: ACCOUNT_CONFIG_ID,
-		username: `${authType}@example.com`,
-		email: `${authType}@example.com`,
-		authType,
-		grantedScopes: grantedServices.flatMap(
-			(service) => MICROSOFT_SERVICE_SCOPES[service],
-		),
-		imapHost: "imap.example.com",
-		imapPort: 993,
-		imapTls: true,
-		imapStartTls: false,
-		isActive: true,
-		connectionState: ConnectionState.NotAuthenticated,
-	});
-
-const readServices = async (accountId: string): Promise<string[]> => {
-	const config = bodyOf<{ accounts: AccountResponse[] }>(
-		await respond(() => getConfig(context(), event())),
-	);
-	const account = config.accounts.find((item) => item.accountId === accountId);
-	assert.ok(account, `GET /config lists ${accountId}`);
-	return account.syncedServices;
-};
-
-const patchServices = (accountId: string, syncedServices: string[]) =>
-	respond(() =>
-		updateAccount(context({ accountId }), event({ syncedServices })),
-	);
-
-beforeEach(async () => {
-	const store = createShippedSqliteDb();
-	close = store.close;
-	accounts = new AccountRepo(store.db);
-	const accountConfig = new AccountConfigRepo(store.db);
-	await accountConfig.create({
-		accountConfigId: ACCOUNT_CONFIG_ID,
-		userId: SUB,
-	});
-	setClient({
-		accountConfig,
-		account: accounts,
-		accountSetting: new AccountSettingRepo(store.db),
-		mailbox: new MailboxRepo(store.db),
-		configImport: new ConfigImportRepo(store.db),
-	} as unknown as RemitClient);
-});
-
-afterEach(() => {
-	_resetForTest();
-	close();
-});
-
-describe("the services an account syncs", () => {
-	it("reads mail for an account that never chose", async () => {
-		const account = await seedAccount(AccountAuthType.Password);
-
-		assert.deepEqual(await readServices(account.accountId), [
-			AccountService.Mail,
-		]);
-	});
-
-	it("writes a selection the account can serve and reads it back", async () => {
-		const account = await seedAccount(AccountAuthType.OauthMicrosoft);
-
-		const response = await patchServices(account.accountId, [
-			AccountService.Mail,
-			AccountService.Mail,
-		]);
-
-		assert.equal(response.statusCode, 200);
-		assert.deepEqual(bodyOf<AccountResponse>(response).syncedServices, [
-			AccountService.Mail,
-		]);
-		assert.deepEqual(await readServices(account.accountId), [
-			AccountService.Mail,
-		]);
-	});
-
-	it("refuses an empty selection and points at deleting the account", async () => {
-		const account = await seedAccount(AccountAuthType.OauthMicrosoft);
-
-		const response = await patchServices(account.accountId, []);
-
-		assert.equal(response.statusCode, 400);
-		assert.match(
-			bodyOf<{ message: string }>(response).message,
-			/DELETE \/accounts\/\{accountId\}/,
-		);
-		assert.deepEqual(await readServices(account.accountId), [
-			AccountService.Mail,
-		]);
-	});
-
-	it("refuses calendar on a password account", async () => {
-		const account = await seedAccount(AccountAuthType.Password);
-
-		const response = await patchServices(account.accountId, [
-			AccountService.Mail,
-			AccountService.Calendar,
-		]);
-
-		assert.equal(response.statusCode, 400);
-		assert.match(
-			bodyOf<{ message: string }>(response).message,
-			/password account syncs mail only/,
-		);
-		assert.deepEqual(await readServices(account.accountId), [
-			AccountService.Mail,
-		]);
-	});
-
-	it("accepts calendar once the granted scopes cover it", async () => {
-		const account = await seedAccount(AccountAuthType.OauthMicrosoft, [
-			AccountService.Mail,
-			AccountService.Calendar,
-		]);
-
-		const response = await patchServices(account.accountId, [
-			AccountService.Calendar,
-		]);
-
-		assert.equal(response.statusCode, 200);
-		assert.deepEqual(await readServices(account.accountId), [
-			AccountService.Calendar,
-		]);
-	});
-
-	it("refuses calendar the Microsoft consent never covered and names the consent route", async () => {
-		const account = await seedAccount(AccountAuthType.OauthMicrosoft);
-
-		const response = await patchServices(account.accountId, [
-			AccountService.Calendar,
-		]);
-
-		assert.equal(response.statusCode, 400);
-		const { message } = bodyOf<{ message: string }>(response);
-		assert.match(message, /granted scopes lack Calendar/);
-		assert.match(message, /POST \/accounts\/oauth\/microsoft\/start/);
-		assert.deepEqual(await readServices(account.accountId), [
-			AccountService.Mail,
-		]);
-	});
-
-	it("refuses to create a password account that syncs calendar", async () => {
-		const response = await respond(() =>
-			createAccount(
-				context(),
-				event({
-					email: "person@example.com",
-					password: "hunter2",
-					imapHost: "imap.example.com",
-					imapPort: 993,
-					imapTls: true,
-					imapStartTls: false,
-					syncedServices: [AccountService.Calendar],
-				}),
-			),
-		);
-
-		assert.equal(response.statusCode, 400);
-		assert.deepEqual(
-			await accounts.listAllByAccountConfig(ACCOUNT_CONFIG_ID),
-			[],
-		);
-	});
-});