@reventlessdev/reventless-local 3.0.0-alpha.219 → 3.0.0-alpha.221

package/tests/adapter/RequireGroupRefusalTest.res.mjs

@@ -0,0 +1,130 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Stdlib_JsExn from "@rescript/runtime/lib/es6/Stdlib_JsExn.js";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Primitive_option from "@rescript/runtime/lib/es6/Primitive_option.js";
+import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
+import * as Auth_GraphqlContext$ReventlessLocal from "../../src/adapter/Auth/Auth_GraphqlContext.res.mjs";
+
+function identity(groups) {
+  return {
+    userId: "u-1",
+    username: "u",
+    groups: groups,
+    provider: "InMemory"
+  };
+}
+
+function context(groups, authenticated) {
+  return {
+    identity: identity(groups),
+    authenticated: authenticated
+  };
+}
+
+async function ok(_root, _args, _ctx) {
+  return "ran";
+}
+
+function describeRefusal(e) {
+  let js = Stdlib_JsExn.fromException(e);
+  if (js === undefined) {
+    return [
+      "not a JavaScript error",
+      ""
+    ];
+  }
+  let js$1 = Primitive_option.valFromOption(js);
+  return [
+    Stdlib_Option.getOr(Stdlib_JsExn.message(js$1), ""),
+    js$1.extensions.code
+  ];
+}
+
+async function refusalOf(groups, authenticated) {
+  let guarded = Auth_GraphqlContext$ReventlessLocal.requireGroup("Admin", ok);
+  try {
+    return {
+      TAG: "Ok",
+      _0: await guarded(null, null, context(groups, authenticated))
+    };
+  } catch (raw_e) {
+    let e = Primitive_exceptions.internalToException(raw_e);
+    return {
+      TAG: "Error",
+      _0: describeRefusal(e)
+    };
+  }
+}
+
+globalThis.describe("requireGroup", () => {
+  globalThis.test("runs the resolver for a caller holding the group", async () => {
+    let outcome = await refusalOf(["Admin"], true);
+    globalThis.expect(outcome).toEqual({
+      TAG: "Ok",
+      _0: "ran"
+    });
+  });
+  globalThis.test("refuses an identified caller without the group as FORBIDDEN", async () => {
+    let outcome = await refusalOf(["Shopper"], true);
+    globalThis.expect(outcome).toEqual({
+      TAG: "Error",
+      _0: [
+        "Forbidden: requires group \"Admin\"",
+        "FORBIDDEN"
+      ]
+    });
+  });
+  globalThis.test("refuses a caller it could not identify as UNAUTHORIZED", async () => {
+    let outcome = await refusalOf([], false);
+    globalThis.expect(outcome).toEqual({
+      TAG: "Error",
+      _0: [
+        "Unauthorized: requires group \"Admin\"",
+        "UNAUTHORIZED"
+      ]
+    });
+  });
+  globalThis.test("reads a context missing the outcome as unidentified", async () => {
+    let guarded = Auth_GraphqlContext$ReventlessLocal.requireGroup("Admin", ok);
+    let legacyContext = {
+      identity: identity(["Shopper"])
+    };
+    let code;
+    try {
+      await guarded(null, null, legacyContext);
+      code = "no refusal";
+    } catch (raw_e) {
+      let e = Primitive_exceptions.internalToException(raw_e);
+      code = describeRefusal(e)[1];
+    }
+    globalThis.expect(code).toBe("UNAUTHORIZED");
+  });
+});
+
+globalThis.describe("isAuthenticated", () => {
+  globalThis.test("a verified caller is authenticated", () => {
+    globalThis.expect(Auth_GraphqlContext$ReventlessLocal.isAuthenticated({
+      TAG: "Authenticated",
+      _0: identity([])
+    })).toBe(true);
+  });
+  globalThis.test("a rejected token is not", () => {
+    globalThis.expect(Auth_GraphqlContext$ReventlessLocal.isAuthenticated({
+      TAG: "AuthError",
+      _0: "Invalid bearer token"
+    })).toBe(false);
+  });
+  globalThis.test("nor is an anonymous caller", () => {
+    globalThis.expect(Auth_GraphqlContext$ReventlessLocal.isAuthenticated("Anonymous")).toBe(false);
+  });
+});
+
+export {
+  identity,
+  context,
+  ok,
+  describeRefusal,
+  refusalOf,
+}
+/*  Not a pure module */