@stanlemon/server-with-auth 0.3.35 → 0.3.37

package/app.js

@@ -29,7 +29,7 @@ const schemas = createSchemas({
   email: Joi.string().email().required().label("Email"),
 });
 
-const app = createAppServer({
+export const app = createAppServer({
   port: 3003,
   secure: ["/api/"],
   schemas,
@@ -43,12 +43,6 @@ app.get(
   handler(() => ({ hello: "world" }))
 );
 
-// Insecure endpoint
-app.get(
-  "/hello/:name",
-  handler(({ name = "world" }) => ({ hello: name }))
-);
-
 // Secure endpoint
 app.get(
   "/api/users",

package/app.test.js

@@ -0,0 +1,53 @@
+/**
+ * @jest-environment node
+ */
+import request from "supertest";
+import { app } from "./app.js";
+import { signupAndLogin } from "./src/utilities/testUtils.js";
+
+const username = "test" + Math.random();
+const password = "p@$$w0rd!";
+
+describe("/app", () => {
+  it("Insecure endpoint", async () => {
+    // Insecure endpoint
+    const response = await request(app)
+      .get("/")
+      .set("Accept", "application/json");
+
+    expect(response.headers["content-type"]).toMatch(/json/);
+    expect(response.status).toEqual(200);
+    expect(response.body).toEqual({ hello: "world" });
+  });
+
+  it("Secure endpoint with no auth", async () => {
+    const response = await request(app)
+      .get("/api/users")
+      .set("Accept", "application/json");
+
+    expect(response.status).toEqual(401);
+  });
+
+  it("Secure endpoint with auth", async () => {
+    const session = await signupAndLogin(app, username, password, {
+      email: "test@test.com",
+      fullName: "Test User",
+    });
+
+    const token = session.token;
+
+    const response = await request(app)
+      .get("/api/users")
+      .set("Accept", "application/json")
+      .set("Authorization", "Bearer " + token);
+
+    expect(response.status).toEqual(200);
+    expect(response.headers["content-type"]).toMatch(/json/);
+    expect(response.body.users[0]).toEqual(
+      expect.objectContaining({
+        id: session.id,
+        username,
+      })
+    );
+  });
+});

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@stanlemon/server-with-auth",
-  "version": "0.3.35",
+  "version": "0.3.37",
   "description": "A basic express web server setup with authentication baked in.",
   "author": "Stan Lemon <stanlemon@users.noreply.github.com>",
   "license": "MIT",
   "engines": {
-    "node": ">=22.12.0"
+    "node": ">=22.14.0"
   },
   "type": "module",
   "main": "./src/index.js",
@@ -33,10 +33,10 @@
   },
   "devDependencies": {
     "@stanlemon/eslint-config": "*",
-    "@types/supertest": "^6.0.2",
+    "@types/supertest": "^6.0.3",
     "better-sqlite3": "^11.9.1",
     "knex": "^3.1.0",
     "nodemon": "^3.1.9",
-    "supertest": "^7.0.0"
+    "supertest": "^7.1.0"
   }
 }

package/src/createAppServer.js

@@ -58,10 +58,6 @@ export default function createAppServer(options) {
 
   const app = createBaseAppServer({ port, webpack, start });
 
-  if (process.env.NODE_ENV === "test") {
-    return app;
-  }
-
   if (!process.env.COOKIE_SECRET) {
     console.warn("You need to specify a cookie secret!");
   }

package/src/index.js

@@ -20,3 +20,4 @@ export {
   createInMemoryLowDb,
   createJsonFileLowDb,
 } from "./data/lowdb-user-dao.js";
+export { signupAndLogin as test__signupAndLogin } from "./utilities/testUtils.js";

package/src/utilities/testUtils.js

@@ -0,0 +1,45 @@
+import request from "supertest";
+import { v4 as uuidv4 } from "uuid";
+
+/**
+ * Utility function to create a user and login for testing purposes.
+ * @param {Express.Application} app express application server
+ * @param {string} username username to sign up and login with
+ * @param {string} password password to sign up and login with
+ * @returns {Promise<{ id: string, token: string, username: string }>} user session information
+ */
+export async function signupAndLogin(
+  app,
+  username = "test" + uuidv4(),
+  password = "p@$$w0rd!",
+  extra = {}
+) {
+  const signup = await request(app)
+    .post("/auth/signup")
+    .set("Content-Type", "application/json")
+    .set("Accept", "application/json")
+    .send({
+      username,
+      password,
+      ...extra,
+    })
+    .expect(200);
+
+  const session = await request(app)
+    .post("/auth/login")
+    .set("Content-Type", "application/json")
+    .set("Accept", "application/json")
+    .send({
+      username,
+      password,
+    })
+    .expect(200);
+
+  expect(signup.body.user.id).toEqual(session.body.user.id);
+
+  return {
+    id: session.body.user.id,
+    token: session.body.token,
+    username,
+  };
+}