@tellescope/sdk 1.4.28 → 1.4.31

package/lib/cjs/tests/tests.js

@@ -97,6 +97,9 @@ var host = process.env.TEST_URL || 'http://localhost:8080';
 var _a = [process.env.TEST_EMAIL, process.env.TEST_PASSWORD], email = _a[0], password = _a[1];
 var _b = [process.env.TEST_EMAIL_2, process.env.TEST_PASSWORD_2], email2 = _b[0], password2 = _b[1];
 var _c = [process.env.NON_ADMIN_EMAIL, process.env.NON_ADMIN_PASSWORD], nonAdminEmail = _c[0], nonAdminPassword = _c[1];
+var subUserEmail = process.env.SUB_EMAIL;
+var otherSubUserEmail = process.env.OTHER_SUB_EMAIL;
+var subSubUserEmail = process.env.SUB_SUB_EMAIL;
 var userId = '60398b0231a295e64f084fd9';
 var businessId = '60398b1131a295e64f084ff6';
 // const example_SDK_usage = async () => {
@@ -114,12 +117,16 @@ var businessId = '60398b1131a295e64f084ff6';
 //   await sdk.api.endusers.deleteOne(enduser.id)
 // }
 var sdk = new sdk_1.Session({ host: host });
+var sdkSub = new sdk_1.Session({ host: host });
+var sdkOtherSub = new sdk_1.Session({ host: host });
+var sdkSubSub = new sdk_1.Session({ host: host });
 var sdkOther = new sdk_1.Session({ host: host, apiKey: "ba745e25162bb95a795c5fa1af70df188d93c4d3aac9c48b34a5c8c9dd7b80f7" });
 var sdkNonAdmin = new sdk_1.Session({ host: host });
 var enduserSDK = new sdk_1.EnduserSession({ host: host, businessId: businessId });
+var subEnduserSDK = new sdk_1.EnduserSession({ host: host, businessId: businessId, "organizationIds": ["636d3c230067fc6b4c92c59c"] });
 var enduserSDKDifferentBusinessId = new sdk_1.EnduserSession({ host: host, businessId: '80398b1131a295e64f084ff6' });
 // const sdkOtherEmail = "sebass@tellescope.com"
-if (!(email && password && email2 && password2 && nonAdminEmail && nonAdminPassword)) {
+if (!(email && subUserEmail && otherSubUserEmail && subSubUserEmail && password && email2 && password2 && nonAdminEmail && nonAdminPassword)) {
     console.error("Set TEST_EMAIL and TEST_PASSWORD");
     process.exit();
 }
@@ -161,8 +168,14 @@ var setup_tests = function () { return __awaiter(void 0, void 0, void 0, functio
                 _a.sent();
                 (0, testing_1.assert)(uInfo.id === sdk.userInfo.id, 'userInfo mismatch', 'userInfo id preserved after refresh');
                 (0, testing_1.assert)(!!originalAuthToken && !!sdk.authToken && sdk.authToken !== originalAuthToken, 'same authToken after refresh', 'authToken refresh');
-                return [4 /*yield*/, (0, testing_1.async_test)('reset_db', function () { return sdk.reset_db(); }, passOnVoid)];
+                // reset nonAdmin role to a default non-admin
+                return [4 /*yield*/, sdk.api.users.updateOne(sdkNonAdmin.userInfo.id, { roles: ['Non-Admin'] }, { replaceObjectFields: true })];
             case 9:
+                // reset nonAdmin role to a default non-admin
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)('reset_db', function () { return sdk.reset_db(); }, passOnVoid)];
+            case 10:
+                // reset nonAdmin role to a default non-admin
                 _a.sent();
                 return [2 /*return*/];
         }
@@ -231,6 +244,167 @@ var multi_tenant_tests = function () { return __awaiter(void 0, void 0, void 0,
         }
     });
 }); };
+var sub_organization_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var rootEnduser, subEnduser, subSubEnduser;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                (0, testing_1.log_header)("Sub Organizations");
+                return [4 /*yield*/, sdk.api.endusers.createOne({ email: 'root@tellescope.com' })];
+            case 1:
+                rootEnduser = _a.sent();
+                return [4 /*yield*/, sdkSub.api.endusers.createOne({ email: 'sub@tellescope.com' })];
+            case 2:
+                subEnduser = _a.sent();
+                return [4 /*yield*/, sdkSubSub.api.endusers.createOne({ email: 'subsub@tellescope.com' })];
+            case 3:
+                subSubEnduser = _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("root get root", function () { return sdk.api.endusers.getOne(rootEnduser.id); }, passOnAnyResult)];
+            case 4:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("sub get root error", function () { return sdkSub.api.endusers.getOne(rootEnduser.id); }, handleAnyError)];
+            case 5:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("other sub get root error", function () { return sdkOtherSub.api.endusers.getOne(rootEnduser.id); }, handleAnyError)];
+            case 6:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("subsub get root error", function () { return sdkSubSub.api.endusers.getOne(rootEnduser.id); }, handleAnyError)];
+            case 7:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("root get sub", function () { return sdk.api.endusers.getOne(subEnduser.id); }, passOnAnyResult)];
+            case 8:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("sub get sub", function () { return sdkSub.api.endusers.getOne(subEnduser.id); }, passOnAnyResult)];
+            case 9:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("other sub get sub error", function () { return sdkOtherSub.api.endusers.getOne(subEnduser.id); }, handleAnyError)];
+            case 10:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("subsub get sub error", function () { return sdkSubSub.api.endusers.getOne(subEnduser.id); }, handleAnyError)];
+            case 11:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("root get subsub", function () { return sdk.api.endusers.getOne(subSubEnduser.id); }, passOnAnyResult)];
+            case 12:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("sub get subsub", function () { return sdkSub.api.endusers.getOne(subSubEnduser.id); }, passOnAnyResult)];
+            case 13:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("other sub get sub sub error", function () { return sdkOtherSub.api.endusers.getOne(subSubEnduser.id); }, handleAnyError)];
+            case 14:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("subsub get subsub", function () { return sdkSubSub.api.endusers.getOne(subSubEnduser.id); }, passOnAnyResult)];
+            case 15:
+                _a.sent();
+                return [4 /*yield*/, sdk.api.endusers.set_password({ id: rootEnduser.id, password: password })];
+            case 16:
+                _a.sent();
+                return [4 /*yield*/, enduserSDK.authenticate(rootEnduser.email, password)];
+            case 17:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("root enduser create", function () { return enduserSDK.api.engagement_events.createOne({ significance: 1, type: 'test', enduserId: rootEnduser.id }); }, { onResult: function (t) { var _a; return t.businessId === rootEnduser.businessId && !((_a = t.organizationIds) === null || _a === void 0 ? void 0 : _a.length); } })];
+            case 18:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("enduser cannot update organizationIds", function () { return enduserSDK.api.endusers.updateOne(enduserSDK.userInfo.id, { organizationIds: [] }); }, handleAnyError)];
+            case 19:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("users cannot update organizationIds", function () { return sdk.api.users.updateOne(sdk.userInfo.id, { organizationIds: [] }); }, handleAnyError)];
+            case 20:
+                _a.sent();
+                return [4 /*yield*/, sdk.api.endusers.set_password({ id: subEnduser.id, password: password })];
+            case 21:
+                _a.sent();
+                return [4 /*yield*/, enduserSDK.authenticate(subEnduser.email, password)];
+            case 22:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("sub enduser create", function () { return enduserSDK.api.engagement_events.createOne({ significance: 1, type: 'test', enduserId: subEnduser.id }); }, { onResult: function (t) { var _a; return t.businessId === rootEnduser.businessId && ((_a = t.organizationIds) === null || _a === void 0 ? void 0 : _a.length) === 1; } })];
+            case 23:
+                _a.sent();
+                return [4 /*yield*/, sdk.api.endusers.set_password({ id: subSubEnduser.id, password: password })];
+            case 24:
+                _a.sent();
+                return [4 /*yield*/, enduserSDK.authenticate(subSubEnduser.email, password)];
+            case 25:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("subSub enduser create", function () { return enduserSDK.api.engagement_events.createOne({ significance: 1, type: 'test', enduserId: subSubEnduser.id }); }, { onResult: function (t) { var _a; return t.businessId === rootEnduser.businessId && ((_a = t.organizationIds) === null || _a === void 0 ? void 0 : _a.length) === 2; } })];
+            case 26:
+                _a.sent();
+                return [4 /*yield*/, sdk.api.endusers.updateOne(rootEnduser.id, { organizationIds: subEnduser.organizationIds })];
+            case 27:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("root get sub adjusted", function () { return sdk.api.endusers.getOne(rootEnduser.id); }, passOnAnyResult)];
+            case 28:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("sub get sub adjusted", function () { return sdkSub.api.endusers.getOne(rootEnduser.id); }, passOnAnyResult)];
+            case 29:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("other sub get sub adjusted error", function () { return sdkOtherSub.api.endusers.getOne(rootEnduser.id); }, handleAnyError)];
+            case 30:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("subsub get sub adjusted error", function () { return sdkSubSub.api.endusers.getOne(rootEnduser.id); }, handleAnyError)];
+            case 31:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("push behavior for organization ids (push by default)", function () { return sdk.api.endusers.updateOne(rootEnduser.id, { organizationIds: subEnduser.organizationIds }); }, 
+                    // { onResult: e => e.organizationIds?.length === 2 * (subEnduser.organizationIds?.length ?? 0) },
+                    handleAnyError // this is not going to pass, because pushing must result in organizationIds that match an existing organization
+                    )];
+            case 32:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("push behavior for organization ids (replace working)", function () { return sdk.api.endusers.updateOne(rootEnduser.id, { organizationIds: subEnduser.organizationIds }, { replaceObjectFields: true }); }, { onResult: function (e) { var _a, _b; return ((_a = e.organizationIds) === null || _a === void 0 ? void 0 : _a.length) === ((_b = subEnduser.organizationIds) === null || _b === void 0 ? void 0 : _b.length); } })];
+            case 33:
+                _a.sent();
+                return [4 /*yield*/, Promise.all([
+                        sdk.api.endusers.deleteOne(rootEnduser.id),
+                        sdk.api.endusers.deleteOne(subEnduser.id),
+                        sdk.api.endusers.deleteOne(subSubEnduser.id),
+                    ])];
+            case 34:
+                _a.sent();
+                return [2 /*return*/];
+        }
+    });
+}); };
+var sub_organization_enduser_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                (0, testing_1.log_header)("Sub Organizations (Enduser-Facing Tests)");
+                return [4 /*yield*/, enduserSDK.register({ email: 'root@tellescope.com', password: password })];
+            case 1:
+                _c.sent();
+                return [4 /*yield*/, subEnduserSDK.register({ email: 'sub@tellescope.com', password: password })];
+            case 2:
+                _c.sent();
+                return [4 /*yield*/, enduserSDK.authenticate('root@tellescope.com', password)];
+            case 3:
+                _c.sent();
+                return [4 /*yield*/, subEnduserSDK.authenticate('sub@tellescope.com', password)];
+            case 4:
+                _c.sent();
+                (0, testing_1.assert)(!((_a = enduserSDK.userInfo.organizationIds) === null || _a === void 0 ? void 0 : _a.length), 'bad root organizationIds', 'root auth org ids');
+                (0, testing_1.assert)(((_b = subEnduserSDK.userInfo.organizationIds) === null || _b === void 0 ? void 0 : _b.length) === 1, 'bad sub organizationIds', 'sub auth org ids');
+                return [4 /*yield*/, (0, testing_1.async_test)("root get root", function () { return sdk.api.endusers.getOne(enduserSDK.userInfo.id); }, passOnAnyResult)];
+            case 5:
+                _c.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("sub get root error", function () { return sdkSub.api.endusers.getOne(enduserSDK.userInfo.id); }, handleAnyError)];
+            case 6:
+                _c.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("root get sub", function () { return sdk.api.endusers.getOne(subEnduserSDK.userInfo.id); }, passOnAnyResult)];
+            case 7:
+                _c.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)("sub get sub", function () { return sdkSub.api.endusers.getOne(subEnduserSDK.userInfo.id); }, passOnAnyResult)];
+            case 8:
+                _c.sent();
+                return [4 /*yield*/, Promise.all([
+                        sdk.api.endusers.deleteOne(enduserSDK.userInfo.id),
+                        sdk.api.endusers.deleteOne(subEnduserSDK.userInfo.id),
+                    ])];
+            case 9:
+                _c.sent();
+                return [2 /*return*/];
+        }
+    });
+}); };
 var threadKeyTests = function () { return __awaiter(void 0, void 0, void 0, function () {
     var enduser, _a, e1, e2, e3, _b, e4, e5, e6, es;
     return __generator(this, function (_c) {
@@ -410,7 +584,7 @@ var generate_user_auth_tests = function () { return __awaiter(void 0, void 0, vo
                 _a = _e.sent(), authToken = _a.authToken, enduser = _a.enduser;
                 if (!enduser)
                     throw new Error("Didn't get enduser when generate_auth_token called");
-                (0, testing_1.assert)(!!authToken && !!enduser, 'invalid returned values', 'Generate authToken and get enduser');
+                (0, testing_1.assert)(!!authToken && !!enduser, 'invalid returned values', 'Generate authTokea and get enduser');
                 return [4 /*yield*/, sdk.api.endusers.is_authenticated({ id: enduser.id, authToken: authToken })];
             case 4:
                 isAuthenticated = (_e.sent()).isAuthenticated;
@@ -3808,21 +3982,46 @@ var role_based_access_permissions_tests = function () { return __awaiter(void 0,
                 return [4 /*yield*/, sdkNonAdmin.authenticate(nonAdminEmail, nonAdminPassword)]; // to use new role, handle logout on role change
             case 3:
                 _a.sent(); // to use new role, handle logout on role change
+                return [4 /*yield*/, (0, testing_1.async_test)('non-root admin can read', function () { return sdkSub.api.role_based_access_permissions.getOne(rbap.id); }, passOnAnyResult)];
+            case 4:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)('non-root admin can read many', function () { return sdkSub.api.role_based_access_permissions.getSome(); }, { onResult: function (rs) { return rs.length > 0; } })];
+            case 5:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)('non-root admin blocked create', function () { return sdkSub.api.role_based_access_permissions.createOne({
+                        role: noEnduserAccessRole,
+                        permissions: {
+                            endusers: {
+                                create: null,
+                                read: null,
+                                delete: null,
+                                update: null,
+                            }
+                        }
+                    }); }, handleAnyError)];
+            case 6:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)('non-root admin blocked update', function () { return sdkSub.api.role_based_access_permissions.updateOne(rbap.id, { role: 'updated' }); }, handleAnyError)];
+            case 7:
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.async_test)('non-root admin blocked delete', function () { return sdkSub.api.role_based_access_permissions.deleteOne(rbap.id); }, handleAnyError)];
+            case 8:
+                _a.sent();
                 return [4 /*yield*/, (0, testing_1.async_test)('enduser read access restriction working', function () { return sdkNonAdmin.api.endusers.getSome(); }, handleAnyError)
                     // cleanup
                 ];
-            case 4:
+            case 9:
                 _a.sent();
                 // cleanup
                 return [4 /*yield*/, Promise.all([
                         sdk.api.role_based_access_permissions.deleteOne(rbap.id),
                         sdk.api.users.updateOne(sdkNonAdmin.userInfo.id, { roles: ['Non-Admin'] }, { replaceObjectFields: true }),
                     ])];
-            case 5:
+            case 10:
                 // cleanup
                 _a.sent();
                 return [4 /*yield*/, sdkNonAdmin.authenticate(nonAdminEmail, nonAdminPassword)]; // to use new role, handle logout on role change
-            case 6:
+            case 11:
                 _a.sent(); // to use new role, handle logout on role change
                 return [2 /*return*/];
         }
@@ -3884,9 +4083,12 @@ var tests = {
                 (0, testing_1.log_header)("API");
                 _h.label = 1;
             case 1:
-                _h.trys.push([1, 19, , 20]);
+                _h.trys.push([1, 21, , 22]);
                 return [4 /*yield*/, Promise.all([
                         sdk.authenticate(email, password),
+                        sdkSub.authenticate(subUserEmail, password),
+                        sdkOtherSub.authenticate(otherSubUserEmail, password),
+                        sdkSubSub.authenticate(subSubUserEmail, password),
                         sdkNonAdmin.authenticate(nonAdminEmail, nonAdminPassword),
                     ])];
             case 2:
@@ -3897,50 +4099,56 @@ var tests = {
                 return [4 /*yield*/, multi_tenant_tests()]; // should come right after setup tests
             case 4:
                 _h.sent(); // should come right after setup tests
-                return [4 /*yield*/, (0, exports.self_serve_appointment_booking_tests)()];
+                return [4 /*yield*/, sub_organization_enduser_tests()];
             case 5:
                 _h.sent();
-                return [4 /*yield*/, (0, exports.filter_by_date_tests)()];
+                return [4 /*yield*/, sub_organization_tests()];
             case 6:
                 _h.sent();
-                return [4 /*yield*/, generate_user_auth_tests()];
+                return [4 /*yield*/, (0, exports.self_serve_appointment_booking_tests)()];
             case 7:
                 _h.sent();
-                return [4 /*yield*/, role_based_access_tests()];
+                return [4 /*yield*/, (0, exports.filter_by_date_tests)()];
             case 8:
                 _h.sent();
-                return [4 /*yield*/, generateEnduserAuthTests()];
+                return [4 /*yield*/, generate_user_auth_tests()];
             case 9:
                 _h.sent();
-                return [4 /*yield*/, public_form_tests()];
+                return [4 /*yield*/, role_based_access_tests()];
             case 10:
                 _h.sent();
-                return [4 /*yield*/, search_tests()];
+                return [4 /*yield*/, generateEnduserAuthTests()];
             case 11:
                 _h.sent();
-                return [4 /*yield*/, badInputTests()];
+                return [4 /*yield*/, public_form_tests()];
             case 12:
                 _h.sent();
-                return [4 /*yield*/, filterTests()];
+                return [4 /*yield*/, search_tests()];
             case 13:
                 _h.sent();
-                return [4 /*yield*/, updatesTests()];
+                return [4 /*yield*/, badInputTests()];
             case 14:
                 _h.sent();
-                return [4 /*yield*/, threadKeyTests()];
+                return [4 /*yield*/, filterTests()];
             case 15:
                 _h.sent();
-                return [4 /*yield*/, enduserAccessTests()];
+                return [4 /*yield*/, updatesTests()];
             case 16:
                 _h.sent();
-                return [4 /*yield*/, enduser_session_tests()];
+                return [4 /*yield*/, threadKeyTests()];
             case 17:
                 _h.sent();
-                return [4 /*yield*/, enduser_redaction_tests()];
+                return [4 /*yield*/, enduserAccessTests()];
             case 18:
                 _h.sent();
-                return [3 /*break*/, 20];
+                return [4 /*yield*/, enduser_session_tests()];
             case 19:
+                _h.sent();
+                return [4 /*yield*/, enduser_redaction_tests()];
+            case 20:
+                _h.sent();
+                return [3 /*break*/, 22];
+            case 21:
                 err_1 = _h.sent();
                 console.error("Failed during custom test");
                 if (err_1.message && err_1.info) {
@@ -3950,15 +4158,15 @@ var tests = {
                     console.error(err_1);
                 }
                 process.exit(1);
-                return [3 /*break*/, 20];
-            case 20:
+                return [3 /*break*/, 22];
+            case 22:
                 _a = [];
                 for (_b in schema_1.schema)
                     _a.push(_b);
                 _i = 0;
-                _h.label = 21;
-            case 21:
-                if (!(_i < _a.length)) return [3 /*break*/, 24];
+                _h.label = 23;
+            case 23:
+                if (!(_i < _a.length)) return [3 /*break*/, 26];
                 n = _a[_i];
                 returnValidation = (_g = (_f = schema_1.schema[n].customActions) === null || _f === void 0 ? void 0 : _f.create) === null || _g === void 0 ? void 0 : _g.returns;
                 return [4 /*yield*/, run_generated_tests({
@@ -3969,38 +4177,38 @@ var tests = {
                             create: returnValidation // ModelFields<ClientModel>,
                         }
                     })];
-            case 22:
+            case 24:
                 _h.sent();
-                _h.label = 23;
-            case 23:
+                _h.label = 25;
+            case 25:
                 _i++;
-                return [3 /*break*/, 21];
-            case 24:
+                return [3 /*break*/, 23];
+            case 26:
                 _c = [];
                 for (_d in tests)
                     _c.push(_d);
                 _e = 0;
-                _h.label = 25;
-            case 25:
-                if (!(_e < _c.length)) return [3 /*break*/, 30];
+                _h.label = 27;
+            case 27:
+                if (!(_e < _c.length)) return [3 /*break*/, 32];
                 t = _c[_e];
-                _h.label = 26;
-            case 26:
-                _h.trys.push([26, 28, , 29]);
+                _h.label = 28;
+            case 28:
+                _h.trys.push([28, 30, , 31]);
                 return [4 /*yield*/, tests[t]()];
-            case 27:
+            case 29:
                 _h.sent();
-                return [3 /*break*/, 29];
-            case 28:
+                return [3 /*break*/, 31];
+            case 30:
                 err_2 = _h.sent();
                 console.error("Error running test:");
                 console.error(err_2);
                 process.exit(1);
-                return [3 /*break*/, 29];
-            case 29:
+                return [3 /*break*/, 31];
+            case 31:
                 _e++;
-                return [3 /*break*/, 25];
-            case 30:
+                return [3 /*break*/, 27];
+            case 32:
                 process.exit();
                 return [2 /*return*/];
         }