@terreno/api 0.0.11 → 0.0.13

package/dist/api.hooks.test.js

@@ -0,0 +1,891 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var bun_test_1 = require("bun:test");
+var supertest_1 = __importDefault(require("supertest"));
+var api_1 = require("./api");
+var auth_1 = require("./auth");
+var errors_1 = require("./errors");
+var permissions_1 = require("./permissions");
+var tests_1 = require("./tests");
+(0, bun_test_1.describe)("pre and post hooks", function () {
+    var server;
+    var app;
+    var agent;
+    (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, tests_1.setupDb)()];
+                case 1:
+                    _a.sent();
+                    app = (0, tests_1.getBaseServer)();
+                    (0, auth_1.setupAuth)(app, tests_1.UserModel);
+                    (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "notAdmin")];
+                case 2:
+                    agent = _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("pre hooks change data", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var deleteCalled, res, broccoli;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    deleteCalled = false;
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preCreate: function (data) {
+                            data.calories = 14;
+                            return data;
+                        },
+                        preDelete: function (data) {
+                            deleteCalled = true;
+                            return data;
+                        },
+                        preUpdate: function (data) {
+                            data.calories = 15;
+                            return data;
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server
+                            .post("/food")
+                            .send({
+                            calories: 15,
+                            name: "Broccoli",
+                        })
+                            .expect(201)];
+                case 1:
+                    res = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.findById(res.body.data._id)];
+                case 2:
+                    broccoli = _a.sent();
+                    if (!broccoli) {
+                        throw new Error("Broccoli was not created");
+                    }
+                    (0, bun_test_1.expect)(broccoli.name).toBe("Broccoli");
+                    // Overwritten by the pre create hook
+                    (0, bun_test_1.expect)(broccoli.calories).toBe(14);
+                    return [4 /*yield*/, server
+                            .patch("/food/".concat(broccoli._id))
+                            .send({
+                            name: "Broccoli2",
+                        })
+                            .expect(200)];
+                case 3:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.name).toBe("Broccoli2");
+                    // Updated by the pre update hook
+                    (0, bun_test_1.expect)(res.body.data.calories).toBe(15);
+                    return [4 /*yield*/, agent.delete("/food/".concat(broccoli._id)).expect(204)];
+                case 4:
+                    _a.sent();
+                    (0, bun_test_1.expect)(deleteCalled).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("pre hooks return null", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var notAdmin, spinach, res, broccoli;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, tests_1.UserModel.findOne({
+                        email: "notAdmin@example.com",
+                    })];
+                case 1:
+                    notAdmin = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.create({
+                            calories: 1,
+                            created: new Date("2021-12-03T00:00:20.000Z"),
+                            hidden: false,
+                            name: "Spinach",
+                            ownerId: notAdmin._id,
+                            source: {
+                                name: "Brand",
+                            },
+                        })];
+                case 2:
+                    spinach = _a.sent();
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preCreate: function () { return null; },
+                        preDelete: function () { return null; },
+                        preUpdate: function () { return null; },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server
+                            .post("/food")
+                            .send({
+                            calories: 15,
+                            name: "Broccoli",
+                        })
+                            .expect(403)];
+                case 3:
+                    res = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.findById(res.body._id)];
+                case 4:
+                    broccoli = _a.sent();
+                    (0, bun_test_1.expect)(broccoli).toBeNull();
+                    return [4 /*yield*/, server
+                            .patch("/food/".concat(spinach._id))
+                            .send({
+                            name: "Broccoli",
+                        })
+                            .expect(403)];
+                case 5:
+                    _a.sent();
+                    return [4 /*yield*/, server.delete("/food/".concat(spinach._id)).expect(403)];
+                case 6:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("post hooks succeed", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var deleteCalled, res, broccoli;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    deleteCalled = false;
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        postCreate: function (data) { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        data.calories = 14;
+                                        return [4 /*yield*/, data.save()];
+                                    case 1:
+                                        _a.sent();
+                                        return [2 /*return*/, data];
+                                }
+                            });
+                        }); },
+                        postDelete: function (data) {
+                            deleteCalled = true;
+                            return data;
+                        },
+                        postUpdate: function (data) { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        data.calories = 15;
+                                        return [4 /*yield*/, data.save()];
+                                    case 1:
+                                        _a.sent();
+                                        return [2 /*return*/, data];
+                                }
+                            });
+                        }); },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server
+                            .post("/food")
+                            .send({
+                            calories: 15,
+                            name: "Broccoli",
+                        })
+                            .expect(201)];
+                case 1:
+                    res = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.findById(res.body.data._id)];
+                case 2:
+                    broccoli = _a.sent();
+                    if (!broccoli) {
+                        throw new Error("Broccoli was not created");
+                    }
+                    (0, bun_test_1.expect)(broccoli.name).toBe("Broccoli");
+                    // Overwritten by the pre create hook
+                    (0, bun_test_1.expect)(broccoli.calories).toBe(14);
+                    return [4 /*yield*/, server
+                            .patch("/food/".concat(broccoli._id))
+                            .send({
+                            name: "Broccoli2",
+                        })
+                            .expect(200)];
+                case 3:
+                    res = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.findById(res.body.data._id)];
+                case 4:
+                    broccoli = _a.sent();
+                    if (!broccoli) {
+                        throw new Error("Broccoli was not update");
+                    }
+                    (0, bun_test_1.expect)(broccoli.name).toBe("Broccoli2");
+                    // Updated by the post update hook
+                    (0, bun_test_1.expect)(broccoli.calories).toBe(15);
+                    return [4 /*yield*/, agent.delete("/food/".concat(broccoli._id)).expect(204)];
+                case 5:
+                    _a.sent();
+                    (0, bun_test_1.expect)(deleteCalled).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preCreate hook preserves disableExternalErrorTracking on APIError", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preCreate: function () {
+                            throw new errors_1.APIError({
+                                disableExternalErrorTracking: true,
+                                status: 400,
+                                title: "Custom preCreate error",
+                            });
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server
+                            .post("/food")
+                            .send({
+                            calories: 15,
+                            name: "Broccoli",
+                        })
+                            .expect(400)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Custom preCreate error");
+                    (0, bun_test_1.expect)(res.body.disableExternalErrorTracking).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preCreate hook preserves disableExternalErrorTracking on non-APIError", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preCreate: function () {
+                            var error = new Error("Some custom error");
+                            error.disableExternalErrorTracking = true;
+                            throw error;
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server
+                            .post("/food")
+                            .send({
+                            calories: 15,
+                            name: "Broccoli",
+                        })
+                            .expect(400)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("preCreate hook error");
+                    (0, bun_test_1.expect)(res.body.disableExternalErrorTracking).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preUpdate hook preserves disableExternalErrorTracking on APIError", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var notAdmin, spinach, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, tests_1.UserModel.findOne({
+                        email: "notAdmin@example.com",
+                    })];
+                case 1:
+                    notAdmin = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.create({
+                            calories: 1,
+                            created: new Date("2021-12-03T00:00:20.000Z"),
+                            hidden: false,
+                            name: "Spinach",
+                            ownerId: notAdmin._id,
+                            source: {
+                                name: "Brand",
+                            },
+                        })];
+                case 2:
+                    spinach = _a.sent();
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preUpdate: function () {
+                            throw new errors_1.APIError({
+                                disableExternalErrorTracking: true,
+                                status: 400,
+                                title: "Custom preUpdate error",
+                            });
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server
+                            .patch("/food/".concat(spinach._id))
+                            .send({
+                            name: "Broccoli",
+                        })
+                            .expect(400)];
+                case 3:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Custom preUpdate error");
+                    (0, bun_test_1.expect)(res.body.disableExternalErrorTracking).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preUpdate hook preserves disableExternalErrorTracking on non-APIError", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var notAdmin, spinach, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, tests_1.UserModel.findOne({
+                        email: "notAdmin@example.com",
+                    })];
+                case 1:
+                    notAdmin = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.create({
+                            calories: 1,
+                            created: new Date("2021-12-03T00:00:20.000Z"),
+                            hidden: false,
+                            name: "Spinach",
+                            ownerId: notAdmin._id,
+                            source: {
+                                name: "Brand",
+                            },
+                        })];
+                case 2:
+                    spinach = _a.sent();
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preUpdate: function () {
+                            var error = new Error("Some custom error");
+                            error.disableExternalErrorTracking = true;
+                            throw error;
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server
+                            .patch("/food/".concat(spinach._id))
+                            .send({
+                            name: "Broccoli",
+                        })
+                            .expect(400)];
+                case 3:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("preUpdate hook error");
+                    (0, bun_test_1.expect)(res.body.disableExternalErrorTracking).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preDelete hook preserves disableExternalErrorTracking on non-APIError", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var notAdmin, spinach, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, tests_1.UserModel.findOne({
+                        email: "notAdmin@example.com",
+                    })];
+                case 1:
+                    notAdmin = _a.sent();
+                    return [4 /*yield*/, tests_1.FoodModel.create({
+                            calories: 1,
+                            created: new Date("2021-12-03T00:00:20.000Z"),
+                            hidden: false,
+                            name: "Spinach",
+                            ownerId: notAdmin._id,
+                            source: {
+                                name: "Brand",
+                            },
+                        })];
+                case 2:
+                    spinach = _a.sent();
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preDelete: function () {
+                            var error = new Error("Some custom error");
+                            error.disableExternalErrorTracking = true;
+                            throw error;
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, agent.delete("/food/".concat(spinach._id)).expect(403)];
+                case 3:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("preDelete hook error");
+                    (0, bun_test_1.expect)(res.body.disableExternalErrorTracking).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+(0, bun_test_1.describe)("hook error handling", function () {
+    var server;
+    var app;
+    var admin;
+    var agent;
+    var spinach;
+    (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, tests_1.setupDb)()];
+                case 1:
+                    _a = __read.apply(void 0, [_b.sent(), 1]), admin = _a[0];
+                    return [4 /*yield*/, tests_1.FoodModel.create({
+                            calories: 1,
+                            created: new Date("2021-12-03T00:00:20.000Z"),
+                            hidden: false,
+                            name: "Spinach",
+                            ownerId: admin._id,
+                            source: {
+                                name: "Brand",
+                            },
+                        })];
+                case 2:
+                    spinach = _b.sent();
+                    app = (0, tests_1.getBaseServer)();
+                    (0, auth_1.setupAuth)(app, tests_1.UserModel);
+                    (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preCreate returning undefined throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preCreate: function () { return undefined; },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.post("/food").send({ calories: 15, name: "Broccoli" }).expect(403)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Create not allowed");
+                    (0, bun_test_1.expect)(res.body.detail).toBe("A body must be returned from preCreate");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preUpdate returning undefined throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preUpdate: function () { return undefined; },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.patch("/food/".concat(spinach._id)).send({ name: "Kale" }).expect(403)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Update not allowed");
+                    (0, bun_test_1.expect)(res.body.detail).toBe("A body must be returned from preUpdate");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preDelete returning undefined throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preDelete: function () { return undefined; },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "notAdmin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.delete("/food/".concat(spinach._id)).expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Delete not allowed");
+                    (0, bun_test_1.expect)(res.body.detail).toBe("A body must be returned from preDelete");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("postCreate hook error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        postCreate: function () {
+                            throw new Error("postCreate failed");
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.post("/food").send({ calories: 15, name: "Broccoli" }).expect(400)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("postCreate hook error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("postUpdate hook error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        postUpdate: function () {
+                            throw new Error("postUpdate failed");
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.patch("/food/".concat(spinach._id)).send({ name: "Kale" }).expect(400)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("postUpdate hook error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("postDelete hook error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        postDelete: function () {
+                            throw new Error("postDelete failed");
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "notAdmin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.delete("/food/".concat(spinach._id)).expect(400)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("postDelete hook error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preUpdate returning null throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preUpdate: function () { return null; },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.patch("/food/".concat(spinach._id)).send({ name: "Kale" }).expect(403)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Update not allowed");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preDelete returning null throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preDelete: function () { return null; },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "notAdmin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.delete("/food/".concat(spinach._id)).expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Delete not allowed");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preCreate returning null throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preCreate: function () { return null; },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.post("/food").send({ calories: 15, name: "Broccoli" }).expect(403)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Create not allowed");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preCreate error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preCreate: function () {
+                            throw new Error("preCreate failed");
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.post("/food").send({ calories: 15, name: "Broccoli" }).expect(400)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("preCreate hook error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preUpdate error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preUpdate: function () {
+                            throw new Error("preUpdate failed");
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, server.patch("/food/".concat(spinach._id)).send({ name: "Kale" }).expect(400)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("preUpdate hook error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("preDelete hook throwing APIError is re-thrown", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAny],
+                            delete: [permissions_1.Permissions.IsAny],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAny],
+                        },
+                        preDelete: function () {
+                            throw new errors_1.APIError({
+                                disableExternalErrorTracking: true,
+                                status: 400,
+                                title: "Custom preDelete APIError",
+                            });
+                        },
+                    }));
+                    server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "notAdmin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.delete("/food/".concat(spinach._id)).expect(400)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Custom preDelete APIError");
+                    (0, bun_test_1.expect)(res.body.disableExternalErrorTracking).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});