backend-manager 5.9.4 → 5.9.6

package/test/routes/marketing/email-preferences.js

@@ -1,292 +0,0 @@
-/**
- * Test: POST /marketing/email-preferences
- *
- * Two modes:
- * - Anonymous HMAC: from email-footer unsubscribe link. Requires email + asmId + sig.
- *   Hits SendGrid ASM and (NEW) mirrors to user doc if email maps to a user.
- * - Authenticated: from account-page toggle. Requires only `action`.
- *   Writes consent.marketing to user doc with source='account' and hits SendGrid + Beehiiv
- *   via the email library.
- *
- * Set TEST_EXTENDED_MODE=true to hit real SendGrid + Beehiiv. Otherwise provider calls
- * are skipped but user-doc mutations still happen.
- */
-const crypto = require('crypto');
-
-const TEST_EMAIL = 'rachel.greene+bem-unsub@gmail.com';
-const TEST_ASM_ID = '24077';
-
-function generateSig(email) {
-  return crypto.createHmac('sha256', process.env.UNSUBSCRIBE_HMAC_KEY).update(email.toLowerCase()).digest('hex');
-}
-
-module.exports = {
-  description: 'Marketing email-preferences (anonymous HMAC + authenticated)',
-  type: 'group',
-  tests: [
-    // ─── Anonymous HMAC flow ───
-
-    {
-      name: 'anon-unsubscribe-valid-sig-succeeds',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const sig = generateSig(TEST_EMAIL);
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: TEST_EMAIL,
-          asmId: TEST_ASM_ID,
-          action: 'unsubscribe',
-          sig,
-        });
-        assert.isSuccess(response, 'Unsubscribe with valid sig should succeed');
-        assert.propertyEquals(response, 'data.success', true, 'success should be true');
-      },
-    },
-
-    {
-      name: 'anon-subscribe-valid-sig-succeeds',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const sig = generateSig(TEST_EMAIL);
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: TEST_EMAIL,
-          asmId: TEST_ASM_ID,
-          action: 'subscribe',
-          sig,
-        });
-        assert.isSuccess(response, 'Subscribe with valid sig should succeed');
-        assert.propertyEquals(response, 'data.success', true, 'success should be true');
-      },
-    },
-
-    {
-      name: 'anon-resubscribe-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        // Old 'resubscribe' action is no longer accepted — must use 'subscribe'
-        const sig = generateSig(TEST_EMAIL);
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: TEST_EMAIL,
-          asmId: TEST_ASM_ID,
-          action: 'resubscribe',
-          sig,
-        });
-        assert.isError(response, 400, 'Old "resubscribe" action should be rejected');
-      },
-    },
-
-    {
-      name: 'anon-invalid-sig-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: TEST_EMAIL,
-          asmId: TEST_ASM_ID,
-          action: 'unsubscribe',
-          sig: 'invalid-signature-value',
-        });
-        assert.isError(response, 403, 'Invalid sig should return 403');
-      },
-    },
-
-    {
-      name: 'anon-missing-email-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          asmId: TEST_ASM_ID,
-          action: 'unsubscribe',
-          sig: 'anything',
-        });
-        assert.isError(response, 400, 'Missing email should return 400');
-      },
-    },
-
-    {
-      name: 'anon-invalid-email-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const sig = generateSig('not-an-email');
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: 'not-an-email',
-          asmId: TEST_ASM_ID,
-          action: 'unsubscribe',
-          sig,
-        });
-        assert.isError(response, 400, 'Invalid email format should return 400');
-      },
-    },
-
-    {
-      name: 'anon-missing-asmid-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const sig = generateSig(TEST_EMAIL);
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: TEST_EMAIL,
-          action: 'unsubscribe',
-          sig,
-        });
-        assert.isError(response, 400, 'Missing asmId should return 400');
-      },
-    },
-
-    {
-      name: 'anon-invalid-action-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const sig = generateSig(TEST_EMAIL);
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: TEST_EMAIL,
-          asmId: TEST_ASM_ID,
-          action: 'delete',
-          sig,
-        });
-        assert.isError(response, 400, 'Invalid action should return 400');
-      },
-    },
-
-    {
-      name: 'anon-wrong-email-sig-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        // sig generated for a different email — must not validate against TEST_EMAIL
-        const sig = generateSig('someone-else@gmail.com');
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          email: TEST_EMAIL,
-          asmId: TEST_ASM_ID,
-          action: 'unsubscribe',
-          sig,
-        });
-        assert.isError(response, 403, 'Sig for different email should return 403');
-      },
-    },
-
-    // ─── Authenticated mode ───
-
-    {
-      name: 'auth-unsubscribe-writes-consent-and-records-source-account',
-      auth: 'basic',
-      timeout: 15000,
-      async run({ http, firestore, assert, accounts }) {
-        const uid = accounts.basic.uid;
-
-        const beforeMs = Date.now();
-        const response = await http.as('basic').post('backend-manager/marketing/email-preferences', {
-          action: 'unsubscribe',
-        });
-        const afterMs = Date.now();
-
-        assert.isSuccess(response, `Authenticated unsubscribe should succeed: ${JSON.stringify(response, null, 2)}`);
-        assert.propertyEquals(response, 'data.success', true, 'success should be true');
-        assert.propertyEquals(response, 'data.action', 'unsubscribe', 'action echoed in response');
-
-        const userDoc = await firestore.get(`users/${uid}`);
-
-        assert.equal(userDoc?.consent?.marketing?.status, 'revoked', 'consent.marketing.status should be revoked');
-        assert.equal(userDoc?.consent?.marketing?.revokedAt?.source, 'account', 'revokedAt.source should be account');
-        assert.ok(userDoc?.consent?.marketing?.revokedAt?.timestamp, 'revokedAt.timestamp should be set');
-        assert.equal(typeof userDoc?.consent?.marketing?.revokedAt?.timestampUNIX, 'number', 'revokedAt.timestampUNIX should be number');
-
-        // Server time used (defense against clock manipulation).
-        // Server uses Math.round, so the stamped value can be 1 second past Math.floor(afterMs/1000)
-        // when the request takes >500ms. Use Math.round on the upper bound + a small fudge.
-        const revokedUNIX = userDoc.consent.marketing.revokedAt.timestampUNIX;
-        const beforeUNIX = Math.floor(beforeMs / 1000);
-        const afterUNIX = Math.round(afterMs / 1000) + 1;
-        assert.ok(
-          revokedUNIX >= beforeUNIX && revokedUNIX <= afterUNIX,
-          `revokedAt.timestampUNIX (${revokedUNIX}) should be server time, between ${beforeUNIX} and ${afterUNIX}`
-        );
-      },
-    },
-
-    {
-      name: 'auth-subscribe-after-unsubscribe-flips-status-keeps-prior-revokedAt',
-      auth: 'basic',
-      timeout: 15000,
-      async run({ http, firestore, assert, accounts }) {
-        const uid = accounts.basic.uid;
-
-        // Capture revokedAt from the previous test
-        const beforeDoc = await firestore.get(`users/${uid}`);
-        const priorRevokedAt = beforeDoc?.consent?.marketing?.revokedAt;
-        assert.ok(priorRevokedAt?.timestamp, 'Prior test should have left a revokedAt timestamp');
-
-        const response = await http.as('basic').post('backend-manager/marketing/email-preferences', {
-          action: 'subscribe',
-        });
-
-        assert.isSuccess(response, `Authenticated subscribe should succeed: ${JSON.stringify(response, null, 2)}`);
-
-        const userDoc = await firestore.get(`users/${uid}`);
-
-        // status flips
-        assert.equal(userDoc?.consent?.marketing?.status, 'granted', 'status should flip to granted');
-
-        // grantedAt populated with new server time + source=account
-        assert.equal(userDoc?.consent?.marketing?.grantedAt?.source, 'account', 'grantedAt.source should be account');
-        assert.ok(userDoc?.consent?.marketing?.grantedAt?.timestamp, 'grantedAt.timestamp should be set');
-
-        // revokedAt UNTOUCHED — still reflects the most recent revoke
-        assert.equal(
-          userDoc?.consent?.marketing?.revokedAt?.timestamp,
-          priorRevokedAt.timestamp,
-          'revokedAt.timestamp should be preserved from prior revoke'
-        );
-        assert.equal(
-          userDoc?.consent?.marketing?.revokedAt?.source,
-          priorRevokedAt.source,
-          'revokedAt.source should be preserved from prior revoke'
-        );
-      },
-    },
-
-    {
-      name: 'auth-invalid-action-rejected',
-      auth: 'basic',
-      timeout: 15000,
-      async run({ http, assert }) {
-        const response = await http.as('basic').post('backend-manager/marketing/email-preferences', {
-          action: 'delete',
-        });
-        assert.isError(response, 400, 'Invalid action should return 400');
-      },
-    },
-
-    {
-      name: 'auth-opt-in-old-name-rejected',
-      auth: 'basic',
-      timeout: 15000,
-      async run({ http, assert }) {
-        // Old proposed 'opt-in' is NOT accepted — must use 'subscribe'
-        const response = await http.as('basic').post('backend-manager/marketing/email-preferences', {
-          action: 'opt-in',
-        });
-        assert.isError(response, 400, 'Old "opt-in" name should be rejected (use "subscribe")');
-      },
-    },
-
-    {
-      name: 'unauthenticated-without-sig-rejected',
-      auth: 'none',
-      timeout: 15000,
-      async run({ http, assert }) {
-        // Unauthenticated + no sig → email field is required for HMAC path → 400.
-        // (No auth means we hit the anonymous path; no email/asmId means missing-required.)
-        const response = await http.post('backend-manager/marketing/email-preferences', {
-          action: 'unsubscribe',
-        });
-        assert.isError(response, 400, 'Unauthenticated request without HMAC fields should 400');
-      },
-    },
-  ],
-};

package/test/routes/marketing/push-send.js

@@ -1,32 +0,0 @@
-/**
- * Test: Push notification send
- * Sends a test push notification to a specific FCM token.
- * Requires TEST_EXTENDED_MODE=true and TEST_FCM_TOKEN env var.
- */
-module.exports = {
-  description: 'Push notification send',
-  auth: 'admin',
-  skip: !process.env.TEST_EXTENDED_MODE
-    ? 'TEST_EXTENDED_MODE not set'
-    : !process.env.TEST_FCM_TOKEN
-      ? 'TEST_FCM_TOKEN env var not set'
-      : false,
-  timeout: 30000,
-
-  async run({ http, assert, config }) {
-    const response = await http.post('backend-manager/marketing/campaign', {
-      name: '[TEST] Push notification',
-      subject: 'This is a test push notification from BEM',
-      type: 'push',
-      test: true,
-      sendAt: 'now',
-      filters: { token: process.env.TEST_FCM_TOKEN },
-    });
-
-    assert.isSuccess(response, 'Should create and send push campaign');
-    assert.ok(response.data.id, 'Should have campaign ID');
-    assert.equal(response.data.status, 'sent', 'Should be sent immediately');
-    assert.ok(response.data.providers?.push, 'Should have push result');
-    assert.equal(response.data.providers.push.sent, 1, 'Should have sent to 1 token');
-  },
-};

package/test/routes/marketing/webhook-forward.js

@@ -1,61 +0,0 @@
-/**
- * Test: POST /marketing/webhook/forward (parent forwarder)
- *
- * This route is gated to only work when Manager.config.parent === 'self'.
- * Most test runs happen on a CHILD brand (e.g. Somiibo's backend-manager-config.json
- * has `parent: 'https://api.itwcreativeworks.com'`), so the route should return 404.
- *
- * The actual fan-out behavior (reading brands collection, derive API URLs,
- * POST to each child) is verified by unit-style tests in test/helpers/webhook-forward.js
- * which exercise the forwarder logic against a mock admin + mock fetch — no emulator
- * round-trip required.
- *
- * This file only verifies the GATE: on a non-parent BEM, the route is invisible.
- */
-module.exports = {
-  description: 'Marketing webhook forwarder gating (parent-only)',
-  type: 'group',
-  timeout: 15000,
-
-  tests: [
-    {
-      name: 'forwarder-returns-404-on-non-parent-brand',
-      auth: 'none',
-      async run({ http, assert, config, skip }) {
-        // This gate only applies to CHILD brands. If this brand IS the parent
-        // (config.parent === 'self'), the forwarder route is visible by design,
-        // so there's nothing to assert here — skip rather than fail.
-        if (!config.parent || config.parent === 'self') {
-          skip('Brand is its own parent (config.parent === "self") — forwarder gate does not apply');
-        }
-
-        const response = await http.as('none').post(
-          `backend-manager/marketing/webhook/forward?provider=sendgrid&key=${process.env.BACKEND_MANAGER_WEBHOOK_KEY}`,
-          [{ sg_event_id: 'should-not-process', event: 'group_unsubscribe', email: 'test@example.com' }]
-        );
-
-        assert.isError(response, 404, 'Forwarder should be invisible (404) on non-parent BEMs');
-      },
-    },
-
-    {
-      name: 'forwarder-returns-404-even-with-valid-key',
-      auth: 'none',
-      async run({ http, assert, config, skip }) {
-        // Only meaningful on a CHILD brand. On the parent itself the forwarder is
-        // visible by design, so skip rather than fail.
-        if (!config.parent || config.parent === 'self') {
-          skip('Brand is its own parent (config.parent === "self") — forwarder gate does not apply');
-        }
-
-        // A valid key shouldn't unlock the forwarder — gate is on config.parent, not key.
-        const response = await http.as('none').post(
-          `backend-manager/marketing/webhook/forward?provider=beehiiv&key=${process.env.BACKEND_MANAGER_WEBHOOK_KEY}`,
-          { id: 'should-not-process', event: 'subscription.unsubscribed', email: 'test@example.com' }
-        );
-
-        assert.isError(response, 404, 'Even with valid key, non-parent returns 404');
-      },
-    },
-  ],
-};