mongodb-dynamic-api 5.2.0 → 5.4.0

package/test/for-root/websockets-invalid-token.e2e-spec.js

@@ -0,0 +1,150 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const mongoose_1 = require("@nestjs/mongoose");
+const testing_1 = require("@nestjs/testing");
+const jwt = require("jsonwebtoken");
+const mongoose_2 = require("mongoose");
+const socket_io_client_1 = require("socket.io-client");
+require("dotenv/config");
+const src_1 = require("../../src");
+const e2e_setup_1 = require("../e2e.setup");
+const JWT_SECRET = 'ws-invalid-token-e2e-secret';
+const TIMEOUT_MS = 5000;
+let WsUserEntity = class WsUserEntity extends src_1.BaseEntity {
+};
+__decorate([
+    (0, mongoose_1.Prop)({ type: String, required: true }),
+    __metadata("design:type", String)
+], WsUserEntity.prototype, "email", void 0);
+__decorate([
+    (0, mongoose_1.Prop)({ type: String, required: true }),
+    __metadata("design:type", String)
+], WsUserEntity.prototype, "password", void 0);
+WsUserEntity = __decorate([
+    (0, mongoose_1.Schema)({ collection: 'ws-invalid-token-users' })
+], WsUserEntity);
+function connect(token) {
+    return new Promise((resolve, reject) => {
+        const socket = (0, socket_io_client_1.io)(global.appBaseUrl, { auth: token ? { token } : {}, reconnection: false });
+        let unauthorized;
+        const timeout = setTimeout(() => {
+            socket.close();
+            reject(new Error('Socket connection timed out'));
+        }, TIMEOUT_MS);
+        socket.on('unauthorized', (payload) => {
+            unauthorized = payload;
+        });
+        socket.once('connect', () => {
+            setTimeout(() => {
+                clearTimeout(timeout);
+                resolve({ connected: true, socket, unauthorized });
+            }, 100);
+        });
+        socket.once('connect_error', (error) => {
+            clearTimeout(timeout);
+            socket.close();
+            resolve({ connected: false, error });
+        });
+    });
+}
+(0, vitest_1.describe)('WebSockets — invalid handshake token (e2e)', () => {
+    const onConnection = vitest_1.vi.fn();
+    const sockets = [];
+    (0, vitest_1.beforeEach)(() => {
+        src_1.DynamicApiModule.state['resetState']();
+    });
+    (0, vitest_1.afterEach)(async () => {
+        sockets.splice(0).forEach((s) => s.close());
+        await (0, e2e_setup_1.closeTestingApp)(mongoose_2.default.connections);
+    });
+    async function initApp(rejectInvalidToken) {
+        const moduleRef = await testing_1.Test.createTestingModule({
+            imports: [
+                src_1.DynamicApiModule.forRoot(process.env.MONGO_DB_URL, {
+                    webSocket: true,
+                    useAuth: {
+                        userEntity: WsUserEntity,
+                        jwt: { secret: JWT_SECRET, expiresIn: '1h' },
+                        webSocket: true,
+                    },
+                }),
+            ],
+        }).compile();
+        return (0, e2e_setup_1.createTestingApp)(moduleRef, undefined, async (app) => {
+            (0, src_1.enableDynamicAPIWebSockets)(app, { onConnection, rejectInvalidToken });
+        });
+    }
+    const expiredToken = () => jwt.sign({ id: 'u1', exp: Math.floor(Date.now() / 1000) - 60 }, JWT_SECRET);
+    const validToken = () => jwt.sign({ id: 'u1', email: 'ws@test.co' }, JWT_SECRET, { expiresIn: '1h' });
+    (0, vitest_1.describe)('default (rejectInvalidToken not set)', () => {
+        vitest_1.it.each([
+            ['a malformed token', () => 'not-a-jwt', 'jwt malformed'],
+            ['an expired token', expiredToken, 'jwt expired'],
+            ['a token signed with another secret', () => jwt.sign({ id: 'u1' }, 'other-secret'), 'invalid signature'],
+        ])('should accept %s as anonymous and emit unauthorized', async (_, token, message) => {
+            await initApp();
+            const result = await connect(token());
+            (0, vitest_1.expect)(result.connected).toBe(true);
+            if ('socket' in result) {
+                sockets.push(result.socket);
+                (0, vitest_1.expect)(result.unauthorized).toStrictEqual({ reason: 'invalid-token', message });
+            }
+            (0, vitest_1.expect)(onConnection).toHaveBeenCalledWith(vitest_1.expect.anything(), undefined);
+        });
+        (0, vitest_1.it)('should not emit unauthorized for a valid token', async () => {
+            await initApp();
+            const result = await connect(validToken());
+            (0, vitest_1.expect)(result.connected).toBe(true);
+            if ('socket' in result) {
+                sockets.push(result.socket);
+                (0, vitest_1.expect)(result.unauthorized).toBeUndefined();
+            }
+            (0, vitest_1.expect)(onConnection).toHaveBeenCalledWith(vitest_1.expect.anything(), vitest_1.expect.objectContaining({ id: 'u1' }));
+        });
+    });
+    (0, vitest_1.describe)('rejectInvalidToken: true', () => {
+        vitest_1.it.each([
+            ['a malformed token', () => 'not-a-jwt', 'Unauthorized: jwt malformed'],
+            ['an expired token', expiredToken, 'Unauthorized: jwt expired'],
+        ])('should refuse %s with a connect_error', async (_, token, message) => {
+            await initApp(true);
+            const result = await connect(token());
+            (0, vitest_1.expect)(result.connected).toBe(false);
+            if ('error' in result) {
+                (0, vitest_1.expect)(result.error.message).toBe(message);
+            }
+            (0, vitest_1.expect)(onConnection).not.toHaveBeenCalled();
+        });
+        (0, vitest_1.it)('should accept a valid token with its user', async () => {
+            await initApp(true);
+            const result = await connect(validToken());
+            (0, vitest_1.expect)(result.connected).toBe(true);
+            if ('socket' in result) {
+                sockets.push(result.socket);
+                (0, vitest_1.expect)(result.unauthorized).toBeUndefined();
+            }
+            (0, vitest_1.expect)(onConnection).toHaveBeenCalledWith(vitest_1.expect.anything(), vitest_1.expect.objectContaining({ id: 'u1' }));
+        });
+        (0, vitest_1.it)('should still accept a socket without any token as anonymous', async () => {
+            await initApp(true);
+            const result = await connect();
+            (0, vitest_1.expect)(result.connected).toBe(true);
+            if ('socket' in result) {
+                sockets.push(result.socket);
+                (0, vitest_1.expect)(result.unauthorized).toBeUndefined();
+            }
+            (0, vitest_1.expect)(onConnection).toHaveBeenCalledWith(vitest_1.expect.anything(), undefined);
+        });
+    });
+});
+//# sourceMappingURL=websockets-invalid-token.e2e-spec.js.map

package/test/for-root/websockets-invalid-token.e2e-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websockets-invalid-token.e2e-spec.js","sourceRoot":"","sources":["../../../libs/dynamic-api/test/for-root/websockets-invalid-token.e2e-spec.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,mCAAyE;AAEzE,+CAAgD;AAChD,6CAAuC;AACvC,oCAAoC;AACpC,uCAAgC;AAChC,uDAA8C;AAC9C,yBAAuB;AACvB,mCAKmB;AACnB,4CAAiE;AAQjE,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,UAAU,GAAG,IAAI,CAAC;AAGxB,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,gBAAU;CAMpC,CAAA;AAJC;IADC,IAAA,eAAI,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2CACzB;AAGd;IADC,IAAA,eAAI,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACtB;AALb,YAAY;IADjB,IAAA,iBAAM,EAAC,EAAE,UAAU,EAAE,wBAAwB,EAAE,CAAC;GAC3C,YAAY,CAMjB;AAOD,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAA,qBAAE,EAAC,MAAM,CAAC,UAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7F,IAAI,YAAmD,CAAC;QACxD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;QACnD,CAAC,EAAE,UAAU,CAAC,CAAC;QAEf,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,OAAkC,EAAE,EAAE;YAC/D,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAE1B,UAAU,CAAC,GAAG,EAAE;gBACd,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;YACrC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAA,iBAAQ,EAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,MAAM,YAAY,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,sBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAA,2BAAe,EAAC,kBAAQ,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,OAAO,CAAC,kBAA4B;QACjD,MAAM,SAAS,GAAG,MAAM,cAAI,CAAC,mBAAmB,CAAC;YAC/C,OAAO,EAAE;gBACP,sBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE;oBACjD,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE;wBACP,UAAU,EAAE,YAAY;wBACxB,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE;wBAC5C,SAAS,EAAE,IAAI;qBAChB;iBACF,CAAC;aACH;SACF,CAAC,CAAC,OAAO,EAAE,CAAC;QAEb,OAAO,IAAA,4BAAgB,EAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,GAAqB,EAAE,EAAE;YAC5E,IAAA,gCAA0B,EAAC,GAAG,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IACvG,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtG,IAAA,iBAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,WAAE,CAAC,IAAI,CAAC;YACN,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;YACzD,CAAC,kBAAkB,EAAE,YAAY,EAAE,aAAa,CAAC;YACjD,CAAC,oCAAoC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,cAAc,CAAC,EAAE,mBAAmB,CAAC;SAC1G,CAAC,CAAC,qDAAqD,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACpF,MAAM,OAAO,EAAE,CAAC;YAEhB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAEtC,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,IAAA,eAAM,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,eAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,EAAE,CAAC;YAEhB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAE3C,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,IAAA,eAAM,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;YAC9C,CAAC;YACD,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,eAAM,CAAC,QAAQ,EAAE,EAAE,eAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,WAAE,CAAC,IAAI,CAAC;YACN,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,6BAA6B,CAAC;YACvE,CAAC,kBAAkB,EAAE,YAAY,EAAE,2BAA2B,CAAC;SAChE,CAAC,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACtE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YAEpB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAEtC,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7C,CAAC;YACD,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YAEpB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAE3C,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,IAAA,eAAM,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;YAC9C,CAAC;YACD,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,eAAM,CAAC,QAAQ,EAAE,EAAE,eAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YAEpB,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAE/B,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,IAAA,eAAM,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;YAC9C,CAAC;YACD,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,eAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}