piper-utils 1.0.4 → 1.0.5-7.1

package/src/database/dbUtils/queryStringUtils/accessRightsUtils.test.js

@@ -1,216 +1,368 @@
-import { accessRightsUtils, checkModule, checkWriteAccess, getBusinessesInfo, userDefaultBid } from '../../../index.js';
-import { getModuleInfo } from './accessRightsUtils.js';
-
-export const mock = {
-    pathParameters: {
-        id: 1
-    },
-    queryStringParameters: {
-        businessIds: 'ABC,1'
-    },
-    requestContext: {
-        authorizer: {
-            claims: {
-                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A', 'XYZ': 'A' } }),
-                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
-                'custom:MOD': JSON.stringify({ module: { part: true } })
-            }
-        }
-    },
-    body: { number: 'B201', businessId: 'ABC', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
-};
-
-export const mockNOAccess = {
-    pathParameters: {
-        id: 1
-    },
-    queryStringParameters: {
-        businessIds: 'XYZ'
-    },
-    requestContext: {
-        authorizer: {
-            claims: {
-                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A' } }),
-                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
-                'custom:MOD': JSON.stringify({ module: { part: true } })
-            }
-        }
-    },
-    body: { number: 'B201', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
-};
-export const mockNoneRequested = {
-    pathParameters: {
-        id: 1
-    },
-    queryStringParameters: {
-        businessIds: ''
-    },
-    requestContext: {
-        authorizer: {
-            claims: {
-                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A' } }),
-                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
-                'custom:MOD': JSON.stringify({ module: { part: true } })
-            }
-        }
-    },
-    body: { number: 'B201', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
-};
-
-export const mock2 = {
-    pathParameters: {
-        id: 1
-    },
-    queryStringParameters: {
-        businessIds: '2'
-    },
-    body: { number: 'B201', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
-};
-export const mock3 = {
-    pathParameters: {
-        id: 1
-    },
-    queryStringParameters: {
-        businessIds: 'ABC'
-    },
-    requestContext: {
-        authorizer: {
-            claims: {
-                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'R', 'XYZ': 'R' } }),
-                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
-                'custom:MOD': JSON.stringify({ module: { part: true } })
-            }
-        }
-    },
-    body: { businessId: 'ABC' }
-};
-
-describe('accessRightsUtils', () => {
-    describe('accessRightsUtils', () => {
-        it('should return localBidList no options', () => {
-            const event = {
-                requestContext: {
-                    authorizer: {
-                        claims: null,
-                        custom: {
-                            AR: null
-                        }
-                    }
-                }
-            };
-            const result = accessRightsUtils(event);
-            expect(result).toEqual(['1']);
-        });
-        it('should return access of request query stings if they are granted in JWT', () => {
-            const result = accessRightsUtils(mock);
-            expect(result).toEqual(['ABC']);
-        });
-        it('should return access 2', () => {
-            const result = accessRightsUtils(mock2);
-            expect(result).toEqual([]);
-        });
-        it('should not return access', () => {
-            const result = accessRightsUtils(mockNOAccess);
-            expect(result).toEqual([]);
-        });
-        it('should return access for all if not requested in list', () => {
-            const result = accessRightsUtils(mockNoneRequested);
-            expect(result).toEqual(['ABC']);
-        });
-        it('not prod or stg', () => {
-            const result = accessRightsUtils({});
-            expect(result).toEqual(['1']);
-        });
-    });
-    describe('userDefaultBid', () => {
-        it('should return defaultBid', () => {
-            const result = userDefaultBid(mock);
-            expect(result).toEqual('spam');
-        });
-        it('should return defaultBid', () => {
-            const result = userDefaultBid(mock2);
-            expect(result).toEqual('1');
-        });
-    });
-    describe('getModuleInfo', () => {
-        it('should return default module list', () => {
-            const result = getModuleInfo(mock);
-            expect(result).toEqual({ part: true });
-        });
-        it('should return empty module', () => {
-            const result = getModuleInfo(mock2);
-            expect(result).toEqual({});
-        });
-    });
-    describe('checkModule', () => {
-        it('check for module access', () => {
-            checkModule('part', mock);
-        });
-        it('should throw', () => {
-            try {
-                checkModule('span', mock);
-            } catch (e) {
-                expect(e).toEqual({ message: 'UNAUTHORIZED', errorCode: '4111', statusCode: 401 });
-            }
-        });
-    });
-    describe('checkWriteAccess', () => {
-        it('check for write access', () => {
-            const result = checkWriteAccess(mock);
-            expect(result).toEqual('ABC');
-        });
-        it('should throw if no access', () => {
-            try {
-                checkWriteAccess({});
-            } catch (e) {
-                expect(e).toEqual({ message: 'UNAUTHORIZED', errorCode: '4111', statusCode: 401 });
-            }
-        });
-        it('should throw if read only', () => {
-            try {
-                checkWriteAccess(mock3);
-            } catch (e) {
-                expect(e).toEqual({ message: 'UNAUTHORIZED', errorCode: '4111', statusCode: 401 });
-            }
-        });
-    });
-});
-
-describe('special env cases', () => {
-    beforeEach(() => {
-        process.env.BUILD_ENV = 'local';
-    });
-    afterEach(() => {
-        process.env.BUILD_ENV = 'test';
-    })
-    it('should return localBidList and support use cognito bid option', () => {
-        const event = {
-            requestContext: {
-                authorizer: {
-                    claims: {
-                        'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A', 'XYZ': 'A' } }),
-                    },
-                }
-            }
-        };
-        const result = accessRightsUtils(event, { useCognitoBid: true });
-        expect(result).toEqual([ 'ABC', 'XYZ' ]);
-    });
-    it('should return localBidList if no claims and support use cognito bid option', () => {
-        const event = {
-            requestContext: {
-                authorizer: {
-                    claims: {},
-                }
-            }
-        };
-        const result = accessRightsUtils(event, { useCognitoBid: true });
-        expect(result).toEqual([ '1']);
-    });
-    describe('getBusinessesInfo', () => {
-        it('should handle local', () => {
-            const result = getBusinessesInfo(mock);
-            expect(result).toEqual({ '1': 'A', ABC: 'A', XYZ: 'A' });
-        });
-    });
-})
+import { accessRightsUtils, checkModule, checkWriteAccess, getBusinessesInfo, userDefaultBid } from '../../../index.js';
+import { getModuleInfo, getRequestedBusinessIds } from './accessRightsUtils.js';
+
+export const mock = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'ABC,1'
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A', 'XYZ': 'A' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } })
+            }
+        }
+    },
+    body: { number: 'B201', businessId: 'ABC', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
+};
+export const mock2NoAuth = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'ABC,1'
+    },
+    body: JSON.stringify({ number: 'B201', businessId: 'ABC', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] })
+};
+export const mockSystem = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'ABC,1'
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A', 'XYZ': 'A' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: false } }),
+                'custom:SYSTEM': JSON.stringify('true')
+            }
+        }
+    },
+    body: { number: 'B201', businessId: 'ABC', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
+};
+
+export const mockNOAccess = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'XYZ'
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } })
+            }
+        }
+    },
+    body: { number: 'B201', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
+};
+export const mockNoneRequested = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: ''
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } })
+            }
+        }
+    },
+    body: { number: 'B201', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
+};
+export const mockNoneRequestedSystem = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'DUCK'
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } }),
+                'custom:SYSTEM': JSON.stringify('true')
+            }
+        }
+    },
+    body: { number: 'B201', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
+};
+
+export const mock2 = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: '2'
+    },
+    body: { number: 'B201', taxRate: { rate: .325, name: 'name', agency: 'agency', ref: '' }, defaultLocationId: 1, uoms: [{ name: 'EA', conversion: 1 }] }
+};
+export const mock3 = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'ABC'
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'R', 'XYZ': 'R' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } })
+            }
+        }
+    },
+    body: { businessId: 'ABC' }
+};
+
+export const mock4 = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'ALPHA'
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'R', 'XYZ': 'R' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } }),
+                'custom:SYSTEM': JSON.stringify('true')
+            }
+        }
+    },
+    body: { businessId: 'ALPHA' }
+};
+export const mock5 = {
+    pathParameters: {
+        id: 1
+    },
+    queryStringParameters: {
+        businessIds: 'ALPHA'
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'R', 'XYZ': 'R' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } }),
+                'custom:SYSTEM': JSON.stringify('true')
+            }
+        }
+    },
+    body: { businessId: 'DOG' }
+};
+export const mock6 = {
+    pathParameters: {
+        id: 1
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'R', 'XYZ': 'R' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } }),
+                'custom:SYSTEM': JSON.stringify('true')
+            }
+        }
+    },
+    body: { businessId: 'DOG' }
+};
+export const mock7 = {
+    pathParameters: {
+        id: 1
+    },
+    requestContext: {
+        authorizer: {
+            claims: {
+                'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'R', 'XYZ': 'R' } }),
+                'custom:DBI': JSON.stringify({ defaultBid: 'spam' }),
+                'custom:MOD': JSON.stringify({ module: { part: true } }),
+                'custom:SYSTEM': JSON.stringify('true')
+            }
+        }
+    },
+    body: null
+};
+
+describe('accessRightsUtils', () => {
+    describe('getRequestedBusinessIds', () => {
+        it('should get bid from query', () => {
+            const r = getRequestedBusinessIds(mock5);
+
+            expect(r).toEqual(['ALPHA']);
+        });
+        it('should get bid from body', () => {
+            const r = getRequestedBusinessIds(mock6);
+
+            expect(r).toEqual(['DOG']);
+        });
+        it('returns [] if no bids found', () => {
+            const r = getRequestedBusinessIds(mock7);
+
+            expect(r).toEqual([]);
+        });
+    });
+
+    describe('accessRightsUtils', () => {
+        it('should return access of request query stings if they are granted in JWT', () => {
+            const result = accessRightsUtils(mock);
+            expect(result).toEqual(['ABC']);
+        });
+        it('should return access 2', () => {
+            const result = accessRightsUtils(mock2);
+            expect(result).toEqual([]);
+        });
+        it('should not return access', () => {
+            const result = accessRightsUtils(mockNOAccess);
+            expect(result).toEqual([]);
+        });
+        it('should return access for all if not requested in list', () => {
+            const result = accessRightsUtils(mockNoneRequested);
+            expect(result).toEqual(['ABC']);
+        });
+        it('should return access for all if not requested in list', () => {
+            const result = accessRightsUtils(mockNoneRequestedSystem);
+            expect(result).toEqual(['DUCK']);
+        });
+    });
+    describe('userDefaultBid', () => {
+        it('should return defaultBid', () => {
+            const result = userDefaultBid(mock);
+            expect(result).toEqual('spam');
+        });
+        it('should return defaultBid', () => {
+            const result = userDefaultBid(mock2);
+            expect(result).toEqual('1');
+        });
+    });
+    describe('getModuleInfo', () => {
+        it('should return default module list', () => {
+            const result = getModuleInfo(mock);
+            expect(result).toEqual({ part: true });
+        });
+        it('should return empty module', () => {
+            const result = getModuleInfo(mock2);
+            expect(result).toEqual({});
+        });
+    });
+    describe('checkModule', () => {
+        it('all system users all access', () => {
+            checkModule('part', mockSystem);
+        });
+        it('check for module access', () => {
+            checkModule('part', mock);
+        });
+        it('should throw', () => {
+            try {
+                checkModule('span', mock);
+            } catch (e) {
+                expect(e).toEqual({ message: 'UNAUTHORIZED', errorCode: '4111', statusCode: 401 });
+            }
+        });
+    });
+    describe('checkWriteAccess', () => {
+        it('check for write access', () => {
+            const result = checkWriteAccess(mock);
+            expect(result).toEqual('ABC');
+        });
+        it('should throw if no access', () => {
+            try {
+                checkWriteAccess({});
+            } catch (e) {
+                expect(e).toEqual({ message: 'UNAUTHORIZED', errorCode: '4111', statusCode: 401 });
+            }
+        });
+        it('should throw if read only', () => {
+            try {
+                checkWriteAccess(mock3);
+            } catch (e) {
+                expect(e).toEqual({ message: 'UNAUTHORIZED', errorCode: '4111', statusCode: 401 });
+            }
+        });
+        it('return businessId in body if is a system uer', () => {
+            const v = checkWriteAccess(mock4);
+            expect(v).toEqual('ALPHA');
+
+        });
+    });
+});
+
+describe('special env cases', () => {
+    beforeEach(() => {
+        process.env.BUILD_ENV = 'local';
+    });
+    afterEach(() => {
+        process.env.BUILD_ENV = 'test';
+    });
+    it('should return localBidList and support use cognito bid option', () => {
+        const event = {
+            requestContext: {
+                authorizer: {
+                    claims: {
+                        'custom:AR': JSON.stringify({ businessIds: { 'ABC': 'A', 'XYZ': 'A' } })
+                    }
+                }
+            }
+        };
+        const result = accessRightsUtils(event, { useCognitoBid: true });
+        expect(result).toEqual(['ABC', 'XYZ']);
+    });
+    it('should return localBidList if no claims and support use cognito bid option', () => {
+        const event = {
+            requestContext: {
+                authorizer: {
+                    claims: {}
+                }
+            }
+        };
+        const result = accessRightsUtils(event, { useCognitoBid: true });
+        expect(result).toEqual(['1']);
+    });
+    describe('getBusinessesInfo', () => {
+        it('should handle local', () => {
+            const result = getBusinessesInfo(mock);
+            expect(result).toEqual({ '1': 'A', ABC: 'A', XYZ: 'A' });
+        });
+        it('should handle local v2', () => {
+            const result = getBusinessesInfo(mock2NoAuth);
+            expect(result).toEqual({ '1': 'A', ABC: 'A' });
+        });
+    });
+    it('should return localBidList no options', () => {
+        const event = {
+            requestContext: {
+                authorizer: {
+                    claims: null,
+                    custom: {
+                        AR: null
+                    }
+                }
+            }
+        };
+        const result = accessRightsUtils(event);
+        expect(result).toEqual(['1']);
+    });
+    it('not prod or stg', () => {
+        const result = accessRightsUtils({});
+        expect(result).toEqual(['1']);
+    });
+});

package/src/database/dbUtils/queryStringUtils/createFilters.js

@@ -11,8 +11,9 @@ import { accessRightsUtils } from './accessRightsUtils.js';
  * @param {object} objectFilters - the default filters object created by createDefaultFilters
  * @returns {object} An sequelize where object
  */
-export const createFilters = function (event, objectFilters){
+export const createFilters = function (event, objectFilters) {
     let query = _.get(event, 'queryStringParameters', {}) || {};
+    const searchString = _.get(query, 'searchString');
     const startDate = _.get(query, 'startDate');
     const endDate = _.get(query, 'endDate');
     const where = Object.keys(query).reduce((acc, item) => {
@@ -86,6 +87,40 @@ export const createFilters = function (event, objectFilters){
         filterAdds.createdAt = dates;
     }
 
+    if (searchString) {
+        const adds = Object.keys(objectFilters).reduce((acc, item) => {
+            const type = objectFilters[item].filterType;
+            const dataType = objectFilters[item].type;
+
+            if (type === DB.Op.iLike) {
+                const newOr = {};
+                const itemName = item.includes('.')
+                    ? `$${item}$`
+                    : item;
+                newOr[itemName] = {
+                    [DB.Op.iLike]: `%${query['searchString']}%`
+                };
+                acc.push(newOr);
+            }
+
+            if (!_.isNaN(Number(query['searchString'])) && !(dataType instanceof DB.BOOLEAN)) {
+
+                if (type === DB.Op.eq) {
+                    const newOr = {};
+                    const itemName = item.includes('.') ? `$${item}$` : item;
+                    newOr[itemName] = {
+                        [DB.Op.eq]: `${query['searchString']}`
+                    };
+                    acc.push(newOr);
+                }
+            }
+
+            return acc;
+        }, []);
+
+        filterAdds[DB.Op.or] = adds;
+    }
+
     const withDate = Object.assign(where, filterAdds);
 
     return withDate;