spec-3nweb-server 1.8.5 → 1.8.7

package/build/asmail/routes/delivery/sender-authorization.js

@@ -18,6 +18,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authorize = void 0;
 const delivery_1 = require("../../../lib-common/service-api/asmail/delivery");
+const utils_1 = require("../../resources/utils");
 /**
  * This creates an authorize-sender route handler.
  * @param relyingPartyDomain at which this service operates, as seen by client
@@ -28,8 +29,7 @@ const delivery_1 = require("../../../lib-common/service-api/asmail/delivery");
 function authorize(relyingPartyDomain, midAuthorizingFunc) {
     return async (req, res, next) => {
         if (req.session.isAuthorized) {
-            res.status(delivery_1.ERR_SC.duplicateReq).send("This protocol request has already been served.");
-            return;
+            return (0, utils_1.replyWithErr)(delivery_1.ERR_SC.duplicateReq, "This protocol request has already been served.", res);
         }
         const rb = req.body;
         const sender = req.session.params.sender;
@@ -37,12 +37,12 @@ function authorize(relyingPartyDomain, midAuthorizingFunc) {
         if (!sender) {
             // This case must be rejected, because place for authorizing
             // anonymous connection is at the session start.
-            res.status(delivery_1.authSender.SC.authFailed).send("Server is not accepting provided credentials.");
+            (0, utils_1.replyWithErr)(delivery_1.authSender.SC.authFailed, "Server is not accepting provided credentials.", res);
             req.session.close();
             return;
         }
         if (!rb.assertion || !rb.userCert || !rb.provCert) {
-            res.status(delivery_1.ERR_SC.malformed).send("No credentials given.");
+            (0, utils_1.replyWithErr)(delivery_1.ERR_SC.malformed, "No credentials given.", res);
             req.session.close();
             return;
         }
@@ -53,7 +53,7 @@ function authorize(relyingPartyDomain, midAuthorizingFunc) {
                 res.status(delivery_1.authSender.SC.ok).send();
             }
             else {
-                res.status(delivery_1.authSender.SC.authFailed).send("Server is not accepting provided credentials.");
+                (0, utils_1.replyWithErr)(delivery_1.authSender.SC.authFailed, "Server is not accepting provided credentials.", res);
                 req.session.close();
             }
         }

package/build/asmail/routes/delivery/start-session.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- Copyright (C) 2015 - 2016, 2025 3NSoft Inc.
+ Copyright (C) 2015 - 2016, 2025 - 2026  3NSoft Inc.
  
  This program is free software: you can redistribute it and/or modify it under
  the terms of the GNU General Public License as published by the Free Software
@@ -20,6 +20,7 @@ exports.startSession = void 0;
 const recipients_1 = require("../../resources/recipients");
 const delivery_1 = require("../../../lib-common/service-api/asmail/delivery");
 const canonical_address_1 = require("../../../lib-common/canonical-address");
+const utils_1 = require("../../resources/utils");
 /**
  * This creates a start-session route handler.
  * @param allowedMsgSizeFunc is a function returning promises, that
@@ -55,14 +56,10 @@ function startSession(allowedMsgSizeFunc, sessionGenFunc, redirectFunc) {
             });
         }
         else if (msgSize === 0) {
-            res.status(delivery_1.sessionStart.SC.senderNotAllowed).json({
-                error: `${sender ? sender : "Anonymous sender "} is not allowed to leave mail for ${recipient}`
-            });
+            (0, utils_1.replyWithErr)(delivery_1.sessionStart.SC.senderNotAllowed, `${sender ? sender : "Anonymous sender "} is not allowed to leave mail for ${recipient}`, res);
         }
         else if (msgSize === -1) {
-            res.status(delivery_1.sessionStart.SC.inboxFull).json({
-                error: `Mail box for ${recipient} is full.`
-            });
+            (0, utils_1.replyWithErr)(delivery_1.sessionStart.SC.inboxFull, `Mail box for ${recipient} is full.`, res);
         }
         else {
             throw new Error(`Unrecognized code ${msgSize} for message size limits.`);
@@ -76,34 +73,24 @@ function startSession(allowedMsgSizeFunc, sessionGenFunc, redirectFunc) {
         const session = req.session;
         // already existing session indicates repeated call, which should be bounced off
         if (session) {
-            res.status(delivery_1.ERR_SC.duplicateReq).json({
-                error: "This protocol request has already been served."
-            });
+            (0, utils_1.replyWithErr)(delivery_1.ERR_SC.duplicateReq, "This protocol request has already been served.", res);
             return;
         }
         // missing recipient makes a bad request
         if (!recipient) {
-            res.status(delivery_1.ERR_SC.malformed).json({
-                error: "Recipient is either missing in the request, or is malformed"
-            });
+            (0, utils_1.replyWithErr)(delivery_1.ERR_SC.malformed, "Recipient is either missing in the request, or is malformed", res);
             return;
         }
         // if sender is given, we canonicalize the address
         if (sender) {
             sender = (0, canonical_address_1.checkAndTransformAddress)(sender);
             if (!sender) {
-                res.status(delivery_1.ERR_SC.malformed).json({
-                    error: "Sender field is malformed"
-                });
-                return;
+                return (0, utils_1.replyWithErr)(delivery_1.ERR_SC.malformed, "Sender field is malformed", res);
             }
         }
         // check invitation field
         if ((invitation !== undefined) && (typeof invitation !== 'string')) {
-            res.status(delivery_1.ERR_SC.malformed).json({
-                error: "Inviation field is malformed"
-            });
-            return;
+            return (0, utils_1.replyWithErr)(delivery_1.ERR_SC.malformed, "Inviation field is malformed", res);
         }
         try {
             if (redirectFunc) {
@@ -123,9 +110,7 @@ function startSession(allowedMsgSizeFunc, sessionGenFunc, redirectFunc) {
         }
         catch (err) {
             if (err === recipients_1.SC.USER_UNKNOWN) {
-                res.status(delivery_1.sessionStart.SC.unknownRecipient).json({
-                    error: `Recipient ${recipient} is unknown.`
-                });
+                (0, utils_1.replyWithErr)(delivery_1.sessionStart.SC.unknownRecipient, `Recipient ${recipient} is unknown.`, res);
             }
             else {
                 next(err);

package/build/asmail/routes/retrieval/get-message-meta.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- Copyright (C) 2015 - 2016, 2025 3NSoft Inc.
+ Copyright (C) 2015 - 2016, 2025 - 2026 3NSoft Inc.
  
  This program is free software: you can redistribute it and/or modify it under
  the terms of the GNU General Public License as published by the Free Software
@@ -19,6 +19,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getMsgMeta = void 0;
 const recipients_1 = require("../../resources/recipients");
 const retrieval_1 = require("../../../lib-common/service-api/asmail/retrieval");
+const utils_1 = require("../../resources/utils");
 function getMsgMeta(getMsgMetaFunc) {
     return async (req, res, next) => {
         const userId = req.session.params.userId;
@@ -32,14 +33,10 @@ function getMsgMeta(getMsgMetaFunc) {
                 next(err);
             }
             else if (err === recipients_1.SC.MSG_UNKNOWN) {
-                res.status(retrieval_1.msgMetadata.SC.unknownMsg).json({
-                    error: "Message " + msgId + " is unknown."
-                });
+                (0, utils_1.replyWithErr)(retrieval_1.msgMetadata.SC.unknownMsg, "Message " + msgId + " is unknown.", res);
             }
             else if (err === recipients_1.SC.USER_UNKNOWN) {
-                res.status(retrieval_1.ERR_SC.server).json({
-                    error: "Recipient disappeared from the system."
-                });
+                (0, utils_1.replyWithErr)(retrieval_1.ERR_SC.server, "Recipient disappeared from the system.", res);
                 req.session.close();
             }
             else {

package/build/asmail/routes/retrieval/get-message-obj.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- Copyright (C) 2015 - 2017, 2025 3NSoft Inc.
+ Copyright (C) 2015 - 2017, 2025 - 2026 3NSoft Inc.
  
  This program is free software: you can redistribute it and/or modify it under
  the terms of the GNU General Public License as published by the Free Software
@@ -21,6 +21,7 @@ const recipients_1 = require("../../resources/recipients");
 const retrieval_1 = require("../../../lib-common/service-api/asmail/retrieval");
 const error_1 = require("../../../lib-common/exceptions/error");
 const buffer_utils_1 = require("../../../lib-common/buffer-utils");
+const utils_1 = require("../../resources/utils");
 function extractQueryOptions(req) {
     // query fields are string or undefined, yet, type info helps the show
     const query = req.query;
@@ -41,11 +42,13 @@ function getMsgObj(getMsgObjFunc) {
     return async (req, res, next) => {
         const userId = req.session.params.userId;
         const msgId = req.params.msgId;
-        const objId = req.params.objId;
+        const { objId, objIdParseErr } = (0, utils_1.getObjIdFromParams)(req);
+        if (objIdParseErr) {
+            return (0, utils_1.replyWithErr)(retrieval_1.ERR_SC.malformed, objIdParseErr, res);
+        }
         const opts = extractQueryOptions(req);
         if (!opts) {
-            res.status(retrieval_1.ERR_SC.malformed).send("Bad query parameters");
-            return;
+            return (0, utils_1.replyWithErr)(retrieval_1.ERR_SC.malformed, "Bad query parameters", res);
         }
         try {
             const reader = await getMsgObjFunc(userId, msgId, objId, opts.header, opts.ofs, opts.limit);
@@ -76,13 +79,13 @@ function getMsgObj(getMsgObjFunc) {
                 next(err);
             }
             else if (err === recipients_1.SC.OBJ_UNKNOWN) {
-                res.status(retrieval_1.msgObj.SC.unknownMsgOrObj).send(`Object ${objId} is unknown.`);
+                (0, utils_1.replyWithErr)(retrieval_1.msgObj.SC.unknownMsgOrObj, `Object ${objId} is unknown.`, res);
             }
             else if (err === recipients_1.SC.MSG_UNKNOWN) {
-                res.status(retrieval_1.msgObj.SC.unknownMsgOrObj).send(`Message ${msgId} is unknown.`);
+                (0, utils_1.replyWithErr)(retrieval_1.msgObj.SC.unknownMsgOrObj, `Message ${msgId} is unknown.`, res);
             }
             else if (err === recipients_1.SC.USER_UNKNOWN) {
-                res.status(retrieval_1.ERR_SC.server).send(`Recipient disappeared from the system.`);
+                (0, utils_1.replyWithErr)(retrieval_1.ERR_SC.server, `Recipient disappeared from the system.`, res);
                 req.session.close();
             }
             else {

package/build/asmail/routes/retrieval/list-messages.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- Copyright (C) 2015 - 2016, 2025 3NSoft Inc.
+ Copyright (C) 2015 - 2016, 2025 - 2026 3NSoft Inc.
  
  This program is free software: you can redistribute it and/or modify it under
  the terms of the GNU General Public License as published by the Free Software
@@ -19,13 +19,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.listMsgIds = void 0;
 const recipients_1 = require("../../resources/recipients");
 const retrieval_1 = require("../../../lib-common/service-api/asmail/retrieval");
+const utils_1 = require("../../resources/utils");
 function listMsgIds(listMsgIdsFunc) {
     return async (req, res, next) => {
         const userId = req.session.params.userId;
         const opts = extractQueryOptions(req);
         if (!opts) {
-            res.status(retrieval_1.ERR_SC.malformed).send("Bad query parameters");
-            return;
+            return (0, utils_1.replyWithErr)(retrieval_1.ERR_SC.malformed, "Bad query parameters", res);
         }
         try {
             const { from, to } = opts;
@@ -37,7 +37,7 @@ function listMsgIds(listMsgIdsFunc) {
                 next(err);
             }
             else if (err === recipients_1.SC.USER_UNKNOWN) {
-                res.status(retrieval_1.ERR_SC.server).send("Recipient disappeared from the system.");
+                (0, utils_1.replyWithErr)(retrieval_1.ERR_SC.server, "Recipient disappeared from the system.", res);
                 req.session.close();
             }
             else {

package/build/asmail/routes/retrieval/remove-message.js

@@ -19,6 +19,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.deleteMsg = void 0;
 const recipients_1 = require("../../resources/recipients");
 const retrieval_1 = require("../../../lib-common/service-api/asmail/retrieval");
+const utils_1 = require("../../resources/utils");
 function deleteMsg(delMsgFunc) {
     return async (req, res, next) => {
         const userId = req.session.params.userId;
@@ -32,10 +33,10 @@ function deleteMsg(delMsgFunc) {
                 next(err);
             }
             else if (err === recipients_1.SC.MSG_UNKNOWN) {
-                res.status(retrieval_1.rmMsg.SC.unknownMsg).send("Message " + msgId + " is unknown.");
+                (0, utils_1.replyWithErr)(retrieval_1.rmMsg.SC.unknownMsg, "Message " + msgId + " is unknown.", res);
             }
             else if (err === recipients_1.SC.USER_UNKNOWN) {
-                res.status(retrieval_1.ERR_SC.server).send("Recipient disappeared from the system.");
+                (0, utils_1.replyWithErr)(retrieval_1.ERR_SC.server, "Recipient disappeared from the system.", res);
                 req.session.close();
             }
             else {

package/build/mock/tls-options.js

@@ -19,52 +19,54 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.sslOpts = void 0;
 exports.sslOpts = {
     key: `-----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDNSnmGLUwA7Qf9
-D2cqOq4fvhRcO07/C5PLjbEzIg311caqfU7bUlit90vBFB7TvHg/cKORTXPJb/SQ
-D9pR+Sq2zXKjweScUwdza0f+12D3bAbD1ntHQD+4Fh2QaR34LRP1yaPKI5u2kBwb
-6R0qaAuaj3VQ1ttVz7zEwERBtSWJD8r8kj9TGKqNC82LPdcGsFeNsobNE30K/3z8
-uqEyLm+AN6FJ1u9ahLxdA3Fn9kLVtOrmskpFcZY9ECauK+DUwWVYI7t9+37EwCcl
-ENsw+i2dPUHoPVPsOqsW2aXAH2meSx0jE2sjdccgFA86nHfuBdx+0o3MoIe12ZbF
-/v64nvS9AgMBAAECggEAV0hK0tl/bwVYWCesXTAFyEkwruYoeBecBvd/V5YrCVKS
-3PnaBTXFrnFuK/E6ChwfpBln8edUS1jmSjnzQNcHaiF/lFBjunMyv8flHFzGRWwQ
-lEMktu6CKOp+N1/59gJ0chQBJ3hsQ/qReOxsEhOam2RTJMO1DY79W0nDu4whIVxp
-wMpn/RlSdOkBwDzVvnazpZPLOFiUDcd+MNfR1Z0gzgMxfwQvvXseHe21x8qwpBFD
-L1D6jfu1D8ku03TiKq2MHjS7p8oFKeGFo7p3G8LJG5yrzrP8fqCRE6E5zsunFo48
-zgZwt0kuKcM8Fy5X5MSs8q67TS4sWPTULzUG/suaAQKBgQD8dXGHvY47KbB3+4xa
-SLrtXry1AQho/iJ8skm02C9XRZLopS6fdzC95GSRTRZa8mAjCOrnxwXKYyjUqWGt
-vDJqKRn1IOfwXmvdJ7Wp94N/b0i5WBkxNhR99JXyPmvGt0R7Ym6bDh7YIdGp5Je4
-t1oaWizkyr5t3cKxkNaz8tqUrQKBgQDQK6fgTr+UX/GnWu7zom3JxHbN7+BVoJC+
-zKCsbiUbzT0qG066J0oJ2qJejDUDwYD2BNevPLppxTFY9WTwSeEqQz4pxHBEfxxc
-K129HGnrkQ2s/Ow/DvbFiLO9D7oM3nN0SlpLqFJmZ0cem2FKsAz7oD10tohFJL0t
-pDRc0YDSUQKBgQCcxHETUWoY4vJqDxJAnhk1fTbBTzrht63CsROD8Rq0nsdzH9+r
-tl/WCxVIBQ50uz1nhAoak0PNQXYBWI0HTW4g7hToWt6sLHXehuIQAVrurzQBo+tA
-28wtysux+YEDjJpB5AW60zHkFFwVm5V7Zp/U7VojWKKXprVXfhFU/OEuoQKBgQCg
-ne5rjZcX3mdP30ObS+o10ZZxEvIeX0MPVEdsg5eyOctFn8hArWvc6op5NOj6uuTL
-7bSVCuAyF+oZX03AcOCAgV2HUH/m+cRiATvUXAYFsefBX2zQwrT4eJ9l8qp0n3ap
-dWzyDy90v58KKI0K2YdK5rpEQUonP0+P1bBpJWSl4QKBgCs0tN/qzx9IzoOwZwVQ
-UASKANPksnyfD7f/YrV82mCHX4GcKtqkf/nneM3kajU0UhR9iZ0lfftIQ4Es0um2
-CMvkrvDxiv0YpIOluhCIrEPN/p+yn/uQ2hf5pSuQ4AL78sONub8sKixcutw3V8Gh
-ekdV13TrfP1PK28L4KE47V4p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 -----END PRIVATE KEY-----`,
     cert: `-----BEGIN CERTIFICATE-----
-MIIDRTCCAi2gAwIBAgIJAMt7Y3ydmYQ3MA0GCSqGSIb3DQEBCwUAMDkxCzAJBgNV
-BAYTAiAgMQowCAYDVQQIDAEgMQowCAYDVQQKDAEgMRIwEAYDVQQDDAlsb2NhbGhv
-c3QwHhcNMTYwNjExMjIwMDE4WhcNMjYwNjA5MjIwMDE4WjA5MQswCQYDVQQGEwIg
-IDEKMAgGA1UECAwBIDEKMAgGA1UECgwBIDESMBAGA1UEAwwJbG9jYWxob3N0MIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUp5hi1MAO0H/Q9nKjquH74U
-XDtO/wuTy42xMyIN9dXGqn1O21JYrfdLwRQe07x4P3CjkU1zyW/0kA/aUfkqts1y
-o8HknFMHc2tH/tdg92wGw9Z7R0A/uBYdkGkd+C0T9cmjyiObtpAcG+kdKmgLmo91
-UNbbVc+8xMBEQbUliQ/K/JI/UxiqjQvNiz3XBrBXjbKGzRN9Cv98/LqhMi5vgDeh
-SdbvWoS8XQNxZ/ZC1bTq5rJKRXGWPRAmrivg1MFlWCO7fft+xMAnJRDbMPotnT1B
-6D1T7DqrFtmlwB9pnksdIxNrI3XHIBQPOpx37gXcftKNzKCHtdmWxf7+uJ70vQID
-AQABo1AwTjAdBgNVHQ4EFgQUWi2JgyaWzw0xNLoGjdlzaj1EzAIwHwYDVR0jBBgw
-FoAUWi2JgyaWzw0xNLoGjdlzaj1EzAIwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0B
-AQsFAAOCAQEALuiVV78gNhaiDyWuwzDsbRrXVLXd7kOLLXhE/JBEUaQC7pJGKLVe
-Vdq8XS41+6/gIPq+Q5EF7Ci9Krct5Zmnvd/6cbvN1CT1E8efjwvMhQFSi3QbUpbT
-y/IIkOQk3mqBXced0Wj7V7drqb9Q2U6bRZ5WA/w6jtxMtQctAyvyFdffyaGQBPCe
-VMZHQcXuoAdQpr2WKlwIkTx34G7d+0Qv3NpbjBwKmwT56qNwb5cZ0YqMIg+TBoy0
-BvLR2f2eEfMj927ACiBdJ6d+1Mdl7+wZJKb+gPQPO3h2T90m+dGuWw+jZ9Qs9XLN
-YzorNrzZ9NOKKFrYjXHyXQByeGgoltk/8w==
+MIIDkzCCAnugAwIBAgIUW1eK6qpqDdf8KNVKEQNWToGnYxUwDQYJKoZIhvcNAQEL
+BQAwWTELMAkGA1UEBhMCQ0ExEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM
+GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDESMBAGA1UEAwwJbG9jYWxob3N0MB4X
+DTI2MDYxMDAxMzUzMloXDTM2MDYwNzAxMzUzMlowWTELMAkGA1UEBhMCQ0ExEzAR
+BgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5
+IEx0ZDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+MIIBCgKCAQEAoIERnkkm16D28giPeNy4PNPtFxaCcW4p5B/khGzWdyKbkkMmqGlk
+yBqo1x9rSDuw+x7a+11bKiLEFt9yvWcQBsKMLg13bkQ/0zNhZ7ezhym0CDiXoQ+i
+WYP6YOyMCb1D0aCx30+39zm7PYutwkISE8V4pg0dTAsP/psFyWm004m6bHSE++Df
+ldfd0kQykv6nJi5XfpS4aUe8mvGpWNB3YKcv/GoZk1XQms0CevR7jot9pgmXryCv
+1bljuGyAQCfUNAri/INxtf7/xeykVu/Pdx6JZAcWzYUP7EgXwNOo0dyWMMPzM1Ah
+0y0NkovS7gUA3pM3DF9hU7YXXoXjueMi/wIDAQABo1MwUTAdBgNVHQ4EFgQUK9jG
+K/xw9TJGdYq6u8hYdjqcPvowHwYDVR0jBBgwFoAUK9jGK/xw9TJGdYq6u8hYdjqc
+PvowDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEALe20I+WMlcMW
+GBoryo2OXvJ5Uu4AiImP5RbhgpDXry9FXiARwR/kx/oAY5o1flJ3jY3yO8fETDcD
+G6F6Tf/PKPlMDrWoFv7Vz/s4GjAyPFWPQJe3EiSjarah7x+hbRNPo7Xf+aCYI/p1
+MLsCVUreTeqA8qno2qbdtwUM3FcTEL/mdkA/d2/H0HIHwGV0A2hpyG8d+RpP2na+
+uwDNifryUwZd8bW2n3UoRtsralEW657sReywAa6iunk8220vjRq8LlceJh3952ov
+EEuI+hxj/ikVBSjQX8aFhX8kx4p4q/mKCOA5q3DCbmrr3Cn8fl0zRZZegrk9kfpV
+QGCnHRJ0yQ==
 -----END CERTIFICATE-----`
 };
 Object.freeze(exports);

package/build/tests/admin-proto/signup.d.ts

@@ -0,0 +1 @@
+export {};

package/build/tests/admin-proto/signup.js

@@ -0,0 +1,235 @@
+"use strict";
+/*
+ Copyright (C) 2016, 2020 - 2021, 2025 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+const async_jasmine_1 = require("../libs-for-tests/async-jasmine");
+const admin_1 = require("../libs-for-tests/server-components/admin");
+const xhr_utils_1 = require("../libs-for-tests/xhr-utils");
+const signupApi = require("../../lib-common/admin-api/signup");
+const requests_1 = require("../shared-checks/requests");
+const jwkeys_1 = require("../../lib-common/jwkeys");
+const ecma_nacl_1 = require("ecma-nacl");
+describe('Admin', () => {
+    describe('signup subsystem', () => {
+        let admin;
+        const signupDomains = ['first.org', 'second.org'];
+        (0, async_jasmine_1.beforeEachAsync)(async () => {
+            admin = new admin_1.AdminComponent(signupDomains);
+            await admin.start();
+        });
+        (0, async_jasmine_1.afterEachAsync)(async () => {
+            await admin.stop();
+            admin = undefined;
+        });
+        (0, async_jasmine_1.itAsync)('tells available addresses for a given name', async () => {
+            const REQ_SIZE_LIMIT = 1024;
+            const name = 'Bob Marley ';
+            const reqOpts = {
+                url: admin.signupUrl + signupApi.availableAddressesForName.URL_END,
+                method: 'POST',
+                responseType: 'json'
+            };
+            // request with ok name
+            let req = { name };
+            const rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+            expect(rep.status).withContext('status code for OK reply').toBe(signupApi.availableAddressesForName.SC.ok);
+            expect(Array.isArray(rep.data)).withContext('OK reply is an array').toBe(true);
+            expect(rep.data.length).withContext('with no users, all domains should used as options for available addresses').toBe(signupDomains.length);
+            for (const domain of signupDomains) {
+                expect(rep.data).toContain(name + '@' + domain);
+            }
+            // requests with bad names and with bad json's
+            const badNames = [name + '@something',
+                5, null, undefined, {}]; // non-strings
+            const badJSONs = [name, 5, null, undefined, [name],
+                { a: 1 }];
+            for (const badName of badNames) {
+                req = { name: badName };
+                badJSONs.push(req);
+            }
+            await (0, requests_1.expectNonAcceptanceOfBadJsonRequest)(reqOpts, REQ_SIZE_LIMIT, badJSONs);
+        });
+        (0, async_jasmine_1.itAsync)('tells available domains', async () => {
+            const REQ_SIZE_LIMIT = 1024;
+            const reqOpts = {
+                url: admin.signupUrl + signupApi.availableDomains.URL_END,
+                method: 'POST',
+                responseType: 'json'
+            };
+            const req = {};
+            const rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+            expect(rep.status).withContext('status code for OK reply').toBe(signupApi.availableDomains.SC.ok);
+            expect(Array.isArray(rep.data)).withContext('OK reply is an array').toBe(true);
+            expect(rep.data.length).withContext('with no token, all domains should be given as options').toBe(signupDomains.length);
+            for (const domain of signupDomains) {
+                expect(rep.data).toContain(domain);
+            }
+            // requests with bad json's
+            const badJSONs = [{ signupToken: 4 }];
+            await (0, requests_1.expectNonAcceptanceOfBadJsonRequest)(reqOpts, REQ_SIZE_LIMIT, badJSONs);
+        });
+        async function getAvailableAddressesFor(name) {
+            const reqOpts = {
+                url: admin.signupUrl + signupApi.availableAddressesForName.URL_END,
+                method: 'POST',
+                responseType: 'json'
+            };
+            const req = { name };
+            const rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+            expect(rep.status).toBe(signupApi.availableAddressesForName.SC.ok);
+            return rep.data;
+        }
+        function makeAddUserReq(userId, signupToken) {
+            return {
+                userId,
+                storage: {
+                    kdParams: {}
+                },
+                mailerId: {
+                    defaultPKey: {
+                        pkey: {
+                            alg: ecma_nacl_1.box.JWK_ALG_NAME,
+                            kid: (Buffer.alloc(12)).toString('base64'),
+                            use: jwkeys_1.use.MID_PKLOGIN,
+                            k: (Buffer.alloc(ecma_nacl_1.box.KEY_LENGTH)).toString('base64')
+                        },
+                        kdParams: {}
+                    },
+                    otherPKeys: [{
+                            alg: ecma_nacl_1.box.JWK_ALG_NAME,
+                            kid: (Buffer.alloc(12)).toString('base64'),
+                            use: jwkeys_1.use.MID_PKLOGIN,
+                            k: (Buffer.alloc(ecma_nacl_1.box.KEY_LENGTH)).toString('base64')
+                        }]
+                },
+                signupToken
+            };
+        }
+        function makeBadAddUserReq(goodId) {
+            const name = 'Bob Marley';
+            const badJSONs = [name, 5, null, undefined, [name],
+                { a: 1 }];
+            const badIds = ['bad domain str',
+                '', ' ', '\t', '\n',
+                5, null, undefined, {}]; // non-strings
+            for (const id of badIds) {
+                const req = makeAddUserReq(id);
+                badJSONs.push(req);
+            }
+            let req = makeAddUserReq(goodId);
+            delete req.userId;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.storage;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.storage.kdParams;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.defaultPKey;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.defaultPKey.pkey.alg;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.defaultPKey.pkey.k;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.defaultPKey.pkey.kid;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.defaultPKey.pkey.use;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.defaultPKey.kdParams;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.otherPKeys;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            req.mailerId.otherPKeys.shift();
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.otherPKeys[0].alg;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.otherPKeys[0].k;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.otherPKeys[0].kid;
+            badJSONs.push(req);
+            req = makeAddUserReq(goodId);
+            delete req.mailerId.otherPKeys[0].use;
+            badJSONs.push(req);
+            return badJSONs;
+        }
+        async function addNewUser(userId, signupToken) {
+            const reqOpts = {
+                url: admin.signupUrl + signupApi.addUser.URL_END,
+                method: 'POST'
+            };
+            const req = makeAddUserReq(userId, signupToken);
+            let rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+            expect(rep.status).withContext('status when user is added').toBe(signupApi.addUser.SC.ok);
+            rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+            expect(rep.status).withContext('status when user already exists').toBe(signupApi.addUser.SC.userAlreadyExists);
+        }
+        (0, async_jasmine_1.itAsync)('adds new user', async () => {
+            const REQ_SIZE_LIMIT = 4 * 1024;
+            const reqOpts = {
+                url: admin.signupUrl + signupApi.addUser.URL_END,
+                method: 'POST'
+            };
+            const name = 'Bob Marley ';
+            let addresses = await getAvailableAddressesFor(name);
+            let numOfAvailableAddresses = addresses.length;
+            expect(numOfAvailableAddresses).toBe(signupDomains.length);
+            // requests with bad json's
+            const badJSONs = makeBadAddUserReq(addresses[0]);
+            await (0, requests_1.expectNonAcceptanceOfBadJsonRequest)(reqOpts, REQ_SIZE_LIMIT, badJSONs);
+            // normal adding users
+            for (const userId of addresses) {
+                expect(addresses).toContain(userId);
+                await addNewUser(userId);
+                numOfAvailableAddresses -= 1;
+                addresses = await getAvailableAddressesFor(name);
+                expect(addresses.length).toBe(numOfAvailableAddresses);
+                expect(addresses).not.toContain(userId);
+            }
+        });
+        (0, async_jasmine_1.itAsync)(`adds new user with token`, async () => {
+            const reqOpts = {
+                url: admin.signupUrl + signupApi.addUser.URL_END,
+                method: 'POST'
+            };
+            // note that new id has other domain that isn't set anywhere
+            const userId = 'Pink Floyd @home.town';
+            // let's try to do this without any token
+            let req = makeAddUserReq(userId);
+            let rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+            expect(rep.status).withContext('status when no token given').toBe(signupApi.addUser.SC.unauthorized);
+            // create token, here setup code uses spec-server specific code
+            const token = await admin.createSingleUserSignupTokenFor(userId);
+            req = makeAddUserReq(userId, token);
+            rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+            expect(rep.status).withContext('status when user is added').toBe(signupApi.addUser.SC.ok);
+        });
+    });
+});

package/build/tests/jasmine.d.ts

@@ -0,0 +1 @@
+declare const jas: any;

package/build/tests/jasmine.js

@@ -0,0 +1,32 @@
+/*
+ Copyright (C) 2016 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+// NOTE: due to bad definition file, typescript below is not very type-strict.
+const jas = new (require('jasmine'))();
+jas.loadConfig({
+    spec_dir: 'build/tests',
+    spec_files: [
+        'admin-proto/**/*.js',
+        'protocols/mailerid.js',
+        'protocols/3nstorage/*.js',
+        'protocols/asmail/*.js',
+    ],
+    random: false
+});
+jas.configureDefaultReporter({
+    showColors: true
+});
+jas.execute();