49 lines
3.0 KiB
JavaScript
49 lines
3.0 KiB
JavaScript
import { test, after } from 'node:test'
|
|
import assert from 'node:assert/strict'
|
|
import { startAppwriteMock } from './support/appwriteMock.js'
|
|
import { startFakeStripe } from './support/fakeStripe.js'
|
|
import { useTestEnv } from './support/testEnv.js'
|
|
import { schemaKeys } from './support/schema.js'
|
|
|
|
// /api/auth/me meldet in beiden Antworten mit authenticated: true das Feld ansicht ('neu' | 'alt') nach dem Pilot-Schalter
|
|
const aw = await startAppwriteMock({ schema: { customerViewLog: schemaKeys('customerViewLog') } })
|
|
const st = await startFakeStripe()
|
|
useTestEnv({ appwriteUrl: aw.url, stripeUrl: st.url })
|
|
const { config } = await import('../server/config.js')
|
|
const { startTestApp, rawGet } = await import('./support/testApp.js')
|
|
const { customers, customerCookie, kundenansichtCookie, adminCookie, seedFixtures } = await import('./support/fixtures.js')
|
|
const { kundenansichtGuard } = await import('../server/middleware/kundenansichtGuard.js')
|
|
const { default: authRoutes } = await import('../server/routes/auth.js')
|
|
const app = await startTestApp({ '/': kundenansichtGuard, '/api/auth': authRoutes })
|
|
after(() => Promise.all([app.close(), aw.close(), st.close()]))
|
|
|
|
seedFixtures(aw)
|
|
// /me prueft bei Kunden Status und Portalzugang
|
|
for (const id of ['c1', 'c2']) {
|
|
aw.seed('customers', { ...customers[id], customerStatus: 'active' })
|
|
aw.seed('customerPortalAccess', { $id: `pa_${id}`, customerId: id, enabled: true })
|
|
}
|
|
|
|
const stelle = (mode, pilotEmails = []) => Object.assign(config.kundenansichtNeu, { mode, pilotEmails })
|
|
const me = async (cookie) => (await rawGet('/api/auth/me', { cookie })).body
|
|
const ansichtVon = async (cookie) => (await me(cookie)).ansicht
|
|
|
|
test('Kunde: Pilot-Liste, off mit Stern, on', async () => {
|
|
const f = [['pilot', ['k@example.invalid'], customerCookie('c1'), 'neu'], ['pilot', ['k@example.invalid'], customerCookie('c2'), 'alt'],
|
|
['off', ['*'], customerCookie('c1'), 'alt'], ['on', [], customerCookie('c2'), 'neu']]
|
|
for (const [modus, liste, cookie, soll] of f) { stelle(modus, liste); assert.equal(await ansichtVon(cookie), soll, `${modus} ${liste}`) }
|
|
})
|
|
test('Mitarbeiter-Kundenansicht: im Pilot neu, mit off alt; viewAs und viewId bleiben', async () => {
|
|
stelle('pilot', []); const b = await me(kundenansichtCookie({ viewId: 'c'.repeat(32) }))
|
|
assert.deepEqual([b.authenticated, b.viewAs, b.viewId, b.ansicht], [true, true, 'c'.repeat(32), 'neu'])
|
|
stelle('off', ['*']); assert.equal(await ansichtVon(kundenansichtCookie()), 'alt')
|
|
})
|
|
test('Spitzenschlüssel bleiben; unauthentifizierte Antworten tragen kein ansicht', async () => {
|
|
stelle('on')
|
|
assert.deepEqual(Object.keys(await me(customerCookie('c1'))).sort(), ['ansicht', 'authenticated', 'customer', 'role']) // customer darf wachsen (P5)
|
|
assert.deepEqual(await me(), { authenticated: false })
|
|
const abgelaufen = await me(kundenansichtCookie({ viewExpiresAt: Date.now() - 1000 }))
|
|
const alt = await me(adminCookie())
|
|
assert.deepEqual([abgelaufen.reason, 'ansicht' in abgelaufen, alt.reason, 'ansicht' in alt], ['view_expired', false, 'staff', false])
|
|
})
|