37 lines
1.6 KiB
JavaScript
37 lines
1.6 KiB
JavaScript
import { test, after } from 'node:test'
|
|
import assert from 'node:assert/strict'
|
|
import { startAppwriteMock } from './support/appwriteMock.js'
|
|
import { startFakeStripe } from './support/fakeStripe.js'
|
|
import { useTestEnv } from './support/testEnv.js'
|
|
|
|
// Mitarbeiter-2FA per E-Mail-Code: Appwrite-Sitzung aus dem Login und offene Code-Anmeldungen
|
|
const aw = await startAppwriteMock()
|
|
const st = await startFakeStripe()
|
|
useTestEnv({ appwriteUrl: aw.url, stripeUrl: st.url })
|
|
const { loginWithAppwrite, appwriteSessionFetch } = await import('../server/services/appwriteClient.js')
|
|
after(() => Promise.all([aw.close(), st.close()]))
|
|
|
|
aw.addUser({ $id: 'u_staff', email: 'kenso@webklar.com', password: 'geheim-geheim', mfa: true, emailVerification: true })
|
|
|
|
test('loginWithAppwrite liefert die Appwrite-Sitzung', async () => {
|
|
const user = await loginWithAppwrite('kenso@webklar.com', 'geheim-geheim')
|
|
assert.equal(user.$id, 'u_staff')
|
|
assert.equal(user.sessionCookie, 'sess-u_staff')
|
|
})
|
|
|
|
test('appwriteSessionFetch schickt Sitzung und Sprache', async () => {
|
|
const before = aw.mailsSent('u_staff')
|
|
const challenge = await appwriteSessionFetch('/account/mfa/challenges', {
|
|
method: 'POST',
|
|
body: { factor: 'email' },
|
|
sessionCookie: 'sess-u_staff',
|
|
})
|
|
assert.match(challenge.$id, /^ch/)
|
|
assert.equal(aw.mailsSent('u_staff'), before + 1)
|
|
assert.equal(aw.lastLocale(), 'de')
|
|
await assert.rejects(
|
|
appwriteSessionFetch('/account/mfa/challenges', { method: 'PUT', body: { challengeId: challenge.$id, otp: '000000' }, sessionCookie: 'sess-u_staff' }),
|
|
(err) => err.status === 401 && err.type === 'user_invalid_token'
|
|
)
|
|
})
|