ToolJet/server/test/controllers/users.e2e-spec.ts

/* eslint-disable @typescript-eslint/no-unused-vars */
import * as request from 'supertest';
import { INestApplication } from '@nestjs/common';
import { authHeaderForUser, clearDB, createUser, createNestAppInstance } from '../test.helper';

describe('users controller', () => {
  let app: INestApplication;

  beforeEach(async () => {
    await clearDB();
  });

  beforeAll(async () => {
    app = await createNestAppInstance();
  });

  describe('update user', () => {
    it('should allow users to update their firstName, lastName and password', async () => {
      const userData = await createUser(app, { email: 'admin@tooljet.io', role: 'admin' });
      const { user } = userData;

      const [firstName, lastName] = ['Daenerys', 'Targaryen', 'drogo666'];

      const response = await request(app.getHttpServer())
        .patch('/users/update')
        .set('Authorization', authHeaderForUser(user))
        .send({ firstName, lastName });

      expect(response.statusCode).toBe(200);

      await user.reload();

      expect(user.firstName).toEqual(firstName);
      expect(user.lastName).toEqual(lastName);
    });
  });

  describe('change password', () => {
    it('should allow users to update their password', async () => {
      const userData = await createUser(app, { email: 'admin@tooljet.io', role: 'admin' });
      const { user, orgUser } = userData;

      const oldPassword = user.password;

      const response = await request(app.getHttpServer())
        .patch('/users/change_password')
        .set('Authorization', authHeaderForUser(user))
        .send({ currentPassword: 'password', newPassword: 'new password' });

      expect(response.statusCode).toBe(200);

      await user.reload();

      expect(user.password).not.toEqual(oldPassword);
    });

    it('should not allow users to update their password if entered current password is wrong', async () => {
      const userData = await createUser(app, { email: 'admin@tooljet.io', role: 'admin' });
      const { user, orgUser } = userData;

      const oldPassword = user.password;

      const response = await request(app.getHttpServer())
        .patch('/users/change_password')
        .set('Authorization', authHeaderForUser(user))
        .send({ currentPassword: 'wrong password', newPassword: 'new password' });

      expect(response.statusCode).toBe(403);

      await user.reload();

      expect(user.password).toEqual(oldPassword);
    });
  });

  afterAll(async () => {
    await app.close();
  });
});