PeerTube/server/tests/api/check-params/users.ts

1155 lines
38 KiB
TypeScript
Raw Normal View History

2020-01-31 16:56:52 +01:00
/* eslint-disable @typescript-eslint/no-unused-expressions,@typescript-eslint/require-await */
2017-09-04 21:21:47 +02:00
import 'mocha'
import { omit } from 'lodash'
import { User, UserRole, VideoCreateResult } from '../../../../shared'
Resumable video uploads (#3933) * WIP: resumable video uploads relates to #324 * fix review comments * video upload: error handling * fix audio upload * fixes after self review * Update server/controllers/api/videos/index.ts Co-authored-by: Rigel Kent <par@rigelk.eu> * Update server/middlewares/validators/videos/videos.ts Co-authored-by: Rigel Kent <par@rigelk.eu> * Update server/controllers/api/videos/index.ts Co-authored-by: Rigel Kent <par@rigelk.eu> * update after code review * refactor upload route - restore multipart upload route - move resumable to dedicated upload-resumable route - move checks to middleware - do not leak internal fs structure in response * fix yarn.lock upon rebase * factorize addVideo for reuse in both endpoints * add resumable upload API to openapi spec * add initial test and test helper for resumable upload * typings for videoAddResumable middleware * avoid including aws and google packages via node-uploadx, by only including uploadx/core * rename ex-isAudioBg to more explicit name mentioning it is a preview file for audio * add video-upload-tmp-folder-cleaner job * stronger typing of video upload middleware * reduce dependency to @uploadx/core * add audio upload test * refactor resumable uploads cleanup from job to scheduler * refactor resumable uploads scheduler to compare to last execution time * make resumable upload validator to always cleanup on failure * move legacy upload request building outside of uploadVideo test helper * filter upload-resumable middlewares down to POST, PUT, DELETE also begin to type metadata * merge add duration functions * stronger typings and documentation for uploadx behaviour, move init validator up * refactor(client/video-edit): options > uploadxOptions * refactor(client/video-edit): remove obsolete else * scheduler/remove-dangling-resum: rename tag * refactor(server/video): add UploadVideoFiles type * refactor(mw/validators): restructure eslint disable * refactor(mw/validators/videos): rename import * refactor(client/vid-upload): rename html elem id * refactor(sched/remove-dangl): move fn to method * refactor(mw/async): add method typing * refactor(mw/vali/video): double quote > single * refactor(server/upload-resum): express use > all * proper http methud enum server/middlewares/async.ts * properly type http methods * factorize common video upload validation steps * add check for maximum partially uploaded file size * fix audioBg use * fix extname(filename) in addVideo * document parameters for uploadx's resumable protocol * clear META files in scheduler * last audio refactor before cramming preview in the initial POST form data * refactor as mulitpart/form-data initial post request this allows preview/thumbnail uploads alongside the initial request, and cleans up the upload form * Add more tests for resumable uploads * Refactor remove dangling resumable uploads * Prepare changelog * Add more resumable upload tests * Remove user quota check for resumable uploads * Fix upload error handler * Update nginx template for upload-resumable * Cleanup comment * Remove unused express methods * Prefer to use got instead of raw http * Don't retry on error 500 Co-authored-by: Rigel Kent <par@rigelk.eu> Co-authored-by: Rigel Kent <sendmemail@rigelk.eu> Co-authored-by: Chocobozzz <me@florianbigard.com>
2021-05-10 11:13:41 +02:00
import { HttpStatusCode } from '../../../../shared/core-utils/miscs/http-error-codes'
2017-09-04 21:21:47 +02:00
import {
addVideoChannel,
2019-04-24 12:02:04 +02:00
blockUser,
2021-06-14 16:52:22 +02:00
buildAbsoluteFixturePath,
2019-04-24 15:10:37 +02:00
cleanupTests,
2019-04-24 12:02:04 +02:00
createUser,
deleteMe,
flushAndRunServer,
getMyUserInformation,
getMyUserVideoRating,
2020-11-25 11:04:18 +01:00
getUserScopedTokens,
2019-04-24 12:02:04 +02:00
getUsersList,
immutableAssign,
killallServers,
2019-04-24 12:02:04 +02:00
makeGetRequest,
makePostBodyRequest,
makePutBodyRequest,
makeUploadRequest,
registerUser,
removeUser,
2020-11-25 11:04:18 +01:00
renewUserScopedTokens,
reRunServer,
2019-04-24 12:02:04 +02:00
ServerInfo,
setAccessTokensToServers,
unblockUser,
uploadVideo,
userLogin
} from '../../../../shared/extra-utils'
2021-07-06 10:36:54 +02:00
import { MockSmtpServer } from '../../../../shared/extra-utils/mock-servers/mock-email'
import {
checkBadCountPagination,
checkBadSortPagination,
checkBadStartPagination
} from '../../../../shared/extra-utils/requests/check-api-params'
2019-04-15 10:49:46 +02:00
import { UserAdminFlag } from '../../../../shared/models/users/user-flag.model'
2017-09-04 21:21:47 +02:00
describe('Test users API validators', function () {
const path = '/api/v1/users/'
let userId: number
let rootId: number
2019-07-30 09:59:19 +02:00
let moderatorId: number
let video: VideoCreateResult
2017-09-04 21:21:47 +02:00
let server: ServerInfo
let serverWithRegistrationDisabled: ServerInfo
let userAccessToken = ''
2019-07-30 09:59:19 +02:00
let moderatorAccessToken = ''
let emailPort: number
let overrideConfig: Object
2017-09-04 21:21:47 +02:00
// ---------------------------------------------------------------
before(async function () {
2018-01-18 18:10:45 +01:00
this.timeout(30000)
2017-09-04 21:21:47 +02:00
const emails: object[] = []
emailPort = await MockSmtpServer.Instance.collectEmails(emails)
overrideConfig = { signup: { limit: 8 } }
2019-07-30 09:59:19 +02:00
{
const res = await Promise.all([
flushAndRunServer(1, overrideConfig),
2019-07-30 09:59:19 +02:00
flushAndRunServer(2)
])
2017-09-04 21:21:47 +02:00
2019-07-30 09:59:19 +02:00
server = res[0]
serverWithRegistrationDisabled = res[1]
2017-09-04 21:21:47 +02:00
2019-07-30 09:59:19 +02:00
await setAccessTokensToServers([ server ])
}
{
const user = {
username: 'user1',
password: 'my super password'
}
const videoQuota = 42000000
await createUser({
url: server.url,
accessToken: server.accessToken,
username: user.username,
password: user.password,
videoQuota: videoQuota
})
userAccessToken = await userLogin(server, user)
}
{
const moderator = {
username: 'moderator1',
password: 'super password'
}
await createUser({
url: server.url,
accessToken: server.accessToken,
username: moderator.username,
password: moderator.password,
role: UserRole.MODERATOR
})
moderatorAccessToken = await userLogin(server, moderator)
}
{
const moderator = {
username: 'moderator2',
password: 'super password'
}
await createUser({
url: server.url,
accessToken: server.accessToken,
username: moderator.username,
password: moderator.password,
role: UserRole.MODERATOR
})
}
2017-12-28 15:25:31 +01:00
{
const res = await uploadVideo(server.url, server.accessToken, {})
video = res.body.video
}
2019-07-30 09:59:19 +02:00
{
const res = await getUsersList(server.url, server.accessToken)
const users: User[] = res.body.data
userId = users.find(u => u.username === 'user1').id
rootId = users.find(u => u.username === 'root').id
moderatorId = users.find(u => u.username === 'moderator2').id
}
2017-09-04 21:21:47 +02:00
})
describe('When listing users', function () {
it('Should fail with a bad start pagination', async function () {
2017-12-28 15:25:31 +01:00
await checkBadStartPagination(server.url, path, server.accessToken)
2017-09-04 21:21:47 +02:00
})
it('Should fail with a bad count pagination', async function () {
2017-12-28 15:25:31 +01:00
await checkBadCountPagination(server.url, path, server.accessToken)
2017-09-04 21:21:47 +02:00
})
it('Should fail with an incorrect sort', async function () {
2017-12-28 15:25:31 +01:00
await checkBadSortPagination(server.url, path, server.accessToken)
2017-09-04 21:21:47 +02:00
})
it('Should fail with a non authenticated user', async function () {
2017-12-28 15:25:31 +01:00
await makeGetRequest({
url: server.url,
path,
statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
2017-12-28 15:25:31 +01:00
})
})
it('Should fail with a non admin user', async function () {
2017-12-28 15:25:31 +01:00
await makeGetRequest({
url: server.url,
path,
token: userAccessToken,
statusCodeExpected: HttpStatusCode.FORBIDDEN_403
2017-12-28 15:25:31 +01:00
})
})
2017-09-04 21:21:47 +02:00
})
describe('When adding a new user', function () {
2017-12-28 15:25:31 +01:00
const baseCorrectParams = {
username: 'user2',
email: 'test@example.com',
password: 'my super password',
videoQuota: -1,
videoQuotaDaily: -1,
2019-04-15 10:49:46 +02:00
role: UserRole.USER,
adminFlags: UserAdminFlag.BYPASS_VIDEO_AUTO_BLACKLIST
2017-12-28 15:25:31 +01:00
}
2017-09-04 21:21:47 +02:00
it('Should fail with a too small username', async function () {
const fields = immutableAssign(baseCorrectParams, { username: '' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a too long username', async function () {
const fields = immutableAssign(baseCorrectParams, { username: 'super'.repeat(50) })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-11-04 18:32:38 +01:00
it('Should fail with a not lowercase username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'Toto' })
2017-11-04 18:32:38 +01:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-09-04 21:21:47 +02:00
it('Should fail with an incorrect username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'my username' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a missing email', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'email')
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid email', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { email: 'test_example.com' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a too small password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'bla' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a too long password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'super'.repeat(61) })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with empty password and no smtp configured', async function () {
const fields = immutableAssign(baseCorrectParams, { password: '' })
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should succeed with no password on a server with smtp enabled', async function () {
this.timeout(20000)
killallServers([ server ])
const config = immutableAssign(overrideConfig, {
smtp: {
hostname: 'localhost',
port: emailPort
}
})
await reRunServer(server, config)
const fields = immutableAssign(baseCorrectParams, {
password: '',
username: 'create_password',
email: 'create_password@example.com'
})
await makePostBodyRequest({
url: server.url,
path: path,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.OK_200
})
})
2019-04-15 10:49:46 +02:00
it('Should fail with invalid admin flags', async function () {
const fields = immutableAssign(baseCorrectParams, { adminFlags: 'toto' })
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-09-04 21:21:47 +02:00
it('Should fail with an non authenticated user', async function () {
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path,
token: 'super token',
fields: baseCorrectParams,
statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
2017-12-28 15:25:31 +01:00
})
2017-09-04 21:21:47 +02:00
})
it('Should fail if we add a user with the same username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'user1' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({
url: server.url,
path,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.CONFLICT_409
})
2017-09-04 21:21:47 +02:00
})
it('Should fail if we add a user with the same email', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { email: 'user1@example.com' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({
url: server.url,
path,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.CONFLICT_409
})
2017-09-04 21:21:47 +02:00
})
2017-09-06 16:35:40 +02:00
it('Should fail without a videoQuota', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'videoQuota')
2017-09-06 16:35:40 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail without a videoQuotaDaily', async function () {
const fields = omit(baseCorrectParams, 'videoQuotaDaily')
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-09-06 16:35:40 +02:00
it('Should fail with an invalid videoQuota', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { videoQuota: -5 })
2017-10-27 17:27:06 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid videoQuotaDaily', async function () {
const fields = immutableAssign(baseCorrectParams, { videoQuotaDaily: -7 })
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-10-27 17:27:06 +02:00
it('Should fail without a user role', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'role')
2017-10-27 17:27:06 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid user role', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { role: 88989 })
2017-09-06 16:35:40 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a "peertube" username', async function () {
const fields = immutableAssign(baseCorrectParams, { username: 'peertube' })
await makePostBodyRequest({
url: server.url,
path,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.CONFLICT_409
})
})
2019-07-30 09:59:19 +02:00
it('Should fail to create a moderator or an admin with a moderator', async function () {
for (const role of [ UserRole.MODERATOR, UserRole.ADMINISTRATOR ]) {
const fields = immutableAssign(baseCorrectParams, { role })
await makePostBodyRequest({
url: server.url,
path,
token: moderatorAccessToken,
fields,
statusCodeExpected: HttpStatusCode.FORBIDDEN_403
2019-07-30 09:59:19 +02:00
})
}
})
it('Should succeed to create a user with a moderator', async function () {
const fields = immutableAssign(baseCorrectParams, { username: 'a4656', email: 'a4656@example.com', role: UserRole.USER })
await makePostBodyRequest({
url: server.url,
path,
token: moderatorAccessToken,
fields,
statusCodeExpected: HttpStatusCode.OK_200
2019-07-30 09:59:19 +02:00
})
})
2017-09-04 21:21:47 +02:00
it('Should succeed with the correct params', async function () {
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path,
token: server.accessToken,
fields: baseCorrectParams,
statusCodeExpected: HttpStatusCode.OK_200
2017-12-28 15:25:31 +01:00
})
2017-09-04 21:21:47 +02:00
})
it('Should fail with a non admin user', async function () {
2017-12-28 15:25:31 +01:00
const user = {
2017-09-04 21:21:47 +02:00
username: 'user1',
password: 'my super password'
}
2017-12-28 15:25:31 +01:00
userAccessToken = await userLogin(server, user)
2017-09-04 21:21:47 +02:00
const fields = {
username: 'user3',
email: 'test@example.com',
2017-09-06 16:35:40 +02:00
password: 'my super password',
videoQuota: 42000000
2017-09-04 21:21:47 +02:00
}
await makePostBodyRequest({ url: server.url, path, token: userAccessToken, fields, statusCodeExpected: HttpStatusCode.FORBIDDEN_403 })
2017-09-04 21:21:47 +02:00
})
})
2017-09-06 16:35:40 +02:00
describe('When updating my account', function () {
it('Should fail with an invalid email attribute', async function () {
const fields = {
email: 'blabla'
}
2017-09-04 21:21:47 +02:00
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: server.accessToken, fields })
2017-09-04 21:21:47 +02:00
})
it('Should fail with a too small password', async function () {
const fields = {
2018-09-26 16:28:15 +02:00
currentPassword: 'my super password',
2017-09-04 21:21:47 +02:00
password: 'bla'
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
2017-09-04 21:21:47 +02:00
})
it('Should fail with a too long password', async function () {
const fields = {
2018-09-26 16:28:15 +02:00
currentPassword: 'my super password',
2017-12-28 15:25:31 +01:00
password: 'super'.repeat(61)
2017-09-04 21:21:47 +02:00
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
2017-09-04 21:21:47 +02:00
})
2018-09-26 16:28:15 +02:00
it('Should fail without the current password', async function () {
const fields = {
currentPassword: 'my super password',
password: 'super'.repeat(61)
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
it('Should fail with an invalid current password', async function () {
const fields = {
currentPassword: 'my super password fail',
password: 'super'.repeat(61)
}
await makePutBodyRequest({
url: server.url,
path: path + 'me',
token: userAccessToken,
fields,
statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
2018-09-26 16:28:15 +02:00
})
it('Should fail with an invalid NSFW policy attribute', async function () {
2017-09-04 21:21:47 +02:00
const fields = {
nsfwPolicy: 'hello'
2017-09-04 21:21:47 +02:00
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
2017-09-04 21:21:47 +02:00
})
it('Should fail with an invalid autoPlayVideo attribute', async function () {
const fields = {
autoPlayVideo: -1
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
it('Should fail with an invalid autoPlayNextVideo attribute', async function () {
const fields = {
autoPlayNextVideo: -1
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
it('Should fail with an invalid videosHistoryEnabled attribute', async function () {
const fields = {
videosHistoryEnabled: -1
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
2017-09-04 21:21:47 +02:00
it('Should fail with an non authenticated user', async function () {
const fields = {
2018-09-26 16:28:15 +02:00
currentPassword: 'my super password',
2017-09-04 21:21:47 +02:00
password: 'my super password'
}
await makePutBodyRequest({
url: server.url,
path: path + 'me',
token: 'super token',
fields,
statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
2017-09-04 21:21:47 +02:00
})
it('Should fail with a too long description', async function () {
const fields = {
description: 'super'.repeat(201)
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
it('Should fail with an invalid videoLanguages attribute', async function () {
{
const fields = {
videoLanguages: 'toto'
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
}
{
const languages = []
for (let i = 0; i < 1000; i++) {
languages.push('fr')
}
const fields = {
videoLanguages: languages
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
}
})
2019-07-19 10:37:35 +02:00
it('Should fail with an invalid theme', async function () {
const fields = { theme: 'invalid' }
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
it('Should fail with an unknown theme', async function () {
const fields = { theme: 'peertube-theme-unknown' }
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
2019-08-28 14:40:06 +02:00
it('Should fail with an invalid noInstanceConfigWarningModal attribute', async function () {
const fields = {
noInstanceConfigWarningModal: -1
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
it('Should fail with an invalid noWelcomeModal attribute', async function () {
const fields = {
noWelcomeModal: -1
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
2018-09-26 16:28:15 +02:00
it('Should succeed to change password with the correct params', async function () {
2017-09-04 21:21:47 +02:00
const fields = {
2018-09-26 16:28:15 +02:00
currentPassword: 'my super password',
2017-09-04 21:21:47 +02:00
password: 'my super password',
nsfwPolicy: 'blur',
autoPlayVideo: false,
2019-07-19 10:37:35 +02:00
email: 'super_email@example.com',
2019-08-28 14:40:06 +02:00
theme: 'default',
noInstanceConfigWarningModal: true,
noWelcomeModal: true
2017-09-04 21:21:47 +02:00
}
await makePutBodyRequest({
url: server.url,
path: path + 'me',
token: userAccessToken,
fields,
statusCodeExpected: HttpStatusCode.NO_CONTENT_204
})
2017-09-06 16:35:40 +02:00
})
2018-09-26 16:28:15 +02:00
it('Should succeed without password change with the correct params', async function () {
const fields = {
nsfwPolicy: 'blur',
2019-06-11 15:59:10 +02:00
autoPlayVideo: false
2018-09-26 16:28:15 +02:00
}
await makePutBodyRequest({
url: server.url,
path: path + 'me',
token: userAccessToken,
fields,
statusCodeExpected: HttpStatusCode.NO_CONTENT_204
})
2018-09-26 16:28:15 +02:00
})
2017-09-06 16:35:40 +02:00
})
2017-12-29 19:10:13 +01:00
describe('When updating my avatar', function () {
it('Should fail without an incorrect input file', async function () {
const fields = {}
const attaches = {
2021-06-14 16:52:22 +02:00
avatarfile: buildAbsoluteFixturePath('video_short.mp4')
2017-12-29 19:10:13 +01:00
}
await makeUploadRequest({ url: server.url, path: path + '/me/avatar/pick', token: server.accessToken, fields, attaches })
2017-12-29 19:10:13 +01:00
})
2018-01-03 11:10:40 +01:00
it('Should fail with a big file', async function () {
const fields = {}
const attaches = {
2021-06-14 16:52:22 +02:00
avatarfile: buildAbsoluteFixturePath('avatar-big.png')
2018-01-03 11:10:40 +01:00
}
await makeUploadRequest({ url: server.url, path: path + '/me/avatar/pick', token: server.accessToken, fields, attaches })
2018-01-03 11:10:40 +01:00
})
it('Should fail with an unauthenticated user', async function () {
const fields = {}
const attaches = {
2021-06-14 16:52:22 +02:00
avatarfile: buildAbsoluteFixturePath('avatar.png')
}
await makeUploadRequest({
url: server.url,
path: path + '/me/avatar/pick',
fields,
attaches,
statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
})
2017-12-29 19:10:13 +01:00
it('Should succeed with the correct params', async function () {
const fields = {}
const attaches = {
2021-06-14 16:52:22 +02:00
avatarfile: buildAbsoluteFixturePath('avatar.png')
2017-12-29 19:10:13 +01:00
}
await makeUploadRequest({
2018-01-03 10:12:36 +01:00
url: server.url,
path: path + '/me/avatar/pick',
token: server.accessToken,
fields,
attaches,
statusCodeExpected: HttpStatusCode.OK_200
2018-01-03 10:12:36 +01:00
})
2017-12-29 19:10:13 +01:00
})
})
2020-11-25 11:04:18 +01:00
describe('When managing my scoped tokens', function () {
it('Should fail to get my scoped tokens with an non authenticated user', async function () {
await getUserScopedTokens(server.url, null, HttpStatusCode.UNAUTHORIZED_401)
2020-11-25 11:04:18 +01:00
})
it('Should fail to get my scoped tokens with a bad token', async function () {
await getUserScopedTokens(server.url, 'bad', HttpStatusCode.UNAUTHORIZED_401)
2020-11-25 11:04:18 +01:00
})
it('Should succeed to get my scoped tokens', async function () {
await getUserScopedTokens(server.url, server.accessToken)
})
it('Should fail to renew my scoped tokens with an non authenticated user', async function () {
await renewUserScopedTokens(server.url, null, HttpStatusCode.UNAUTHORIZED_401)
2020-11-25 11:04:18 +01:00
})
it('Should fail to renew my scoped tokens with a bad token', async function () {
await renewUserScopedTokens(server.url, 'bad', HttpStatusCode.UNAUTHORIZED_401)
2020-11-25 11:04:18 +01:00
})
it('Should succeed to renew my scoped tokens', async function () {
await renewUserScopedTokens(server.url, server.accessToken)
})
})
2018-04-16 10:48:17 +02:00
describe('When getting a user', function () {
it('Should fail with an non authenticated user', async function () {
await makeGetRequest({
url: server.url,
path: path + userId,
token: 'super token',
statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
2018-04-16 10:48:17 +02:00
})
it('Should fail with a non admin user', async function () {
await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: HttpStatusCode.FORBIDDEN_403 })
2018-04-16 10:48:17 +02:00
})
it('Should succeed with the correct params', async function () {
await makeGetRequest({ url: server.url, path: path + userId, token: server.accessToken, statusCodeExpected: HttpStatusCode.OK_200 })
2018-04-16 10:48:17 +02:00
})
})
2017-09-06 16:35:40 +02:00
describe('When updating a user', function () {
it('Should fail with an invalid email attribute', async function () {
const fields = {
email: 'blabla'
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
it('Should fail with an invalid emailVerified attribute', async function () {
const fields = {
emailVerified: 'yes'
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
2017-09-06 16:35:40 +02:00
it('Should fail with an invalid videoQuota attribute', async function () {
const fields = {
videoQuota: -90
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
2017-10-27 17:27:06 +02:00
it('Should fail with an invalid user role attribute', async function () {
const fields = {
role: 54878
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
it('Should fail with a too small password', async function () {
const fields = {
currentPassword: 'my super password',
password: 'bla'
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
it('Should fail with a too long password', async function () {
const fields = {
currentPassword: 'my super password',
password: 'super'.repeat(61)
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
2017-09-06 16:35:40 +02:00
it('Should fail with an non authenticated user', async function () {
const fields = {
videoQuota: 42
}
await makePutBodyRequest({
url: server.url,
path: path + userId,
token: 'super token',
fields,
statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
2017-09-06 16:35:40 +02:00
})
it('Should fail when updating root role', async function () {
const fields = {
role: UserRole.MODERATOR
}
await makePutBodyRequest({ url: server.url, path: path + rootId, token: server.accessToken, fields })
2019-04-15 10:49:46 +02:00
})
it('Should fail with invalid admin flags', async function () {
const fields = { adminFlags: 'toto' }
2019-07-30 09:59:19 +02:00
await makePutBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail to update an admin with a moderator', async function () {
const fields = {
videoQuota: 42
}
await makePutBodyRequest({
url: server.url,
path: path + moderatorId,
token: moderatorAccessToken,
fields,
statusCodeExpected: HttpStatusCode.FORBIDDEN_403
2019-07-30 09:59:19 +02:00
})
})
it('Should succeed to update a user with a moderator', async function () {
const fields = {
videoQuota: 42
}
await makePutBodyRequest({
url: server.url,
path: path + userId,
token: moderatorAccessToken,
fields,
statusCodeExpected: HttpStatusCode.NO_CONTENT_204
2019-07-30 09:59:19 +02:00
})
})
2017-09-06 16:35:40 +02:00
it('Should succeed with the correct params', async function () {
const fields = {
email: 'email@example.com',
emailVerified: true,
2017-10-27 17:27:06 +02:00
videoQuota: 42,
2019-01-08 11:26:41 +01:00
role: UserRole.USER
2017-09-06 16:35:40 +02:00
}
await makePutBodyRequest({
url: server.url,
path: path + userId,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.NO_CONTENT_204
})
2017-09-04 21:21:47 +02:00
})
})
describe('When getting my information', function () {
it('Should fail with a non authenticated user', async function () {
await getMyUserInformation(server.url, 'fake_token', HttpStatusCode.UNAUTHORIZED_401)
2017-09-04 21:21:47 +02:00
})
it('Should success with the correct parameters', async function () {
2017-12-28 15:25:31 +01:00
await getMyUserInformation(server.url, userAccessToken)
2017-09-04 21:21:47 +02:00
})
})
describe('When getting my video rating', function () {
it('Should fail with a non authenticated user', async function () {
await getMyUserVideoRating(server.url, 'fake_token', video.id, HttpStatusCode.UNAUTHORIZED_401)
2017-09-04 21:21:47 +02:00
})
it('Should fail with an incorrect video uuid', async function () {
await getMyUserVideoRating(server.url, server.accessToken, 'blabla', HttpStatusCode.BAD_REQUEST_400)
2017-09-04 21:21:47 +02:00
})
it('Should fail with an unknown video', async function () {
await getMyUserVideoRating(server.url, server.accessToken, '4da6fde3-88f7-4d16-b119-108df5630b06', HttpStatusCode.NOT_FOUND_404)
2017-09-04 21:21:47 +02:00
})
2017-12-28 15:25:31 +01:00
it('Should succeed with the correct parameters', async function () {
await getMyUserVideoRating(server.url, server.accessToken, video.id)
await getMyUserVideoRating(server.url, server.accessToken, video.uuid)
await getMyUserVideoRating(server.url, server.accessToken, video.shortUUID)
2017-09-04 21:21:47 +02:00
})
})
2019-04-09 11:21:36 +02:00
describe('When retrieving my global ratings', function () {
const path = '/api/v1/accounts/user1/ratings'
it('Should fail with a bad start pagination', async function () {
await checkBadStartPagination(server.url, path, userAccessToken)
})
it('Should fail with a bad count pagination', async function () {
await checkBadCountPagination(server.url, path, userAccessToken)
})
it('Should fail with an incorrect sort', async function () {
await checkBadSortPagination(server.url, path, userAccessToken)
})
it('Should fail with a unauthenticated user', async function () {
await makeGetRequest({ url: server.url, path, statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401 })
2019-04-09 11:21:36 +02:00
})
it('Should fail with a another user', async function () {
await makeGetRequest({ url: server.url, path, token: server.accessToken, statusCodeExpected: HttpStatusCode.FORBIDDEN_403 })
2019-04-09 11:21:36 +02:00
})
it('Should fail with a bad type', async function () {
await makeGetRequest({
url: server.url,
path,
token: userAccessToken,
query: { rating: 'toto ' },
statusCodeExpected: HttpStatusCode.BAD_REQUEST_400
})
2019-04-09 11:21:36 +02:00
})
it('Should succeed with the correct params', async function () {
await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: HttpStatusCode.OK_200 })
2019-04-09 11:21:36 +02:00
})
})
2018-08-08 14:58:21 +02:00
describe('When blocking/unblocking/removing user', function () {
2017-09-04 21:21:47 +02:00
it('Should fail with an incorrect id', async function () {
await removeUser(server.url, 'blabla', server.accessToken, HttpStatusCode.BAD_REQUEST_400)
await blockUser(server.url, 'blabla', server.accessToken, HttpStatusCode.BAD_REQUEST_400)
await unblockUser(server.url, 'blabla', server.accessToken, HttpStatusCode.BAD_REQUEST_400)
2017-09-04 21:21:47 +02:00
})
it('Should fail with the root user', async function () {
await removeUser(server.url, rootId, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
await blockUser(server.url, rootId, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
await unblockUser(server.url, rootId, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
2017-09-04 21:21:47 +02:00
})
it('Should return 404 with a non existing id', async function () {
await removeUser(server.url, 4545454, server.accessToken, HttpStatusCode.NOT_FOUND_404)
await blockUser(server.url, 4545454, server.accessToken, HttpStatusCode.NOT_FOUND_404)
await unblockUser(server.url, 4545454, server.accessToken, HttpStatusCode.NOT_FOUND_404)
2018-08-08 14:58:21 +02:00
})
it('Should fail with a non admin user', async function () {
await removeUser(server.url, userId, userAccessToken, HttpStatusCode.FORBIDDEN_403)
await blockUser(server.url, userId, userAccessToken, HttpStatusCode.FORBIDDEN_403)
await unblockUser(server.url, userId, userAccessToken, HttpStatusCode.FORBIDDEN_403)
2017-09-04 21:21:47 +02:00
})
2019-07-30 09:59:19 +02:00
it('Should fail on a moderator with a moderator', async function () {
await removeUser(server.url, moderatorId, moderatorAccessToken, HttpStatusCode.FORBIDDEN_403)
await blockUser(server.url, moderatorId, moderatorAccessToken, HttpStatusCode.FORBIDDEN_403)
await unblockUser(server.url, moderatorId, moderatorAccessToken, HttpStatusCode.FORBIDDEN_403)
2019-07-30 09:59:19 +02:00
})
it('Should succeed on a user with a moderator', async function () {
await blockUser(server.url, userId, moderatorAccessToken)
await unblockUser(server.url, userId, moderatorAccessToken)
})
2017-09-04 21:21:47 +02:00
})
2018-08-08 10:55:27 +02:00
describe('When deleting our account', function () {
it('Should fail with with the root account', async function () {
await deleteMe(server.url, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
2018-08-08 10:55:27 +02:00
})
})
describe('When registering a new user', function () {
2017-09-04 21:21:47 +02:00
const registrationPath = path + '/register'
2017-12-28 15:25:31 +01:00
const baseCorrectParams = {
username: 'user3',
displayName: 'super user',
2017-12-28 15:25:31 +01:00
email: 'test3@example.com',
password: 'my super password'
}
2017-09-04 21:21:47 +02:00
it('Should fail with a too small username', async function () {
const fields = immutableAssign(baseCorrectParams, { username: '' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a too long username', async function () {
const fields = immutableAssign(baseCorrectParams, { username: 'super'.repeat(50) })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with an incorrect username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'my username' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a missing email', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'email')
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with an invalid email', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { email: 'test_example.com' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a too small password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'bla' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a too long password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'super'.repeat(61) })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail if we register a user with the same username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'root' })
2017-09-04 21:21:47 +02:00
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.CONFLICT_409
2017-12-28 15:25:31 +01:00
})
2017-09-04 21:21:47 +02:00
})
it('Should fail with a "peertube" username', async function () {
const fields = immutableAssign(baseCorrectParams, { username: 'peertube' })
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.CONFLICT_409
})
})
2017-09-04 21:21:47 +02:00
it('Should fail if we register a user with the same email', async function () {
2019-04-24 15:10:37 +02:00
const fields = immutableAssign(baseCorrectParams, { email: 'admin' + server.internalServerNumber + '@example.com' })
2017-09-04 21:21:47 +02:00
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.CONFLICT_409
2017-12-28 15:25:31 +01:00
})
2017-09-04 21:21:47 +02:00
})
it('Should fail with a bad display name', async function () {
const fields = immutableAssign(baseCorrectParams, { displayName: 'a'.repeat(150) })
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a bad channel name', async function () {
const fields = immutableAssign(baseCorrectParams, { channel: { name: '[]azf', displayName: 'toto' } })
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a bad channel display name', async function () {
const fields = immutableAssign(baseCorrectParams, { channel: { name: 'toto', displayName: '' } })
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a channel name that is the same as username', async function () {
2019-05-29 11:03:01 +02:00
const source = { username: 'super_user', channel: { name: 'super_user', displayName: 'display name' } }
const fields = immutableAssign(baseCorrectParams, source)
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with an existing channel', async function () {
const videoChannelAttributesArg = { name: 'existing_channel', displayName: 'hello', description: 'super description' }
await addVideoChannel(server.url, server.accessToken, videoChannelAttributesArg)
const fields = immutableAssign(baseCorrectParams, { channel: { name: 'existing_channel', displayName: 'toto' } })
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.CONFLICT_409
})
})
2017-09-04 21:21:47 +02:00
it('Should succeed with the correct params', async function () {
const fields = immutableAssign(baseCorrectParams, { channel: { name: 'super_channel', displayName: 'toto' } })
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields: fields,
statusCodeExpected: HttpStatusCode.NO_CONTENT_204
2017-12-28 15:25:31 +01:00
})
2017-09-04 21:21:47 +02:00
})
it('Should fail on a server with registration disabled', async function () {
const fields = {
username: 'user4',
email: 'test4@example.com',
password: 'my super password 4'
}
await makePostBodyRequest({
url: serverWithRegistrationDisabled.url,
path: registrationPath,
token: serverWithRegistrationDisabled.accessToken,
fields,
statusCodeExpected: HttpStatusCode.FORBIDDEN_403
2017-09-04 21:21:47 +02:00
})
})
})
describe('When registering multiple users on a server with users limit', function () {
it('Should fail when after 3 registrations', async function () {
await registerUser(server.url, 'user42', 'super password', HttpStatusCode.FORBIDDEN_403)
2017-09-04 21:21:47 +02:00
})
})
2018-01-30 15:16:24 +01:00
describe('When asking a password reset', function () {
const path = '/api/v1/users/ask-reset-password'
it('Should fail with a missing email', async function () {
const fields = {}
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid email', async function () {
const fields = { email: 'hello' }
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should success with the correct params', async function () {
const fields = { email: 'admin@example.com' }
await makePostBodyRequest({
url: server.url,
path,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.NO_CONTENT_204
})
2018-01-30 15:16:24 +01:00
})
})
describe('When asking for an account verification email', function () {
const path = '/api/v1/users/ask-send-verify-email'
it('Should fail with a missing email', async function () {
const fields = {}
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid email', async function () {
const fields = { email: 'hello' }
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should succeed with the correct params', async function () {
const fields = { email: 'admin@example.com' }
await makePostBodyRequest({
url: server.url,
path,
token: server.accessToken,
fields,
statusCodeExpected: HttpStatusCode.NO_CONTENT_204
})
})
})
2019-04-24 15:10:37 +02:00
after(async function () {
MockSmtpServer.Instance.kill()
2019-04-24 15:10:37 +02:00
await cleanupTests([ server, serverWithRegistrationDisabled ])
2017-09-04 21:21:47 +02:00
})
})