PeerTube/server/tests/api/check-params/users.ts

544 lines
18 KiB
TypeScript
Raw Normal View History

2017-09-04 21:21:47 +02:00
/* tslint:disable:no-unused-expression */
2017-12-28 15:25:31 +01:00
import { omit } from 'lodash'
2017-09-04 21:21:47 +02:00
import 'mocha'
2018-01-03 10:12:36 +01:00
import { join } from 'path'
2017-12-28 15:25:31 +01:00
import { UserRole } from '../../../../shared'
2017-09-04 21:21:47 +02:00
import {
2017-12-28 15:25:31 +01:00
createUser, flushTests, getMyUserInformation, getMyUserVideoRating, getUsersList, immutableAssign, killallServers, makeGetRequest,
2017-12-29 19:10:13 +01:00
makePostBodyRequest, makePostUploadRequest, makePutBodyRequest, registerUser, removeUser, runServer, ServerInfo, setAccessTokensToServers,
2018-01-03 10:12:36 +01:00
updateUser, uploadVideo, userLogin
2017-09-04 21:21:47 +02:00
} from '../../utils'
2017-12-28 15:25:31 +01:00
import { checkBadCountPagination, checkBadSortPagination, checkBadStartPagination } from '../../utils/requests/check-api-params'
2017-09-04 21:21:47 +02:00
describe('Test users API validators', function () {
const path = '/api/v1/users/'
let userId: number
let rootId: number
let videoId: number
let server: ServerInfo
let serverWithRegistrationDisabled: ServerInfo
let userAccessToken = ''
// ---------------------------------------------------------------
before(async function () {
2018-01-18 18:10:45 +01:00
this.timeout(30000)
2017-09-04 21:21:47 +02:00
await flushTests()
server = await runServer(1)
serverWithRegistrationDisabled = await runServer(2)
await setAccessTokensToServers([ server ])
const user = {
username: 'user1',
password: 'my super password'
}
2017-12-28 15:25:31 +01:00
const videoQuota = 42000000
await createUser(server.url, server.accessToken, user.username, user.password, videoQuota)
2017-12-28 14:29:57 +01:00
userAccessToken = await userLogin(server, user)
2017-12-28 15:25:31 +01:00
const res = await uploadVideo(server.url, server.accessToken, {})
videoId = res.body.video.id
2017-09-04 21:21:47 +02:00
})
describe('When listing users', function () {
it('Should fail with a bad start pagination', async function () {
2017-12-28 15:25:31 +01:00
await checkBadStartPagination(server.url, path, server.accessToken)
2017-09-04 21:21:47 +02:00
})
it('Should fail with a bad count pagination', async function () {
2017-12-28 15:25:31 +01:00
await checkBadCountPagination(server.url, path, server.accessToken)
2017-09-04 21:21:47 +02:00
})
it('Should fail with an incorrect sort', async function () {
2017-12-28 15:25:31 +01:00
await checkBadSortPagination(server.url, path, server.accessToken)
2017-09-04 21:21:47 +02:00
})
it('Should fail with a non authenticated user', async function () {
2017-12-28 15:25:31 +01:00
await makeGetRequest({
url: server.url,
path,
statusCodeExpected: 401
})
})
it('Should fail with a non admin user', async function () {
2017-12-28 15:25:31 +01:00
await makeGetRequest({
url: server.url,
path,
token: userAccessToken,
statusCodeExpected: 403
})
})
2017-09-04 21:21:47 +02:00
})
describe('When adding a new user', function () {
2017-12-28 15:25:31 +01:00
const baseCorrectParams = {
username: 'user2',
email: 'test@example.com',
password: 'my super password',
videoQuota: -1,
role: UserRole.USER
}
2017-09-04 21:21:47 +02:00
it('Should fail with a too small username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'fi' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a too long username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'my_super_username_which_is_very_long' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-11-04 18:32:38 +01:00
it('Should fail with a not lowercase username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'Toto' })
2017-11-04 18:32:38 +01:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-09-04 21:21:47 +02:00
it('Should fail with an incorrect username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'my username' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a missing email', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'email')
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid email', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { email: 'test_example.com' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a too small password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'bla' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with a too long password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'super'.repeat(61) })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an non authenticated user', async function () {
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path,
token: 'super token',
fields: baseCorrectParams,
statusCodeExpected: 401
})
2017-09-04 21:21:47 +02:00
})
it('Should fail if we add a user with the same username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'user1' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 409 })
})
it('Should fail if we add a user with the same email', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { email: 'user1@example.com' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 409 })
})
2017-09-06 16:35:40 +02:00
it('Should fail without a videoQuota', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'videoQuota')
2017-09-06 16:35:40 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid videoQuota', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { videoQuota: -5 })
2017-10-27 17:27:06 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail without a user role', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'role')
2017-10-27 17:27:06 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
it('Should fail with an invalid user role', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { role: 88989 })
2017-09-06 16:35:40 +02:00
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
2017-09-04 21:21:47 +02:00
it('Should succeed with the correct params', async function () {
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path,
token: server.accessToken,
fields: baseCorrectParams,
statusCodeExpected: 200
2017-12-28 15:25:31 +01:00
})
2017-09-04 21:21:47 +02:00
})
it('Should fail with a non admin user', async function () {
2017-12-28 15:25:31 +01:00
const user = {
2017-09-04 21:21:47 +02:00
username: 'user1',
password: 'my super password'
}
2017-12-28 15:25:31 +01:00
userAccessToken = await userLogin(server, user)
2017-09-04 21:21:47 +02:00
const fields = {
username: 'user3',
email: 'test@example.com',
2017-09-06 16:35:40 +02:00
password: 'my super password',
videoQuota: 42000000
2017-09-04 21:21:47 +02:00
}
await makePostBodyRequest({ url: server.url, path, token: userAccessToken, fields, statusCodeExpected: 403 })
})
})
2017-09-06 16:35:40 +02:00
describe('When updating my account', function () {
it('Should fail with an invalid email attribute', async function () {
const fields = {
email: 'blabla'
}
2017-09-04 21:21:47 +02:00
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: server.accessToken, fields })
2017-09-04 21:21:47 +02:00
})
it('Should fail with a too small password', async function () {
const fields = {
password: 'bla'
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
2017-09-04 21:21:47 +02:00
})
it('Should fail with a too long password', async function () {
const fields = {
2017-12-28 15:25:31 +01:00
password: 'super'.repeat(61)
2017-09-04 21:21:47 +02:00
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
2017-09-04 21:21:47 +02:00
})
it('Should fail with an invalid display NSFW attribute', async function () {
const fields = {
displayNSFW: -1
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
2017-09-04 21:21:47 +02:00
})
it('Should fail with an invalid autoPlayVideo attribute', async function () {
const fields = {
autoPlayVideo: -1
}
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
})
2017-09-04 21:21:47 +02:00
it('Should fail with an non authenticated user', async function () {
const fields = {
password: 'my super password'
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: 'super token', fields, statusCodeExpected: 401 })
2017-09-04 21:21:47 +02:00
})
it('Should succeed with the correct params', async function () {
const fields = {
password: 'my super password',
2017-09-06 16:35:40 +02:00
displayNSFW: true,
autoPlayVideo: false,
2017-09-06 16:35:40 +02:00
email: 'super_email@example.com'
2017-09-04 21:21:47 +02:00
}
2017-09-06 16:35:40 +02:00
await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields, statusCodeExpected: 204 })
})
})
2017-12-29 19:10:13 +01:00
describe('When updating my avatar', function () {
it('Should fail without an incorrect input file', async function () {
const fields = {}
const attaches = {
'avatarfile': join(__dirname, '..', 'fixtures', 'video_short.mp4')
}
await makePostUploadRequest({ url: server.url, path: path + '/me/avatar/pick', token: server.accessToken, fields, attaches })
})
2018-01-03 11:10:40 +01:00
it('Should fail with a big file', async function () {
const fields = {}
const attaches = {
'avatarfile': join(__dirname, '..', 'fixtures', 'avatar-big.png')
}
await makePostUploadRequest({ url: server.url, path: path + '/me/avatar/pick', token: server.accessToken, fields, attaches })
})
2017-12-29 19:10:13 +01:00
it('Should succeed with the correct params', async function () {
const fields = {}
const attaches = {
'avatarfile': join(__dirname, '..', 'fixtures', 'avatar.png')
}
2018-01-03 10:12:36 +01:00
await makePostUploadRequest({
url: server.url,
path: path + '/me/avatar/pick',
token: server.accessToken,
fields,
attaches,
statusCodeExpected: 200
})
2017-12-29 19:10:13 +01:00
})
})
2017-09-06 16:35:40 +02:00
describe('When updating a user', function () {
before(async function () {
const res = await getUsersList(server.url, server.accessToken)
2017-09-06 16:35:40 +02:00
userId = res.body.data[1].id
rootId = res.body.data[2].id
})
it('Should fail with an invalid email attribute', async function () {
const fields = {
email: 'blabla'
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
it('Should fail with an invalid videoQuota attribute', async function () {
const fields = {
videoQuota: -90
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
2017-10-27 17:27:06 +02:00
it('Should fail with an invalid user role attribute', async function () {
const fields = {
role: 54878
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
})
2017-09-06 16:35:40 +02:00
it('Should fail with an non authenticated user', async function () {
const fields = {
videoQuota: 42
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: 'super token', fields, statusCodeExpected: 401 })
})
it('Should succeed with the correct params', async function () {
const fields = {
email: 'email@example.com',
2017-10-27 17:27:06 +02:00
videoQuota: 42,
role: UserRole.MODERATOR
2017-09-06 16:35:40 +02:00
}
await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields, statusCodeExpected: 204 })
2017-09-04 21:21:47 +02:00
})
})
describe('When getting my information', function () {
it('Should fail with a non authenticated user', async function () {
2017-12-28 15:25:31 +01:00
await getMyUserInformation(server.url, 'fake_token', 401)
2017-09-04 21:21:47 +02:00
})
it('Should success with the correct parameters', async function () {
2017-12-28 15:25:31 +01:00
await getMyUserInformation(server.url, userAccessToken)
2017-09-04 21:21:47 +02:00
})
})
describe('When getting my video rating', function () {
it('Should fail with a non authenticated user', async function () {
2017-12-28 15:25:31 +01:00
await getMyUserVideoRating(server.url, 'fake_token', videoId, 401)
2017-09-04 21:21:47 +02:00
})
it('Should fail with an incorrect video uuid', async function () {
2017-12-28 15:25:31 +01:00
await getMyUserVideoRating(server.url, server.accessToken, 'blabla', 400)
2017-09-04 21:21:47 +02:00
})
it('Should fail with an unknown video', async function () {
2017-12-28 15:25:31 +01:00
await getMyUserVideoRating(server.url, server.accessToken, '4da6fde3-88f7-4d16-b119-108df5630b06', 404)
2017-09-04 21:21:47 +02:00
})
2017-12-28 15:25:31 +01:00
it('Should succeed with the correct parameters', async function () {
await getMyUserVideoRating(server.url, server.accessToken, videoId)
2017-09-04 21:21:47 +02:00
})
})
describe('When removing an user', function () {
it('Should fail with an incorrect id', async function () {
2017-12-28 15:25:31 +01:00
await removeUser(server.url, 'blabla', server.accessToken, 400)
2017-09-04 21:21:47 +02:00
})
it('Should fail with the root user', async function () {
2017-12-28 15:25:31 +01:00
await removeUser(server.url, rootId, server.accessToken, 400)
2017-09-04 21:21:47 +02:00
})
it('Should return 404 with a non existing id', async function () {
2017-12-28 15:25:31 +01:00
await removeUser(server.url, 4545454, server.accessToken, 404)
2017-09-04 21:21:47 +02:00
})
})
describe('When register a new user', function () {
const registrationPath = path + '/register'
2017-12-28 15:25:31 +01:00
const baseCorrectParams = {
username: 'user3',
email: 'test3@example.com',
password: 'my super password'
}
2017-09-04 21:21:47 +02:00
it('Should fail with a too small username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'ji' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a too long username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'my_super_username_which_is_very_long' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with an incorrect username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'my username' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a missing email', async function () {
2017-12-28 15:25:31 +01:00
const fields = omit(baseCorrectParams, 'email')
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with an invalid email', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { email: 'test_example.com' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a too small password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'bla' })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail with a too long password', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { password: 'super'.repeat(61) })
2017-09-04 21:21:47 +02:00
await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields })
})
it('Should fail if we register a user with the same username', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { username: 'root' })
2017-09-04 21:21:47 +02:00
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields,
statusCodeExpected: 409
})
2017-09-04 21:21:47 +02:00
})
it('Should fail if we register a user with the same email', async function () {
2017-12-28 15:25:31 +01:00
const fields = immutableAssign(baseCorrectParams, { email: 'admin1@example.com' })
2017-09-04 21:21:47 +02:00
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields,
statusCodeExpected: 409
})
2017-09-04 21:21:47 +02:00
})
it('Should succeed with the correct params', async function () {
2017-12-28 15:25:31 +01:00
await makePostBodyRequest({
url: server.url,
path: registrationPath,
token: server.accessToken,
fields: baseCorrectParams,
statusCodeExpected: 204
})
2017-09-04 21:21:47 +02:00
})
it('Should fail on a server with registration disabled', async function () {
const fields = {
username: 'user4',
email: 'test4@example.com',
password: 'my super password 4'
}
await makePostBodyRequest({
url: serverWithRegistrationDisabled.url,
path: registrationPath,
token: serverWithRegistrationDisabled.accessToken,
fields,
statusCodeExpected: 403
})
})
})
describe('When registering multiple users on a server with users limit', function () {
it('Should fail when after 3 registrations', async function () {
await registerUser(server.url, 'user42', 'super password', 403)
})
})
2017-09-06 16:35:40 +02:00
describe('When having a video quota', function () {
it('Should fail with a user having too many video', async function () {
2017-12-28 15:25:31 +01:00
await updateUser({
url: server.url,
userId: rootId,
accessToken: server.accessToken,
2017-09-06 16:35:40 +02:00
videoQuota: 42
2017-12-28 15:25:31 +01:00
})
2017-09-06 16:35:40 +02:00
2017-12-28 15:25:31 +01:00
await uploadVideo(server.url, server.accessToken, {}, 403)
2017-09-06 16:35:40 +02:00
})
it('Should fail with a registered user having too many video', async function () {
this.timeout(10000)
2017-12-28 15:25:31 +01:00
const user = {
2017-09-06 16:35:40 +02:00
username: 'user3',
password: 'my super password'
}
2017-12-28 15:25:31 +01:00
userAccessToken = await userLogin(server, user)
2017-09-06 16:35:40 +02:00
const videoAttributes = { fixture: 'video_short2.webm' }
await uploadVideo(server.url, userAccessToken, videoAttributes)
await uploadVideo(server.url, userAccessToken, videoAttributes)
await uploadVideo(server.url, userAccessToken, videoAttributes)
await uploadVideo(server.url, userAccessToken, videoAttributes)
await uploadVideo(server.url, userAccessToken, videoAttributes)
await uploadVideo(server.url, userAccessToken, videoAttributes, 403)
})
})
2017-09-04 21:21:47 +02:00
after(async function () {
killallServers([ server, serverWithRegistrationDisabled ])
// Keep the logs if the test failed
if (this['ok']) {
await flushTests()
}
})
})