- await createUser({
- url: server.url,
- accessToken: server.accessToken,
- username: moderator.username,
- password: moderator.password,
- role: UserRole.MODERATOR
- })
-
- moderatorAccessToken = await userLogin(server, moderator)
- }
-
- {
- const moderator = {
- username: 'moderator2',
- password: 'super password'
- }
-
- await createUser({
- url: server.url,
- accessToken: server.accessToken,
- username: moderator.username,
- password: moderator.password,
- role: UserRole.MODERATOR
- })
- }
-
- {
- const res = await getMyUserInformation(server.url, server.accessToken)
- channelId = res.body.videoChannels[0].id
- }
-
- {
- const res = await uploadVideo(server.url, server.accessToken, {})
- videoId = res.body.video.id
- }
-
- {
- const res = await getUsersList(server.url, server.accessToken)
- const users: User[] = res.body.data
-
- userId = users.find(u => u.username === 'user1').id
- rootId = users.find(u => u.username === 'root').id
- moderatorId = users.find(u => u.username === 'moderator2').id
- }
- })
-
- describe('When listing users', function () {
- it('Should fail with a bad start pagination', async function () {
- await checkBadStartPagination(server.url, path, server.accessToken)
- })
-
- it('Should fail with a bad count pagination', async function () {
- await checkBadCountPagination(server.url, path, server.accessToken)
- })
-
- it('Should fail with an incorrect sort', async function () {
- await checkBadSortPagination(server.url, path, server.accessToken)
- })
-
- it('Should fail with a non authenticated user', async function () {
- await makeGetRequest({
- url: server.url,
- path,
- statusCodeExpected: 401
- })
- })
-
- it('Should fail with a non admin user', async function () {
- await makeGetRequest({
- url: server.url,
- path,
- token: userAccessToken,
- statusCodeExpected: 403
- })
- })
- })
-
- describe('When adding a new user', function () {
- const baseCorrectParams = {
- username: 'user2',
- email: 'test@example.com',
- password: 'my super password',
- videoQuota: -1,
- videoQuotaDaily: -1,
- role: UserRole.USER,
- adminFlags: UserAdminFlag.BY_PASS_VIDEO_AUTO_BLACKLIST
- }
-
- it('Should fail with a too small username', async function () {
- const fields = immutableAssign(baseCorrectParams, { username: '' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with a too long username', async function () {
- const fields = immutableAssign(baseCorrectParams, { username: 'super'.repeat(50) })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with a not lowercase username', async function () {
- const fields = immutableAssign(baseCorrectParams, { username: 'Toto' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with an incorrect username', async function () {
- const fields = immutableAssign(baseCorrectParams, { username: 'my username' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with a missing email', async function () {
- const fields = omit(baseCorrectParams, 'email')
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with an invalid email', async function () {
- const fields = immutableAssign(baseCorrectParams, { email: 'test_example.com' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with a too small password', async function () {
- const fields = immutableAssign(baseCorrectParams, { password: 'bla' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with a too long password', async function () {
- const fields = immutableAssign(baseCorrectParams, { password: 'super'.repeat(61) })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with empty password and no smtp configured', async function () {
- const fields = immutableAssign(baseCorrectParams, { password: '' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should succeed with no password on a server with smtp enabled', async function () {
- this.timeout(10000)
-
- killallServers([ server ])
-
- const config = immutableAssign(overrideConfig, {
- smtp: {
- hostname: 'localhost',
- port: emailPort
- }
- })
- await reRunServer(server, config)
-
- const fields = immutableAssign(baseCorrectParams, {
- password: '',
- username: 'create_password',
- email: 'create_password@example.com'
- })
-
- await makePostBodyRequest({
- url: server.url,
- path: path,
- token: server.accessToken,
- fields,
- statusCodeExpected: 200
- })
- })
-
- it('Should fail with invalid admin flags', async function () {
- const fields = immutableAssign(baseCorrectParams, { adminFlags: 'toto' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with an non authenticated user', async function () {
- await makePostBodyRequest({
- url: server.url,
- path,
- token: 'super token',
- fields: baseCorrectParams,
- statusCodeExpected: 401
- })
- })
-
- it('Should fail if we add a user with the same username', async function () {
- const fields = immutableAssign(baseCorrectParams, { username: 'user1' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 409 })
- })
-
- it('Should fail if we add a user with the same email', async function () {
- const fields = immutableAssign(baseCorrectParams, { email: 'user1@example.com' })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 409 })
- })
-
- it('Should fail without a videoQuota', async function () {
- const fields = omit(baseCorrectParams, 'videoQuota')
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail without a videoQuotaDaily', async function () {
- const fields = omit(baseCorrectParams, 'videoQuotaDaily')
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with an invalid videoQuota', async function () {
- const fields = immutableAssign(baseCorrectParams, { videoQuota: -5 })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with an invalid videoQuotaDaily', async function () {
- const fields = immutableAssign(baseCorrectParams, { videoQuotaDaily: -7 })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail without a user role', async function () {
- const fields = omit(baseCorrectParams, 'role')
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with an invalid user role', async function () {
- const fields = immutableAssign(baseCorrectParams, { role: 88989 })
-
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail with a "peertube" username', async function () {
- const fields = immutableAssign(baseCorrectParams, { username: 'peertube' })
-
- await makePostBodyRequest({
- url: server.url,
- path,
- token: server.accessToken,
- fields,
- statusCodeExpected: 409
- })
- })
-
- it('Should fail to create a moderator or an admin with a moderator', async function () {
- for (const role of [ UserRole.MODERATOR, UserRole.ADMINISTRATOR ]) {
- const fields = immutableAssign(baseCorrectParams, { role })
-
- await makePostBodyRequest({
- url: server.url,
- path,
- token: moderatorAccessToken,
- fields,
- statusCodeExpected: 403
- })
- }
- })
-
- it('Should succeed to create a user with a moderator', async function () {
- const fields = immutableAssign(baseCorrectParams, { username: 'a4656', email: 'a4656@example.com', role: UserRole.USER })
-
- await makePostBodyRequest({
- url: server.url,
- path,
- token: moderatorAccessToken,
- fields,
- statusCodeExpected: 200
- })
- })
-
- it('Should succeed with the correct params', async function () {
- await makePostBodyRequest({
- url: server.url,
- path,
- token: server.accessToken,
- fields: baseCorrectParams,
- statusCodeExpected: 200
- })
- })
-
- it('Should fail with a non admin user', async function () {
- const user = {
- username: 'user1',
- password: 'my super password'
- }
- userAccessToken = await userLogin(server, user)
-
- const fields = {
- username: 'user3',
- email: 'test@example.com',
- password: 'my super password',
- videoQuota: 42000000
- }
- await makePostBodyRequest({ url: server.url, path, token: userAccessToken, fields, statusCodeExpected: 403 })
- })
- })
-
- describe('When updating my account', function () {
- it('Should fail with an invalid email attribute', async function () {
- const fields = {
- email: 'blabla'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: server.accessToken, fields })
- })
-
- it('Should fail with a too small password', async function () {
- const fields = {
- currentPassword: 'my super password',
- password: 'bla'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with a too long password', async function () {
- const fields = {
- currentPassword: 'my super password',
- password: 'super'.repeat(61)
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail without the current password', async function () {
- const fields = {
- currentPassword: 'my super password',
- password: 'super'.repeat(61)
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an invalid current password', async function () {
- const fields = {
- currentPassword: 'my super password fail',
- password: 'super'.repeat(61)
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields, statusCodeExpected: 401 })
- })
-
- it('Should fail with an invalid NSFW policy attribute', async function () {
- const fields = {
- nsfwPolicy: 'hello'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an invalid autoPlayVideo attribute', async function () {
- const fields = {
- autoPlayVideo: -1
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an invalid autoPlayNextVideo attribute', async function () {
- const fields = {
- autoPlayNextVideo: -1
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an invalid videosHistoryEnabled attribute', async function () {
- const fields = {
- videosHistoryEnabled: -1
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an non authenticated user', async function () {
- const fields = {
- currentPassword: 'my super password',
- password: 'my super password'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: 'super token', fields, statusCodeExpected: 401 })
- })
-
- it('Should fail with a too long description', async function () {
- const fields = {
- description: 'super'.repeat(201)
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an invalid videoLanguages attribute', async function () {
- {
- const fields = {
- videoLanguages: 'toto'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- }
-
- {
- const languages = []
- for (let i = 0; i < 1000; i++) {
- languages.push('fr')
- }
-
- const fields = {
- videoLanguages: languages
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- }
- })
-
- it('Should fail with an invalid theme', async function () {
- const fields = { theme: 'invalid' }
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an unknown theme', async function () {
- const fields = { theme: 'peertube-theme-unknown' }
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an invalid noInstanceConfigWarningModal attribute', async function () {
- const fields = {
- noInstanceConfigWarningModal: -1
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should fail with an invalid noWelcomeModal attribute', async function () {
- const fields = {
- noWelcomeModal: -1
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields })
- })
-
- it('Should succeed to change password with the correct params', async function () {
- const fields = {
- currentPassword: 'my super password',
- password: 'my super password',
- nsfwPolicy: 'blur',
- autoPlayVideo: false,
- email: 'super_email@example.com',
- theme: 'default',
- noInstanceConfigWarningModal: true,
- noWelcomeModal: true
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields, statusCodeExpected: 204 })
- })
-
- it('Should succeed without password change with the correct params', async function () {
- const fields = {
- nsfwPolicy: 'blur',
- autoPlayVideo: false
- }
-
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields, statusCodeExpected: 204 })
- })
- })
-
- describe('When updating my avatar', function () {
- it('Should fail without an incorrect input file', async function () {
- const fields = {}
- const attaches = {
- avatarfile: join(__dirname, '..', '..', 'fixtures', 'video_short.mp4')
- }
- await makeUploadRequest({ url: server.url, path: path + '/me/avatar/pick', token: server.accessToken, fields, attaches })
- })
-
- it('Should fail with a big file', async function () {
- const fields = {}
- const attaches = {
- avatarfile: join(__dirname, '..', '..', 'fixtures', 'avatar-big.png')
- }
- await makeUploadRequest({ url: server.url, path: path + '/me/avatar/pick', token: server.accessToken, fields, attaches })
- })
-
- it('Should fail with an unauthenticated user', async function () {
- const fields = {}
- const attaches = {
- avatarfile: join(__dirname, '..', '..', 'fixtures', 'avatar.png')
- }
- await makeUploadRequest({
- url: server.url,
- path: path + '/me/avatar/pick',
- fields,
- attaches,
- statusCodeExpected: 401
- })
- })
-
- it('Should succeed with the correct params', async function () {
- const fields = {}
- const attaches = {
- avatarfile: join(__dirname, '..', '..', 'fixtures', 'avatar.png')
- }
- await makeUploadRequest({
- url: server.url,
- path: path + '/me/avatar/pick',
- token: server.accessToken,
- fields,
- attaches,
- statusCodeExpected: 200
- })
- })
- })
-
- describe('When getting a user', function () {
-
- it('Should fail with an non authenticated user', async function () {
- await makeGetRequest({ url: server.url, path: path + userId, token: 'super token', statusCodeExpected: 401 })
- })
-
- it('Should fail with a non admin user', async function () {
- await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: 403 })
- })
-
- it('Should succeed with the correct params', async function () {
- await makeGetRequest({ url: server.url, path: path + userId, token: server.accessToken, statusCodeExpected: 200 })
- })
- })
-
- describe('When updating a user', function () {
-
- it('Should fail with an invalid email attribute', async function () {
- const fields = {
- email: 'blabla'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
- })
-
- it('Should fail with an invalid emailVerified attribute', async function () {
- const fields = {
- emailVerified: 'yes'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
- })
-
- it('Should fail with an invalid videoQuota attribute', async function () {
- const fields = {
- videoQuota: -90
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
- })
-
- it('Should fail with an invalid user role attribute', async function () {
- const fields = {
- role: 54878
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
- })
-
- it('Should fail with a too small password', async function () {
- const fields = {
- currentPassword: 'my super password',
- password: 'bla'
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
- })
-
- it('Should fail with a too long password', async function () {
- const fields = {
- currentPassword: 'my super password',
- password: 'super'.repeat(61)
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields })
- })
-
- it('Should fail with an non authenticated user', async function () {
- const fields = {
- videoQuota: 42
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: 'super token', fields, statusCodeExpected: 401 })
- })
-
- it('Should fail when updating root role', async function () {
- const fields = {
- role: UserRole.MODERATOR
- }
-
- await makePutBodyRequest({ url: server.url, path: path + rootId, token: server.accessToken, fields })
- })
-
- it('Should fail with invalid admin flags', async function () {
- const fields = { adminFlags: 'toto' }
-
- await makePutBodyRequest({ url: server.url, path, token: server.accessToken, fields })
- })
-
- it('Should fail to update an admin with a moderator', async function () {
- const fields = {
- videoQuota: 42
- }
-
- await makePutBodyRequest({
- url: server.url,
- path: path + moderatorId,
- token: moderatorAccessToken,
- fields,
- statusCodeExpected: 403
- })
- })
-
- it('Should succeed to update a user with a moderator', async function () {
- const fields = {
- videoQuota: 42
- }
-
- await makePutBodyRequest({
- url: server.url,
- path: path + userId,
- token: moderatorAccessToken,
- fields,
- statusCodeExpected: 204
- })
- })
-
- it('Should succeed with the correct params', async function () {
- const fields = {
- email: 'email@example.com',
- emailVerified: true,
- videoQuota: 42,
- role: UserRole.USER
- }
-
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields, statusCodeExpected: 204 })
- })
- })
-
- describe('When getting my information', function () {
- it('Should fail with a non authenticated user', async function () {
- await getMyUserInformation(server.url, 'fake_token', 401)
- })
-
- it('Should success with the correct parameters', async function () {
- await getMyUserInformation(server.url, userAccessToken)
- })
- })
-
- describe('When getting my video rating', function () {
- it('Should fail with a non authenticated user', async function () {
- await getMyUserVideoRating(server.url, 'fake_token', videoId, 401)
- })
-
- it('Should fail with an incorrect video uuid', async function () {
- await getMyUserVideoRating(server.url, server.accessToken, 'blabla', 400)
- })
-
- it('Should fail with an unknown video', async function () {
- await getMyUserVideoRating(server.url, server.accessToken, '4da6fde3-88f7-4d16-b119-108df5630b06', 404)
- })
-
- it('Should succeed with the correct parameters', async function () {
- await getMyUserVideoRating(server.url, server.accessToken, videoId)
- })
- })
-
- describe('When retrieving my global ratings', function () {
- const path = '/api/v1/accounts/user1/ratings'
-
- it('Should fail with a bad start pagination', async function () {
- await checkBadStartPagination(server.url, path, userAccessToken)
- })
-
- it('Should fail with a bad count pagination', async function () {
- await checkBadCountPagination(server.url, path, userAccessToken)
- })
-
- it('Should fail with an incorrect sort', async function () {
- await checkBadSortPagination(server.url, path, userAccessToken)
- })
-
- it('Should fail with a unauthenticated user', async function () {
- await makeGetRequest({ url: server.url, path, statusCodeExpected: 401 })
- })
-
- it('Should fail with a another user', async function () {
- await makeGetRequest({ url: server.url, path, token: server.accessToken, statusCodeExpected: 403 })
- })
-
- it('Should fail with a bad type', async function () {
- await makeGetRequest({ url: server.url, path, token: userAccessToken, query: { rating: 'toto ' }, statusCodeExpected: 400 })
- })
-
- it('Should succeed with the correct params', async function () {
- await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: 200 })
- })
- })
-
- describe('When blocking/unblocking/removing user', function () {
- it('Should fail with an incorrect id', async function () {
- await removeUser(server.url, 'blabla', server.accessToken, 400)
- await blockUser(server.url, 'blabla', server.accessToken, 400)
- await unblockUser(server.url, 'blabla', server.accessToken, 400)
- })
-
- it('Should fail with the root user', async function () {
- await removeUser(server.url, rootId, server.accessToken, 400)
- await blockUser(server.url, rootId, server.accessToken, 400)
- await unblockUser(server.url, rootId, server.accessToken, 400)
- })
-
- it('Should return 404 with a non existing id', async function () {
- await removeUser(server.url, 4545454, server.accessToken, 404)
- await blockUser(server.url, 4545454, server.accessToken, 404)
- await unblockUser(server.url, 4545454, server.accessToken, 404)
- })
-
- it('Should fail with a non admin user', async function () {
- await removeUser(server.url, userId, userAccessToken, 403)
- await blockUser(server.url, userId, userAccessToken, 403)
- await unblockUser(server.url, userId, userAccessToken, 403)
- })
-
- it('Should fail on a moderator with a moderator', async function () {
- await removeUser(server.url, moderatorId, moderatorAccessToken, 403)
- await blockUser(server.url, moderatorId, moderatorAccessToken, 403)
- await unblockUser(server.url, moderatorId, moderatorAccessToken, 403)
- })
-
- it('Should succeed on a user with a moderator', async function () {
- await blockUser(server.url, userId, moderatorAccessToken)
- await unblockUser(server.url, userId, moderatorAccessToken)
- })
- })
-
- describe('When deleting our account', function () {
- it('Should fail with with the root account', async function () {
- await deleteMe(server.url, server.accessToken, 400)
- })