/* eslint-disable @typescript-eslint/no-unused-expressions,@typescript-eslint/require-await */
-import { omit } from 'lodash'
import 'mocha'
+import { expect } from 'chai'
+import { omit } from 'lodash'
import { join } from 'path'
import { User, UserRole, VideoImport, VideoImportState } from '../../../../shared'
-
import {
addVideoChannel,
blockUser,
flushAndRunServer,
getMyUserInformation,
getMyUserVideoRating,
+ getUserScopedTokens,
getUsersList,
immutableAssign,
+ killallServers,
makeGetRequest,
makePostBodyRequest,
makePutBodyRequest,
makeUploadRequest,
registerUser,
removeUser,
+ renewUserScopedTokens,
+ reRunServer,
ServerInfo,
setAccessTokensToServers,
unblockUser,
uploadVideo,
userLogin
} from '../../../../shared/extra-utils'
+import { MockSmtpServer } from '../../../../shared/extra-utils/miscs/email'
import {
checkBadCountPagination,
checkBadSortPagination,
checkBadStartPagination
} from '../../../../shared/extra-utils/requests/check-api-params'
-import { getMagnetURI, getMyVideoImports, getYoutubeVideoUrl, importVideo } from '../../../../shared/extra-utils/videos/video-imports'
-import { VideoPrivacy } from '../../../../shared/models/videos'
import { waitJobs } from '../../../../shared/extra-utils/server/jobs'
-import { expect } from 'chai'
+import { getGoodVideoUrl, getMagnetURI, getMyVideoImports, importVideo } from '../../../../shared/extra-utils/videos/video-imports'
import { UserAdminFlag } from '../../../../shared/models/users/user-flag.model'
+import { VideoPrivacy } from '../../../../shared/models/videos'
+import { HttpStatusCode } from '../../../../shared/core-utils/miscs/http-error-codes'
describe('Test users API validators', function () {
const path = '/api/v1/users/'
let serverWithRegistrationDisabled: ServerInfo
let userAccessToken = ''
let moderatorAccessToken = ''
- // eslint-disable-next-line @typescript-eslint/no-unused-vars
- let channelId: number
+ let emailPort: number
+ let overrideConfig: Object
// ---------------------------------------------------------------
before(async function () {
this.timeout(30000)
+ const emails: object[] = []
+ emailPort = await MockSmtpServer.Instance.collectEmails(emails)
+
+ overrideConfig = { signup: { limit: 8 } }
+
{
const res = await Promise.all([
- flushAndRunServer(1, { signup: { limit: 7 } }),
+ flushAndRunServer(1, overrideConfig),
flushAndRunServer(2)
])
})
}
- {
- const res = await getMyUserInformation(server.url, server.accessToken)
- channelId = res.body.videoChannels[0].id
- }
-
{
const res = await uploadVideo(server.url, server.accessToken, {})
videoId = res.body.video.id
await makeGetRequest({
url: server.url,
path,
- statusCodeExpected: 401
+ statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
})
url: server.url,
path,
token: userAccessToken,
- statusCodeExpected: 403
+ statusCodeExpected: HttpStatusCode.FORBIDDEN_403
})
})
})
videoQuota: -1,
videoQuotaDaily: -1,
role: UserRole.USER,
- adminFlags: UserAdminFlag.BY_PASS_VIDEO_AUTO_BLACKLIST
+ adminFlags: UserAdminFlag.BYPASS_VIDEO_AUTO_BLACKLIST
}
it('Should fail with a too small username', async function () {
await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
})
+ it('Should fail with empty password and no smtp configured', async function () {
+ const fields = immutableAssign(baseCorrectParams, { password: '' })
+
+ await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields })
+ })
+
+ it('Should succeed with no password on a server with smtp enabled', async function () {
+ this.timeout(20000)
+
+ killallServers([ server ])
+
+ const config = immutableAssign(overrideConfig, {
+ smtp: {
+ hostname: 'localhost',
+ port: emailPort
+ }
+ })
+ await reRunServer(server, config)
+
+ const fields = immutableAssign(baseCorrectParams, {
+ password: '',
+ username: 'create_password',
+ email: 'create_password@example.com'
+ })
+
+ await makePostBodyRequest({
+ url: server.url,
+ path: path,
+ token: server.accessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.OK_200
+ })
+ })
+
it('Should fail with invalid admin flags', async function () {
const fields = immutableAssign(baseCorrectParams, { adminFlags: 'toto' })
path,
token: 'super token',
fields: baseCorrectParams,
- statusCodeExpected: 401
+ statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
})
it('Should fail if we add a user with the same username', async function () {
const fields = immutableAssign(baseCorrectParams, { username: 'user1' })
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 409 })
+ await makePostBodyRequest({
+ url: server.url,
+ path,
+ token: server.accessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.CONFLICT_409
+ })
})
it('Should fail if we add a user with the same email', async function () {
const fields = immutableAssign(baseCorrectParams, { email: 'user1@example.com' })
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 409 })
+ await makePostBodyRequest({
+ url: server.url,
+ path,
+ token: server.accessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.CONFLICT_409
+ })
})
it('Should fail without a videoQuota', async function () {
path,
token: server.accessToken,
fields,
- statusCodeExpected: 409
+ statusCodeExpected: HttpStatusCode.CONFLICT_409
})
})
path,
token: moderatorAccessToken,
fields,
- statusCodeExpected: 403
+ statusCodeExpected: HttpStatusCode.FORBIDDEN_403
})
}
})
path,
token: moderatorAccessToken,
fields,
- statusCodeExpected: 200
+ statusCodeExpected: HttpStatusCode.OK_200
})
})
path,
token: server.accessToken,
fields: baseCorrectParams,
- statusCodeExpected: 200
+ statusCodeExpected: HttpStatusCode.OK_200
})
})
password: 'my super password',
videoQuota: 42000000
}
- await makePostBodyRequest({ url: server.url, path, token: userAccessToken, fields, statusCodeExpected: 403 })
+ await makePostBodyRequest({ url: server.url, path, token: userAccessToken, fields, statusCodeExpected: HttpStatusCode.FORBIDDEN_403 })
})
})
password: 'super'.repeat(61)
}
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields, statusCodeExpected: 401 })
+ await makePutBodyRequest({
+ url: server.url,
+ path: path + 'me',
+ token: userAccessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
+ })
})
it('Should fail with an invalid NSFW policy attribute', async function () {
password: 'my super password'
}
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: 'super token', fields, statusCodeExpected: 401 })
+ await makePutBodyRequest({
+ url: server.url,
+ path: path + 'me',
+ token: 'super token',
+ fields,
+ statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
+ })
})
it('Should fail with a too long description', async function () {
noWelcomeModal: true
}
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields, statusCodeExpected: 204 })
+ await makePutBodyRequest({
+ url: server.url,
+ path: path + 'me',
+ token: userAccessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.NO_CONTENT_204
+ })
})
it('Should succeed without password change with the correct params', async function () {
autoPlayVideo: false
}
- await makePutBodyRequest({ url: server.url, path: path + 'me', token: userAccessToken, fields, statusCodeExpected: 204 })
+ await makePutBodyRequest({
+ url: server.url,
+ path: path + 'me',
+ token: userAccessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.NO_CONTENT_204
+ })
})
})
path: path + '/me/avatar/pick',
fields,
attaches,
- statusCodeExpected: 401
+ statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
})
})
token: server.accessToken,
fields,
attaches,
- statusCodeExpected: 200
+ statusCodeExpected: HttpStatusCode.OK_200
})
})
})
+ describe('When managing my scoped tokens', function () {
+
+ it('Should fail to get my scoped tokens with an non authenticated user', async function () {
+ await getUserScopedTokens(server.url, null, HttpStatusCode.UNAUTHORIZED_401)
+ })
+
+ it('Should fail to get my scoped tokens with a bad token', async function () {
+ await getUserScopedTokens(server.url, 'bad', HttpStatusCode.UNAUTHORIZED_401)
+
+ })
+
+ it('Should succeed to get my scoped tokens', async function () {
+ await getUserScopedTokens(server.url, server.accessToken)
+ })
+
+ it('Should fail to renew my scoped tokens with an non authenticated user', async function () {
+ await renewUserScopedTokens(server.url, null, HttpStatusCode.UNAUTHORIZED_401)
+ })
+
+ it('Should fail to renew my scoped tokens with a bad token', async function () {
+ await renewUserScopedTokens(server.url, 'bad', HttpStatusCode.UNAUTHORIZED_401)
+ })
+
+ it('Should succeed to renew my scoped tokens', async function () {
+ await renewUserScopedTokens(server.url, server.accessToken)
+ })
+ })
+
describe('When getting a user', function () {
it('Should fail with an non authenticated user', async function () {
- await makeGetRequest({ url: server.url, path: path + userId, token: 'super token', statusCodeExpected: 401 })
+ await makeGetRequest({
+ url: server.url,
+ path: path + userId,
+ token: 'super token',
+ statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
+ })
})
it('Should fail with a non admin user', async function () {
- await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: 403 })
+ await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: HttpStatusCode.FORBIDDEN_403 })
})
it('Should succeed with the correct params', async function () {
- await makeGetRequest({ url: server.url, path: path + userId, token: server.accessToken, statusCodeExpected: 200 })
+ await makeGetRequest({ url: server.url, path: path + userId, token: server.accessToken, statusCodeExpected: HttpStatusCode.OK_200 })
})
})
videoQuota: 42
}
- await makePutBodyRequest({ url: server.url, path: path + userId, token: 'super token', fields, statusCodeExpected: 401 })
+ await makePutBodyRequest({
+ url: server.url,
+ path: path + userId,
+ token: 'super token',
+ fields,
+ statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401
+ })
})
it('Should fail when updating root role', async function () {
path: path + moderatorId,
token: moderatorAccessToken,
fields,
- statusCodeExpected: 403
+ statusCodeExpected: HttpStatusCode.FORBIDDEN_403
})
})
path: path + userId,
token: moderatorAccessToken,
fields,
- statusCodeExpected: 204
+ statusCodeExpected: HttpStatusCode.NO_CONTENT_204
})
})
role: UserRole.USER
}
- await makePutBodyRequest({ url: server.url, path: path + userId, token: server.accessToken, fields, statusCodeExpected: 204 })
+ await makePutBodyRequest({
+ url: server.url,
+ path: path + userId,
+ token: server.accessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.NO_CONTENT_204
+ })
})
})
describe('When getting my information', function () {
it('Should fail with a non authenticated user', async function () {
- await getMyUserInformation(server.url, 'fake_token', 401)
+ await getMyUserInformation(server.url, 'fake_token', HttpStatusCode.UNAUTHORIZED_401)
})
it('Should success with the correct parameters', async function () {
describe('When getting my video rating', function () {
it('Should fail with a non authenticated user', async function () {
- await getMyUserVideoRating(server.url, 'fake_token', videoId, 401)
+ await getMyUserVideoRating(server.url, 'fake_token', videoId, HttpStatusCode.UNAUTHORIZED_401)
})
it('Should fail with an incorrect video uuid', async function () {
- await getMyUserVideoRating(server.url, server.accessToken, 'blabla', 400)
+ await getMyUserVideoRating(server.url, server.accessToken, 'blabla', HttpStatusCode.BAD_REQUEST_400)
})
it('Should fail with an unknown video', async function () {
- await getMyUserVideoRating(server.url, server.accessToken, '4da6fde3-88f7-4d16-b119-108df5630b06', 404)
+ await getMyUserVideoRating(server.url, server.accessToken, '4da6fde3-88f7-4d16-b119-108df5630b06', HttpStatusCode.NOT_FOUND_404)
})
it('Should succeed with the correct parameters', async function () {
})
it('Should fail with a unauthenticated user', async function () {
- await makeGetRequest({ url: server.url, path, statusCodeExpected: 401 })
+ await makeGetRequest({ url: server.url, path, statusCodeExpected: HttpStatusCode.UNAUTHORIZED_401 })
})
it('Should fail with a another user', async function () {
- await makeGetRequest({ url: server.url, path, token: server.accessToken, statusCodeExpected: 403 })
+ await makeGetRequest({ url: server.url, path, token: server.accessToken, statusCodeExpected: HttpStatusCode.FORBIDDEN_403 })
})
it('Should fail with a bad type', async function () {
- await makeGetRequest({ url: server.url, path, token: userAccessToken, query: { rating: 'toto ' }, statusCodeExpected: 400 })
+ await makeGetRequest({
+ url: server.url,
+ path,
+ token: userAccessToken,
+ query: { rating: 'toto ' },
+ statusCodeExpected: HttpStatusCode.BAD_REQUEST_400
+ })
})
it('Should succeed with the correct params', async function () {
- await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: 200 })
+ await makeGetRequest({ url: server.url, path, token: userAccessToken, statusCodeExpected: HttpStatusCode.OK_200 })
})
})
describe('When blocking/unblocking/removing user', function () {
it('Should fail with an incorrect id', async function () {
- await removeUser(server.url, 'blabla', server.accessToken, 400)
- await blockUser(server.url, 'blabla', server.accessToken, 400)
- await unblockUser(server.url, 'blabla', server.accessToken, 400)
+ await removeUser(server.url, 'blabla', server.accessToken, HttpStatusCode.BAD_REQUEST_400)
+ await blockUser(server.url, 'blabla', server.accessToken, HttpStatusCode.BAD_REQUEST_400)
+ await unblockUser(server.url, 'blabla', server.accessToken, HttpStatusCode.BAD_REQUEST_400)
})
it('Should fail with the root user', async function () {
- await removeUser(server.url, rootId, server.accessToken, 400)
- await blockUser(server.url, rootId, server.accessToken, 400)
- await unblockUser(server.url, rootId, server.accessToken, 400)
+ await removeUser(server.url, rootId, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
+ await blockUser(server.url, rootId, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
+ await unblockUser(server.url, rootId, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
})
it('Should return 404 with a non existing id', async function () {
- await removeUser(server.url, 4545454, server.accessToken, 404)
- await blockUser(server.url, 4545454, server.accessToken, 404)
- await unblockUser(server.url, 4545454, server.accessToken, 404)
+ await removeUser(server.url, 4545454, server.accessToken, HttpStatusCode.NOT_FOUND_404)
+ await blockUser(server.url, 4545454, server.accessToken, HttpStatusCode.NOT_FOUND_404)
+ await unblockUser(server.url, 4545454, server.accessToken, HttpStatusCode.NOT_FOUND_404)
})
it('Should fail with a non admin user', async function () {
- await removeUser(server.url, userId, userAccessToken, 403)
- await blockUser(server.url, userId, userAccessToken, 403)
- await unblockUser(server.url, userId, userAccessToken, 403)
+ await removeUser(server.url, userId, userAccessToken, HttpStatusCode.FORBIDDEN_403)
+ await blockUser(server.url, userId, userAccessToken, HttpStatusCode.FORBIDDEN_403)
+ await unblockUser(server.url, userId, userAccessToken, HttpStatusCode.FORBIDDEN_403)
})
it('Should fail on a moderator with a moderator', async function () {
- await removeUser(server.url, moderatorId, moderatorAccessToken, 403)
- await blockUser(server.url, moderatorId, moderatorAccessToken, 403)
- await unblockUser(server.url, moderatorId, moderatorAccessToken, 403)
+ await removeUser(server.url, moderatorId, moderatorAccessToken, HttpStatusCode.FORBIDDEN_403)
+ await blockUser(server.url, moderatorId, moderatorAccessToken, HttpStatusCode.FORBIDDEN_403)
+ await unblockUser(server.url, moderatorId, moderatorAccessToken, HttpStatusCode.FORBIDDEN_403)
})
it('Should succeed on a user with a moderator', async function () {
describe('When deleting our account', function () {
it('Should fail with with the root account', async function () {
- await deleteMe(server.url, server.accessToken, 400)
+ await deleteMe(server.url, server.accessToken, HttpStatusCode.BAD_REQUEST_400)
})
})
path: registrationPath,
token: server.accessToken,
fields,
- statusCodeExpected: 409
+ statusCodeExpected: HttpStatusCode.CONFLICT_409
})
})
path: registrationPath,
token: server.accessToken,
fields,
- statusCodeExpected: 409
+ statusCodeExpected: HttpStatusCode.CONFLICT_409
})
})
path: registrationPath,
token: server.accessToken,
fields,
- statusCodeExpected: 409
+ statusCodeExpected: HttpStatusCode.CONFLICT_409
})
})
const fields = immutableAssign(baseCorrectParams, { channel: { name: 'existing_channel', displayName: 'toto' } })
- await makePostBodyRequest({ url: server.url, path: registrationPath, token: server.accessToken, fields, statusCodeExpected: 409 })
+ await makePostBodyRequest({
+ url: server.url,
+ path: registrationPath,
+ token: server.accessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.CONFLICT_409
+ })
})
it('Should succeed with the correct params', async function () {
path: registrationPath,
token: server.accessToken,
fields: fields,
- statusCodeExpected: 204
+ statusCodeExpected: HttpStatusCode.NO_CONTENT_204
})
})
path: registrationPath,
token: serverWithRegistrationDisabled.accessToken,
fields,
- statusCodeExpected: 403
+ statusCodeExpected: HttpStatusCode.FORBIDDEN_403
})
})
})
describe('When registering multiple users on a server with users limit', function () {
it('Should fail when after 3 registrations', async function () {
- await registerUser(server.url, 'user42', 'super password', 403)
+ await registerUser(server.url, 'user42', 'super password', HttpStatusCode.FORBIDDEN_403)
})
})
videoQuota: 42
})
- await uploadVideo(server.url, server.accessToken, {}, 403)
+ await uploadVideo(server.url, server.accessToken, {}, HttpStatusCode.PAYLOAD_TOO_LARGE_413)
})
it('Should fail with a registered user having too many videos', async function () {
await uploadVideo(server.url, userAccessToken, videoAttributes)
await uploadVideo(server.url, userAccessToken, videoAttributes)
await uploadVideo(server.url, userAccessToken, videoAttributes)
- await uploadVideo(server.url, userAccessToken, videoAttributes, 403)
+ await uploadVideo(server.url, userAccessToken, videoAttributes, HttpStatusCode.PAYLOAD_TOO_LARGE_413)
})
it('Should fail to import with HTTP/Torrent/magnet', async function () {
channelId: 1,
privacy: VideoPrivacy.PUBLIC
}
- await importVideo(server.url, server.accessToken, immutableAssign(baseAttributes, { targetUrl: getYoutubeVideoUrl() }))
+ await importVideo(server.url, server.accessToken, immutableAssign(baseAttributes, { targetUrl: getGoodVideoUrl() }))
await importVideo(server.url, server.accessToken, immutableAssign(baseAttributes, { magnetUri: getMagnetURI() }))
- await importVideo(server.url, server.accessToken, immutableAssign(baseAttributes, { torrentfile: 'video-720p.torrent' }))
+ await importVideo(server.url, server.accessToken, immutableAssign(baseAttributes, { torrentfile: 'video-720p.torrent' as any }))
await waitJobs([ server ])
})
describe('When having a daily video quota', function () {
- it('Should fail with a user having too many videos', async function () {
+ it('Should fail with a user having too many videos daily', async function () {
await updateUser({
url: server.url,
userId: rootId,
videoQuotaDaily: 42
})
- await uploadVideo(server.url, server.accessToken, {}, 403)
+ await uploadVideo(server.url, server.accessToken, {}, HttpStatusCode.PAYLOAD_TOO_LARGE_413)
})
})
videoQuotaDaily: 1024 * 1024 * 1024
})
- await uploadVideo(server.url, server.accessToken, {}, 403)
+ await uploadVideo(server.url, server.accessToken, {}, HttpStatusCode.PAYLOAD_TOO_LARGE_413)
})
it('Should fail if exceeding daily quota', async function () {
videoQuotaDaily: 42
})
- await uploadVideo(server.url, server.accessToken, {}, 403)
+ await uploadVideo(server.url, server.accessToken, {}, HttpStatusCode.PAYLOAD_TOO_LARGE_413)
})
})
it('Should success with the correct params', async function () {
const fields = { email: 'admin@example.com' }
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 204 })
+ await makePostBodyRequest({
+ url: server.url,
+ path,
+ token: server.accessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.NO_CONTENT_204
+ })
})
})
it('Should succeed with the correct params', async function () {
const fields = { email: 'admin@example.com' }
- await makePostBodyRequest({ url: server.url, path, token: server.accessToken, fields, statusCodeExpected: 204 })
+ await makePostBodyRequest({
+ url: server.url,
+ path,
+ token: server.accessToken,
+ fields,
+ statusCodeExpected: HttpStatusCode.NO_CONTENT_204
+ })
})
})
after(async function () {
+ MockSmtpServer.Instance.kill()
+
await cleanupTests([ server, serverWithRegistrationDisabled ])
})
})
projects / github / Chocobozzz / PeerTube.git / blobdiff