All files / app/routes/api/user/settings/change-password change-password.integration.spec.ts

100% Statements 47/47
100% Branches 0/0
100% Functions 15/15
100% Lines 47/47

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 1471x 1x 1x 1x 1x         1x   1x           1x 8x 8x 8x   8x 8x     1x 1x 1x       1x 1x 1x 1x 1x         1x     1x 1x             1x   1x             1x   1x             1x       1x 1x 1x       1x     1x 1x             1x   1x             1x         1x   1x               1x     1x   1x               1x       1x   1x               1x        
import {TestContext, TestUtils} from '../../../../../util/test-utils.spec';
import supertest from 'supertest';
import app from '../../../../../app';
import {expect} from 'chai';
import {
  IncorrectPasswordError,
  NewPasswordMustBeDifferentError,
} from '../../../../../errors';
 
const basePath = '/api/user/settings/change-password';
 
describe('post ' + basePath, function() {
  let agent: supertest.SuperAgentTest;
  let user: TestContext['user'];
  let oldPassword: string;
  let newPassword: string;
 
  beforeEach(async function() {
    const testContext = await TestUtils.setupIntegrationTest();
    agent = testContext.agent;
    user = testContext.user;
 
    oldPassword = user.password;
    newPassword = user.password + '_NEW';
  });
 
  describe('if user not logged in', function() {
    it('responses with UnauthorizedError', function() {
      return supertest(app).post(basePath).send().expect(401);
    });
  });
 
  describe('if user is logged in', function() {
    describe('rejects with BadRequestError if', function() {
      describe('oldPassword ', function() {
        it('is missing', async function() {
          const res = await agent
              .post(basePath)
              .send({newPassword})
              .expect(400);
 
          expect(res.body.message).to.contain('has to be a string');
        });
 
        it('is not a string', async function() {
          let res = await agent
              .post(basePath)
              .send({
                newPassword,
                oldPassword: 1,
              })
              .expect(400);
          expect(res.body.message).to.contain('has to be a string');
 
          res = await agent
              .post(basePath)
              .send({
                newPassword,
                oldPassword: {password: 'test'},
              })
              .expect(400);
          expect(res.body.message).to.contain('has to be a string');
 
          res = await agent
              .post(basePath)
              .send({
                newPassword,
                oldPassword: '',
              })
              .expect(400);
          expect(res.body.message).to.contain('has to be a non-empty string');
        });
      });
 
      describe('newPassword ', function() {
        it('is missing', async function() {
          const res = await agent
              .post(basePath)
              .send({newPassword})
              .expect(400);
          expect(res.body.message).to.contain('has to be a string');
        });
 
        it('is not a string', async function() {
          let res = await agent
              .post(basePath)
              .send({
                oldPassword,
                newPassword: 1,
              })
              .expect(400);
          expect(res.body.message).to.contain('has to be a string');
 
          res = await agent
              .post(basePath)
              .send({
                oldPassword,
                newPassword: {password: 'test'},
              })
              .expect(400);
          expect(res.body.message).to.contain('has to be a string');
        });
      });
    });
 
    it('rejects with 401 IncorrectPasswordError if oldPassword doesn\'t ' +
      'match new password', async function() {
      const res = await agent
          .post(basePath)
          .send({
            newPassword,
            oldPassword: oldPassword + '_incorrect',
          })
          .expect(401);
 
      expect(res.body.message).to.contain(new IncorrectPasswordError().message);
    });
 
    it('rejects with 400 NewPasswordMustBeDifferentError ' +
      'if newPassword is the same as oldPassword', async function() {
      const res = await agent
          .post(basePath)
          .send({
            oldPassword,
            newPassword: oldPassword,
          })
          .expect(400);
 
      expect(res.body.message).to
          .contain(new NewPasswordMustBeDifferentError().message);
    });
 
    it('successfully changes the user\'s password ' +
      'to newPassword', async function() {
      const res = await agent
          .post(basePath)
          .send({
            oldPassword,
            newPassword,
          })
          .expect(204);
 
      expect(res.body.message).to.be.undefined;
    });
  });
});