tachybase_todo/packages/plugins/acl/src/__tests__/middleware.test.ts
ChengLei Shao 24ea83f0ff
Feat/create nocobase app (#273)
* create-nocobase-app template from [develop]

* change create-nocobase-app package.json config

* feat: load configuration from directory

* feat: configuration repository toObject

* feat: create application from configuration dir

* feat: application factory with plugins options

* export type

* feat: read application config &  application with plugins options

* feat: release command

* fix: database release

* chore: workflow package.json

* feat: nocobase cli package

* feat: console command

* chore: load application in command

* fix: load packages from process.cwd

* feat: cli load env file

* feat: create-nocobase-app

* fix: gitignore create-nocobase-app lib

* fix: sqlite path

* feat: create plugin

* chore: plugin files template

* chore: move cli into application

* chore: create-nocobase-app

* fix: create plugin

* chore: app-client && app-server

* chore: package.json

* feat: create-nocobase-app download template from npm

* chore: create-nocobase-app template

* fix: config of plugin-users

* fix: yarn.lock

* fix: database build error

* fix: yarn.lock

* fix: resourcer config

* chore: cross-env

* chore: app-client dependents

* fix: env

* chore: v0.6.0-alpha.1

* chore: verdaccio

* chore(versions): 😊 publish v0.6.0

* chore(versions): 😊 publish v0.6.1-alpha.0

* chore(versions): 😊 publish v0.6.2-alpha.0

* chore(versions): 😊 publish v0.6.2-alpha.1

* chore: 0.6.2-alpha.2

* feat: workspaces

* chore(versions): 😊 publish v0.6.2-alpha.3

* chore(versions): 😊 publish v0.6.2-alpha.4

* chore: create-nocobase-app

* chore: create-nocobase-app lib

* fix: update tsconfig.jest.json

* chore: .env

* chore(versions): 😊 publish v0.6.2-alpha.5

* chore(versions): 😊 publish v0.6.2-alpha.6

* feat: improve code

* chore(versions): 😊 publish v0.6.2-alpha.7

* fix: cleanup

* chore(versions): 😊 publish v0.6.2-alpha.8

* chore: tsconfig for app server package

* fix: move files

* fix: move files

Co-authored-by: chenos <chenlinxh@gmail.com>
2022-04-17 10:00:42 +08:00

234 lines
5.1 KiB
TypeScript

import { ACL } from '@nocobase/acl';
import { Database, Model } from '@nocobase/database';
import { MockServer } from '@nocobase/test';
import { changeMockUser, prepareApp } from './prepare';
describe('middleware', () => {
let app: MockServer;
let role: Model;
let db: Database;
let acl: ACL;
beforeEach(async () => {
app = await prepareApp();
db = app.db;
acl = app.acl;
await db.getRepository('roles').create({
values: {
name: 'admin',
title: 'Admin User',
allowConfigure: true,
},
});
role = await db.getRepository('roles').findOne({
filter: {
name: 'admin',
},
});
await db.getRepository('collections').create({
values: {
name: 'posts',
},
context: {},
});
await db.getRepository('collections.fields', 'posts').create({
values: {
name: 'title',
type: 'string',
},
context: {},
});
await db.getRepository('collections.fields', 'posts').create({
values: {
name: 'description',
type: 'string',
},
context: {},
});
await db.getRepository('collections.fields', 'posts').create({
values: {
name: 'createdById',
type: 'integer',
},
context: {},
});
});
afterEach(async () => {
await app.destroy();
});
it('should throw 403 when no permission', async () => {
const response = await app.agent().resource('posts').create({
values: {},
});
expect(response.statusCode).toEqual(403);
});
it('should return 200 when role has permission', async () => {
await db.getRepository('roles').update({
filterByTk: 'admin',
values: {
strategy: {
actions: ['create:all'],
},
},
});
const response = await app.agent().resource('posts').create({
values: {},
});
expect(response.statusCode).toEqual(200);
});
it('should limit fields on view actions', async () => {
await app
.agent()
.resource('roles.resources', role.get('name'))
.create({
values: {
name: 'posts',
usingActionsConfig: true,
actions: [
{
name: 'create',
fields: ['title', 'description'],
},
{
name: 'view',
fields: ['title'],
},
],
},
});
await app
.agent()
.resource('posts')
.create({
values: {
title: 'post-title',
description: 'post-description',
},
});
const post = await db.getRepository('posts').findOne();
expect(post.get('title')).toEqual('post-title');
expect(post.get('description')).toEqual('post-description');
const response = await app.agent().resource('posts').list({});
expect(response.statusCode).toEqual(200);
const data = response.body.data[0];
expect(data['id']).not.toBeUndefined();
expect(data['title']).toEqual('post-title');
expect(data['description']).toBeUndefined();
});
it('should parse template value on action params', async () => {
changeMockUser({
id: 2,
});
const res = await app
.agent()
.resource('rolesResourcesScopes')
.create({
values: {
name: 'own',
scope: {
createdById: '{{ ctx.state.currentUser.id }}',
},
},
});
await app
.agent()
.resource('roles.resources', role.get('name'))
.create({
values: {
name: 'posts',
usingActionsConfig: true,
actions: [
{
name: 'create',
fields: ['title', 'description', 'createdById'],
},
{
name: 'view',
fields: ['title'],
scope: res.body.data.id,
},
],
},
});
await app
.agent()
.resource('posts')
.create({
values: {
title: 't1',
description: 'd1',
createdById: 1,
},
});
await app
.agent()
.resource('posts')
.create({
values: {
title: 't2',
description: 'p2',
createdById: 2,
},
});
const response = await app.agent().resource('posts').list();
const data = response.body.data;
expect(data.length).toEqual(1);
});
it('should change fields params to whitelist in create action', async () => {
await app
.agent()
.resource('roles.resources', role.get('name'))
.create({
values: {
name: 'posts',
usingActionsConfig: true,
actions: [
{
name: 'create',
fields: ['title'],
},
],
},
});
await app
.agent()
.resource('posts')
.create({
values: {
title: 'post-title',
description: 'post-description',
},
});
const post = await db.getRepository('posts').findOne();
expect(post.get('title')).toEqual('post-title');
expect(post.get('description')).toBeNull();
});
});