* create-nocobase-app template from [develop] * change create-nocobase-app package.json config * feat: load configuration from directory * feat: configuration repository toObject * feat: create application from configuration dir * feat: application factory with plugins options * export type * feat: read application config & application with plugins options * feat: release command * fix: database release * chore: workflow package.json * feat: nocobase cli package * feat: console command * chore: load application in command * fix: load packages from process.cwd * feat: cli load env file * feat: create-nocobase-app * fix: gitignore create-nocobase-app lib * fix: sqlite path * feat: create plugin * chore: plugin files template * chore: move cli into application * chore: create-nocobase-app * fix: create plugin * chore: app-client && app-server * chore: package.json * feat: create-nocobase-app download template from npm * chore: create-nocobase-app template * fix: config of plugin-users * fix: yarn.lock * fix: database build error * fix: yarn.lock * fix: resourcer config * chore: cross-env * chore: app-client dependents * fix: env * chore: v0.6.0-alpha.1 * chore: verdaccio * chore(versions): 😊 publish v0.6.0 * chore(versions): 😊 publish v0.6.1-alpha.0 * chore(versions): 😊 publish v0.6.2-alpha.0 * chore(versions): 😊 publish v0.6.2-alpha.1 * chore: 0.6.2-alpha.2 * feat: workspaces * chore(versions): 😊 publish v0.6.2-alpha.3 * chore(versions): 😊 publish v0.6.2-alpha.4 * chore: create-nocobase-app * chore: create-nocobase-app lib * fix: update tsconfig.jest.json * chore: .env * chore(versions): 😊 publish v0.6.2-alpha.5 * chore(versions): 😊 publish v0.6.2-alpha.6 * feat: improve code * chore(versions): 😊 publish v0.6.2-alpha.7 * fix: cleanup * chore(versions): 😊 publish v0.6.2-alpha.8 * chore: tsconfig for app server package * fix: move files * fix: move files Co-authored-by: chenos <chenlinxh@gmail.com>
234 lines
5.1 KiB
TypeScript
234 lines
5.1 KiB
TypeScript
import { ACL } from '@nocobase/acl';
|
|
import { Database, Model } from '@nocobase/database';
|
|
import { MockServer } from '@nocobase/test';
|
|
import { changeMockUser, prepareApp } from './prepare';
|
|
|
|
describe('middleware', () => {
|
|
let app: MockServer;
|
|
let role: Model;
|
|
let db: Database;
|
|
let acl: ACL;
|
|
|
|
beforeEach(async () => {
|
|
app = await prepareApp();
|
|
db = app.db;
|
|
acl = app.acl;
|
|
|
|
await db.getRepository('roles').create({
|
|
values: {
|
|
name: 'admin',
|
|
title: 'Admin User',
|
|
allowConfigure: true,
|
|
},
|
|
});
|
|
|
|
role = await db.getRepository('roles').findOne({
|
|
filter: {
|
|
name: 'admin',
|
|
},
|
|
});
|
|
|
|
await db.getRepository('collections').create({
|
|
values: {
|
|
name: 'posts',
|
|
},
|
|
context: {},
|
|
});
|
|
|
|
await db.getRepository('collections.fields', 'posts').create({
|
|
values: {
|
|
name: 'title',
|
|
type: 'string',
|
|
},
|
|
context: {},
|
|
});
|
|
|
|
await db.getRepository('collections.fields', 'posts').create({
|
|
values: {
|
|
name: 'description',
|
|
type: 'string',
|
|
},
|
|
context: {},
|
|
});
|
|
|
|
await db.getRepository('collections.fields', 'posts').create({
|
|
values: {
|
|
name: 'createdById',
|
|
type: 'integer',
|
|
},
|
|
context: {},
|
|
});
|
|
});
|
|
|
|
afterEach(async () => {
|
|
await app.destroy();
|
|
});
|
|
|
|
it('should throw 403 when no permission', async () => {
|
|
const response = await app.agent().resource('posts').create({
|
|
values: {},
|
|
});
|
|
|
|
expect(response.statusCode).toEqual(403);
|
|
});
|
|
|
|
it('should return 200 when role has permission', async () => {
|
|
await db.getRepository('roles').update({
|
|
filterByTk: 'admin',
|
|
values: {
|
|
strategy: {
|
|
actions: ['create:all'],
|
|
},
|
|
},
|
|
});
|
|
|
|
const response = await app.agent().resource('posts').create({
|
|
values: {},
|
|
});
|
|
|
|
expect(response.statusCode).toEqual(200);
|
|
});
|
|
|
|
it('should limit fields on view actions', async () => {
|
|
await app
|
|
.agent()
|
|
.resource('roles.resources', role.get('name'))
|
|
.create({
|
|
values: {
|
|
name: 'posts',
|
|
usingActionsConfig: true,
|
|
actions: [
|
|
{
|
|
name: 'create',
|
|
fields: ['title', 'description'],
|
|
},
|
|
{
|
|
name: 'view',
|
|
fields: ['title'],
|
|
},
|
|
],
|
|
},
|
|
});
|
|
|
|
await app
|
|
.agent()
|
|
.resource('posts')
|
|
.create({
|
|
values: {
|
|
title: 'post-title',
|
|
description: 'post-description',
|
|
},
|
|
});
|
|
|
|
const post = await db.getRepository('posts').findOne();
|
|
expect(post.get('title')).toEqual('post-title');
|
|
expect(post.get('description')).toEqual('post-description');
|
|
|
|
const response = await app.agent().resource('posts').list({});
|
|
expect(response.statusCode).toEqual(200);
|
|
|
|
const data = response.body.data[0];
|
|
|
|
expect(data['id']).not.toBeUndefined();
|
|
expect(data['title']).toEqual('post-title');
|
|
expect(data['description']).toBeUndefined();
|
|
});
|
|
|
|
it('should parse template value on action params', async () => {
|
|
changeMockUser({
|
|
id: 2,
|
|
});
|
|
|
|
const res = await app
|
|
.agent()
|
|
.resource('rolesResourcesScopes')
|
|
.create({
|
|
values: {
|
|
name: 'own',
|
|
scope: {
|
|
createdById: '{{ ctx.state.currentUser.id }}',
|
|
},
|
|
},
|
|
});
|
|
|
|
await app
|
|
.agent()
|
|
.resource('roles.resources', role.get('name'))
|
|
.create({
|
|
values: {
|
|
name: 'posts',
|
|
usingActionsConfig: true,
|
|
actions: [
|
|
{
|
|
name: 'create',
|
|
fields: ['title', 'description', 'createdById'],
|
|
},
|
|
{
|
|
name: 'view',
|
|
fields: ['title'],
|
|
scope: res.body.data.id,
|
|
},
|
|
],
|
|
},
|
|
});
|
|
|
|
await app
|
|
.agent()
|
|
.resource('posts')
|
|
.create({
|
|
values: {
|
|
title: 't1',
|
|
description: 'd1',
|
|
createdById: 1,
|
|
},
|
|
});
|
|
|
|
await app
|
|
.agent()
|
|
.resource('posts')
|
|
.create({
|
|
values: {
|
|
title: 't2',
|
|
description: 'p2',
|
|
createdById: 2,
|
|
},
|
|
});
|
|
|
|
const response = await app.agent().resource('posts').list();
|
|
const data = response.body.data;
|
|
expect(data.length).toEqual(1);
|
|
});
|
|
|
|
it('should change fields params to whitelist in create action', async () => {
|
|
await app
|
|
.agent()
|
|
.resource('roles.resources', role.get('name'))
|
|
.create({
|
|
values: {
|
|
name: 'posts',
|
|
usingActionsConfig: true,
|
|
actions: [
|
|
{
|
|
name: 'create',
|
|
fields: ['title'],
|
|
},
|
|
],
|
|
},
|
|
});
|
|
|
|
await app
|
|
.agent()
|
|
.resource('posts')
|
|
.create({
|
|
values: {
|
|
title: 'post-title',
|
|
description: 'post-description',
|
|
},
|
|
});
|
|
|
|
const post = await db.getRepository('posts').findOne();
|
|
expect(post.get('title')).toEqual('post-title');
|
|
expect(post.get('description')).toBeNull();
|
|
});
|
|
});
|