"use strict"; const assert = require("assert").strict; const users = require("lib/users"); describe("lib/users", function() { describe("definePermission()", function() { it("should validate the types of its arguments", function() { assert.throws( () => users.definePermission({ name: 123, title: "Test", description: "A test" }), new Error("Expected name to be a non-empty string") ); assert.throws( () => users.definePermission({ name: "test", title: 123, description: "A test" }), new Error("Expected title to be a non-empty string") ); assert.throws( () => users.definePermission({ name: "test", title: "Test", description: 123 }), new Error("Expected description to be a non-empty string") ); assert.throws( () => users.definePermission({ name: "test", title: "Test", description: "A test", grantByDefault: 1 }), new Error("Expected grantByDefault to be a boolean") ); }); it("should define a permission", function() { users.definePermission({ name: "test", title: "Test", description: "A test" }); assert(users.permissions.has("test"), "Permission was not defined"); let test = users.permissions.get("test"); assert.equal(test.name, "test"); assert.equal(test.title, "Test"); assert.equal(test.description, "A test"); assert.equal(test.grantByDefault, false); }); it("should throw on already defined permission", function() { assert.throws( () => users.definePermission({ name: "test", title: "Test", description: "A test" }), new Error("Permission 'test' is already defined") ); }); }); describe("class Role", function() { it("should round trip serialize", function() { let orig = new users.Role({ id: 11, name: "Role", description: "My Role", permissions: ["test"] }); let copy = new users.Role(orig.serialize()); assert.deepEqual(copy, orig); }); describe(".grantDefaultRoles()", function() { it("should only grant permissions with grantByDefault", function() { let role = new users.Role({ id: 11, name: "Role", description: "My Role" }); role.grantDefaultPermissions(); assert(role.permissions.size > 0, "No permissions were granted"); for (let permission of role.permissions) { assert( users.permissions.get(permission).grantByDefault === true, "Non-default permission granted" ); } }); }); }); describe("class User", function() { let roles = new Map([ [1, new users.Role({ id: 1, name: "a", description: "a role", permissions: ["core.admin"] })], [2, new users.Role({ id: 2, name: "b", description: "b role", permissions: ["test"] })], ]); it("should round trip serialize", function() { let orig = new users.User({ name: "admin", roles: [1] }, roles); let copy = new users.User(orig.serialize(), roles); assert.deepEqual(copy, orig); orig = new users.User({ name: "user", roles: [2], tokenValidAfter: 12345 }, roles); copy = new users.User(orig.serialize(), roles); assert.deepEqual(copy, orig); }); it("should track online users", function() { let user = new users.User({ name: "admin", roles: [1] }, roles); assert(!users.User.onlineUsers.has(user)); assert.deepEqual(user.instances, new Set()); user.notifyJoin(12); assert(users.User.onlineUsers.has(user)); assert.deepEqual(user.instances, new Set([12])); user.notifyJoin(8); assert(users.User.onlineUsers.has(user)); assert.deepEqual(user.instances, new Set([12, 8])); user.notifyLeave(11); assert(users.User.onlineUsers.has(user)); assert.deepEqual(user.instances, new Set([12, 8])); user.notifyLeave(12); assert(users.User.onlineUsers.has(user)); assert.deepEqual(user.instances, new Set([8])); user.notifyLeave(8); assert(!users.User.onlineUsers.has(user)); assert.deepEqual(user.instances, new Set()); }); describe(".checkPermission()", function() { it("should correctly resolve permissions", function() { let a = new users.User({ name: "admin", roles: [1] }, roles); let b = new users.User({ name: "user", roles: [2] }, roles); let c = new users.User({ name: "null", roles: [] }, roles); a.checkPermission("core.control.connect"); assert.throws(() => b.checkPermission("core.control.connect"), new Error("Permission denied")); assert.throws(() => c.checkPermission("core.control.connect"), new Error("Permission denied")); a.checkPermission("test"); b.checkPermission("test"); assert.throws(() => c.checkPermission("test"), new Error("Permission denied")); assert.throws(() => a.checkPermission("invalid"), new Error("permission invalid does not exist")); }); }); }); });