import request from 'supertest'; import _ from 'lodash'; import path from 'path'; import rimraf from 'rimraf'; import configDefault from './partials/config'; import publishMetadata from './partials/publish-api'; import forbiddenPlace from './partials/forbidden-place'; import Config from '../../src/lib/config'; import endPointAPI from '../../src/api/index'; import {HEADERS} from '../../src/lib/constants'; require('../../src/lib/logger').setup([]); const credentials = { name: 'Jota', password: 'secretPass' }; describe('endpoint unit test', () => { let config; let app; jest.setTimeout(10000); beforeAll(function(done) { const store = path.join(__dirname, './partials/store/test-storage'); rimraf(store, async () => { const configForTest = _.clone(configDefault); configForTest.auth = { htpasswd: { file: './test-storage/htpasswd-test' } }; configForTest.self_path = store; config = new Config(configForTest); app = await endPointAPI(config); done(); }); }); describe('Registry API Endpoints', () => { describe('should test ping api', () => { test('should test endpoint /-/ping', (done) => { request(app) .get('/-/ping') .expect('Content-Type', /json/) .expect(200) .end(function(err, res) { if (err) { return done(err); } done(); }); }); }); describe('should test whoami api', () => { test('should test /-/whoami endpoint', (done) => { request(app) .get('/-/whoami') .expect('Content-Type', /json/) .expect(200) .end(function(err, res) { if (err) { return done(err); } done(); }); }); test('should test /whoami endpoint', (done) => { request(app) .get('/-/whoami') .expect('Content-Type', /json/) .expect(200) .end(function(err, res) { if (err) { return done(err); } done(); }); }); }); describe('should test user api', () => { describe('should test authorization headers with tokens only errors', () => { test('should fails on protected endpoint /-/auth-package bad format', (done) => { request(app) .get('/auth-package') .set('authorization', 'FakeHader') .expect('Content-Type', /json/) .expect(403) .end(function(err, res) { expect(res.body.error).toBeDefined(); expect(res.body.error).toMatch(/unregistered users are not allowed to access package auth-package/); done(); }); }); test('should fails on protected endpoint /-/auth-package bad JWT Bearer format', (done) => { request(app) .get('/auth-package') .set('authorization', 'Bearer') .expect('Content-Type', /json/) .expect(403) .end(function(err, res) { expect(res.body.error).toBeDefined(); expect(res.body.error).toMatch(/unregistered users are not allowed to access package auth-package/); done(); }); }); test('should fails on protected endpoint /-/auth-package well JWT Bearer', (done) => { request(app) .get('/auth-package') .set('authorization', 'Bearer 12345') .expect('Content-Type', /json/) .expect(403) .end(function(err, res) { expect(res.body.error).toBeDefined(); expect(res.body.error).toMatch(/unregistered users are not allowed to access package auth-package/); done(); }); }); }); test('should test add a new user', (done) => { request(app) .put('/-/user/org.couchdb.user:jota') .send(credentials) .expect('Content-Type', /json/) .expect(201) .end(function(err, res) { if (err) { return done(err); } expect(res.body.ok).toBeDefined(); expect(res.body.token).toBeDefined(); const token = res.body.token; expect(typeof token).toBe('string'); expect(res.body.ok).toMatch(`user '${credentials.name}' created`); // testing JWT auth headers with token // we need it here, because token is required request(app) .get('/vue') .set('authorization', `Bearer ${token}`) .expect('Content-Type', /json/) .expect(200) .end(function(err, res) { expect(err).toBeNull(); expect(res.body).toBeDefined(); expect(res.body.name).toMatch(/vue/); done(); }); }); }); test('should test fails add a new user with missing name', (done) => { const credentialsShort = _.clone(credentials); delete credentialsShort.name; request(app) .put('/-/user/org.couchdb.user:jota') .send(credentialsShort) .expect('Content-Type', /json/) .expect(400) .end(function(err, res) { if (err) { return done(err); } expect(res.body.error).toBeDefined(); expect(res.body.error).toMatch(/username and password is required/); done(); }); }); test('should test fails add a new user with missing password', (done) => { const credentialsShort = _.clone(credentials); delete credentialsShort.password; request(app) .put('/-/user/org.couchdb.user:jota') .send(credentialsShort) .expect('Content-Type', /json/) .expect(400) .end(function(err, res) { if (err) { return done(err); } expect(res.body.error).toBeDefined(); //FIXME: message is not 100% accurate expect(res.body.error).toMatch(/username and password is required/); done(); }); }); test('should test add a new user with login', (done) => { const newCredentials = _.clone(credentials); newCredentials.name = 'jotaNew'; request(app) .put('/-/user/org.couchdb.user:jotaNew') .send(newCredentials) .expect('Content-Type', /json/) .expect(201) .end(function(err, res) { if (err) { return done(err); } expect(res.body).toBeTruthy(); done(); }); }); test('should test fails on add a existing user with login', (done) => { request(app) .put('/-/user/org.couchdb.user:jotaNew') .send(credentials) .expect('Content-Type', /json/) .expect(409) .end(function(err, res) { if (err) { return done(err); } expect(res.body.error).toBeDefined(); expect(res.body.error).toMatch(/username is already registered/); done(); }); }); test('should test fails add a new user with wrong password', (done) => { const credentialsShort = _.clone(credentials); credentialsShort.password = 'failPassword'; request(app) .put('/-/user/org.couchdb.user:jota') .send(credentialsShort) .expect('Content-Type', /json/) .expect(401) .end(function(err, res) { if (err) { return done(err); } expect(res.body.error).toBeDefined(); expect(res.body.error).toMatch(/unauthorized/); done(); }); }); }); describe('should test package api', () => { test('should fetch jquery package from remote uplink', (done) => { request(app) .get('/jquery') .set('content-type', HEADERS.JSON_CHARSET) .expect('Content-Type', /json/) .expect(200) .end(function(err, res) { if (err) { return done(err); } expect(res.body).toBeDefined(); expect(res.body.name).toMatch(/jquery/); done(); }); }); test('should fetch jquery specific version package from remote uplink', (done) => { request(app) .get('/jquery/1.5.1') .set('content-type', HEADERS.JSON_CHARSET) .expect('Content-Type', /json/) .expect(200) .end(function(err, res) { if (err) { return done(err); } expect(res.body).toBeDefined(); expect(res.body.name).toMatch(/jquery/); done(); }); }); test('should fetch jquery specific tag package from remote uplink', (done) => { request(app) .get('/jquery/latest') .set('content-type', HEADERS.JSON_CHARSET) .expect('Content-Type', /json/) .expect(200) .end(function(err, res) { if (err) { return done(err); } expect(res.body).toBeDefined(); expect(res.body.name).toMatch(/jquery/); done(); }); }); test('should fails on fetch jquery specific tag package from remote uplink', (done) => { request(app) .get('/jquery/never-will-exist-this-tag') .set('content-type', HEADERS.JSON_CHARSET) .expect('Content-Type', /json/) .expect(404) .end(function(err, res) { if (err) { return done(err); } done(); }); }); test('should not found a unexisting remote package under scope', (done) => { request(app) .get('/@verdaccio/not-found') .set('content-type', HEADERS.JSON_CHARSET) .expect('Content-Type', /json/) .expect(404) .end(function(err, res) { if (err) { return done(err); } done(); }); }); test('should forbid access to remote package', (done) => { request(app) .get('/forbidden-place') .set('content-type', HEADERS.JSON_CHARSET) .expect('Content-Type', /json/) .expect(403) .end(function(err, res) { if (err) { return done(err); } done(); }); }); test('should fetch a tarball from remote uplink', (done) => { request(app) .get('/jquery/-/jquery-1.5.1.tgz') .expect('Content-Type', /application\/octet-stream/) .expect(200) .end(function(err, res) { if (err) { return done(err); } expect(res.body).toBeDefined(); done(); }); }); test('should fails fetch a tarball from remote uplink', (done) => { request(app) .get('/jquery/-/jquery-0.0.1.tgz') .expect('Content-Type', /application\/octet-stream/) .expect(404) .end(function(err, res) { if (err) { return done(err); } done(); }); }); }); describe('should test dist-tag api', () => { const jqueryVersion = '2.1.2'; const jqueryUpdatedVersion = { 'beta': '3.0.0', 'jota': '1.6.3' }; test('should set a new tag on jquery', (done) => { request(app) .put('/jquery/verdaccio-tag') .send(JSON.stringify(jqueryVersion)) .set('accept', 'gzip') .set('accept-encoding', HEADERS.JSON) .set('content-type', HEADERS.JSON) .expect(201) .end(function(err, res) { if (err) { return done(err); } expect(res.body.ok).toBeDefined(); expect(res.body.ok).toMatch(/package tagged/); done(); }); }); test('should fetch all tag for jquery', (done) => { request(app) .get('/-/package/jquery/dist-tags') .set('accept-encoding', HEADERS.JSON) .set('content-type', HEADERS.JSON) .expect(200) .end(function(err, res) { if (err) { return done(err); } expect(res.body).toBeDefined(); expect(res.body['verdaccio-tag']).toMatch(jqueryVersion); done(); }); }); test('should update a new tag on jquery', (done) => { request(app) .post('/-/package/jquery/dist-tags') .send(JSON.stringify(jqueryUpdatedVersion)) .set('content-type', HEADERS.JSON) .expect(201) .end(function(err, res) { if (err) { return done(err); } expect(res.body.ok).toBeDefined(); expect(res.body.ok).toMatch(/tags updated/); done(); }); }); test('should fetch all tags for jquery and ccheck previous update', (done) => { request(app) .get('/-/package/jquery/dist-tags') .set('accept-encoding', HEADERS.JSON) .set('content-type', HEADERS.JSON) .expect(200) .end(function(err, res) { if (err) { return done(err); } expect(res.body).toBeDefined(); expect(res.body['beta']).toMatch(jqueryUpdatedVersion['beta']); done(); }); }); test('should set a remove a tag on jquery', (done) => { request(app) .del('/-/package/jquery/dist-tags/verdaccio-tag') .set('accept-encoding', HEADERS.JSON) .set('content-type', HEADERS.JSON) //.expect('Content-Type', /json/) .expect(201) .end(function(err, res) { if (err) { return done(err); } expect(res.body.ok).toBeDefined(); expect(res.body.ok).toMatch(/tag removed/); done(); }); }); }); describe('should test search api', () => { test('should perform a search', (done) => { const now = Date.now() const cacheTime = now - 6000000; request(app) .get('/-/all/since?stale=update_after&startkey=' + cacheTime) // .set('accept-encoding', HEADERS.JSON) // .set('content-type', HEADERS.JSON) //.expect('Content-Type', /json/) .expect(200) .end(function(err, res) { if (err) { return done(err); } //TODO: we have to catch the stream check whether it returns something // we should not spend much time on this api since is deprecated somehow. done(); }); }); }); describe('should test publish api', () => { test('should publish a new package', (done) => { request(app) .put('/@scope%2fpk1-test') .set('content-type', HEADERS.JSON) .send(JSON.stringify(publishMetadata)) .expect(201) .end(function(err, res) { if (err) { return done(err); } expect(res.body.ok).toBeDefined(); expect(res.body.success).toBeDefined(); expect(res.body.success).toBeTruthy(); expect(res.body.ok).toMatch(/created new package/); done(); }); }); test('should unpublish a new package', (done) => { //FUTURE: for some reason it does not remove the scope folder request(app) .del('/@scope%2fpk1-test/-rev/4-6abcdb4efd41a576') .set('content-type', HEADERS.JSON) .expect(201) .end(function(err, res) { if (err) { return done(err); } expect(res.body.ok).toBeDefined(); expect(res.body.ok).toMatch(/package removed/); done(); }); }); }); }); describe('Registry WebUI endpoints', () => { beforeAll(async function() { await request(app) .put('/@scope%2fpk1-test') .set('content-type', HEADERS.JSON) .send(JSON.stringify(publishMetadata)) .expect(201); await request(app) .put('/forbidden-place') .set('content-type', HEADERS.JSON) .send(JSON.stringify(forbiddenPlace)) .expect(201); }); describe('Packages', () => { test('should display all packages', (done) => { request(app) .get('/-/verdaccio/packages' ) .expect(200) .end(function(err, res) { expect(res.body).toHaveLength(1); done(); }); }); test.skip('should display scoped readme', (done) => { request(app) .get('/-/verdaccio/package/readme/@scope/pk1-test') .expect(200) .expect('Content-Type', 'text/plain; charset=utf-8') .end(function(err, res) { expect(res.text).toMatch('

test

\n'); done(); }); }); //FIXME: disable, we need to inspect why fails randomly test.skip('should display scoped readme 404', (done) => { request(app) .get('/-/verdaccio/package/readme/@scope/404') .expect(200) .expect('Content-Type', 'text/plain; charset=utf-8') .end(function(err, res) { expect(res.body.error).toMatch('no such package available'); done(); }); }); test('should display sidebar info', (done) => { request(app) .get('/-/verdaccio/sidebar/@scope/pk1-test') .expect(200) .expect('Content-Type', /json/) .end(function(err, res) { const sideBarInfo = res.body; const latestVersion = publishMetadata.versions[publishMetadata['dist-tags'].latest]; expect(sideBarInfo.latest.author).toBeDefined(); expect(sideBarInfo.latest.author.avatar).toMatch(/www.gravatar.com/); expect(sideBarInfo.latest.author.name).toBe(latestVersion.author.name); expect(sideBarInfo.latest.author.email).toBe(latestVersion.author.email); done(); }); }); test('should display sidebar info 404', (done) => { request(app) .get('/-/verdaccio/sidebar/@scope/404') .expect(404) .expect('Content-Type', /json/) .end(function(err, res) { done(); }); }); }); describe('Search', () => { test('should search pk1-test', (done) => { request(app) .get('/-/verdaccio/search/scope') .expect(200) .end(function(err, res) { expect(res.body).toHaveLength(1); done(); }); }); test('should search with 404', (done) => { request(app) .get('/-/verdaccio/search/@') .expect(200) .end(function(err, res) { // in a normal world, the output would be 1 // https://github.com/verdaccio/verdaccio/issues/345 // should fix this expect(res.body).toHaveLength(0); done(); }); }); test('should not find forbidden-place', (done) => { request(app) .get('/-/verdaccio/search/forbidden-place') .expect(200) .end(function(err, res) { //this is expected since we are not logged // and forbidden-place is allow_access: 'nobody' expect(res.body).toHaveLength(0); done(); }); }); }); describe('User', () => { describe('login webui', () => { test('should log a user jota', (done) => { request(app) .post('/-/verdaccio/login') .send({ username: credentials.name, password: credentials.password }) .expect(200) .end(function(err, res) { expect(res.body.error).toBeUndefined(); expect(res.body.token).toBeDefined(); expect(res.body.token).toBeTruthy(); expect(res.body.username).toMatch(credentials.name); done(); }); }); test('should fails on log unvalid user', (done) => { request(app) .post('/-/verdaccio/login') .send(JSON.stringify({ username: 'fake', password: 'fake' })) //FIXME: there should be 401 .expect(200) .end(function(err, res) { expect(res.body.error).toMatch(/bad username\/password, access denied/); done(); }); }); }); }); }); });