82 lines
No EOL
2.3 KiB
JavaScript
82 lines
No EOL
2.3 KiB
JavaScript
const request = require('supertest');
|
|
const app = require('../app');
|
|
|
|
describe('Role Middleware', () => {
|
|
// Mock a user with a specific role for testing
|
|
const mockUserWithRole = (role) => {
|
|
return {
|
|
role: role,
|
|
id: 'test-user-id'
|
|
};
|
|
};
|
|
|
|
// Test that the middleware allows access to users with correct roles
|
|
test('should allow access to users with correct roles', () => {
|
|
const req = {
|
|
user: mockUserWithRole('admin')
|
|
};
|
|
const res = {
|
|
status: jest.fn().mockReturnThis(),
|
|
json: jest.fn()
|
|
};
|
|
const next = jest.fn();
|
|
|
|
const middleware = require('../middleware/role.middleware');
|
|
middleware.requireRole(['admin'])(req, res, next);
|
|
|
|
expect(next).toHaveBeenCalled();
|
|
});
|
|
|
|
// Test that the middleware denies access to users with incorrect roles
|
|
test('should deny access to users with incorrect roles', () => {
|
|
const req = {
|
|
user: mockUserWithRole('user')
|
|
};
|
|
const res = {
|
|
status: jest.fn().mockReturnThis(),
|
|
json: jest.fn()
|
|
};
|
|
const next = jest.fn();
|
|
|
|
const middleware = require('../middleware/role.middleware');
|
|
middleware.requireRole(['admin'])(req, res, next);
|
|
|
|
expect(res.status).toHaveBeenCalledWith(403);
|
|
expect(res.json).toHaveBeenCalledWith({ error: 'Forbidden' });
|
|
});
|
|
|
|
// Test that the middleware denies access to users without roles
|
|
test('should deny access to users without roles', () => {
|
|
const req = {
|
|
user: null
|
|
};
|
|
const res = {
|
|
status: jest.fn().mockReturnThis(),
|
|
json: jest.fn()
|
|
};
|
|
const next = jest.fn();
|
|
|
|
const middleware = require('../middleware/role.middleware');
|
|
middleware.requireRole(['admin'])(req, res, next);
|
|
|
|
expect(res.status).toHaveBeenCalledWith(401);
|
|
expect(res.json).toHaveBeenCalledWith({ error: 'Unauthorized' });
|
|
});
|
|
|
|
// Test that the middleware allows access to users with one of multiple required roles
|
|
test('should allow access to users with one of multiple required roles', () => {
|
|
const req = {
|
|
user: mockUserWithRole('moderator')
|
|
};
|
|
const res = {
|
|
status: jest.fn().mockReturnThis(),
|
|
json: jest.fn()
|
|
};
|
|
const next = jest.fn();
|
|
|
|
const middleware = require('../middleware/role.middleware');
|
|
middleware.requireRole(['admin', 'moderator'])(req, res, next);
|
|
|
|
expect(next).toHaveBeenCalled();
|
|
});
|
|
}); |