/* eslint-disable global-require */ import { generateRes, generateReq, generateNext, } from '../../../helpers/api-unit.helper'; import i18n from '../../../../website/common/script/i18n'; import { ensureAdmin, ensureSudo, ensureNewsPoster } from '../../../../website/server/middlewares/ensureAccessRight'; import { NotAuthorized } from '../../../../website/server/libs/errors'; import apiError from '../../../../website/server/libs/apiError'; describe('ensure access middlewares', () => { let res; let req; let next; beforeEach(() => { res = generateRes(); req = generateReq(); next = generateNext(); }); context('ensure admin', () => { it('returns not authorized when user is not an admin', () => { res.locals = { user: { contributor: { admin: false } } }; ensureAdmin(req, res, next); const calledWith = next.getCall(0).args; expect(calledWith[0].message).to.equal(i18n.t('noAdminAccess')); expect(calledWith[0] instanceof NotAuthorized).to.equal(true); }); it('passes when user is an admin', () => { res.locals = { user: { contributor: { admin: true } } }; ensureAdmin(req, res, next); expect(next).to.be.calledOnce; expect(next.args[0]).to.be.empty; }); }); context('ensure newsPoster', () => { it('returns not authorized when user is not a newsPoster', () => { res.locals = { user: { contributor: { newsPoster: false } } }; ensureNewsPoster(req, res, next); const calledWith = next.getCall(0).args; expect(calledWith[0].message).to.equal(apiError('noNewsPosterAccess')); expect(calledWith[0] instanceof NotAuthorized).to.equal(true); }); it('passes when user is a newsPoster', () => { res.locals = { user: { contributor: { newsPoster: true } } }; ensureNewsPoster(req, res, next); expect(next).to.be.calledOnce; expect(next.args[0]).to.be.empty; }); }); context('ensure sudo', () => { it('returns not authorized when user is not a sudo user', () => { res.locals = { user: { contributor: { sudo: false } } }; ensureSudo(req, res, next); const calledWith = next.getCall(0).args; expect(calledWith[0].message).to.equal(apiError('noSudoAccess')); expect(calledWith[0] instanceof NotAuthorized).to.equal(true); }); it('passes when user is a sudo user', () => { res.locals = { user: { contributor: { sudo: true } } }; ensureSudo(req, res, next); expect(next).to.be.calledOnce; expect(next.args[0]).to.be.empty; }); }); });