mirror of
https://github.com/HabitRPG/habitica.git
synced 2025-12-16 22:27:26 +01:00
1ea9be8aa2
* protect all paths in user.pre(save using this.isDirectSelected to see if a field is available * fix linting * authWithHeaders: specify user fields to exclude instead of the ones to include, add comments, doc and improve test * add more options to unit helper generateReq and add tests for excluding fields in authWithHeaders
42 lines
1.4 KiB
JavaScript
42 lines
1.4 KiB
JavaScript
import {
|
|
generateUser,
|
|
} from '../../../../helpers/api-integration/v3';
|
|
import common from '../../../../../website/common';
|
|
|
|
describe('GET /user', () => {
|
|
let user;
|
|
|
|
before(async () => {
|
|
user = await generateUser();
|
|
});
|
|
|
|
it('returns the authenticated user with computed stats', async () => {
|
|
let returnedUser = await user.get('/user');
|
|
expect(returnedUser._id).to.equal(user._id);
|
|
|
|
expect(returnedUser.stats.maxMP).to.exist;
|
|
expect(returnedUser.stats.maxHealth).to.equal(common.maxHealth);
|
|
expect(returnedUser.stats.toNextLevel).to.equal(common.tnl(returnedUser.stats.lvl));
|
|
});
|
|
|
|
it('does not return private paths (and apiToken)', async () => {
|
|
let returnedUser = await user.get('/user');
|
|
|
|
expect(returnedUser.auth.local.hashed_password).to.not.exist;
|
|
expect(returnedUser.auth.local.passwordHashMethod).to.not.exist;
|
|
expect(returnedUser.auth.local.salt).to.not.exist;
|
|
expect(returnedUser.apiToken).to.not.exist;
|
|
});
|
|
|
|
it('returns only user properties requested', async () => {
|
|
let returnedUser = await user.get('/user?userFields=achievements,items.mounts');
|
|
|
|
expect(returnedUser._id).to.equal(user._id);
|
|
expect(returnedUser.achievements).to.exist;
|
|
expect(returnedUser.items.mounts).to.exist;
|
|
// Notifications are always returned
|
|
expect(returnedUser.notifications).to.exist;
|
|
expect(returnedUser.stats).to.not.exist;
|
|
});
|
|
});
|