[Task] #50, added test case for csrf, repaired integration

src/scripts/token.ts

@@ -21,7 +21,6 @@ export function createCSRF(res: Response, next: NextFunction): string {
 }
 
 export function validateCSRF(token: string): boolean {
-  console.log(csrfTokens, token);
   const currentTime = Date.now();
   let valid: boolean = false;
   for (const entry of csrfTokens) {

src/tests/integration.test.ts

@@ -231,10 +231,25 @@ describe('API calls', () => {
 
 describe('read and login', () => {
   let token = "";
-  const testData = qs.stringify({
+  const testData = {
     user: "TEST",
     password: "test",
-  });
+    csrfToken: ""
+  }
+
+  it('form available / get Token', async () => {
+    let response = {data:""};
+    try {
+      response = await axios.get('http://localhost:80/login');
+    } catch (error) {
+      console.error(error);
+    }
+
+    const regex = /name="csrfToken" value="([^"]*)"/;
+    const match = response.data.match(regex);
+    testData.csrfToken = match ? match[1] : '-';
+  })
+
   test(`redirect without logged in`, async () => {
     try {
       await axios.get("http://localhost:80/read/");
@@ -249,7 +264,7 @@ describe('read and login', () => {
    });
 
   it('test user can login', async () => {
-    const response = await axios.post('http://localhost:80/login', testData);
+    const response = await axios.post('http://localhost:80/login', qs.stringify(testData));
 
     expect(response.status).toBe(200);
     expect(response.headers['content-type']).toEqual(expect.stringContaining('application/json'));

src/tests/login.test.ts

@@ -20,7 +20,7 @@ const userDataWithToken = {
 
 describe('Login', () => {
   it('form available', async () => {
-    let serverStatus;
+    let serverStatus = {};
     let response = { data: "", status: "" };
     try {
       response = await axios.get('http://localhost:80/login');
@@ -71,7 +71,7 @@ describe('Login', () => {
 
   it('test invalid credentials to return error', async () => {
     try {
-      userDataWithToken.csrfToken = csrfToken;
+      userDataWithToken.csrfToken = csrfToken
       await axios.post('http://localhost:80/login', qs.stringify(userDataWithToken));
     } catch (error) {
       const axiosError = error as AxiosError;