Account feature

gamersnet_backend/__tests__/users/testAuthenticate.js

@@ -0,0 +1,108 @@
+'use strict';
+
+let app = require('../../app');
+let request = require('supertest');
+
+let MongoDB = require('../../persistence/mongodb');
+let db;
+
+beforeEach(async () => {
+    if (!db) db = await MongoDB.open();
+});
+
+afterEach(async () => {
+    if (db) {
+        await MongoDB.close();
+        db = null;
+    }
+})
+
+describe('Test Authenticate Account (function testing)', () => {
+    test('Blank password and username', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: '',
+            password: ''
+        }).expect(400).end(done);
+    });
+
+    test('No body', (done) => {
+        return request(app).post('/users/authenticate').expect(400).end(done);
+    });
+
+    test('Incorrect method', (done) => {
+        return request(app).get('/users/authenticate').expect(404).end(done);
+    });
+
+    test('Valid username, invalid password', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: 'usrnme',
+            password: ''
+        }).expect(400).end(done);
+    });
+
+    test('Invalid username, valid password', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: '',
+            password: 'pwd'
+        }).expect(400).end(done);
+    });
+});
+
+describe('Test Authenticate Account (single user + token document)', () => {
+    beforeEach(async () => {
+        // username bob, password 9999
+        db.collection('users').insertOne({username: 'bob', password: '$2b$10$intP40iXYmNia/XUWjq4Pu/aamccICNOwhOXVsPXmFacpH1/acofG'});
+    });
+
+    test('Authenticate with correct details', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: 'bob',
+            password: '9999'
+        }).expect(200).end(done);
+    });
+
+    test('Authenticate with correct details (token)', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: 'bob',
+            password: '9999'
+        }).expect(200).end((error, response) => {
+            if (error) return done(error);
+
+            expect(response.header['set-cookie']).toBeDefined();
+
+            done();
+        });
+    });
+
+    test('Authenticate with correct details (user ID)', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: 'bob',
+            password: '9999'
+        }).expect(200).end((error, response) => {
+            if (error) return done(error);
+
+            expect(response.text).toBeDefined();
+
+            let json = JSON.parse(response.text);
+
+            expect(json).toBeDefined();
+            expect(json['user_id']).toBeDefined();
+
+            done();
+        });
+    });
+
+    test('Authenticate with incorrect password', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: 'bob',
+            password: 'abc'
+        }).expect(401).end(done);
+    });
+
+    test('Authenticate with non exist username', (done) => {
+        return request(app).post('/users/authenticate').send({
+            username: 'not bob',
+            password: 'abc'
+        }).expect(401).end(done);
+    });
+});

gamersnet_backend/__tests__/users/testCreateAccount.js

@@ -0,0 +1,107 @@
+'use strict';
+
+let app = require('../../app');
+let request = require('supertest');
+
+let MongoDB = require('../../persistence/mongodb');
+let db;
+
+beforeEach(async () => {
+    if (!db) db = await MongoDB.open();
+});
+
+afterEach(async () => {
+    if (db) {
+        await MongoDB.close();
+        db = null;
+    }
+})
+
+describe('Test Create User Account (empty database)', () => {
+    test('Blank password and username', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: '',
+            password: ''
+        }).expect(400).end(done);
+    });
+
+    test('No body', (done) => {
+        return request(app).post('/users/createAccount').expect(400).end(done);
+    });
+
+    test('Incorrect method', (done) => {
+        return request(app).get('/users/createAccount').expect(404).end(done);
+    });
+
+    test('Valid username, invalid password', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: 'usrnme',
+            password: ''
+        }).expect(400).end(done);
+    });
+
+    test('Invalid username, valid password', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: '',
+            password: 'pwd'
+        }).expect(400).end(done);
+    });
+
+    test('Valid account creation', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: 'usrnme',
+            password: 'pwd'
+        }).expect(200).end(done);
+    });
+
+    test('Valid token returned (non empty)', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: 'usrnme',
+            password: 'pwd'
+        }).expect(200).end((error, response) => {
+            if (error) return done(error);
+
+            expect(response.header['set-cookie']).toBeDefined();
+
+            done();
+        });
+    });
+
+    test('Valid user ID returned in text response (non empty)', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: 'usrnme',
+            password: 'pwd'
+        }).expect(200).end((error, response) => {
+            if (error) return done(error);
+
+            expect(response.text).toBeDefined();
+
+            let json = JSON.parse(response.text);
+
+            expect(json).toBeDefined();
+            expect(json['user_id']).toBeDefined();
+
+            done();
+        });
+    });
+});
+
+describe('Test Create User Account (populated database)', () => {
+    beforeEach(async () => {
+        db.collection('users').insertOne({username: 'taken', password: '123'});
+    });
+
+    test('Insert new account with already used username', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: 'taken',
+            password: 'pwd'
+        }).expect(400).end(done);
+    });
+
+    test('Insert new account with new username', (done) => {
+        return request(app).post('/users/createAccount').send({
+            username: 'nottaken',
+            password: 'pwd'
+        }).expect(200).end(done);
+    });
+})

gamersnet_backend/__tests__/users/testPassword.js

@@ -0,0 +1,84 @@
+'use strict';
+
+let ObjectID = require('mongodb').ObjectId;
+let request = require('supertest');
+
+let app = require('../../app');
+let MongoDB = require('../../persistence/mongodb');
+let db;
+
+beforeEach(async () => {
+    if (!db) db = await MongoDB.open();
+});
+
+afterEach(async () => {
+    if (db) {
+        await MongoDB.close();
+        db = null;
+    }
+})
+
+describe('Test password change (empty database)', () => {
+    test('Invalid method', (done) => {
+        return request(app).get('/users/updatePassword').expect(404).end(done);
+    });
+
+    test('Missing token cookie', (done) => {
+        return request(app).patch('/users/updatePassword').send({
+            oldPassword: '123',
+            newPassword: '123'
+        }).expect(400).end(done);
+    });
+
+    test('Missing token cookie and body', (done) => {
+        return request(app).patch('/users/updatePassword').expect(400).end(done);
+    });
+});
+
+describe('Test password change (single user)', () => {
+    // password 9999
+    let hashedPassword = '$2b$10$intP40iXYmNia/XUWjq4Pu/aamccICNOwhOXVsPXmFacpH1/acofG';
+
+    beforeEach(async () => {
+        let result = await db.collection('users').insertOne({username: 'bob', password: hashedPassword});
+        let id = await result.insertedId;
+
+        await db.collection('tokens').insertOne({
+            userID: ObjectID(await id),
+            token: 'abc',
+            expires: 99999999999999
+        });
+    });
+
+    test('Missing body, but valid token', (done) => {
+        return request(app).patch('/users/updatePassword')
+        .set('Cookie', 'token=abc')
+        .expect(400).end(done);
+    });
+
+    test('Invalid old password', (done) => {
+        return request(app).patch('/users/updatePassword')
+        .set('Cookie', 'token=abc')
+        .send({
+            oldPassword: '8888',
+            newPassword: '9999'
+        })
+        .expect(401).end(done);
+    });
+
+    test('Test valid password change', (done) => {
+        return request(app).patch('/users/updatePassword')
+        .set('Cookie', 'token=abc')
+        .send({
+            oldPassword: '9999',
+            newPassword: '9999'
+        })
+        .expect(204).end(async () => {
+            let result = await db.collection('users').find({username: 'bob'});
+
+            expect(await result.password).not.toBe(hashedPassword);
+
+            done();
+        });
+    });
+});

gamersnet_backend/app.js

@@ -36,21 +36,6 @@ app.get('/', (request, response) => {
     });
 });
 
-// this is the page1 route, they would access "example.com/page1" to get here
-app.get('/page1', (request, response) => {
-    response.json({
-        'str1': 'this is page1',
-        1: 'lol'
-    });
-});
-
-app.get('/page2', (request, response) => {
-    response.json({
-        'str1': 'this is page2',
-         1: 'lol'
-    });
-});
-
 app.use('/posts', posts);
 
 module.exports = app;

gamersnet_backend/index.js

@@ -23,4 +23,4 @@ server.listen(port, async () => {
     console.log(`Backend ready on port ${port}.`);
 
     await MongoDB.open();
-});
+});