136 lines
4.6 KiB
TypeScript
136 lines
4.6 KiB
TypeScript
import { afterAll, beforeAll, beforeEach, describe, expect, it } from '@jest/globals';
|
|
import { Express } from 'express';
|
|
import request from 'supertest';
|
|
import INTERNAL_CONFIG from '../../../../src/config/internal-config.js';
|
|
import { MEET_API_KEY } from '../../../../src/environment.js';
|
|
import { UserRole } from '../../../../src/typings/ce/index.js';
|
|
import {
|
|
deleteAllRooms,
|
|
disconnectFakeParticipants,
|
|
loginUserAsRole,
|
|
startTestServer
|
|
} from '../../../helpers/request-helpers.js';
|
|
import { RoomData, setupSingleRoom } from '../../../helpers/test-scenarios.js';
|
|
|
|
const MEETINGS_PATH = `${INTERNAL_CONFIG.INTERNAL_API_BASE_PATH_V1}/meetings`;
|
|
|
|
describe('Meeting API Security Tests', () => {
|
|
let app: Express;
|
|
|
|
let userCookie: string;
|
|
let adminCookie: string;
|
|
|
|
let roomData: RoomData;
|
|
|
|
beforeAll(async () => {
|
|
app = startTestServer();
|
|
|
|
// Get cookies for admin and user
|
|
userCookie = await loginUserAsRole(UserRole.USER);
|
|
adminCookie = await loginUserAsRole(UserRole.ADMIN);
|
|
});
|
|
|
|
beforeEach(async () => {
|
|
roomData = await setupSingleRoom(true);
|
|
});
|
|
|
|
afterAll(async () => {
|
|
await disconnectFakeParticipants();
|
|
await deleteAllRooms();
|
|
});
|
|
|
|
describe('End Meeting Tests', () => {
|
|
it('should fail when request includes API key', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}`)
|
|
.set(INTERNAL_CONFIG.API_KEY_HEADER, MEET_API_KEY);
|
|
expect(response.status).toBe(401);
|
|
});
|
|
|
|
it('should fail when user is authenticated as admin', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}`)
|
|
.set('Cookie', adminCookie);
|
|
expect(response.status).toBe(401);
|
|
});
|
|
|
|
it('should fail when user is authenticated as user', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}`)
|
|
.set('Cookie', userCookie);
|
|
expect(response.status).toBe(401);
|
|
});
|
|
|
|
it('should succeed when participant is moderator', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}`)
|
|
.set('Cookie', roomData.moderatorCookie);
|
|
expect(response.status).toBe(200);
|
|
});
|
|
|
|
it('should fail when participant is moderator of a different room', async () => {
|
|
const newRoomData = await setupSingleRoom();
|
|
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}`)
|
|
.set('Cookie', newRoomData.moderatorCookie);
|
|
expect(response.status).toBe(403);
|
|
});
|
|
|
|
it('should fail when participant is publisher', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}`)
|
|
.set('Cookie', roomData.publisherCookie);
|
|
expect(response.status).toBe(403);
|
|
});
|
|
});
|
|
|
|
describe('Delete Participant from Meeting Tests', () => {
|
|
const PARTICIPANT_NAME = 'TEST_PARTICIPANT';
|
|
|
|
it('should fail when request includes API key', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}/participants/${PARTICIPANT_NAME}`)
|
|
.set(INTERNAL_CONFIG.API_KEY_HEADER, MEET_API_KEY);
|
|
expect(response.status).toBe(401);
|
|
});
|
|
|
|
it('should fail when user is authenticated as admin', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}/participants/${PARTICIPANT_NAME}`)
|
|
.set('Cookie', adminCookie);
|
|
expect(response.status).toBe(401);
|
|
});
|
|
|
|
it('should fail when user is authenticated as user', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}/participants/${PARTICIPANT_NAME}`)
|
|
.set('Cookie', userCookie);
|
|
expect(response.status).toBe(401);
|
|
});
|
|
|
|
it('should succeed when participant is moderator', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}/participants/${PARTICIPANT_NAME}`)
|
|
.set('Cookie', roomData.moderatorCookie);
|
|
expect(response.status).toBe(200);
|
|
});
|
|
|
|
it('should fail when participant is moderator of a different room', async () => {
|
|
const newRoomData = await setupSingleRoom();
|
|
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}/participants/${PARTICIPANT_NAME}`)
|
|
.set('Cookie', newRoomData.moderatorCookie);
|
|
expect(response.status).toBe(403);
|
|
});
|
|
|
|
it('should fail when participant is publisher', async () => {
|
|
const response = await request(app)
|
|
.delete(`${MEETINGS_PATH}/${roomData.room.roomId}/participants/${PARTICIPANT_NAME}`)
|
|
.set('Cookie', roomData.publisherCookie);
|
|
expect(response.status).toBe(403);
|
|
});
|
|
});
|
|
});
|