const {graphql} = require('graphql'); const timekeeper = require('timekeeper'); const schema = require('../../../../graph/schema'); const Context = require('../../../../graph/context'); const SettingsService = require('../../../../services/settings'); const UserModel = require('../../../../models/user'); const UsersService = require('../../../../services/users'); const MailerService = require('../../../../services/mailer'); const sinon = require('sinon'); const chai = require('chai'); chai.use(require('chai-datetime')); chai.use(require('sinon-chai')); const {expect} = chai; describe('graph.mutations.suspendUser', () => { let user; beforeEach(async () => { await SettingsService.init(); user = await UsersService.createLocalUser('usernameA@example.com', 'password', 'usernameA'); }); let spy; before(() => { spy = sinon.spy(MailerService, 'sendSimple'); }); afterEach(() => { spy.reset(); }); after(() => { spy.restore(); }); const mutation = ` mutation SuspendUser($user_id: ID!, $until: Date!, $message: String!) { suspendUser(input: { id: $user_id, until: $until, message: $message, }) { errors { translation_key } } } mutation UnSuspendUser($user_id: ID!) { unSuspendUser(input: { id: $user_id, }) { errors { translation_key } } } `; [ {self: true, error: 'NOT_AUTHORIZED', role: 'COMMENTER'}, {self: true, error: 'NOT_AUTHORIZED', role: 'STAFF'}, {self: true, error: 'NOT_AUTHORIZED', role: 'COMMENTER'}, {error: 'NOT_AUTHORIZED', role: 'COMMENTER'}, {error: 'NOT_AUTHORIZED', role: 'STAFF'}, {error: 'NOT_AUTHORIZED', role: 'COMMENTER'}, {error: false, role: 'MODERATOR'}, {error: false, role: 'ADMIN'}, ].forEach(({self, error, role}) => { it(`${error ? 'can not' : 'can'} suspend ${self ? 'themself' : 'another user'} as a user with role ${role}`, async () => { const actor = new UserModel({role}); // If we're testing self assign, set the id of the actor to the user // we're acting on. if (self) { actor.id = user.id; } const ctx = new Context({user: actor}); const now = new Date(); const oneHourFromNow = new Date(new Date(now).setHours(now.getHours() + 1)); const {data, errors} = await graphql(schema, mutation, {}, ctx, { user_id: user.id, until: oneHourFromNow, message: 'This is a message' }, 'SuspendUser'); if (errors && errors.length > 0) { console.error(errors); } expect(errors).to.be.undefined; if (error) { expect(data.suspendUser).to.have.property('errors').not.null; expect(data.suspendUser.errors[0]).to.have.property('translation_key', error); } else { expect(data.suspendUser).to.be.null; user = await UserModel.findOne({id: user.id}); // Mongoose messes with the date, check within a 2 second window. expect(user.status.suspension.until).to.be.withinTime(new Date(oneHourFromNow.getTime() - 1000), new Date(oneHourFromNow.getTime() + 1000)); expect(user.status.suspension.history).to.have.length(1); expect(user.status.suspension.history[0]).to.have.property('until').to.be.withinTime(new Date(oneHourFromNow.getTime() - 1000), new Date(oneHourFromNow.getTime() + 1000)); expect(user.status.suspension.history[0]).to.have.property('assigned_by', actor.id); expect(user.status.suspension.history[0]).to.have.property('message', 'This is a message'); expect(user.status.suspension.history[0]).to.have.property('created_at').not.null; expect(user.suspended).to.be.true; timekeeper.travel(new Date(oneHourFromNow.getTime() + 10000)); expect(user.suspended).to.be.false; timekeeper.reset(); expect(spy).to.have.been.calledOnce; const res = await graphql(schema, mutation, {}, ctx, { user_id: user.id, until: null }, 'UnSuspendUser'); if (res.errors && res.errors.length > 0) { console.error(res.errors); } expect(res.errors).to.be.undefined; expect(res.data.unSuspendUser).to.be.null; user = await UserModel.findOne({id: user.id}); // Mongoose messes with the date, check within a 2 second window. expect(user.status.suspension.until).to.be.null; expect(user.status.suspension.history).to.have.length(2); expect(user.status.suspension.history[0]).to.have.property('until').to.be.withinTime(new Date(oneHourFromNow.getTime() - 1000), new Date(oneHourFromNow.getTime() + 1000)); expect(user.status.suspension.history[0]).to.have.property('assigned_by', actor.id); expect(user.status.suspension.history[0]).to.have.property('created_at').not.null; expect(user.status.suspension.history[1]).to.have.property('until').to.be.null; expect(user.status.suspension.history[1]).to.have.property('assigned_by', actor.id); expect(user.status.suspension.history[1]).to.have.property('created_at').not.null; expect(user.suspended).to.be.false; } }); }); });