talk/test/server/graph/mutations/setUserSuspensionStatus.js

const {graphql} = require('graphql');
const timekeeper = require('timekeeper');

const schema = require('../../../../graph/schema');
const Context = require('../../../../graph/context');
const SettingsService = require('../../../../services/settings');
const UserModel = require('../../../../models/user');
const UsersService = require('../../../../services/users');
const MailerService = require('../../../../services/mailer');

const sinon = require('sinon');
const chai = require('chai');
chai.use(require('chai-datetime'));
chai.use(require('sinon-chai'));
const {expect} = chai;

describe('graph.mutations.suspendUser', () => {
  let user;
  beforeEach(async () => {
    await SettingsService.init();

    user = await UsersService.createLocalUser('usernameA@example.com', 'password', 'usernameA');
  });

  let spy;
  before(() => {
    spy = sinon.spy(MailerService, 'sendSimple');
  });

  afterEach(() => {
    spy.reset();
  });

  after(() => {
    spy.restore();
  });

  const mutation = `
    mutation SuspendUser($user_id: ID!, $until: Date!, $message: String!) {
      suspendUser(input: {
        id: $user_id,
        until: $until,
        message: $message,
      }) {
        errors {
          translation_key
        }
      }
    }

    mutation UnSuspendUser($user_id: ID!) {
      unSuspendUser(input: {
        id: $user_id,
      }) {
        errors {
          translation_key
        }
      }
    }
  `;

  [
    {self: true, error: 'NOT_AUTHORIZED', role: 'COMMENTER'},
    {self: true, error: 'NOT_AUTHORIZED', role: 'STAFF'},
    {self: true, error: 'NOT_AUTHORIZED', role: 'COMMENTER'},
    {error: 'NOT_AUTHORIZED', role: 'COMMENTER'},
    {error: 'NOT_AUTHORIZED', role: 'STAFF'},
    {error: 'NOT_AUTHORIZED', role: 'COMMENTER'},
    {error: false, role: 'MODERATOR'},
    {error: false, role: 'ADMIN'},
  ].forEach(({self, error, role}) => {
    it(`${error ? 'can not' : 'can'} suspend ${self ? 'themself' : 'another user'} as a user with role ${role}`, async () => {
      const actor = new UserModel({role});

      // If we're testing self assign, set the id of the actor to the user
      // we're acting on.
      if (self) {
        actor.id = user.id;
      }

      const ctx = new Context({user: actor});

      const now = new Date();
      const oneHourFromNow = new Date(new Date(now).setHours(now.getHours() + 1));

      const {data, errors} = await graphql(schema, mutation, {}, ctx, {
        user_id: user.id,
        until: oneHourFromNow,
        message: 'This is a message'
      }, 'SuspendUser');

      if (errors && errors.length > 0) {
        console.error(errors);
      }
      expect(errors).to.be.undefined;
      if (error) {
        expect(data.suspendUser).to.have.property('errors').not.null;
        expect(data.suspendUser.errors[0]).to.have.property('translation_key', error);
      } else {
        expect(data.suspendUser).to.be.null;

        user = await UserModel.findOne({id: user.id});

        // Mongoose messes with the date, check within a 2 second window.
        expect(user.status.suspension.until).to.be.withinTime(new Date(oneHourFromNow.getTime() - 1000), new Date(oneHourFromNow.getTime() + 1000));
        expect(user.status.suspension.history).to.have.length(1);
        expect(user.status.suspension.history[0]).to.have.property('until').to.be.withinTime(new Date(oneHourFromNow.getTime() - 1000), new Date(oneHourFromNow.getTime() + 1000));
        expect(user.status.suspension.history[0]).to.have.property('assigned_by', actor.id);
        expect(user.status.suspension.history[0]).to.have.property('message', 'This is a message');
        expect(user.status.suspension.history[0]).to.have.property('created_at').not.null;

        expect(user.suspended).to.be.true;
        timekeeper.travel(new Date(oneHourFromNow.getTime() + 10000));
        expect(user.suspended).to.be.false;
        timekeeper.reset();

        expect(spy).to.have.been.calledOnce;

        const res = await graphql(schema, mutation, {}, ctx, {
          user_id: user.id,
          until: null
        }, 'UnSuspendUser');
        if (res.errors && res.errors.length > 0) {
          console.error(res.errors);
        }
        expect(res.errors).to.be.undefined;
        expect(res.data.unSuspendUser).to.be.null;

        user = await UserModel.findOne({id: user.id});

        // Mongoose messes with the date, check within a 2 second window.
        expect(user.status.suspension.until).to.be.null;
        expect(user.status.suspension.history).to.have.length(2);
        expect(user.status.suspension.history[0]).to.have.property('until').to.be.withinTime(new Date(oneHourFromNow.getTime() - 1000), new Date(oneHourFromNow.getTime() + 1000));
        expect(user.status.suspension.history[0]).to.have.property('assigned_by', actor.id);
        expect(user.status.suspension.history[0]).to.have.property('created_at').not.null;
        expect(user.status.suspension.history[1]).to.have.property('until').to.be.null;
        expect(user.status.suspension.history[1]).to.have.property('assigned_by', actor.id);
        expect(user.status.suspension.history[1]).to.have.property('created_at').not.null;

        expect(user.suspended).to.be.false;
      }
    });
  });
});