Initial commit

spec/api/v2/admin/api_keys_spec.rb

@@ -0,0 +1,105 @@
+# frozen_string_literal: true
+
+describe 'Api::V2::Admin::APIKeys' do
+  include_context 'bearer authentication'
+
+  let!(:create_member_permission) do
+    create :permission,
+           role: 'member'
+  end
+  let!(:create_superadmin_permission) do
+    create :permission,
+           role: 'superadmin'
+  end
+
+  describe 'GET /api/v2/admin/api_keys' do
+    let!(:test_user) { create(:user, otp: otp_enabled, role: 'superadmin') }
+    let(:otp_enabled) { true }
+    let!(:first_api_key) { create :api_key, key_holder_account: test_user }
+    let!(:second_api_key) { create :api_key, key_holder_account: test_user }
+    let(:expected_fields) do
+      {
+        kid: first_api_key.kid,
+        state: first_api_key.state,
+        scope: %w[trade]
+      }
+    end
+    let(:params) do
+      {
+        uid: test_user.uid
+      }
+    end
+    let(:do_request) { get "/api/v2/admin/api_keys", params: params, headers: auth_header }
+
+    context 'successful' do
+      it 'Returns api keys for selected account' do
+        do_request
+
+        expect(response.status).to eq(200)
+        expect(json_body.first.keys).to match_array %i[kid algorithm scope state created_at updated_at]
+        expect(json_body.first).to include(expected_fields)
+        expect(json_body.first).not_to include(:secret)
+      end
+
+      it 'Returns api keys for selected account in ASC order' do
+        params[:ordering] = 'asc'
+        params[:order_by] = 'id'
+        do_request
+
+        expect(response.status).to eq(200)
+        expect(json_body.first.keys).to match_array %i[kid algorithm scope state created_at updated_at]
+        expect(json_body.first).to include(expected_fields)
+        expect(json_body.first).not_to include(:secret)
+      end
+
+      it 'Returns api keys for selected account in DESC order' do
+        params[:ordering] = 'desc'
+        params[:order_by] = 'id'
+        do_request
+
+        expect(response.status).to eq(200)
+        expect(json_body.first.keys).to match_array %i[kid algorithm scope state created_at updated_at]
+        expect(json_body.second).to include(expected_fields)
+        expect(json_body.second).not_to include(:secret)
+      end
+
+      it 'Returns empty array if no api keys exist for selected account' do
+        test_user.api_keys.delete_all
+
+        do_request
+        expect(response.status).to eq(200)
+        expect(json_body).to eq([])
+      end
+    end
+
+    context 'error' do
+      let(:params) do
+        {
+          uid: 'random'
+        }
+      end
+
+      it 'Returns error if user doesnt exist' do
+        do_request
+        expect(response.status).to eq(404)
+        expect(json_body.first).to include(:errors, ["admin.user.doesnt_exist"])
+      end
+
+      it 'Returns error if api key attribute doesnt exist' do
+        params[:uid] = test_user.uid
+        params[:order_by] = 'length'
+        do_request
+        expect(response.status).to eq(422)
+        expect(json_body.first).to include(:errors, ["api_keys.ordering.invalid_attribute"])
+      end
+
+      it 'Returns error if invalid ordering' do
+        params[:uid] = test_user.uid
+        params[:ordering] = 'res'
+        do_request
+        expect(response.status).to eq(422)
+        expect(json_body.first).to include(:errors, ["api_keys.ordering.invalid_ordering"])
+      end
+    end
+  end
+end