Initial commit

spec/api/v2/resource/otp_spec.rb

@@ -0,0 +1,129 @@
+# frozen_string_literal: true
+
+describe 'Api::V2::Resource::Otp' do
+  include_context 'bearer authentication'
+  let!(:create_member_permission) do
+    create :permission,
+           role: 'member'
+  end
+  let(:do_request) { post '/api/v2/resource/otp/enable', headers: auth_header }
+  let(:otp_code) { '111111' }
+
+  context 'valid request' do
+    before do
+      allow(TOTPService).to receive(:validate?)
+      .with(test_user.uid, otp_code) { true }
+    end
+
+    it 'user enables 2fa successfully' do
+      post '/api/v2/resource/otp/enable', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 201
+      expect(test_user.reload.otp).to eq true
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
+    end
+
+    it 'user disables 2fa successfully' do
+      test_user.update(otp: true)
+      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
+      post '/api/v2/resource/otp/disable', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 200
+      expect(test_user.reload.otp).to eq false
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
+    end
+
+    it 'user verify otp Code' do
+
+      test_user.update(otp: true)
+      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
+      
+      post '/api/v2/resource/otp/verify', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 201
+      expect(test_user.reload.otp).to eq true
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
+    end
+  end
+
+  context 'incomplete request' do
+    it 'user receives error in enabling' do
+      post '/api/v2/resource/otp/enable', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 422
+      expect(test_user.reload.otp).to eq false
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
+    end
+
+    it 'user receives error in disabling' do
+      test_user.update(otp: true)
+      test_user.labels.create(key: :otp, scope: :private)
+      post '/api/v2/resource/otp/disable', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 422
+      expect(test_user.reload.otp).to eq true
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
+    end
+
+  end
+
+
+  context 'already done' do
+    before do
+      allow(TOTPService).to receive(:validate?)
+      .with(test_user.uid, otp_code) { true }
+    end
+
+    it 'enabling otp' do
+      test_user.update(otp: true)
+      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
+      post '/api/v2/resource/otp/enable', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 400
+      expect(test_user.reload.otp).to eq true
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
+    end
+
+    it 'disabling otp' do
+      post '/api/v2/resource/otp/disable', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 400
+      expect(test_user.reload.otp).to eq false
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
+    end
+
+    it 'otp disabled' do
+      post '/api/v2/resource/otp/verify', headers: auth_header, params: {
+        code: otp_code
+      }
+
+      expect(response.status).to eq 400
+      expect(test_user.reload.otp).to eq false
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
+    end
+
+    it 'otp enabled' do
+      test_user.update(otp: true)
+      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
+      post '/api/v2/resource/otp/generate_qrcode', headers: auth_header
+
+      expect(response.status).to eq 400
+      expect(test_user.reload.otp).to eq true
+      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
+    end
+  end
+end