212 lines
8.5 KiB
Ruby
212 lines
8.5 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'spec_helper'
|
|
describe API::V2::Admin::Profiles do
|
|
include_context 'bearer authentication'
|
|
|
|
let!(:create_admin_permission) do
|
|
create :permission,
|
|
role: 'admin'
|
|
create :permission,
|
|
role: 'superadmin'
|
|
end
|
|
|
|
let!(:create_member_permission) do
|
|
create :permission,
|
|
role: 'member'
|
|
end
|
|
let!(:test_user) { create(:user, role: 'superadmin') }
|
|
let!(:profile1) { create(:profile) }
|
|
let!(:profile2) { create(:profile) }
|
|
let!(:profile3) { create(:profile) }
|
|
let!(:profile4) { create(:profile) }
|
|
let!(:profile5) { create(:profile) }
|
|
|
|
describe 'GET /api/v2/admin/profiles' do
|
|
context 'successful response' do
|
|
it 'returns all profiles' do
|
|
get '/api/v2/admin/profiles', headers: auth_header
|
|
|
|
result = JSON.parse(response.body)
|
|
expect(response).to be_successful
|
|
|
|
expect(result.count).to eq(Profile.count)
|
|
expect(result.first.keys).to match_array %w[first_name last_name dob address postcode city country state metadata created_at updated_at]
|
|
end
|
|
|
|
it 'returns paginated profiles' do
|
|
get '/api/v2/admin/profiles', params: { limit: 1, page: 1 }, headers: auth_header
|
|
result = JSON.parse(response.body)
|
|
|
|
expect(response).to be_successful
|
|
expect(response.headers.fetch('Total')).to eq '5'
|
|
expect(result.size).to eq 1
|
|
expect(result.first['first_name']).to eq profile1.first_name
|
|
expect(result.first['last_name']).to eq profile1.last_name
|
|
expect(result.first['dob']).to eq profile1.dob.to_s
|
|
|
|
get '/api/v2/admin/profiles', params: { limit: 1, page: 2 }, headers: auth_header
|
|
result = JSON.parse(response.body)
|
|
|
|
expect(response).to be_successful
|
|
expect(response.headers.fetch('Total')).to eq '5'
|
|
expect(result.size).to eq 1
|
|
expect(result.first['first_name']).to eq profile2.first_name
|
|
expect(result.first['last_name']).to eq profile2.last_name
|
|
expect(result.first['dob']).to eq profile2.dob.to_s
|
|
|
|
end
|
|
end
|
|
end
|
|
|
|
describe 'POST /api/v2/admin/profiles' do
|
|
let(:user) { create :user }
|
|
let!(:request_params) do
|
|
{
|
|
last_name: Faker::Name.last_name,
|
|
first_name: Faker::Name.first_name,
|
|
dob: Faker::Date.birthday,
|
|
country: Faker::Address.country_code_long,
|
|
city: Faker::Address.city,
|
|
address: Faker::Address.street_address,
|
|
postcode: Faker::Address.zip_code
|
|
}
|
|
end
|
|
|
|
context 'successful response' do
|
|
it 'works correctly' do
|
|
expect { post '/api/v2/admin/profiles', params: request_params.merge(uid: user.uid), headers: auth_header }
|
|
.to change { Profile.count }.by(1)
|
|
|
|
expect(response.status).to eq(201)
|
|
expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
|
|
expect(json_body[:first_name]).to eq Profile.last.first_name
|
|
expect(json_body[:last_name]).to eq Profile.last.last_name
|
|
expect(json_body[:dob]).to eq Profile.last.dob.to_s
|
|
expect(json_body[:state]).to eq('submitted')
|
|
expect(json_body[:metadata]).to be_blank
|
|
expect(Profile.last.author).to eq(test_user.uid)
|
|
end
|
|
end
|
|
end
|
|
|
|
describe 'PUT /api/v2/admin/profiles' do
|
|
context 'successful response' do
|
|
let!(:member_with_profile) do
|
|
@member = create :user, role: 'member'
|
|
create(:profile, user_id: @member.id, state: 'submitted')
|
|
end
|
|
|
|
it 'returns profile' do
|
|
put '/api/v2/admin/profiles', params: { uid: @member.uid, state: 'verified' }, headers: auth_header
|
|
|
|
expect(response.status).to eq(200)
|
|
profile = @member.profiles.last
|
|
expect(profile).to be
|
|
expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
|
|
expect(json_body[:first_name]).to eq profile.first_name
|
|
expect(json_body[:last_name]).to eq profile.last_name
|
|
expect(json_body[:dob]).to eq profile.dob.to_s
|
|
expect(json_body[:state]).to eq('verified')
|
|
expect(profile.state).to eq('verified')
|
|
end
|
|
|
|
let!(:superadmin_with_profile) do
|
|
@user = create :user, role: 'superadmin'
|
|
create(:profile, user_id: @user.id, state: 'submitted')
|
|
end
|
|
|
|
it 'return profiles when superadmin updates superadmin' do
|
|
test_user.update!(role: 'superadmin')
|
|
put '/api/v2/admin/profiles', params: { uid: @user.uid, state: 'verified' }, headers: auth_header
|
|
|
|
expect(response.status).to eq(200)
|
|
profile = @user.profiles.last
|
|
expect(profile).to be
|
|
expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
|
|
expect(json_body[:first_name]).to eq profile.first_name
|
|
expect(json_body[:last_name]).to eq profile.last_name
|
|
expect(json_body[:dob]).to eq profile.dob.to_s
|
|
expect(json_body[:state]).to eq('verified')
|
|
expect(profile.state).to eq('verified')
|
|
expect(profile.metadata).to be_blank
|
|
end
|
|
end
|
|
|
|
context 'unsuccessful response' do
|
|
let!(:admin_test) { test_user.update(role: 'admin') }
|
|
|
|
let!(:superadmin_with_profile) do
|
|
@user = create :user, role: 'superadmin'
|
|
create(:profile, user_id: @user.id, state: 'submitted', author: test_user.uid)
|
|
|
|
@user_admin = create :user, role: 'admin'
|
|
create(:profile, user_id: @user_admin.id, state: 'submitted', author: test_user.uid)
|
|
end
|
|
|
|
it 'return error when non-superadmin user updates superadmin' do
|
|
put '/api/v2/admin/profiles', params: { uid: @user.uid, state: 'rejected' }, headers: auth_header
|
|
|
|
result = JSON.parse(response.body)
|
|
expect(response.code).to eq '422'
|
|
expect(result['errors']).to eq(['admin.profiles.superadmin_change'])
|
|
end
|
|
|
|
it 'return error when author is trying to approve himself' do
|
|
allow(Barong::App.config).to receive_messages(profile_double_verification: 'true')
|
|
|
|
put '/api/v2/admin/profiles', params: { uid: @user_admin.uid, state: 'rejected' }, headers: auth_header
|
|
|
|
result = JSON.parse(response.body)
|
|
expect(response.code).to eq '422'
|
|
expect(result['errors']).to eq(['admin.profiles.second_admin_approval'])
|
|
end
|
|
|
|
it 'renders an error when profile doesnt exist' do
|
|
put '/api/v2/admin/profiles', params: { uid: '0', state: 'rejected' }, headers: auth_header
|
|
expect_status.to eq(404)
|
|
expect_body.to eq(errors: ['admin.profiles.doesnt_exist_or_not_editable'])
|
|
end
|
|
|
|
it 'renders an error when profile is not editable' do
|
|
put '/api/v2/admin/profiles', params: { uid: profile3.user.uid, state: 'rejected' }, headers: auth_header
|
|
expect_status.to eq(404)
|
|
expect_body.to eq(errors: ['admin.profiles.doesnt_exist_or_not_editable'])
|
|
end
|
|
end
|
|
|
|
context 'user with different amount of profile fields' do
|
|
let!(:profile) { create(:profile, user: test_user, last_name: nil, first_name: nil, state: 'submitted') }
|
|
|
|
it 'returns partial updated profile' do
|
|
put '/api/v2/admin/profiles', params: { uid: test_user.uid, state: 'rejected' }, headers: auth_header
|
|
|
|
expect(response.status).to eq(200)
|
|
profile = test_user.profiles.last
|
|
expect(profile).to be
|
|
expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
|
|
expect(json_body[:first_name]).to eq profile.first_name
|
|
expect(json_body[:last_name]).to eq profile.last_name
|
|
expect(json_body[:dob]).to eq profile.dob.to_s
|
|
expect(json_body[:state]).to eq('rejected')
|
|
expect(profile.state).to eq('rejected')
|
|
end
|
|
|
|
it 'returns full updated profile' do
|
|
put '/api/v2/admin/profiles', params: { uid: test_user.uid, state: 'rejected' }, headers: auth_header
|
|
|
|
expect(response.status).to eq(200)
|
|
profile = test_user.profiles.last
|
|
expect(profile).to be
|
|
expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
|
|
expect(json_body[:first_name]).to eq profile.first_name
|
|
expect(json_body[:last_name]).to eq profile.last_name
|
|
expect(json_body[:dob]).to eq profile.dob.to_s
|
|
expect(json_body[:state]).to eq('rejected')
|
|
expect(profile.state).to eq('rejected')
|
|
expect(profile.metadata).to be_blank
|
|
end
|
|
end
|
|
end
|
|
end
|