69 lines
4.3 KiB
TypeScript
69 lines
4.3 KiB
TypeScript
|
import { cleanup, render, screen, within } from '@testing-library/react';
|
||
|
|
import userEvent from '@testing-library/user-event';
|
||
|
|
import { afterEach, expect, it, vi } from 'vitest';
|
||
|
|
import Admin from './Admin';
|
||
|
|
|
||
|
|
afterEach(() => { cleanup(); vi.unstubAllGlobals(); });
|
||
|
|
|
||
|
|
it('signs in with a password, creates an owned agent key and changes the password', async () => {
|
||
|
|
const fetchMock = vi.fn(async (path: string, init?: RequestInit) => {
|
||
|
|
if (path === '/v1/session' && init?.method === 'GET') return { ok: false, status: 401, json: async () => ({}) };
|
||
|
|
let result: unknown = [];
|
||
|
|
if (path === '/v1/users/session') result = { csrf_token: 'user-csrf' };
|
||
|
|
if (path === '/v1/projects') result = ['pilot'];
|
||
|
|
if (path === '/v1/me/agent-credentials' && init?.method === 'POST') result = { credential_id: 'agent:codex:fixture', token: 'agent-fixture-secret' };
|
||
|
|
if (path === '/v1/me/password') result = { status: 'password_changed' };
|
||
|
|
return { ok: true, json: async () => result };
|
||
|
|
});
|
||
|
|
vi.stubGlobal('fetch', fetchMock);
|
||
|
|
const user = userEvent.setup();
|
||
|
|
render(<Admin personal />);
|
||
|
|
await user.type(await screen.findByLabelText('Username'), 'alice');
|
||
|
|
await user.type(screen.getByLabelText('Password'), 'initial-password-fixture');
|
||
|
|
await user.click(screen.getByRole('button', { name: 'Sign in' }));
|
||
|
|
await screen.findByRole('heading', { name: 'Add an agent' });
|
||
|
|
expect(fetchMock).toHaveBeenCalledWith('/v1/users/session', expect.objectContaining({
|
||
|
|
method: 'POST', credentials: 'same-origin', body: JSON.stringify({ username: 'alice', password: 'initial-password-fixture' }),
|
||
|
|
}));
|
||
|
|
expect(screen.queryByRole('heading', { name: 'User accounts' })).toBeNull();
|
||
|
|
await user.type(screen.getByLabelText('Agent name'), 'codex-laptop');
|
||
|
|
await user.click(screen.getByLabelText('pilot'));
|
||
|
|
await user.click(screen.getByRole('button', { name: 'Create agent key' }));
|
||
|
|
expect(await screen.findByLabelText('New bearer credential')).toHaveValue('agent-fixture-secret');
|
||
|
|
expect(fetchMock).toHaveBeenCalledWith('/v1/me/agent-credentials', expect.objectContaining({
|
||
|
|
headers: expect.objectContaining({ 'X-GEWU-CSRF': 'user-csrf' }),
|
||
|
|
body: JSON.stringify({ name: 'codex-laptop', project_ids: ['pilot'] }),
|
||
|
|
}));
|
||
|
|
await user.type(screen.getByLabelText('Current password'), 'initial-password-fixture');
|
||
|
|
await user.type(screen.getByLabelText('New password'), 'changed-password-fixture');
|
||
|
|
await user.type(screen.getByLabelText('Confirm new password'), 'changed-password-fixture');
|
||
|
|
await user.click(screen.getByRole('button', { name: 'Change password' }));
|
||
|
|
expect(await screen.findByLabelText('Username')).toBeVisible();
|
||
|
|
expect(screen.queryByLabelText('New bearer credential')).toBeNull();
|
||
|
|
expect(screen.getByRole('status')).toHaveTextContent('Password changed.');
|
||
|
|
});
|
||
|
|
|
||
|
|
it('lets the existing administrator create the first password account', async () => {
|
||
|
|
const fetchMock = vi.fn(async (path: string, init?: RequestInit) => {
|
||
|
|
if (path === '/v1/session' && init?.method === 'GET') return { ok: false, status: 401, json: async () => ({}) };
|
||
|
|
const result = path === '/v1/session' ? { csrf_token: 'operator-csrf' } : [];
|
||
|
|
return { ok: true, json: async () => result };
|
||
|
|
});
|
||
|
|
vi.stubGlobal('fetch', fetchMock);
|
||
|
|
const user = userEvent.setup();
|
||
|
|
render(<Admin />);
|
||
|
|
await user.click(await screen.findByRole('button', { name: 'Use an existing credential' }));
|
||
|
|
await user.type(screen.getByLabelText('GEWU administrator credential'), 'operator-fixture');
|
||
|
|
await user.click(screen.getByRole('button', { name: 'Connect' }));
|
||
|
|
await user.click(await screen.findByRole('tab', { name: 'Users' }));
|
||
|
|
const accounts = await screen.findByRole('region', { name: 'User accounts' });
|
||
|
|
await user.type(within(accounts).getByLabelText('New username'), 'vasily');
|
||
|
|
await user.type(within(accounts).getByLabelText('Initial password'), 'chosen-password-fixture');
|
||
|
|
await user.selectOptions(within(accounts).getByLabelText('Account role'), 'admin');
|
||
|
|
await user.click(within(accounts).getByRole('button', { name: 'Create user' }));
|
||
|
|
await screen.findByText(/Account created for vasily/);
|
||
|
|
expect(fetchMock).toHaveBeenCalledWith('/v1/admin/users', expect.objectContaining({
|
||
|
|
body: JSON.stringify({ username: 'vasily', password: 'chosen-password-fixture', role: 'admin', project_ids: [] }),
|
||
|
|
}));
|
||
|
|
expect(within(accounts).getByLabelText('Initial password')).toHaveValue('');
|
||
|
|
});
|