sinon = require('sinon') chai = require('chai') assert = require("chai").assert should = chai.should() expect = chai.expect modulePath = "../../../../app/js/Features/User/UserInfoController.js" SandboxedModule = require('sandboxed-module') events = require "events" MockResponse = require "../helpers/MockResponse" MockRequest = require "../helpers/MockRequest" ObjectId = require("mongojs").ObjectId describe "UserInfoController", -> beforeEach -> @UserDeleter = deleteUser: sinon.stub().callsArgWith(1) @UserUpdater = updatePersonalInfo: sinon.stub() @sanitizer = escape:(v)->v sinon.spy @sanitizer, "escape" @UserInfoController = SandboxedModule.require modulePath, requires: "./UserGetter": @UserGetter = {} "./UserUpdater": @UserUpdater "./UserDeleter": @UserDeleter "sanitizer":@sanitizer @req = new MockRequest() @res = new MockResponse() @next = sinon.stub() describe "getLoggedInUsersPersonalInfo", -> beforeEach -> @user = _id: ObjectId() @req.user = @user @UserInfoController.sendFormattedPersonalInfo = sinon.stub() @UserInfoController.getLoggedInUsersPersonalInfo(@req, @res, @next) it "should call sendFormattedPersonalInfo", -> @UserInfoController.sendFormattedPersonalInfo .calledWith(@user, @res, @next) .should.equal true describe "getPersonalInfo", -> beforeEach -> @user_id = ObjectId().toString() @user = _id: ObjectId(@user_id) @req.params = user_id: @user_id describe "when the user exists", -> beforeEach -> @UserGetter.getUser = sinon.stub().callsArgWith(2, null, @user) @UserInfoController.sendFormattedPersonalInfo = sinon.stub() @UserInfoController.getPersonalInfo(@req, @res, @next) it "should look up the user in the database", -> @UserGetter.getUser .calledWith(@user_id, { _id: true, first_name: true, last_name: true, email: true }) .should.equal true it "should send the formatted details back to the client", -> @UserInfoController.sendFormattedPersonalInfo .calledWith(@user, @res, @next) .should.equal true describe "when the user does not exist", -> beforeEach -> @UserGetter.getUser = sinon.stub().callsArgWith(2, null, null) @UserInfoController.sendFormattedPersonalInfo = sinon.stub() @UserInfoController.getPersonalInfo(@req, @res, @next) it "should return 404 to the client", -> @res.statusCode.should.equal 404 describe "sendFormattedPersonalInfo", -> beforeEach -> @user = _id: ObjectId() first_name: "Douglas" last_name: "Adams" email: "doug@sharelatex.com" @formattedInfo = id: @user._id.toString() first_name: @user.first_name last_name: @user.last_name email: @user.email @UserInfoController._formatPersonalInfo = sinon.stub().callsArgWith(1, null, @formattedInfo) @UserInfoController.sendFormattedPersonalInfo @user, @res it "should format the user details for the response", -> @UserInfoController._formatPersonalInfo .calledWith(@user) .should.equal true it "should send the formatted details back to the client", -> @res.body.should.equal JSON.stringify(@formattedInfo) describe "_formatPersonalInfo", -> it "should return the correctly formatted data", -> @user = _id: ObjectId() first_name: "Douglas" last_name: "Adams" email: "doug@sharelatex.com" password: "should-not-get-included" signUpDate: new Date() @UserInfoController._formatPersonalInfo @user, (error, info) => expect(info).to.deep.equal { id: @user._id.toString() first_name: @user.first_name last_name: @user.last_name email: @user.email signUpDate: @user.signUpDate } describe "setPersonalInfo", -> beforeEach -> @req = session: user: _id:"123123j321jikuj90jlk" @req.body = first_name: "bob" last_name: "smith" role:"student" institution: "Sheffield" notWanted: "something" it "should send the data from the body to the user updater", (done)-> @UserUpdater.updatePersonalInfo.callsArgWith(2, null) @res.send = (statusCode)=> statusCode.should.equal 204 @UserUpdater.updatePersonalInfo.args[0][0].should.equal @req.session.user._id args = @UserUpdater.updatePersonalInfo.args[0][1] args.first_name.should.equal @req.body.first_name args.last_name.should.equal @req.body.last_name args.role.should.equal @req.body.role args.institution.should.equal @req.body.institution assert.equal args.notWanted, undefined done() @UserInfoController.updatePersonalInfo @req, @res it "should sanitize the data", (done)-> @UserUpdater.updatePersonalInfo.callsArgWith(2, null) @res.send = (statusCode)=> @sanitizer.escape.calledWith(@req.body.first_name).should.equal true @sanitizer.escape.calledWith(@req.body.last_name).should.equal true @sanitizer.escape.calledWith(@req.body.role).should.equal true @sanitizer.escape.calledWith(@req.body.institution).should.equal true done() @UserInfoController.updatePersonalInfo @req, @res it "should send an error if the UpserUpdater returns on", (done)-> @UserUpdater.updatePersonalInfo.callsArgWith(2, "error") @res.send = (statusCode)-> statusCode.should.equal 500 done() @UserInfoController.updatePersonalInfo @req, @res