Fix tests to catch errors

This commit is contained in:
awgeorge
2019-01-19 21:49:30 +00:00
committed by Arthur Cinader
parent c69130e0e0
commit 493fc99bcb

View File

@@ -558,12 +558,9 @@ describe('Personally Identifiable Information', () => {
userObj.id = user.id; userObj.id = user.id;
userObj userObj
.fetch() .fetch()
.then( .then(fetchedUser => {
fetchedUser => { expect(fetchedUser.get('email')).toBe(EMAIL);
expect(fetchedUser.get('email')).toBe(EMAIL); })
},
e => console.error('error', e)
)
.then(done) .then(done)
.catch(done.fail); .catch(done.fail);
}); });
@@ -573,20 +570,25 @@ describe('Personally Identifiable Information', () => {
.equalTo('objectId', user.id) .equalTo('objectId', user.id)
.find() .find()
.then(fetchedUser => { .then(fetchedUser => {
fetchedUser = fetchedUser[0];
expect(fetchedUser.get('email')).toBe(EMAIL); expect(fetchedUser.get('email')).toBe(EMAIL);
expect(fetchedUser.get('zip')).toBe(ZIP); expect(fetchedUser.get('zip')).toBe(ZIP);
expect(fetchedUser.get('ssn')).toBe(SSN); expect(fetchedUser.get('ssn')).toBe(SSN);
done(); done();
}); })
.catch(done.fail);
}); });
it('privilaged user should be able to get user PII via API with Get', done => { it('privilaged user should be able to get user PII via API with Get', done => {
new Parse.Query(Parse.User).get(user.id).then(fetchedUser => { new Parse.Query(Parse.User)
expect(fetchedUser.get('email')).toBe(EMAIL); .get(user.id)
expect(fetchedUser.get('zip')).toBe(ZIP); .then(fetchedUser => {
expect(fetchedUser.get('ssn')).toBe(SSN); expect(fetchedUser.get('email')).toBe(EMAIL);
done(); expect(fetchedUser.get('zip')).toBe(ZIP);
}); expect(fetchedUser.get('ssn')).toBe(SSN);
done();
})
.catch(done.fail);
}); });
it('privilaged user should get user PII via REST by ID', done => { it('privilaged user should get user PII via REST by ID', done => {
@@ -608,7 +610,8 @@ describe('Personally Identifiable Information', () => {
}, },
e => console.error('error', e.message) e => console.error('error', e.message)
) )
.then(() => done()); .then(() => done())
.catch(done.fail);
}); });
}); });
@@ -616,7 +619,7 @@ describe('Personally Identifiable Information', () => {
describe('with public read ACL', () => { describe('with public read ACL', () => {
beforeEach(async done => { beforeEach(async done => {
const userACL = new Parse.ACL(); const userACL = new Parse.ACL();
userACL.setPublicReadAccess(); userACL.setPublicReadAccess(true);
await user.setACL(userACL).save(null, { useMasterKey: true }); await user.setACL(userACL).save(null, { useMasterKey: true });
done(); done();
}); });
@@ -627,12 +630,9 @@ describe('Personally Identifiable Information', () => {
userObj.id = user.id; userObj.id = user.id;
userObj userObj
.fetch() .fetch()
.then( .then(fetchedUser => {
fetchedUser => { expect(fetchedUser.get('email')).toBe(undefined);
expect(fetchedUser.get('email')).toBe(undefined); })
},
e => console.error('error', e)
)
.then(done) .then(done)
.catch(done.fail); .catch(done.fail);
}); });
@@ -644,22 +644,27 @@ describe('Personally Identifiable Information', () => {
.equalTo('objectId', user.id) .equalTo('objectId', user.id)
.find() .find()
.then(fetchedUser => { .then(fetchedUser => {
fetchedUser = fetchedUser[0];
expect(fetchedUser.get('email')).toBe(undefined); expect(fetchedUser.get('email')).toBe(undefined);
expect(fetchedUser.get('zip')).toBe(undefined); expect(fetchedUser.get('zip')).toBe(undefined);
expect(fetchedUser.get('ssn')).toBe(undefined); expect(fetchedUser.get('ssn')).toBe(undefined);
done(); done();
}) })
.catch(done.fail)
); );
}); });
it('should not be able to get user PII via API with Get', done => { it('should not be able to get user PII via API with Get', done => {
Parse.User.logOut().then(() => Parse.User.logOut().then(() =>
new Parse.Query(Parse.User).get(user.id).then(fetchedUser => { new Parse.Query(Parse.User)
expect(fetchedUser.get('email')).toBe(undefined); .get(user.id)
expect(fetchedUser.get('zip')).toBe(undefined); .then(fetchedUser => {
expect(fetchedUser.get('ssn')).toBe(undefined); expect(fetchedUser.get('email')).toBe(undefined);
done(); expect(fetchedUser.get('zip')).toBe(undefined);
}) expect(fetchedUser.get('ssn')).toBe(undefined);
done();
})
.catch(done.fail)
); );
}); });
@@ -672,16 +677,14 @@ describe('Personally Identifiable Information', () => {
'X-Parse-Javascript-Key': 'test', 'X-Parse-Javascript-Key': 'test',
}, },
}) })
.then( .then(response => {
response => { const result = response.data;
const result = response.data; const fetchedUser = result;
const fetchedUser = result; expect(fetchedUser.zip).toBe(undefined);
expect(fetchedUser.zip).toBe(undefined); expect(fetchedUser.email).toBe(undefined);
expect(fetchedUser.email).toBe(undefined); })
}, .then(() => done())
e => console.error('error', e.message) .catch(done.fail);
)
.then(() => done());
}); });
// Even with an authenticated user, Public read ACL should never expose sensitive data. // Even with an authenticated user, Public read ACL should never expose sensitive data.
@@ -715,20 +718,25 @@ describe('Personally Identifiable Information', () => {
.equalTo('objectId', user.id) .equalTo('objectId', user.id)
.find() .find()
.then(fetchedUser => { .then(fetchedUser => {
fetchedUser = fetchedUser[0];
expect(fetchedUser.get('email')).toBe(undefined); expect(fetchedUser.get('email')).toBe(undefined);
expect(fetchedUser.get('zip')).toBe(undefined); expect(fetchedUser.get('zip')).toBe(undefined);
expect(fetchedUser.get('ssn')).toBe(undefined); expect(fetchedUser.get('ssn')).toBe(undefined);
done(); done();
}); })
.catch(done.fail);
}); });
it('should not be able to get user PII via API with Get', done => { it('should not be able to get user PII via API with Get', done => {
new Parse.Query(Parse.User).get(user.id).then(fetchedUser => { new Parse.Query(Parse.User)
expect(fetchedUser.get('email')).toBe(undefined); .get(user.id)
expect(fetchedUser.get('zip')).toBe(undefined); .then(fetchedUser => {
expect(fetchedUser.get('ssn')).toBe(undefined); expect(fetchedUser.get('email')).toBe(undefined);
done(); expect(fetchedUser.get('zip')).toBe(undefined);
}); expect(fetchedUser.get('ssn')).toBe(undefined);
done();
})
.catch(done.fail);
}); });
}); });
}); });