Fix tests to catch errors
This commit is contained in:
@@ -558,12 +558,9 @@ describe('Personally Identifiable Information', () => {
|
|||||||
userObj.id = user.id;
|
userObj.id = user.id;
|
||||||
userObj
|
userObj
|
||||||
.fetch()
|
.fetch()
|
||||||
.then(
|
.then(fetchedUser => {
|
||||||
fetchedUser => {
|
expect(fetchedUser.get('email')).toBe(EMAIL);
|
||||||
expect(fetchedUser.get('email')).toBe(EMAIL);
|
})
|
||||||
},
|
|
||||||
e => console.error('error', e)
|
|
||||||
)
|
|
||||||
.then(done)
|
.then(done)
|
||||||
.catch(done.fail);
|
.catch(done.fail);
|
||||||
});
|
});
|
||||||
@@ -573,20 +570,25 @@ describe('Personally Identifiable Information', () => {
|
|||||||
.equalTo('objectId', user.id)
|
.equalTo('objectId', user.id)
|
||||||
.find()
|
.find()
|
||||||
.then(fetchedUser => {
|
.then(fetchedUser => {
|
||||||
|
fetchedUser = fetchedUser[0];
|
||||||
expect(fetchedUser.get('email')).toBe(EMAIL);
|
expect(fetchedUser.get('email')).toBe(EMAIL);
|
||||||
expect(fetchedUser.get('zip')).toBe(ZIP);
|
expect(fetchedUser.get('zip')).toBe(ZIP);
|
||||||
expect(fetchedUser.get('ssn')).toBe(SSN);
|
expect(fetchedUser.get('ssn')).toBe(SSN);
|
||||||
done();
|
done();
|
||||||
});
|
})
|
||||||
|
.catch(done.fail);
|
||||||
});
|
});
|
||||||
|
|
||||||
it('privilaged user should be able to get user PII via API with Get', done => {
|
it('privilaged user should be able to get user PII via API with Get', done => {
|
||||||
new Parse.Query(Parse.User).get(user.id).then(fetchedUser => {
|
new Parse.Query(Parse.User)
|
||||||
expect(fetchedUser.get('email')).toBe(EMAIL);
|
.get(user.id)
|
||||||
expect(fetchedUser.get('zip')).toBe(ZIP);
|
.then(fetchedUser => {
|
||||||
expect(fetchedUser.get('ssn')).toBe(SSN);
|
expect(fetchedUser.get('email')).toBe(EMAIL);
|
||||||
done();
|
expect(fetchedUser.get('zip')).toBe(ZIP);
|
||||||
});
|
expect(fetchedUser.get('ssn')).toBe(SSN);
|
||||||
|
done();
|
||||||
|
})
|
||||||
|
.catch(done.fail);
|
||||||
});
|
});
|
||||||
|
|
||||||
it('privilaged user should get user PII via REST by ID', done => {
|
it('privilaged user should get user PII via REST by ID', done => {
|
||||||
@@ -608,7 +610,8 @@ describe('Personally Identifiable Information', () => {
|
|||||||
},
|
},
|
||||||
e => console.error('error', e.message)
|
e => console.error('error', e.message)
|
||||||
)
|
)
|
||||||
.then(() => done());
|
.then(() => done())
|
||||||
|
.catch(done.fail);
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
|
|
||||||
@@ -616,7 +619,7 @@ describe('Personally Identifiable Information', () => {
|
|||||||
describe('with public read ACL', () => {
|
describe('with public read ACL', () => {
|
||||||
beforeEach(async done => {
|
beforeEach(async done => {
|
||||||
const userACL = new Parse.ACL();
|
const userACL = new Parse.ACL();
|
||||||
userACL.setPublicReadAccess();
|
userACL.setPublicReadAccess(true);
|
||||||
await user.setACL(userACL).save(null, { useMasterKey: true });
|
await user.setACL(userACL).save(null, { useMasterKey: true });
|
||||||
done();
|
done();
|
||||||
});
|
});
|
||||||
@@ -627,12 +630,9 @@ describe('Personally Identifiable Information', () => {
|
|||||||
userObj.id = user.id;
|
userObj.id = user.id;
|
||||||
userObj
|
userObj
|
||||||
.fetch()
|
.fetch()
|
||||||
.then(
|
.then(fetchedUser => {
|
||||||
fetchedUser => {
|
expect(fetchedUser.get('email')).toBe(undefined);
|
||||||
expect(fetchedUser.get('email')).toBe(undefined);
|
})
|
||||||
},
|
|
||||||
e => console.error('error', e)
|
|
||||||
)
|
|
||||||
.then(done)
|
.then(done)
|
||||||
.catch(done.fail);
|
.catch(done.fail);
|
||||||
});
|
});
|
||||||
@@ -644,22 +644,27 @@ describe('Personally Identifiable Information', () => {
|
|||||||
.equalTo('objectId', user.id)
|
.equalTo('objectId', user.id)
|
||||||
.find()
|
.find()
|
||||||
.then(fetchedUser => {
|
.then(fetchedUser => {
|
||||||
|
fetchedUser = fetchedUser[0];
|
||||||
expect(fetchedUser.get('email')).toBe(undefined);
|
expect(fetchedUser.get('email')).toBe(undefined);
|
||||||
expect(fetchedUser.get('zip')).toBe(undefined);
|
expect(fetchedUser.get('zip')).toBe(undefined);
|
||||||
expect(fetchedUser.get('ssn')).toBe(undefined);
|
expect(fetchedUser.get('ssn')).toBe(undefined);
|
||||||
done();
|
done();
|
||||||
})
|
})
|
||||||
|
.catch(done.fail)
|
||||||
);
|
);
|
||||||
});
|
});
|
||||||
|
|
||||||
it('should not be able to get user PII via API with Get', done => {
|
it('should not be able to get user PII via API with Get', done => {
|
||||||
Parse.User.logOut().then(() =>
|
Parse.User.logOut().then(() =>
|
||||||
new Parse.Query(Parse.User).get(user.id).then(fetchedUser => {
|
new Parse.Query(Parse.User)
|
||||||
expect(fetchedUser.get('email')).toBe(undefined);
|
.get(user.id)
|
||||||
expect(fetchedUser.get('zip')).toBe(undefined);
|
.then(fetchedUser => {
|
||||||
expect(fetchedUser.get('ssn')).toBe(undefined);
|
expect(fetchedUser.get('email')).toBe(undefined);
|
||||||
done();
|
expect(fetchedUser.get('zip')).toBe(undefined);
|
||||||
})
|
expect(fetchedUser.get('ssn')).toBe(undefined);
|
||||||
|
done();
|
||||||
|
})
|
||||||
|
.catch(done.fail)
|
||||||
);
|
);
|
||||||
});
|
});
|
||||||
|
|
||||||
@@ -672,16 +677,14 @@ describe('Personally Identifiable Information', () => {
|
|||||||
'X-Parse-Javascript-Key': 'test',
|
'X-Parse-Javascript-Key': 'test',
|
||||||
},
|
},
|
||||||
})
|
})
|
||||||
.then(
|
.then(response => {
|
||||||
response => {
|
const result = response.data;
|
||||||
const result = response.data;
|
const fetchedUser = result;
|
||||||
const fetchedUser = result;
|
expect(fetchedUser.zip).toBe(undefined);
|
||||||
expect(fetchedUser.zip).toBe(undefined);
|
expect(fetchedUser.email).toBe(undefined);
|
||||||
expect(fetchedUser.email).toBe(undefined);
|
})
|
||||||
},
|
.then(() => done())
|
||||||
e => console.error('error', e.message)
|
.catch(done.fail);
|
||||||
)
|
|
||||||
.then(() => done());
|
|
||||||
});
|
});
|
||||||
|
|
||||||
// Even with an authenticated user, Public read ACL should never expose sensitive data.
|
// Even with an authenticated user, Public read ACL should never expose sensitive data.
|
||||||
@@ -715,20 +718,25 @@ describe('Personally Identifiable Information', () => {
|
|||||||
.equalTo('objectId', user.id)
|
.equalTo('objectId', user.id)
|
||||||
.find()
|
.find()
|
||||||
.then(fetchedUser => {
|
.then(fetchedUser => {
|
||||||
|
fetchedUser = fetchedUser[0];
|
||||||
expect(fetchedUser.get('email')).toBe(undefined);
|
expect(fetchedUser.get('email')).toBe(undefined);
|
||||||
expect(fetchedUser.get('zip')).toBe(undefined);
|
expect(fetchedUser.get('zip')).toBe(undefined);
|
||||||
expect(fetchedUser.get('ssn')).toBe(undefined);
|
expect(fetchedUser.get('ssn')).toBe(undefined);
|
||||||
done();
|
done();
|
||||||
});
|
})
|
||||||
|
.catch(done.fail);
|
||||||
});
|
});
|
||||||
|
|
||||||
it('should not be able to get user PII via API with Get', done => {
|
it('should not be able to get user PII via API with Get', done => {
|
||||||
new Parse.Query(Parse.User).get(user.id).then(fetchedUser => {
|
new Parse.Query(Parse.User)
|
||||||
expect(fetchedUser.get('email')).toBe(undefined);
|
.get(user.id)
|
||||||
expect(fetchedUser.get('zip')).toBe(undefined);
|
.then(fetchedUser => {
|
||||||
expect(fetchedUser.get('ssn')).toBe(undefined);
|
expect(fetchedUser.get('email')).toBe(undefined);
|
||||||
done();
|
expect(fetchedUser.get('zip')).toBe(undefined);
|
||||||
});
|
expect(fetchedUser.get('ssn')).toBe(undefined);
|
||||||
|
done();
|
||||||
|
})
|
||||||
|
.catch(done.fail);
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
|
|||||||
Reference in New Issue
Block a user