api.test.js

import { deepStrictEqual, ok, strictEqual } from "node:assert";
import { after, before, describe, it } from "node:test";
describe("API Workflow", () => {
  let _server = {};
  let _globalToken = "";
  const BASE_URL = "http://localhost:3000";
  before(async () => {
    _server = (await import("./api.js")).app;
    if (!_server.listening) {
      await new Promise((resolve) => {
        _server.once("listening", resolve);
      });
    }
  });

  after((done) => _server.close(done));
  it("should received not authorized given wrong user and password", async () => {
    const data = {
      user: "leonardojaques",
      password: "",
    };
    const request = await fetch(`${BASE_URL}/login`, {
      method: "POST",
      body: JSON.stringify(data),
    });
    strictEqual(request.status, 401);
    const response = await request.json();
    deepStrictEqual(response, { error: "user or password invalid" });
  });
  it("should login successfully given user and password", async () => {
    const data = {
      user: "leonardojaques",
      password: "123",
    };
    const request = await fetch(`${BASE_URL}/login`, {
      method: "POST",
      body: JSON.stringify(data),
    });
    strictEqual(request.status, 200);
    const response = await request.json();
    ok(response.token, "token should be present");
    _globalToken = response.token;
  });
  it("should not be allowed to access private data without a token", async () => {
    const request = await fetch(`${BASE_URL}/`, {
      method: "GET",
      headers: {
        authorization: "",
      },
    });
    strictEqual(request.status, 401);
    const response = await request.json();
    deepStrictEqual(response, { error: "invalid token!" });
  });
  it("should be allowed to access private data with a valid token", async () => {
    const request = await fetch(`${BASE_URL}/`, {
      method: "GET",
      headers: {
        authorization: `Bearer ${_globalToken}`,
      },
    });
    strictEqual(request.status, 200);
    const response = await request.json();
    deepStrictEqual(response, { result: "Hey welcome" });
  });
});