shimapan/test/middleware.js

const chai = require('chai');
chai.use(require('chai-http'));
const should = chai.should();
const describe = require('mocha').describe;

const verifyBody = require('../app/util/verifyBody').verifyBody;

describe('Body Verification', () => {
    const testVerifyBody = async (body, expected, code, message) => {
        try {
            await verifyBody(body, expected);
        } catch (err) {
            if (code)
                err.code.should.equal(code);
            if (message)
                err.message.should.equal(message);
        }
    };

    it('must continue properly with valid prop', () => {
        const tests = [{
            expected: [{name: 'test'}],
            body: {test: 'test'}
        }, {
            expected: [{name: 'test', type: 'array'}],
            body: {test: [1, 2, 3]}
        }, {
            expected: [{name: 'test', type: 'date'}],
            body: {test: '11/12/2018'}
        }, {
            expected: [{name: 'test', type: 'date'}],
            body: {test: 1546368715}
        }, {
            expected: [{name: 'test', type: 'number', min: 12, max: 16}],
            body: {test: 16}
        }];

        return Promise.all(tests.map(test => testVerifyBody(test.body, test.expected)));
    });

    it('must continue with a missing but optional prop', () => {
        const expected = [{name: 'test', optional: true}];
        return testVerifyBody({}, expected);
    });

    it('must error with a missing prop', () => {
        const expected = [{name: 'test'}];
        return testVerifyBody({}, expected, 400, 'test not specified.');
    });

    it('must error with an invalid primitive type', () => {
        const expected = [{name: 'test', type: 'string'}];
        return testVerifyBody({test: [1, 2, 3]}, expected, 400, 'test malformed.');
    });

    it('must error with an invalid date type', () => {
        const expected = [{name: 'test', type: 'date'}];
        return testVerifyBody({test: '123abc'}, expected, 400, 'test malformed.');
    });

    it('must error with an invalid array type', () => {
        const expected = [{name: 'test', type: 'array'}];
        return testVerifyBody({test: 'test'}, expected, 400, 'test malformed.');
    });

    it('must error when smaller than the minimum', () => {
        const expected = [{name: 'test', type: 'number', min: 10}];
        return testVerifyBody({test: 3}, expected, 400, 'test too small.');
    });

    it('must error when larger than the maximum', () => {
        const expected = [{name: 'test', type: 'number', max: 10}];
        return testVerifyBody({test: 15}, expected, 400, 'test too large.');
    });

    it('must error with a length higher than the max', () => {
        const expected = [{name: 'test', maxLength: 5}];
        return testVerifyBody({test: '123456'}, expected, 400, 'test too long.');
    });

    it('must error with a dirty prop that gets sanitized', () => {
        const expected = [{name: 'test', sanitize: true}];
        return testVerifyBody({test: 'test<svg/onload=alert("XSS")>'}, expected, 400, 'test contains invalid characters.');
    });

    it('must error with a restricted character', () => {
        const expected = [{name: 'test', restrict: new RegExp("\\s")}];
        return testVerifyBody({test: 'test test'}, expected, 400, 'test contains invalid characters.');
    })
});