refactor: nambahin role mentor di admin account dan ngeremove max_member di project

2026-06-14 20:26:53 +07:00
parent edc287968d
commit 94bbc18224
10 changed files with 937 additions and 381 deletions
@@ -0,0 +1,122 @@
+const axios = require('axios');
+
+const BASE_URL = 'http://localhost:9000';
+
+async function runTests() {
+  console.log('=== STARTING INTEGRATION TESTS FOR ADMIN & MENTOR ROLES ===\n');
+
+  let adminToken = '';
+  let mentorToken = '';
+  let createdProjectId = null;
+  const mentorEmail = `mentor_${Date.now()}@internify.com`;
+  const mentorPassword = 'Password123';
+
+  // Helper config generator
+  const getHeader = (token) => ({
+    headers: { Authorization: `Bearer ${token}` }
+  });
+
+  try {
+    // 1. Login as Admin
+    console.log('1. Logging in as Admin (admin1@internify.com)...');
+    const loginRes = await axios.post(`${BASE_URL}/auth-api/login`, {
+      email: 'admin1@internify.com',
+      password: 'password123'
+    });
+    
+    adminToken = loginRes.data.data.token;
+    console.log('   Admin logged in successfully!\n');
+
+    // 2. Create Mentor Account via Admin API
+    console.log(`2. Creating a new Mentor account (${mentorEmail}) via Admin endpoint...`);
+    await axios.post(`${BASE_URL}/admin-api/add`, {
+      nama_depan: 'John',
+      nama_belakang: 'Mentor',
+      email: mentorEmail,
+      password: mentorPassword,
+      role: 'mentor'
+    }, getHeader(adminToken));
+    
+    console.log('   Mentor account created successfully!\n');
+
+    // 3. Login as Mentor
+    console.log('3. Logging in as the newly created Mentor...');
+    const mentorLoginRes = await axios.post(`${BASE_URL}/auth-api/login`, {
+      email: mentorEmail,
+      password: mentorPassword
+    });
+    
+    mentorToken = mentorLoginRes.data.data.token;
+    console.log(`   Mentor logged in successfully! Role: ${mentorLoginRes.data.data.user.role}\n`);
+
+    // 4. Mentor creates a project
+    console.log('4. Creating a project as Mentor...');
+    const createProjectRes = await axios.post(`${BASE_URL}/project-api/add`, {
+      project_icon: 'code',
+      project_name: `Mentor's Custom Project - ${Date.now()}`,
+      description: 'A project created specifically to test mentor ownership isolation.',
+      start_date: '2026-07-01',
+      end_date: '2026-10-01',
+      member_emails: []
+    }, getHeader(mentorToken));
+    
+    createdProjectId = createProjectRes.data.data.id;
+    console.log(`   Project created successfully! ID: ${createdProjectId}\n`);
+
+    // 5. Mentor lists projects (should ONLY see their own created project)
+    console.log('5. Mentor lists their projects...');
+    const mentorProjectsRes = await axios.get(`${BASE_URL}/project-api/get`, getHeader(mentorToken));
+    const mentorProjects = mentorProjectsRes.data.data;
+    console.log(`   Projects found for mentor: ${mentorProjects.length}`);
+    mentorProjects.forEach(p => console.log(`   - [ID: ${p.id}] ${p.project_name} (Created by Admin/Mentor ID: ${p.admin.id})`));
+    
+    const hasOtherProjects = mentorProjects.some(p => p.id !== createdProjectId);
+    if (hasOtherProjects) {
+      throw new Error('TEST FAILED: Mentor is seeing projects they did not create!');
+    }
+    console.log('   PASSED: Mentor only sees their own project.\n');
+
+    // 6. Admin lists projects (should see all projects, including the mentor\'s project and seeded projects)
+    console.log('6. Admin lists all projects...');
+    const adminProjectsRes = await axios.get(`${BASE_URL}/project-api/get`, getHeader(adminToken));
+    const adminProjects = adminProjectsRes.data.data;
+    console.log(`   Projects found for admin: ${adminProjects.length}`);
+    
+    const containsMentorProject = adminProjects.some(p => p.id === createdProjectId);
+    if (!containsMentorProject) {
+      throw new Error('TEST FAILED: Admin cannot see the project created by the mentor!');
+    }
+    console.log('   PASSED: Admin can see all projects in the system.\n');
+
+    // 7. Mentor tries to access another project details (e.g. Project 1, created by admin1)
+    console.log('7. Testing isolation: Mentor trying to access Project ID 1 (which they do not own)...');
+    try {
+      await axios.get(`${BASE_URL}/project-api/get/1`, getHeader(mentorToken));
+      throw new Error('TEST FAILED: Mentor successfully accessed another mentor/admin\'s project!');
+    } catch (err) {
+      if (err.response && err.response.status === 403) {
+        console.log('   PASSED: Access denied with 403 Forbidden as expected.\n');
+      } else {
+        throw err;
+      }
+    }
+
+    // 8. Admin accesses Project details of the mentor\'s project
+    console.log(`8. Admin accessing details of the Mentor's project (ID: ${createdProjectId})...`);
+    const adminDetailRes = await axios.get(`${BASE_URL}/project-api/get/${createdProjectId}`, getHeader(adminToken));
+    console.log(`   PASSED: Admin retrieved project details successfully (Name: ${adminDetailRes.data.data.project_name}).\n`);
+
+    console.log('=== ALL INTEGRATION TESTS PASSED SUCCESSFULLY! ===');
+  } catch (err) {
+    console.error('=== TEST EXECUTION ENCOUNTERED AN ERROR ===');
+    if (err.response) {
+      console.error(`Status: ${err.response.status}`);
+      console.error('Response Data:', JSON.stringify(err.response.data, null, 2));
+    } else {
+      console.error(err.message);
+    }
+    process.exit(1);
+  }
+}
+
+runTests();