feat: Nambahin template certificate endpoint

2026-06-25 18:47:40 +07:00
parent 955545876f
commit d86164f8df
8 changed files with 474 additions and 1 deletions
@@ -0,0 +1,297 @@
+const axios = require('axios');
+const bcrypt = require('bcrypt');
+const { PrismaClient } = require('../src/generated/prisma');
+
+const BASE_URL = 'http://localhost:9000';
+const prisma = new PrismaClient();
+
+function createMultipartPayload(boundary, fields, files) {
+  const chunks = [];
+
+  for (const [key, value] of Object.entries(fields)) {
+    if (value !== undefined && value !== null) {
+      chunks.push(Buffer.from(`--${boundary}\r\n` +
+        `Content-Disposition: form-data; name="${key}"\r\n\r\n` +
+        `${value}\r\n`));
+    }
+  }
+
+  for (const [key, file] of Object.entries(files)) {
+    if (file) {
+      chunks.push(Buffer.from(`--${boundary}\r\n` +
+        `Content-Disposition: form-data; name="${key}"; filename="${file.name}"\r\n` +
+        `Content-Type: ${file.type}\r\n\r\n`));
+      chunks.push(file.content);
+      chunks.push(Buffer.from('\r\n'));
+    }
+  }
+
+  chunks.push(Buffer.from(`--${boundary}--\r\n`));
+  return Buffer.concat(chunks);
+}
+
+async function runTests() {
+  console.log('=== STARTING INTEGRATION TESTS FOR CERTIFICATE TEMPLATE UPLOAD ===\n');
+
+  let adminToken = '';
+  let mentor1Token = '';
+  let mentor2Token = '';
+  let internToken = '';
+  let project1Id = null;
+  let project2Id = null;
+
+  const password = 'password123';
+  const internEmail = `new_intern_cert_${Date.now()}@internify.com`;
+
+  const getHeader = (token) => ({
+    headers: { Authorization: `Bearer ${token}` }
+  });
+
+  const getMultipartHeader = (token, boundary) => ({
+    headers: {
+      Authorization: `Bearer ${token}`,
+      'Content-Type': `multipart/form-data; boundary=${boundary}`
+    }
+  });
+
+  try {
+    // 1. Login as Admin
+    console.log('1. Logging in as Admin (admin1@internify.com)...');
+    const adminLoginRes = await axios.post(`${BASE_URL}/auth-api/login`, {
+      email: 'admin1@internify.com',
+      password: password
+    });
+    adminToken = adminLoginRes.data.data.token;
+    console.log('   Admin logged in successfully!\n');
+
+    // 2. Logging in as Mentors
+    console.log('2. Logging in as Mentors...');
+    const mentor1LoginRes = await axios.post(`${BASE_URL}/auth-api/login`, {
+      email: 'mentor1@internify.com',
+      password: password
+    });
+    mentor1Token = mentor1LoginRes.data.data.token;
+
+    const mentor2LoginRes = await axios.post(`${BASE_URL}/auth-api/login`, {
+      email: 'mentor2@internify.com',
+      password: password
+    });
+    mentor2Token = mentor2LoginRes.data.data.token;
+    console.log('   Mentors logged in successfully!\n');
+
+    // 3. Registering a new Intern to assign to Mentor 1 Project
+    console.log(`3. Registering a new Intern (${internEmail})...`);
+
+    // Create a new vacancy with an image upload to get a valid UUID id_lowongan_magang
+    const lwnBoundary = '----WebKitFormBoundaryLowonganUpload';
+    const lwnFields = {
+      posisi: 'Web Developer Test',
+      kelompok_peminatan: 'Software Engineering',
+      jobdesk: 'Testing task and certificate templates.',
+      lokasi: 'Remote',
+      kualifikasi: 'NodeJS',
+      benefit: 'Certificate',
+      durasi_awal: '2026-07-01',
+      durasi_akhir: '2026-10-01',
+      paid: 'unpaid'
+    };
+    const lwnFiles = {
+      image: { name: 'poster.png', type: 'image/png', content: Buffer.from('fake-image-data') }
+    };
+    const lwnPayload = createMultipartPayload(lwnBoundary, lwnFields, lwnFiles);
+
+    console.log('   Creating lowongan magang (vacancy) dynamically...');
+    const createLwnRes = await axios.post(
+      `${BASE_URL}/lowongan-magang-api/add`,
+      lwnPayload,
+      getMultipartHeader(adminToken, lwnBoundary)
+    );
+    const lowonganId = createLwnRes.data.data.id;
+    console.log('   Vacancy created successfully! ID:', lowonganId);
+
+    // Submit application (lamaran) using the add-mobile endpoint which also registers the student
+    console.log('   Submitting internship application (which registers the student profile)...');
+    const appBoundary = '----WebKitFormBoundaryApplicationSubmission';
+    const appFields = {
+      nama_depan: 'Intern',
+      nama_belakang: 'Cert',
+      email: internEmail,
+      kontak: '08123456789',
+      jurusan: 'Computer Science',
+      universitas: 'Intern University',
+      negara: 'Indonesia',
+      motivasi: 'I want to learn.',
+      relevant_skills: 'NodeJS, React'
+    };
+    const appFiles = {
+      cv: { name: 'cv.pdf', type: 'application/pdf', content: Buffer.from('fake-pdf-cv') },
+      portofolio: { name: 'portfolio.pdf', type: 'application/pdf', content: Buffer.from('fake-pdf-portfolio') }
+    };
+    const appPayload = createMultipartPayload(appBoundary, appFields, appFiles);
+    
+    const applyRes = await axios.post(
+      `${BASE_URL}/lamaran-magang-api/add-mobile/${lowonganId}`,
+      appPayload,
+      {
+        headers: {
+          'Content-Type': `multipart/form-data; boundary=${appBoundary}`
+        }
+      }
+    );
+    const idMahasiswa = applyRes.data.data.id_mahasiswa;
+    console.log('   Application submitted successfully! Student ID:', idMahasiswa);
+
+    // Fetch all lamaran to get the lamaran ID
+    console.log('   Retrieving lamaran list to find the newly created lamaran ID...');
+    const listLamaranRes = await axios.get(`${BASE_URL}/lamaran-magang-api/get?limit=100`, getHeader(adminToken));
+    const lamaranList = listLamaranRes.data.data;
+    const lamaranItem = lamaranList.find(l => l.id_mahasiswa === idMahasiswa);
+    if (!lamaranItem) {
+      throw new Error('TEST FAILED: Created lamaran not found in lamaran list!');
+    }
+    const lamaranId = lamaranItem.id;
+    console.log('   Found Lamaran ID:', lamaranId);
+
+    // Accept application to create user account
+    console.log('   Accepting application to generate Intern user account...');
+    await axios.patch(`${BASE_URL}/lamaran-magang-api/update/${lamaranId}`, {
+      status: 'diterima'
+    }, getHeader(adminToken));
+
+    // Wait a brief moment for the user insertion to complete
+    await new Promise(resolve => setTimeout(resolve, 1000));
+
+    // Force override user's password in the database directly
+    console.log('   Overriding intern user password in DB directly to password123...');
+    const hashedPassword = await bcrypt.hash('password123', 10);
+    await prisma.user.update({
+      where: { email: internEmail },
+      data: { password: hashedPassword }
+    });
+
+    // Login as new Intern
+    const internLoginRes = await axios.post(`${BASE_URL}/auth-api/login`, {
+      email: internEmail,
+      password: 'password123'
+    });
+    internToken = internLoginRes.data.data.token;
+    console.log('   Intern logged in successfully!\n');
+
+    // 4. Mentors create projects dynamically to establish ownership
+    console.log('4. Creating projects dynamically for Mentors...');
+    
+    // Mentor 1 creates Project 1 and assigns Intern (newly registered)
+    const project1Res = await axios.post(`${BASE_URL}/project-api/add`, {
+      project_icon: 'code',
+      project_name: `Mentor 1 Project - ${Date.now()}`,
+      description: 'Owned by Mentor 1.',
+      start_date: '2026-07-01',
+      end_date: '2026-10-01',
+      member_emails: [internEmail]
+    }, getHeader(mentor1Token));
+    project1Id = project1Res.data.data.id;
+
+    // Mentor 2 creates Project 2
+    const project2Res = await axios.post(`${BASE_URL}/project-api/add`, {
+      project_icon: 'shield',
+      project_name: `Mentor 2 Project - ${Date.now()}`,
+      description: 'Owned by Mentor 2.',
+      start_date: '2026-07-01',
+      end_date: '2026-10-01',
+      member_emails: []
+    }, getHeader(mentor2Token));
+    project2Id = project2Res.data.data.id;
+    
+    console.log(`   Projects created: Project 1 ID = ${project1Id}, Project 2 ID = ${project2Id}\n`);
+
+    // Prepare dummy file contents for upload
+    const uploadBoundary = '----WebKitFormBoundaryTemplateUpload';
+    const dummyTemplateContent = Buffer.from('fake-png-template-content');
+    const uploadPayload = createMultipartPayload(uploadBoundary, {}, {
+      template: { name: 'cert_template.png', type: 'image/png', content: dummyTemplateContent }
+    });
+
+    // 5. Mentor 1 uploads template to Project 1 (Should succeed)
+    console.log(`5. Mentor 1 uploading certificate template to Project 1...`);
+    const uploadRes = await axios.post(
+      `${BASE_URL}/certificate-api/projects/${project1Id}/template`,
+      uploadPayload,
+      getMultipartHeader(mentor1Token, uploadBoundary)
+    );
+    console.log('   Response status:', uploadRes.status);
+    console.log('   Uploaded template path:', uploadRes.data.data.certificate_template);
+    if (!uploadRes.data.data.certificate_template.startsWith('/uploads/')) {
+      throw new Error('TEST FAILED: Uploaded template path does not start with /uploads/');
+    }
+    console.log('   PASSED: Mentor 1 successfully uploaded template to their own project.\n');
+
+    // 6. Mentor 2 tries to upload to Project 1 (Should fail - 403)
+    console.log(`6. Testing isolation: Mentor 2 trying to upload template to Project 1 (owned by Mentor 1)...`);
+    try {
+      await axios.post(
+        `${BASE_URL}/certificate-api/projects/${project1Id}/template`,
+        uploadPayload,
+        getMultipartHeader(mentor2Token, uploadBoundary)
+      );
+      throw new Error('TEST FAILED: Mentor 2 was able to upload template to Project 1!');
+    } catch (err) {
+      if (err.response && err.response.status === 403) {
+        console.log('   PASSED: Access denied with 403 Forbidden as expected.\n');
+      } else {
+        throw err;
+      }
+    }
+
+    // 7. Admin uploads template to Project 1 (Should succeed)
+    console.log(`7. Admin uploading certificate template to Project 1...`);
+    const adminUploadRes = await axios.post(
+      `${BASE_URL}/certificate-api/projects/${project1Id}/template`,
+      uploadPayload,
+      getMultipartHeader(adminToken, uploadBoundary)
+    );
+    console.log('   Response status:', adminUploadRes.status);
+    console.log('   PASSED: Admin successfully uploaded template to project.\n');
+
+    // 8. Intern tries to upload template to Project 1 (Should fail - 401/403)
+    console.log(`8. Testing role restriction: Intern trying to upload template to Project 1...`);
+    try {
+      await axios.post(
+        `${BASE_URL}/certificate-api/projects/${project1Id}/template`,
+        uploadPayload,
+        getMultipartHeader(internToken, uploadBoundary)
+      );
+      throw new Error('TEST FAILED: Intern was able to upload template to Project 1!');
+    } catch (err) {
+      if (err.response && (err.response.status === 403 || err.response.status === 401)) {
+        console.log(`   PASSED: Access denied with ${err.response.status} as expected.\n`);
+      } else {
+        throw err;
+      }
+    }
+
+    // 9. Intern retrieves project details and verifies certificate template path is returned
+    console.log(`9. Intern retrieving Project 1 details to verify certificate template exposure...`);
+    const projectDetailRes = await axios.get(`${BASE_URL}/project-api/get/${project1Id}`, getHeader(internToken));
+    console.log('   Project detail certificate_template:', projectDetailRes.data.data.certificate_template);
+    if (!projectDetailRes.data.data.certificate_template) {
+      throw new Error('TEST FAILED: Project detail response does not include certificate_template!');
+    }
+    console.log('   PASSED: Intern successfully retrieved project detail containing certificate template URL.\n');
+
+    console.log('=== ALL INTEGRATION TESTS PASSED SUCCESSFULLY! ===');
+    await prisma.$disconnect();
+    process.exit(0);
+  } catch (err) {
+    console.error('=== TEST EXECUTION ENCOUNTERED AN ERROR ===');
+    if (err.response) {
+      console.error(`Status: ${err.response.status}`);
+      console.error('Response Data:', JSON.stringify(err.response.data, null, 2));
+    } else {
+      console.error(err);
+    }
+    await prisma.$disconnect();
+    process.exit(1);
+  }
+}
+
+runTests();