yellowadmin/pp-tcms
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: inplement auth for runs and runCases

Browse Source
This commit is contained in:
Takeshi Kimata
2024-06-08 08:52:19 +09:00
parent 07259f6daf
commit 2b5a806aee
24 changed files with 293 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
backend/routes/runcases/bulkDelete.js
View File

@@ -5,10 +5,14 @@ const { DataTypes, Op } = require('sequelize');
module.exports = function (sequelize) {
const RunCase = defineRunCase(sequelize, DataTypes);
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
router.post('/bulkdelete', async (req, res) => {
router.post('/bulkdelete', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
const recordsToDelete = req.body;
// TODO Instead of receiving a combination of runId and caseId from frontend,
// receives only an array of caseId and constructs a pair from the query parameter runId
try {
const existingRunCases = await RunCase.findAll({
where: {

6
backend/routes/runcases/bulkNew.js
View File

@@ -4,11 +4,15 @@ const defineRunCase = require('../../models/runCases');
const { DataTypes, Op } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
const RunCase = defineRunCase(sequelize, DataTypes);
router.post('/bulknew', async (req, res) => {
router.post('/bulknew', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
const recordsToCreate = req.body;
// TODO Instead of receiving a combination of runId and caseId from frontend,
// receives only an array of caseId and constructs a pair from the query parameter runId
try {
const existingRunCases = await RunCase.findAll({
where: {

4
backend/routes/runcases/delete.js
View File

@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
const RunCase = defineRunCase(sequelize, DataTypes);
router.delete('/', async (req, res) => {
router.delete('/', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
const runId = req.query.runId;
const caseId = req.query.caseId;

4
backend/routes/runcases/edit.js
View File

@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
const RunCase = defineRunCase(sequelize, DataTypes);
router.put('/', async (req, res) => {
router.put('/', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
const runId = req.query.runId;
const caseId = req.query.caseId;
const status = req.query.status;

4
backend/routes/runcases/index.js
View File

@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectVisibleFromRunId } = require('../../middleware/verifyVisible')(sequelize);
const RunCase = defineRunCase(sequelize, DataTypes);
router.get('/', async (req, res) => {
router.get('/', verifySignedIn, verifyProjectVisibleFromRunId, async (req, res) => {
const { runId } = req.query;
if (!runId) {

4
backend/routes/runcases/new.js
View File

@@ -4,9 +4,11 @@ const defineRunCase = require('../../models/runCases');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
const RunCase = defineRunCase(sequelize, DataTypes);
router.post('/', async (req, res) => {
router.post('/', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
const runId = req.query.runId;
const caseId = req.query.caseId;

4
backend/routes/runs/delete.js
View File

@@ -4,9 +4,11 @@ const defineRun = require('../../models/runs');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
const Run = defineRun(sequelize, DataTypes);
router.delete('/:runId', async (req, res) => {
router.delete('/:runId', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
const runId = req.params.runId;
try {
const testrun = await Run.findByPk(runId);

4
backend/routes/runs/edit.js
View File

@@ -5,8 +5,10 @@ const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const Run = defineRun(sequelize, DataTypes);
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromRunId } = require('../../middleware/verifyEditable')(sequelize);
router.put('/:runId', async (req, res) => {
router.put('/:runId', verifySignedIn, verifyProjectReporterFromRunId, async (req, res) => {
const runId = req.params.runId;
const updateRun = req.body;
try {

4
backend/routes/runs/index.js
View File

@@ -4,9 +4,11 @@ const defineRun = require('../../models/runs');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectVisibleFromProjectId } = require('../../middleware/verifyVisible')(sequelize);
const Run = defineRun(sequelize, DataTypes);
router.get('/', async (req, res) => {
router.get('/', verifySignedIn, verifyProjectVisibleFromProjectId, async (req, res) => {
const { projectId } = req.query;
if (!projectId) {

7
backend/routes/runs/new.js
View File

@@ -4,11 +4,14 @@ const defineRun = require('../../models/runs');
const { DataTypes } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectReporterFromProjectId } = require('../../middleware/verifyEditable')(sequelize);
const Run = defineRun(sequelize, DataTypes);
router.post('/', async (req, res) => {
router.post('/', verifySignedIn, verifyProjectReporterFromProjectId, async (req, res) => {
try {
const { name, configurations, description, state, projectId } = req.body;
const projectId = req.query.projectId;
const { name, configurations, description, state } = req.body;
if (!name || !projectId) {
return res.status(400).json({ error: 'Name and projectId are required' });
}

4
backend/routes/runs/show.js
View File

@@ -5,10 +5,12 @@ const defineRunCase = require('../../models/runCases');
const { DataTypes, literal } = require('sequelize');
module.exports = function (sequelize) {
const { verifySignedIn } = require('../../middleware/auth')(sequelize);
const { verifyProjectVisibleFromRunId } = require('../../middleware/verifyVisible')(sequelize);
const Run = defineRun(sequelize, DataTypes);
const RunCase = defineRunCase(sequelize, DataTypes);
router.get('/:runId', async (req, res) => {
router.get('/:runId', verifySignedIn, verifyProjectVisibleFromRunId, async (req, res) => {
const runId = req.params.runId;
if (!runId) {