From 2f6b4dfc09e8c3407964adb2b2b84f1705ab11a9 Mon Sep 17 00:00:00 2001 From: Daniel Gonzalez Date: Wed, 1 Oct 2025 17:24:29 -0400 Subject: [PATCH] feat(test): Added user/admin access validation to endpoint --- src/controllers/rest-api/order/index.js | 7 ++++++- .../controllers/rest-api/order/order.rest.router.unit.js | 9 +++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/src/controllers/rest-api/order/index.js b/src/controllers/rest-api/order/index.js index d00487c..755d2d7 100644 --- a/src/controllers/rest-api/order/index.js +++ b/src/controllers/rest-api/order/index.js @@ -54,7 +54,7 @@ class OrderRouter { // Define the routes and attach the controller. this.router.post('/', this.createOrder) this.router.get('/list/all/:page', _this.orderRESTController.listOrders) - this.router.post('/delete', _this.orderRESTController.deleteOrder) + this.router.post('/delete', this.deleteOrder) // Attach the Controller routes to the Koa app. app.use(_this.router.routes()) @@ -65,6 +65,11 @@ class OrderRouter { await _this.validators.ensureUser(ctx, next) await _this.orderRESTController.createOrder(ctx, next) } + + async deleteOrder (ctx, next) { + await _this.validators.ensureUser(ctx, next) + await _this.orderRESTController.deleteOrder(ctx, next) + } } export default OrderRouter diff --git a/test/unit/controllers/rest-api/order/order.rest.router.unit.js b/test/unit/controllers/rest-api/order/order.rest.router.unit.js index d8377fa..34b9618 100644 --- a/test/unit/controllers/rest-api/order/order.rest.router.unit.js +++ b/test/unit/controllers/rest-api/order/order.rest.router.unit.js @@ -83,4 +83,13 @@ describe('#Order-REST-Router', () => { assert.isTrue(spy.calledOnce) }) }) + describe('#deleteOrder', () => { + it('should route to controller', async () => { + sandbox.stub(uut.validators, 'ensureUser').resolves(true) + const spy = sandbox.stub(uut.orderRESTController, 'deleteOrder').resolves(true) + + await uut.deleteOrder() + assert.isTrue(spy.calledOnce) + }) + }) })