refactor(core): Switch over all user-management routes to use decorators (#5115)

packages/cli/test/integration/auth.api.test.ts

@@ -16,16 +16,12 @@ let globalMemberRole: Role;
 let authAgent: AuthAgent;
 
 beforeAll(async () => {
-	app = await utils.initTestServer({ endpointGroups: ['auth'], applyAuth: true });
-	await testDb.init();
+	app = await utils.initTestServer({ endpointGroups: ['auth'] });
 
 	globalOwnerRole = await testDb.getGlobalOwnerRole();
 	globalMemberRole = await testDb.getGlobalMemberRole();
 
 	authAgent = utils.createAuthAgent(app);
-
-	utils.initTestLogger();
-	utils.initTestTelemetry();
 });
 
 beforeEach(async () => {
@@ -276,6 +272,60 @@ test('GET /login should return logged-in member', async () => {
 	expect(authToken).toBeUndefined();
 });
 
+test('GET /resolve-signup-token should validate invite token', async () => {
+	const owner = await testDb.createUser({ globalRole: globalOwnerRole });
+
+	const memberShell = await testDb.createUserShell(globalMemberRole);
+
+	const response = await authAgent(owner)
+		.get('/resolve-signup-token')
+		.query({ inviterId: owner.id })
+		.query({ inviteeId: memberShell.id });
+
+	expect(response.statusCode).toBe(200);
+	expect(response.body).toEqual({
+		data: {
+			inviter: {
+				firstName: owner.firstName,
+				lastName: owner.lastName,
+			},
+		},
+	});
+});
+
+test('GET /resolve-signup-token should fail with invalid inputs', async () => {
+	const owner = await testDb.createUser({ globalRole: globalOwnerRole });
+	const authOwnerAgent = authAgent(owner);
+
+	const { id: inviteeId } = await testDb.createUser({ globalRole: globalMemberRole });
+
+	const first = await authOwnerAgent.get('/resolve-signup-token').query({ inviterId: owner.id });
+
+	const second = await authOwnerAgent.get('/resolve-signup-token').query({ inviteeId });
+
+	const third = await authOwnerAgent.get('/resolve-signup-token').query({
+		inviterId: '5531199e-b7ae-425b-a326-a95ef8cca59d',
+		inviteeId: 'cb133beb-7729-4c34-8cd1-a06be8834d9d',
+	});
+
+	// user is already set up, so call should error
+	const fourth = await authOwnerAgent
+		.get('/resolve-signup-token')
+		.query({ inviterId: owner.id })
+		.query({ inviteeId });
+
+	// cause inconsistent DB state
+	await Db.collections.User.update(owner.id, { email: '' });
+	const fifth = await authOwnerAgent
+		.get('/resolve-signup-token')
+		.query({ inviterId: owner.id })
+		.query({ inviteeId });
+
+	for (const response of [first, second, third, fourth, fifth]) {
+		expect(response.statusCode).toBe(400);
+	}
+});
+
 test('POST /logout should log user out', async () => {
 	const owner = await testDb.createUser({ globalRole: globalOwnerRole });