Add test for access token with aclAsUser

guillett · guillett · commit 7a350b33b990 · 2025-05-13T13:47:11.000+02:00
diff --git a/test/server/lib/GranularAccess.ts b/test/server/lib/GranularAccess.ts
@@ -18,6 +18,7 @@ import {OpenDocOptions} from 'app/common/DocListAPI';
 import {SHARE_KEY_PREFIX} from 'app/common/gristUrls';
 import {isLongerThan, pruneArray} from 'app/common/gutil';
 import {UserAPI, UserAPIImpl} from 'app/common/UserAPI';
+import {AccessTokenResult} from 'app/plugin/GristAPI';
 import {GristObjCode} from 'app/plugin/GristData';
 import {Deps as DocClientsDeps} from 'app/server/lib/DocClients';
 import {DocManager} from 'app/server/lib/DocManager';
@@ -27,6 +28,7 @@ import {globalUploadSet} from 'app/server/lib/uploads';
 import {assert} from 'chai';
 import {cloneDeep, isMatch, pick} from 'lodash';
 import * as sinon from 'sinon';
+import * as jwt from 'jsonwebtoken';
 import {TestServer} from 'test/gen-server/apiUtils';
 import {createDocTools} from 'test/server/docTools';
 import {GristClient, openClient} from 'test/server/gristClient';
@@ -4125,6 +4127,23 @@ describe('GranularAccess', function() {
       await assert.isFulfilled(owner.getDocAPI(docId).getRows('Table1'));
     });
   });
+
+  describe("accessToken", function() {
+    it('respects aclAsUser', async function() {
+      await freshDoc();
+      async function getPayload() {
+        const tokenResult: AccessTokenResult = (await cliOwner.send('getAccessToken', 0, {})).data;
+        const token = tokenResult.token;
+        const payload: any = jwt.decode(token);
+        return payload;
+      }
+
+      const ownerPayload = await getPayload();
+      await reopenClients({linkParameters: {aclAsUser: 'charon@getgrist.com'}});
+      const aclPayload = await getPayload();
+      assert(aclPayload!.userId != ownerPayload!.userId);
+    })
+  })
 });
 
 async function closeClient(cli: GristClient) {
