Add unit tests

Author: timokoessler

library/agent/context/user.test.ts

@@ -188,3 +188,16 @@ t.test("it sets user with rateLimitGroup", async (t) => {
     });
   });
 });
+
+t.test("it sets user with rateLimitGroup (number)", async (t) => {
+  const context = createContext();
+
+  runWithContext(context, () => {
+    setUser({ id: "id", name: "name", rateLimitGroup: 1 });
+    t.same(getContext()?.user, {
+      id: "id",
+      name: "name",
+      rateLimitGroup: "1",
+    });
+  });
+});

library/sources/graphql/shouldRateLimitOperation.test.ts

@@ -172,3 +172,100 @@ t.test("it rate limits mutation", async () => {
     block: true,
   });
 });
+
+t.test("it rate limits user groups", async () => {
+  const agent = createTestAgent({
+    token: new Token("123"),
+    api: new ReportingAPIForTesting({
+      success: true,
+      endpoints: [
+        {
+          method: "POST",
+          route: "/graphql",
+          forceProtectionOff: false,
+          rateLimiting: {
+            enabled: true,
+            maxRequests: 3,
+            windowSizeInMS: 60 * 1000,
+          },
+          graphql: {
+            name: "signup",
+            type: "mutation",
+          },
+        },
+      ],
+      allowedIPAddresses: [],
+      configUpdatedAt: 0,
+      heartbeatIntervalInMS: 10 * 60 * 1000,
+      blockedUserIds: [],
+    }),
+  });
+
+  agent.start([]);
+  await new Promise((resolve) => setTimeout(resolve, 0));
+
+  const args: Args = {
+    document: parse(`
+      mutation signup {
+        signup(input: { email: "john@acme.come" }) {
+          id
+        }
+      }
+    `),
+  };
+
+  const getContext = (
+    ip: string,
+    userId: string,
+    groupId: string
+  ): Context => ({
+    remoteAddress: ip,
+    method: "POST",
+    url: "http://localhost:4000",
+    query: {},
+    headers: {},
+    body: undefined,
+    cookies: {},
+    routeParams: {},
+    source: "express",
+    route: "/graphql",
+    user: {
+      id: userId,
+      rateLimitGroup: groupId,
+    },
+  });
+
+  for (let i = 0; i < 3; i++) {
+    t.same(
+      shouldRateLimitOperation(
+        agent,
+        getContext(`192.1.2.${i}`, i.toString(), "group1"),
+        args
+      ),
+      {
+        block: false,
+      }
+    );
+  }
+
+  t.match(
+    shouldRateLimitOperation(
+      agent,
+      getContext("192.1.2.22", "123456", "group1"),
+      args
+    ),
+    {
+      block: true,
+    }
+  );
+  t.match(
+    shouldRateLimitOperation(
+      agent,
+      getContext("192.1.2.24", "123456", "group2"),
+      args
+    ),
+    {
+      block: false,
+    }
+  );
+});