hot-fix(progress-api): temporarily disable POST route due to security issue (#2516)

* fix(progress-api): temporarily disable POST route due to security issue

* test(progress-api): skip tests for Progress Updates API due to ongoing issues

Author: prakashchoudhary07

routes/progresses.ts

@@ -12,8 +12,10 @@ import {
   getProgressRangeData,
   getProgressBydDateController,
 } from "../controllers/progresses";
+import { disableRoute } from "../middlewares/shortCircuit";
 const router = express.Router();
-router.post("/", authenticate, validateCreateProgressRecords, createProgress);
+// DISABLE ROUTE FOR NOW as there is a security issue to be resolved
+router.post("/", authenticate, disableRoute, validateCreateProgressRecords, createProgress);
 router.get("/", validateGetProgressRecordsQuery, getProgress);
 router.get("/:type/:typeId/date/:date", validateGetDayProgressParams, getProgressBydDateController);
 router.get("/range", validateGetRangeProgressRecordsParams, getProgressRangeData);

test/integration/progressesTasks.test.js

@@ -25,7 +25,8 @@ describe("Test Progress Updates API for Tasks", function () {
     await cleanDb();
   });
 
-  describe("Verify POST Request Functionality", function () {
+  // eslint-disable-next-line mocha/no-skipped-tests
+  describe.skip("Verify POST Request Functionality", function () {
     let clock;
     let userId;
     let userToken;

test/integration/progressesUsers.test.js

@@ -18,12 +18,14 @@ const { INTERNAL_SERVER_ERROR_MESSAGE } = require("../../constants/progresses");
 const cookieName = config.get("userToken.cookieName");
 const { expect } = chai;
 
-describe("Test Progress Updates API for Users", function () {
+// eslint-disable-next-line mocha/no-skipped-tests
+describe.skip("Test Progress Updates API for Users", function () {
   afterEach(async function () {
     await cleanDb();
   });
 
-  describe("Verify the POST progress records", function () {
+  // eslint-disable-next-line mocha/no-skipped-tests
+  describe.skip("Verify the POST progress records", function () {
     let clock;
     let userId;
     let userToken;