@@ -141,7 +141,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
141141 } ;
142142
143143 const response = await request ( server . server )
144- . post ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
144+ . post ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
145145 . set ( 'Cookie' , context . testCredentialsUser1Cookie ! )
146146 . send ( credentialData ) ;
147147
@@ -156,7 +156,9 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
156156 expect ( credential . providerId ) . toBe ( 'aws' ) ;
157157 expect ( credential . name ) . toBe ( credentialData . name ) ;
158158 expect ( credential . comment ) . toBe ( credentialData . comment ) ;
159- expect ( credential . createdBy ) . toBe ( context . testCredentialsUser1Id ) ;
159+ // Handle both possible response formats for createdBy
160+ const createdById = typeof credential . createdBy === 'object' ? credential . createdBy . id : credential . createdBy ;
161+ expect ( createdById ) . toBe ( context . testCredentialsUser1Id ) ;
160162
161163 // Verify provider information
162164 expect ( credential . provider . id ) . toBe ( 'aws' ) ;
@@ -185,7 +187,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
185187
186188 // User 2 attempts to list User 1's team credentials
187189 const response = await request ( server . server )
188- . get ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
190+ . get ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
189191 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
190192
191193 // Should be forbidden - User 2 is not a member of User 1's team
@@ -199,7 +201,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
199201
200202 // User 2 attempts to view User 1's specific credential
201203 const response = await request ( server . server )
202- . get ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
204+ . get ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
203205 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
204206
205207 // Should be forbidden - User 2 is not a member of User 1's team
@@ -221,7 +223,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
221223
222224 // User 2 attempts to update User 1's credential
223225 const response = await request ( server . server )
224- . put ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
226+ . put ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
225227 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! )
226228 . send ( updateData ) ;
227229
@@ -236,7 +238,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
236238
237239 // User 2 attempts to delete User 1's credential
238240 const response = await request ( server . server )
239- . delete ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
241+ . delete ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
240242 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
241243
242244 // Should be forbidden - User 2 is not a member of User 1's team
@@ -250,7 +252,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
250252
251253 // User 1 verifies their credential still exists and is unchanged
252254 const response = await request ( server . server )
253- . get ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
255+ . get ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials/${ context . testCredentialsUser1CredentialId } ` )
254256 . set ( 'Cookie' , context . testCredentialsUser1Cookie ! ) ;
255257
256258 expect ( response . status ) . toBe ( 200 ) ;
@@ -260,7 +262,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
260262 const credential = response . body . data ;
261263 expect ( credential . name ) . toBe ( 'User1 Test Credentials' ) ; // Original name unchanged
262264 expect ( credential . comment ) . toBe ( 'Test credentials for cross-user permission testing' ) ; // Original comment unchanged
263- expect ( credential . createdBy ) . toBe ( context . testCredentialsUser1Id ) ;
265+ expect ( credential . createdBy . id ) . toBe ( context . testCredentialsUser1Id ) ;
264266 expect ( credential . teamId ) . toBe ( context . testCredentialsUser1TeamId ) ;
265267
266268 // Verify fields are still intact
@@ -283,7 +285,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
283285 } ;
284286
285287 const createResponse = await request ( server . server )
286- . post ( `/teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
288+ . post ( `/api/ teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
287289 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! )
288290 . send ( credentialData ) ;
289291
@@ -293,14 +295,16 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
293295
294296 const credential = createResponse . body . data ;
295297 expect ( credential . teamId ) . toBe ( context . testCredentialsUser2TeamId ) ;
296- expect ( credential . createdBy ) . toBe ( context . testCredentialsUser2Id ) ;
298+ // Handle both possible response formats for createdBy
299+ const createdById = typeof credential . createdBy === 'object' ? credential . createdBy . id : credential . createdBy ;
300+ expect ( createdById ) . toBe ( context . testCredentialsUser2Id ) ;
297301 expect ( credential . name ) . toBe ( credentialData . name ) ;
298302
299303 const user2CredentialId = credential . id ;
300304
301305 // User 2 can list their own team's credentials
302306 const listResponse = await request ( server . server )
303- . get ( `/teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
307+ . get ( `/api/ teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
304308 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
305309
306310 expect ( listResponse . status ) . toBe ( 200 ) ;
@@ -310,7 +314,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
310314
311315 // User 2 can view their own credential
312316 const viewResponse = await request ( server . server )
313- . get ( `/teams/${ context . testCredentialsUser2TeamId } /cloud-credentials/${ user2CredentialId } ` )
317+ . get ( `/api/ teams/${ context . testCredentialsUser2TeamId } /cloud-credentials/${ user2CredentialId } ` )
314318 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
315319
316320 expect ( viewResponse . status ) . toBe ( 200 ) ;
@@ -324,7 +328,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
324328 } ;
325329
326330 const updateResponse = await request ( server . server )
327- . put ( `/teams/${ context . testCredentialsUser2TeamId } /cloud-credentials/${ user2CredentialId } ` )
331+ . put ( `/api/ teams/${ context . testCredentialsUser2TeamId } /cloud-credentials/${ user2CredentialId } ` )
328332 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! )
329333 . send ( updateData ) ;
330334
@@ -335,7 +339,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
335339
336340 // User 2 can delete their own credential
337341 const deleteResponse = await request ( server . server )
338- . delete ( `/teams/${ context . testCredentialsUser2TeamId } /cloud-credentials/${ user2CredentialId } ` )
342+ . delete ( `/api/ teams/${ context . testCredentialsUser2TeamId } /cloud-credentials/${ user2CredentialId } ` )
339343 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
340344
341345 expect ( deleteResponse . status ) . toBe ( 200 ) ;
@@ -348,23 +352,23 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
348352
349353 // User 1 should not be able to access User 2's team
350354 const user1AccessUser2TeamResponse = await request ( server . server )
351- . get ( `/teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
355+ . get ( `/api/ teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
352356 . set ( 'Cookie' , context . testCredentialsUser1Cookie ! ) ;
353357
354358 expect ( user1AccessUser2TeamResponse . status ) . toBe ( 403 ) ;
355359 expect ( user1AccessUser2TeamResponse . body . success ) . toBe ( false ) ;
356360
357361 // User 2 should not be able to access User 1's team
358362 const user2AccessUser1TeamResponse = await request ( server . server )
359- . get ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
363+ . get ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
360364 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
361365
362366 expect ( user2AccessUser1TeamResponse . status ) . toBe ( 403 ) ;
363367 expect ( user2AccessUser1TeamResponse . body . success ) . toBe ( false ) ;
364368
365369 // Verify User 1's credential still exists and is accessible only to User 1
366370 const user1CredentialResponse = await request ( server . server )
367- . get ( `/teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
371+ . get ( `/api/ teams/${ context . testCredentialsUser1TeamId } /cloud-credentials` )
368372 . set ( 'Cookie' , context . testCredentialsUser1Cookie ! ) ;
369373
370374 expect ( user1CredentialResponse . status ) . toBe ( 200 ) ;
@@ -374,7 +378,7 @@ describe('Cloud Credentials Cross-User Permissions E2E Tests', () => {
374378
375379 // Verify User 2's team is empty (they deleted their credential)
376380 const user2CredentialResponse = await request ( server . server )
377- . get ( `/teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
381+ . get ( `/api/ teams/${ context . testCredentialsUser2TeamId } /cloud-credentials` )
378382 . set ( 'Cookie' , context . testCredentialsUser2Cookie ! ) ;
379383
380384 expect ( user2CredentialResponse . status ) . toBe ( 200 ) ;
0 commit comments