msw: Implement GET /api/v1/me/tokens/:tokenId request handler

Author: Turbo87

packages/crates-io-msw/handlers/api-tokens.js

@@ -1,5 +1,6 @@
 import createToken from './api-tokens/create.js';
 import deleteToken from './api-tokens/delete.js';
+import getToken from './api-tokens/get.js';
 import listTokens from './api-tokens/list.js';
 
-export default [createToken, listTokens, deleteToken];
+export default [createToken, listTokens, getToken, deleteToken];

packages/crates-io-msw/handlers/api-tokens/get.js

@@ -0,0 +1,26 @@
+import { http, HttpResponse } from 'msw';
+
+import { db } from '../../index.js';
+import { serializeApiToken } from '../../serializers/api-token.js';
+import { notFound } from '../../utils/handlers.js';
+import { getSession } from '../../utils/session.js';
+
+export default http.get('/api/v1/me/tokens/:tokenId', async ({ params }) => {
+  let { user } = getSession();
+  if (!user) {
+    return HttpResponse.json({ errors: [{ detail: 'must be logged in to perform that action' }] }, { status: 403 });
+  }
+
+  let { tokenId } = params;
+  let token = db.apiToken.findFirst({
+    where: {
+      id: { equals: parseInt(tokenId) },
+      user: { id: { equals: user.id } },
+    },
+  });
+  if (!token) return notFound();
+
+  return HttpResponse.json({
+    api_token: serializeApiToken(token),
+  });
+});

packages/crates-io-msw/handlers/api-tokens/get.test.js

@@ -0,0 +1,45 @@
+import { assert, test } from 'vitest';
+
+import { db } from '../../index.js';
+
+test('returns the requested token', async function () {
+  let user = db.user.create();
+  db.mswSession.create({ user });
+
+  let token = db.apiToken.create({
+    user,
+    crateScopes: ['serde', 'serde-*'],
+    endpointScopes: ['publish-update'],
+  });
+
+  let response = await fetch(`/api/v1/me/tokens/${token.id}`);
+  assert.strictEqual(response.status, 200);
+  assert.deepEqual(await response.json(), {
+    api_token: {
+      id: 1,
+      crate_scopes: ['serde', 'serde-*'],
+      created_at: '2017-11-19T16:59:22.000Z',
+      endpoint_scopes: ['publish-update'],
+      expired_at: null,
+      last_used_at: null,
+      name: 'API Token 1',
+    },
+  });
+});
+
+test('returns 404 if token not found', async function () {
+  let user = db.user.create();
+  db.mswSession.create({ user });
+
+  let response = await fetch('/api/v1/me/tokens/42');
+  assert.strictEqual(response.status, 404);
+  assert.deepEqual(await response.json(), { errors: [{ detail: 'Not Found' }] });
+});
+
+test('returns an error if unauthenticated', async function () {
+  let response = await fetch('/api/v1/me/tokens/42');
+  assert.strictEqual(response.status, 403);
+  assert.deepEqual(await response.json(), {
+    errors: [{ detail: 'must be logged in to perform that action' }],
+  });
+});