msw: Implement DELETE /api/v1/crates/:name/owners request handler

Author: Turbo87

packages/crates-io-msw/handlers/crates.js

@@ -5,6 +5,7 @@ import followCrate from './crates/follow.js';
 import following from './crates/following.js';
 import getCrate from './crates/get.js';
 import listCrates from './crates/list.js';
+import removeOwners from './crates/remove-owners.js';
 import reverseDependencies from './crates/reverse-dependencies.js';
 import teamOwners from './crates/team-owners.js';
 import unfollowCrate from './crates/unfollow.js';
@@ -18,6 +19,7 @@ export default [
   followCrate,
   unfollowCrate,
   addOwners,
+  removeOwners,
   userOwners,
   teamOwners,
   reverseDependencies,

packages/crates-io-msw/handlers/crates/remove-owners.js

@@ -0,0 +1,29 @@
+import { http, HttpResponse } from 'msw';
+
+import { db } from '../../index.js';
+import { notFound } from '../../utils/handlers.js';
+import { getSession } from '../../utils/session.js';
+
+export default http.delete('/api/v1/crates/:name/owners', async ({ request, params }) => {
+  let { user } = getSession();
+  if (!user) {
+    return HttpResponse.json({ errors: [{ detail: 'must be logged in to perform that action' }] }, { status: 403 });
+  }
+
+  let crate = db.crate.findFirst({ where: { name: { equals: params.name } } });
+  if (!crate) {
+    return notFound();
+  }
+
+  let body = await request.json();
+
+  for (let owner of body.owners) {
+    let ownership = db.crateOwnership.findFirst({
+      where: owner.includes(':') ? { team: { login: { equals: owner } } } : { user: { login: { equals: owner } } },
+    });
+    if (!ownership) return notFound();
+    db.crateOwnership.delete({ where: { id: { equals: ownership.id } } });
+  }
+
+  return HttpResponse.json({ ok: true, msg: 'owners successfully removed' });
+});

packages/crates-io-msw/handlers/crates/remove-owners.test.js

@@ -0,0 +1,96 @@
+import { assert, test } from 'vitest';
+
+import { db } from '../../index.js';
+
+const REMOVE_USER_BODY = JSON.stringify({ owners: ['john-doe'] });
+
+test('returns 403 if unauthenticated', async function () {
+  let response = await fetch('/api/v1/crates/foo/owners', { method: 'DELETE', body: REMOVE_USER_BODY });
+  assert.strictEqual(response.status, 403);
+  assert.deepEqual(await response.json(), {
+    errors: [{ detail: 'must be logged in to perform that action' }],
+  });
+});
+
+test('returns 404 for unknown crates', async function () {
+  let user = db.user.create();
+  db.mswSession.create({ user });
+
+  let response = await fetch('/api/v1/crates/foo/owners', { method: 'DELETE', body: REMOVE_USER_BODY });
+  assert.strictEqual(response.status, 404);
+  assert.deepEqual(await response.json(), { errors: [{ detail: 'Not Found' }] });
+});
+
+test('can remove a user owner', async function () {
+  let user = db.user.create();
+  db.mswSession.create({ user });
+
+  let crate = db.crate.create({ name: 'foo' });
+  db.crateOwnership.create({ crate, user });
+
+  let user2 = db.user.create();
+  db.crateOwnership.create({ crate, user: user2 });
+
+  let body = JSON.stringify({ owners: [user2.login] });
+  let response = await fetch('/api/v1/crates/foo/owners', { method: 'DELETE', body });
+  assert.strictEqual(response.status, 200);
+  assert.deepEqual(await response.json(), { ok: true, msg: 'owners successfully removed' });
+
+  let owners = db.crateOwnership.findMany({ where: { crate: { id: { equals: crate.id } } } });
+  assert.strictEqual(owners.length, 1);
+  assert.strictEqual(owners[0].user.id, user.id);
+
+  let invites = db.crateOwnerInvitation.findMany({ where: { crate: { id: { equals: crate.id } } } });
+  assert.strictEqual(invites.length, 0);
+});
+
+test('can remove a team owner', async function () {
+  let user = db.user.create();
+  db.mswSession.create({ user });
+
+  let crate = db.crate.create({ name: 'foo' });
+  db.crateOwnership.create({ crate, user });
+
+  let team = db.team.create();
+  db.crateOwnership.create({ crate, team });
+
+  let body = JSON.stringify({ owners: [team.login] });
+  let response = await fetch('/api/v1/crates/foo/owners', { method: 'DELETE', body });
+  assert.strictEqual(response.status, 200);
+  assert.deepEqual(await response.json(), { ok: true, msg: 'owners successfully removed' });
+
+  let owners = db.crateOwnership.findMany({ where: { crate: { id: { equals: crate.id } } } });
+  assert.strictEqual(owners.length, 1);
+  assert.strictEqual(owners[0].user.id, user.id);
+  assert.strictEqual(owners[0].team, null);
+
+  let invites = db.crateOwnerInvitation.findMany({ where: { crate: { id: { equals: crate.id } } } });
+  assert.strictEqual(invites.length, 0);
+});
+
+test('can remove multiple owners', async function () {
+  let user = db.user.create();
+  db.mswSession.create({ user });
+
+  let crate = db.crate.create({ name: 'foo' });
+  db.crateOwnership.create({ crate, user });
+
+  let team = db.team.create();
+  db.crateOwnership.create({ crate, team });
+
+  let user2 = db.user.create();
+  db.crateOwnership.create({ crate, user: user2 });
+
+  let body = JSON.stringify({ owners: [user2.login, team.login] });
+  let response = await fetch('/api/v1/crates/foo/owners', { method: 'DELETE', body });
+  assert.strictEqual(response.status, 200);
+  assert.deepEqual(await response.json(), { ok: true, msg: 'owners successfully removed' });
+
+  let owners = db.crateOwnership.findMany({ where: { crate: { id: { equals: crate.id } } } });
+  assert.strictEqual(owners.length, 1);
+  assert.strictEqual(owners[0].user.id, user.id);
+  assert.strictEqual(owners[0].team, null);
+
+  let invites = db.crateOwnerInvitation.findMany({ where: { crate: { id: { equals: crate.id } } } });
+  assert.strictEqual(invites.length, 0);
+});