robbond/pedwfrontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: remove obsolete CRM password update functionality

Browse Source
This commit is contained in:
robbond
2026-11-06 09:14:54 +00:00
parent e1f8fb5c96
commit f7479b72b9
9 changed files with 0 additions and 486 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/phase21/endpoint-handler-contract.test.cjs
-62
View File
@@ -982,68 +982,6 @@ test("updateaccount catch path returns ACCOUNT_UPDATE_FAILED", async () => {
assert.strictEqual(res.state.jsonBody.error.code, "ACCOUNT_UPDATE_FAILED");
});
test("updatepassword returns CONTACT_ID_REQUIRED when contactId missing", async () => {
const mod = loadModule("pages/api/endpoint/updatepassword_api.js", {
respondError: respondErrorMock,
respondSuccess: respondSuccessMock,
getToken: async () => ({ access_token: "token" }),
hashAPIPath: () => "&hash=expected",
axios: async () => ({ data: { contactid: "c1" } }),
consoleLogger: () => {}
});
const req = { query: {}, body: { pinswg_password: "abc" } };
const res = createRes();
await mod.default(req, res);
assert.strictEqual(res.state.statusCode, 400);
assert.strictEqual(res.state.jsonBody.error.code, "CONTACT_ID_REQUIRED");
});
test("updatepassword returns PASSWORD_UPDATE_PAYLOAD_REQUIRED when body missing", async () => {
const mod = loadModule("pages/api/endpoint/updatepassword_api.js", {
respondError: respondErrorMock,
respondSuccess: respondSuccessMock,
getToken: async () => ({ access_token: "token" }),
hashAPIPath: () => "&hash=expected",
axios: async () => ({ data: { contactid: "c1" } }),
consoleLogger: () => {}
});
const req = { query: { contactId: "c1" }, body: undefined };
const res = createRes();
await mod.default(req, res);
assert.strictEqual(res.state.statusCode, 400);
assert.strictEqual(
res.state.jsonBody.error.code,
"PASSWORD_UPDATE_PAYLOAD_REQUIRED"
);
});
test("updatepassword catch path returns PASSWORD_UPDATE_FAILED", async () => {
const mod = loadModule("pages/api/endpoint/updatepassword_api.js", {
respondError: respondErrorMock,
respondSuccess: respondSuccessMock,
getToken: async () => ({ access_token: "token" }),
hashAPIPath: () => "&hash=expected",
axios: async () => {
throw new Error("relay failed");
},
consoleLogger: () => {}
});
const req = {
query: { contactId: "c1" },
body: { pinswg_password: "abc" }
};
const res = createRes();
await mod.default(req, res);
assert.strictEqual(res.state.statusCode, 400);
assert.strictEqual(res.state.jsonBody.error.code, "PASSWORD_UPDATE_FAILED");
});
test("getbasicsearch returns SEARCH_STRING_REQUIRED when searchString missing", async () => {
const mod = loadModule("pages/api/endpoint/getbasicsearch_api.js", {
respondError: respondErrorMock,
tests/phase22/breadcrumbs-route-map-structure.test.cjs
-6
View File
@@ -203,12 +203,6 @@ test("breadcrumbs/factory module includes expected mapped route definitions", as
true,
"Expected /account/personaldetails to be mapped in createDetailAndAccountRouteRenderers"
);
assert.strictEqual(
source.includes('"/account/changepassword": () =>'),
true,
"Expected /account/changepassword to be mapped in createDetailAndAccountRouteRenderers"
);
});
test("breadcrumbs/component composes mapped routes via imported factories and shared resolver", async () => {