API/verify_logging.js

"use strict";
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
        step((generator = generator.apply(thisArg, _arguments || [])).next());
    });
};
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
const axios_1 = __importDefault(require("axios"));
const API_URL = 'http://localhost:8000/api';
// Mock tokens - in a real test these would be obtained via login
const ADMIN_TOKEN = 'YOUR_ADMIN_TOKEN';
const TRAINER_TOKEN = 'YOUR_TRAINER_TOKEN';
function testLogging() {
    return __awaiter(this, void 0, void 0, function* () {
        var _a, _b, _c, _d;
        try {
            console.log('--- Testing Admin Access ---');
            // 1. Get all logs (Admin)
            console.log('1. Fetching all logs (Admin)...');
            try {
                const allLogs = yield axios_1.default.get(`${API_URL}/activity/timeline`, {
                    headers: { Authorization: `Bearer ${ADMIN_TOKEN}` }
                });
                console.log(`Success: Fetched ${allLogs.data.data.activities.length} logs.`);
            }
            catch (e) {
                console.error('Failed to fetch all logs:', ((_a = e.response) === null || _a === void 0 ? void 0 : _a.data) || e.message);
            }
            // 2. Filter by role (Admin)
            console.log('\n2. Filtering by role "trainer" (Admin)...');
            try {
                const trainerLogs = yield axios_1.default.get(`${API_URL}/activity/timeline?role=trainer`, {
                    headers: { Authorization: `Bearer ${ADMIN_TOKEN}` }
                });
                console.log(`Success: Fetched ${trainerLogs.data.data.activities.length} trainer logs.`);
            }
            catch (e) {
                console.error('Failed to fetch trainer logs:', ((_b = e.response) === null || _b === void 0 ? void 0 : _b.data) || e.message);
            }
            console.log('\n--- Testing User Access ---');
            // 3. Get own logs (Trainer)
            console.log('3. Fetching own logs (Trainer)...');
            try {
                const ownLogs = yield axios_1.default.get(`${API_URL}/activity/timeline`, {
                    headers: { Authorization: `Bearer ${TRAINER_TOKEN}` }
                });
                console.log(`Success: Fetched ${ownLogs.data.data.activities.length} own logs.`);
            }
            catch (e) {
                console.error('Failed to fetch own logs:', ((_c = e.response) === null || _c === void 0 ? void 0 : _c.data) || e.message);
            }
            // 4. Try to access other's logs (Trainer) - Should be ignored and return own logs
            console.log('4. Attempting to fetch other user logs (Trainer)...');
            try {
                const otherLogs = yield axios_1.default.get(`${API_URL}/activity/timeline?userId=SOME_OTHER_ID`, {
                    headers: { Authorization: `Bearer ${TRAINER_TOKEN}` }
                });
                // Verify that it returned own logs, not error, but effectively ignored the param
                console.log(`Success (Expected): Fetched ${otherLogs.data.data.activities.length} logs (should be own logs).`);
            }
            catch (e) {
                console.error('Failed (Unexpected):', ((_d = e.response) === null || _d === void 0 ? void 0 : _d.data) || e.message);
            }
        }
        catch (error) {
            console.error('Test failed:', error);
        }
    });
}
testLogging();