83 lines
2.9 KiB
TypeScript
83 lines
2.9 KiB
TypeScript
import { AbuseService } from "../src/abuse/abuse.service";
|
|
|
|
const createService = () => {
|
|
const prisma = {
|
|
abuseEvent: {
|
|
create: jest.fn(),
|
|
count: jest.fn(),
|
|
findMany: jest.fn(),
|
|
},
|
|
exportLog: {
|
|
count: jest.fn(),
|
|
},
|
|
};
|
|
return { service: new AbuseService(prisma as any), prisma };
|
|
};
|
|
|
|
describe("AbuseService", () => {
|
|
it("calculates a capped risk profile from recent events", async () => {
|
|
const { service, prisma } = createService();
|
|
prisma.abuseEvent.findMany.mockResolvedValue([
|
|
{ id: "evt_1", eventType: "EXPORT_LARGE", severity: "high", riskPoints: 80, createdAt: new Date("2026-01-01") },
|
|
{ id: "evt_2", eventType: "AUTH_LOGIN_FAILURE", severity: "medium", riskPoints: 30, createdAt: new Date("2026-01-01") },
|
|
]);
|
|
|
|
const result = await service.getRiskProfile("user_1");
|
|
|
|
expect(result.score).toBe(100);
|
|
expect(result.level).toBe("high");
|
|
expect(result.recentEvents).toHaveLength(2);
|
|
});
|
|
|
|
it("records large and repeated export risk events", async () => {
|
|
const { service, prisma } = createService();
|
|
prisma.exportLog.count.mockResolvedValue(5);
|
|
prisma.abuseEvent.create.mockResolvedValue({ id: "evt_1" });
|
|
|
|
await service.recordExportActivity("user_1", 1000, { category: "Meals" }, {
|
|
ipAddress: "127.0.0.1",
|
|
userAgent: "jest",
|
|
});
|
|
|
|
expect(prisma.abuseEvent.create).toHaveBeenCalledTimes(2);
|
|
expect(prisma.abuseEvent.create).toHaveBeenCalledWith(expect.objectContaining({
|
|
data: expect.objectContaining({ eventType: "EXPORT_LARGE", riskPoints: 25, severity: "high" }),
|
|
}));
|
|
expect(prisma.abuseEvent.create).toHaveBeenCalledWith(expect.objectContaining({
|
|
data: expect.objectContaining({ eventType: "EXPORT_REPEATED", riskPoints: 20, severity: "high" }),
|
|
}));
|
|
});
|
|
|
|
it("records pagination abuse signals for oversized and deep page requests", async () => {
|
|
const { service, prisma } = createService();
|
|
prisma.abuseEvent.count.mockResolvedValue(11);
|
|
prisma.abuseEvent.create.mockResolvedValue({ id: "evt_1" });
|
|
|
|
await service.recordPaginationActivity("user_1", "view.transactions", 100, 500, 25, {
|
|
ipAddress: "127.0.0.1",
|
|
userAgent: "jest",
|
|
});
|
|
|
|
expect(prisma.abuseEvent.count).toHaveBeenCalledWith(expect.objectContaining({
|
|
where: expect.objectContaining({
|
|
userId: "user_1",
|
|
eventType: { in: ["PAGINATION_LIMIT_CLAMPED", "PAGINATION_DEEP_SCAN"] },
|
|
}),
|
|
}));
|
|
expect(prisma.abuseEvent.create).toHaveBeenCalledWith(expect.objectContaining({
|
|
data: expect.objectContaining({
|
|
eventType: "PAGINATION_LIMIT_CLAMPED",
|
|
riskPoints: 10,
|
|
severity: "medium",
|
|
}),
|
|
}));
|
|
expect(prisma.abuseEvent.create).toHaveBeenCalledWith(expect.objectContaining({
|
|
data: expect.objectContaining({
|
|
eventType: "PAGINATION_DEEP_SCAN",
|
|
riskPoints: 20,
|
|
severity: "high",
|
|
}),
|
|
}));
|
|
});
|
|
});
|