Release Healer Man 0.1.46

server/server.test.mjs

@@ -237,6 +237,24 @@ test("serves the game and authenticated cloud-save API", async () => {
     assert.equal(gmRegistration.status, 201);
     const gmAuth = await gmRegistration.json();
     assert.deepEqual(gmAuth.account.roles, ["gm"]);
+    const deniedBalanceLab = await fetch(`${origin}/api/gm/balance-lab/jobs`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Authorization: `Bearer ${auth.token}` },
+      body: JSON.stringify({ source: "wow", level: 40 }),
+    });
+    assert.equal(deniedBalanceLab.status, 403);
+    const balanceLabJobs = await fetch(`${origin}/api/gm/balance-lab/jobs`, {
+      headers: { Authorization: `Bearer ${gmAuth.token}` },
+    });
+    assert.equal(balanceLabJobs.status, 200);
+    assert.deepEqual((await balanceLabJobs.json()).jobs, []);
+    const invalidBalanceLab = await fetch(`${origin}/api/gm/balance-lab/jobs`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Authorization: `Bearer ${gmAuth.token}` },
+      body: JSON.stringify({ source: "wow", level: 81 }),
+    });
+    assert.equal(invalidBalanceLab.status, 400);
+    assert.equal((await invalidBalanceLab.json()).code, "invalid_balance_lab_job");
     const current = await (await fetch(`${origin}/api/manastorm-config`)).json();
     const published = await fetch(`${origin}/api/gm/manastorm-config`, {
       method: "PUT",
@@ -290,6 +308,9 @@ test("disables shelved APIs and Manastorm group creation by default", async () =
       assert.equal(response.status, 503);
       assert.equal((await response.json()).code, "feature_disabled");
     }
+    const balanceLab = await fetch(`${origin}/api/gm/balance-lab/jobs`);
+    assert.equal(balanceLab.status, 401);
+    assert.equal((await balanceLab.json()).code, "authentication_required");
 
     const registration = await fetch(`${origin}/api/auth/register`, {
       method: "POST",