snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/tests/end-to-end/api/licenses.ts

@@ -0,0 +1,99 @@
+import type { Credentials } from '@rocket.chat/api-client';
+import type { IUser } from '@rocket.chat/core-typings';
+import { expect } from 'chai';
+import { before, describe, it, after } from 'mocha';
+
+import { getCredentials, api, request, credentials } from '../../data/api-data';
+import { password } from '../../data/user';
+import type { TestUser } from '../../data/users.helper';
+import { createUser, deleteUser, login } from '../../data/users.helper';
+
+describe('licenses', () => {
+	let createdUser: TestUser<IUser>;
+
+	before((done) => getCredentials(done));
+	let unauthorizedUserCredentials: Credentials;
+
+	before(async () => {
+		createdUser = await createUser();
+		unauthorizedUserCredentials = await login(createdUser.username, password);
+	});
+
+	after(() => deleteUser(createdUser));
+
+	describe('[/licenses.add]', () => {
+		it('should fail if not logged in', async () => {
+			const res = await request
+				.post(api('licenses.add'))
+				.send({
+					license: '',
+				})
+				.expect('Content-Type', 'application/json')
+				.expect(401);
+
+			expect(res.body).to.have.property('status', 'error');
+			expect(res.body).to.have.property('message');
+		});
+
+		it('should fail if user is unauthorized', async () => {
+			const res = await request
+				.post(api('licenses.add'))
+				.set(unauthorizedUserCredentials)
+				.send({
+					license: '',
+				})
+				.expect('Content-Type', 'application/json')
+				.expect(403);
+
+			expect(res.body).to.have.property('success', false);
+			expect(res.body).to.have.property('error', 'User does not have the permissions required for this action [error-unauthorized]');
+		});
+
+		it('should fail if license is invalid', async () => {
+			const res = await request
+				.post(api('licenses.add'))
+				.set(credentials)
+				.send({
+					license: '',
+				})
+				.expect('Content-Type', 'application/json')
+				.expect(400);
+
+			expect(res.body).to.have.property('success', false);
+			expect(res.body).to.have.property('error');
+		});
+	});
+
+	describe('[/licenses.info]', () => {
+		it('should fail if not logged in', async () => {
+			const res = await request.get(api('licenses.info')).expect('Content-Type', 'application/json').expect(401);
+
+			expect(res.body).to.have.property('status', 'error');
+			expect(res.body).to.have.property('message');
+		});
+
+		it('should return limited information if user is unauthorized', async () => {
+			const res = await request
+				.get(api('licenses.info'))
+				.set(unauthorizedUserCredentials)
+				.expect('Content-Type', 'application/json')
+				.expect(200);
+
+			expect(res.body).to.have.property('success', true);
+			expect(res.body).to.have.property('license').and.to.be.an('object');
+			expect(res.body.license).to.not.have.property('license');
+			expect(res.body.license).to.have.property('tags').and.to.be.an('array');
+		});
+
+		it('should return unrestricted info if user is logged in and is authorized', async () => {
+			const res = await request.get(api('licenses.info')).set(credentials).expect(200);
+
+			expect(res.body).to.have.property('success', true);
+			expect(res.body).to.have.property('license').and.to.be.an('object');
+			if (process.env.IS_EE) {
+				expect(res.body.license).to.have.property('license').and.to.be.an('object');
+			}
+			expect(res.body.license).to.have.property('tags').and.to.be.an('array');
+		});
+	});
+});