add tests for /v2/users endpoint

Author: nmarklund10

src/tests/v2/user.routes.spec.js

@@ -18,6 +18,7 @@ describe(`User tests (v${VERSION})`, function() {
   })
   after(async function() {
     await testUser.destroyToken()
+    process.env.BYPASS_LOGIN = true
   })
 
   it('should login', function (done) {
@@ -64,4 +65,34 @@ describe(`User tests (v${VERSION})`, function() {
         done()
       })
   })
+  it('should get all users', function(done) {
+    request(app)
+      .get(`/v${VERSION}/users`)
+      .set('Accept', 'application/json')
+      .set('token', token)
+      .send()
+      .expect('Content-Type', 'application/json; charset=utf-8')
+      .expect(200)
+      .end((err, res) => {
+        if (err) return done(err)
+        expect(res.body).to.deep.include.members([{email: testUser.user.email, displayName: testUser.user.displayName}])
+        done()
+      })
+  })
+  it('should not get all users', function(done) {
+    process.env.BYPASS_LOGIN = false
+    request(app)
+      .get(`/v${VERSION}/users`)
+      .set('Accept', 'application/json')
+      .set('token', randomWords())
+      .send()
+      .expect('Content-Type', 'application/json; charset=utf-8')
+      .expect(403)
+      .end((err, res) => {
+        if (err) return done(err)
+        expect(res.body.statusCode).to.equal(403)
+        expect(res.body.message).to.equal('Access not permitted')
+        done()
+      })
+  })
 })