Testing rules

import { createClient, PermissionError, NotFoundError, AuthenticationError } from "@pawabase/client";

async function signedIn(email: string, password: string) {
  const client = createClient({ url, apiKey: publishableKey, auth: { persistSession: false } });
  await client.auth.signInWithPassword({ email, password });
  return client;
}

const visitor = createClient({ url, apiKey: publishableKey, auth: { persistSession: false } });
const ada = await signedIn("ada@example.com", "…");
const bob = await signedIn("bob@example.com", "…");
const admin = await signedIn("admin@example.com", "…");

def signed_in(email, password):
    pb = Pawabase(URL, PUBLISHABLE_KEY)        # a fresh client per user
    pb.auth.sign_in_with_password(email=email, password=password)
    return pb

it("hides other people's notes", async () => {
  const note = await ada.from("notes").create({ text: "secret" });

  expect((await bob.from("notes")).data.find((n) => n.id === note.id)).toBeUndefined();
  await expect(bob.from("notes").get(note.id)).rejects.toBeInstanceOf(NotFoundError);
  await expect(bob.from("notes").update(note.id, { text: "hacked" })).rejects.toBeInstanceOf(NotFoundError);
  await expect(bob.from("notes").delete(note.id)).rejects.toBeInstanceOf(NotFoundError);
});

it("needs sign-in", async () => {
  await expect(visitor.from("notes").create({ text: "x" })).rejects.toBeInstanceOf(AuthenticationError);
});