--amend

src/__test__/route.test.ts

@@ -131,17 +131,18 @@ describe.only('PUT/user/update', () =>{
  // Create a new user
  const res = await request(app).post('/user/register').send(newUser);
  const userRepository = getRepository(User);
- const updateUser = {
- firstName: "Biguseers2399",
- lastName: "1",
- email: "john.doe23@example.com",
- gender: "Male",
- phoneNumber: "0790easdas7dsdfd76175",
- photoUrl: "photo",
- }
- const user = await userRepository.findOne({ where: { email: updateUser.email } });
 
+ const user = await userRepository.findOne({ where: { email: newUser.email } });
  if(user){
+ const updateUser = {
+ id: user.id,
+ firstName: "Biguseers2399",
+ lastName: "1",
+ email: "john.doe23@example.com",
+ gender: "Male",
+ phoneNumber: "0790easdas7dsdfd76175",
+ photoUrl: "photo",
+ }
  const res = await request(app).put('/user/update').send(updateUser)
  expect(res.status).toBe(201);
  expect(res.body).toEqual({

src/services/userServices/userProfileUpdateServices.ts

@@ -13,15 +13,14 @@ declare module "express"{
 
 export const userProfileUpdateServices = async (req: Request, res: Response) =>{
 try {
- console.log(req.body)
  if(!req.body){
  return responseError(res, 401, "body required")
  }
 
- const { firstName, lastName, gender, phoneNumber, photoUrl, email } = req.body;
+ const { firstName, lastName, gender, phoneNumber, photoUrl, email, id} = req.body;
 
  // Validate user input
- if (!firstName.trim() && !lastName.trim() && !gender.trim() && !phoneNumber.trim() && !photoUrl.trim() && !email.trim()) {
+ if (!firstName.trim() && !lastName.trim() && !gender.trim() && !phoneNumber.trim() && !photoUrl.trim() && !email.trim() && !id.trim())  {
  return responseError(res, 400, 'Fill all the field');
  }
 
@@ -34,6 +33,9 @@ try {
  if (!existingUser){
  return responseError(res, 401, "User not found")
  }
+ if (existingUser.id !== id) {
+ return responseError(res, 403, "You are not authorized to edit this profile.");
+ }
 
  existingUser.firstName = firstName
  existingUser.lastName = lastName