chore: Update follow-redirects across project to resolve `CVE-2023-…

…26159` (#2653) * chore: Fix Hasura * fix: E2E project * chore: Fix API * chore: Fix editor * fix: Update types
theopensystemslab · Jan 10, 2024 · cc086e5 · cc086e5
1 parent 3673aff
commit cc086e5
Show file tree

Hide file tree

Showing 20 changed files with 1,807 additions and 2,182 deletions.
diff --git a/api.planx.uk/modules/pay/service/inviteToPay/createPaymentSendEvents.test.ts b/api.planx.uk/modules/pay/service/inviteToPay/createPaymentSendEvents.test.ts
@@ -77,7 +77,7 @@ describe("Create payment send events webhook", () => {
   it("returns a 400 if a required value is missing", async () => {
     await supertest(app)
       .post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { somethingElse: "123" } })
       .expect(400)
       .then((response) =>
@@ -92,7 +92,7 @@ describe("Create payment send events webhook", () => {
 
     await supertest(app)
       .post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(200)
       .then((response) => {
@@ -108,7 +108,7 @@ describe("Create payment send events webhook", () => {
 
     await supertest(app)
       .post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -131,7 +131,7 @@ describe("Create payment send events webhook", () => {
 
     await supertest(app)
       .post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(500)
       .then((response) => {

diff --git a/api.planx.uk/modules/send/bops/bops.test.ts b/api.planx.uk/modules/send/bops/bops.test.ts
@@ -95,7 +95,7 @@ describe(`sending an application to BOPS`, () => {
 
     await supertest(app)
       .post("/bops/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(200)
       .then((res) => {
@@ -115,7 +115,7 @@ describe(`sending an application to BOPS`, () => {
   it("throws an error if payload is missing", async () => {
     await supertest(app)
       .post("/bops/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: null })
       .expect(400)
       .then((res) => {
@@ -126,7 +126,7 @@ describe(`sending an application to BOPS`, () => {
   it("throws an error if team is unsupported", async () => {
     await supertest(app)
       .post("/bops/unsupported-team")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(400)
       .then((res) => {
@@ -150,7 +150,7 @@ describe(`sending an application to BOPS`, () => {
 
     await supertest(app)
       .post("/bops/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "previously_submitted_app" } })
       .expect(200)
       .then((res) => {
@@ -226,7 +226,7 @@ describe(`sending an application to BOPS v2`, () => {
 
     await supertest(app)
       .post("/bops-v2/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(200)
       .then((res) => {
@@ -246,7 +246,7 @@ describe(`sending an application to BOPS v2`, () => {
   it("throws an error if payload is missing", async () => {
     await supertest(app)
       .post("/bops-v2/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: null })
       .expect(400)
       .then((res) => {
@@ -257,7 +257,7 @@ describe(`sending an application to BOPS v2`, () => {
   it("throws an error if team is unsupported", async () => {
     await supertest(app)
       .post("/bops-v2/unsupported-team")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(400)
       .then((res) => {
@@ -281,7 +281,7 @@ describe(`sending an application to BOPS v2`, () => {
 
     await supertest(app)
       .post("/bops-v2/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "previously_submitted_app" } })
       .expect(200)
       .then((res) => {

diff --git a/api.planx.uk/modules/send/email/index.test.ts b/api.planx.uk/modules/send/email/index.test.ts
@@ -113,7 +113,7 @@ describe(`sending an application by email to a planning office`, () => {
   it("succeeds when provided with valid data", async () => {
     await supertest(app)
       .post("/email-submission/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(200)
       .then((res) => {
@@ -133,7 +133,7 @@ describe(`sending an application by email to a planning office`, () => {
   it("errors if the payload body does not include a sessionId", async () => {
     await supertest(app)
       .post("/email-submission/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { somethingElse: "123" } })
       .expect(400)
       .then((res) => {
@@ -160,7 +160,7 @@ describe(`sending an application by email to a planning office`, () => {
 
     await supertest(app)
       .post("/email-submission/other-council")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(400)
       .then((res) => {
@@ -183,7 +183,7 @@ describe(`sending an application by email to a planning office`, () => {
 
     await supertest(app)
       .post("/email-submission/other-council")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { sessionId: "123" } })
       .expect(500)
       .then((res) => {

diff --git a/api.planx.uk/modules/send/uniform/uniform.test.ts b/api.planx.uk/modules/send/uniform/uniform.test.ts
@@ -12,7 +12,7 @@ describe(`sending an application to uniform`, () => {
   it("errors if the payload body does not include a sessionId", async () => {
     await supertest(app)
       .post("/uniform/southwark")
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send({ payload: { somethingElse: "123" } })
       .expect(400)
       .then((res) => {

diff --git a/api.planx.uk/modules/webhooks/service/analyzeSessions/index.test.ts b/api.planx.uk/modules/webhooks/service/analyzeSessions/index.test.ts
@@ -38,7 +38,7 @@ describe("Analyze sessions webhook", () => {
     mockOperationHandler.mockRejectedValueOnce("Unhandled error!");
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .expect(500)
       .then((response) =>
         expect(response.body.error).toMatch(
@@ -63,7 +63,7 @@ describe("Analyze sessions webhook", () => {
     ]);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .expect(200)
       .then((response) => {
         expect(mockOperation1).toHaveBeenCalled();
@@ -107,7 +107,7 @@ describe("Analyze sessions webhook", () => {
     ]);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .expect(500)
       .then((response) => {
         expect(mockOperation1).toHaveBeenCalled();
@@ -164,7 +164,7 @@ describe("Analyze sessions webhook", () => {
     ]);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .expect(500)
       .then((response) => {
         expect(mockOperation1).toHaveBeenCalled();

diff --git a/api.planx.uk/modules/webhooks/service/lowcalSessionEvents/index.test.ts b/api.planx.uk/modules/webhooks/service/lowcalSessionEvents/index.test.ts
@@ -50,7 +50,7 @@ describe("Create reminder event webhook", () => {
 
     for (const body of invalidRequestBodies) {
       await post(ENDPOINT)
-        .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+        .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
         .send(body)
         .expect(400)
         .then((response) => {
@@ -68,7 +68,7 @@ describe("Create reminder event webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -89,7 +89,7 @@ describe("Create reminder event webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -124,7 +124,7 @@ describe("Create reminder event webhook", () => {
     mockedCreateScheduledEvent.mockRejectedValue(new Error("Failed!"));
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(500)
       .then((response) => {
@@ -156,7 +156,7 @@ describe("Create expiry event webhook", () => {
 
     for (const body of [missingCreatedAt, missingPayload]) {
       await post(ENDPOINT)
-        .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+        .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
         .send(body)
         .expect(400)
         .then((response) => {
@@ -174,7 +174,7 @@ describe("Create expiry event webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -191,7 +191,7 @@ describe("Create expiry event webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -211,7 +211,7 @@ describe("Create expiry event webhook", () => {
     mockedCreateScheduledEvent.mockRejectedValue(new Error("Failed!"));
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(500)
       .then((response) => {

diff --git a/api.planx.uk/modules/webhooks/service/paymentRequestEvents/index.test.ts b/api.planx.uk/modules/webhooks/service/paymentRequestEvents/index.test.ts
@@ -36,7 +36,7 @@ describe("Create payment invitation events webhook", () => {
 
     for (const body of [missingCreatedAt, missingPayload]) {
       await post(ENDPOINT)
-        .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+        .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
         .send(body)
         .expect(400)
         .then((response) => {
@@ -54,7 +54,7 @@ describe("Create payment invitation events webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -75,7 +75,7 @@ describe("Create payment invitation events webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -113,7 +113,7 @@ describe("Create payment invitation events webhook", () => {
     mockedCreateScheduledEvent.mockRejectedValue(new Error("Failed!"));
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(500)
       .then((response) => {
@@ -145,7 +145,7 @@ describe("Create payment reminder events webhook", () => {
 
     for (const body of [missingCreatedAt, missingPayload]) {
       await post(ENDPOINT)
-        .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+        .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
         .send(body)
         .expect(400)
         .then((response) => {
@@ -163,7 +163,7 @@ describe("Create payment reminder events webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -186,7 +186,7 @@ describe("Create payment reminder events webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -244,7 +244,7 @@ describe("Create payment reminder events webhook", () => {
     mockedCreateScheduledEvent.mockRejectedValue(new Error("Failed!"));
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(500)
       .then((response) => {
@@ -276,7 +276,7 @@ describe("Create payment expiry events webhook", () => {
 
     for (const body of [missingCreatedAt, missingPayload]) {
       await post(ENDPOINT)
-        .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+        .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
         .send(body)
         .expect(400)
         .then((response) => {
@@ -294,7 +294,7 @@ describe("Create payment expiry events webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -315,7 +315,7 @@ describe("Create payment expiry events webhook", () => {
     mockedCreateScheduledEvent.mockResolvedValue(mockScheduledEventResponse);
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(200)
       .then((response) => {
@@ -353,7 +353,7 @@ describe("Create payment expiry events webhook", () => {
     mockedCreateScheduledEvent.mockRejectedValue(new Error("Failed!"));
 
     await post(ENDPOINT)
-      .set({ Authorization: process.env.HASURA_PLANX_API_KEY })
+      .set({ Authorization: process.env.HASURA_PLANX_API_KEY! })
       .send(body)
       .expect(500)
       .then((response) => {