Added a test

Author: pashakondratyev

routes/api/account.js

@@ -178,6 +178,7 @@ module.exports = {
          * @apiName inviteAccount
          * @apiGroup Account
          * @apiVersion 0.0.8
+         * @apiDescription sends link with token to be used with the account/create route
          * 
          * @apiParam (body) {String} [email] email of the account to be created and where to send the link
          * @apiParam (body) {String} [accountType] the type of the account which the user can create, for sponsor this should specify tier as well

tests/account.test.js

@@ -219,7 +219,18 @@ describe("POST confirm account", function () {
                 res.body.message.should.equal(Constants.Error.ACCOUNT_TOKEN_401_MESSAGE);
                 done();
             })
-    })
+    });
+    it("should FAIL to confirm account that has token with email but no account", function(done) {
+        chai.request(server.app)
+        .post('/api/auth/confirm/' + fakeToken)
+        .type("application/json")
+        .end(function (err, res) {
+            res.should.have.status(401);
+            res.body.should.have.property("message");
+            res.body.message.should.equal(Constants.Error.ACCOUNT_TOKEN_401_MESSAGE);
+            done();
+        })
+    });
 })
 
 describe("PATCH update account", function () {

tests/util/accountConfirmation.test.util.js

@@ -28,6 +28,11 @@ const HackerConfirmation2 = {
     "email": Util.Account.NonConfirmedAccount2.email
 }
 
+const HackerConfirmation3 = {
+    "_id": mongoose.Types.ObjectId(),
+    "email": Util.Account.newAccount1
+};
+
 // Using a real ID which is stored but corresponds to another account
 const FakeHackerToken = {
     "_id": HackerConfirmation._id,
@@ -40,7 +45,8 @@ const FakeToken = Services.AccountConfirmation.generateToken(FakeHackerToken._id
 
 const AccountConfirmationTokens = [
     HackerConfirmation,
-    HackerConfirmation2
+    HackerConfirmation2,
+    HackerConfirmation3
 ];
 
 function storeAll(attributes) {