readd secure avatar endpoints

backend/petshop-api.postman_collection.json

@@ -90,6 +90,10 @@
       "key": "avatarFile",
       "value": "postman/avatar.png"
     },
+    {
+      "key": "avatarUrl",
+      "value": ""
+    },
     {
       "key": "bulkPetId",
       "value": ""
@@ -212,6 +216,7 @@
                   "    pm.response.to.have.status(200);",
                   "});",
                   "var jsonData = pm.response.json();",
+                  "if (jsonData.id !== undefined) pm.collectionVariables.set('userId', jsonData.id);",
                   "if (jsonData.token) pm.collectionVariables.set('customerToken', jsonData.token);"
                 ]
               }
@@ -307,7 +312,9 @@
                 "exec": [
                   "pm.test('Status code is 200', function () {",
                   "    pm.response.to.have.status(200);",
-                  "});"
+                  "});",
+                  "var jsonData = pm.response.json();",
+                  "if (jsonData.id !== undefined) pm.collectionVariables.set('userId', jsonData.id);"
                 ]
               }
             }
@@ -381,7 +388,8 @@
                   "    pm.response.to.have.status(200);",
                   "});",
                   "var jsonData = pm.response.json();",
-                  "pm.expect(jsonData.avatarUrl).to.be.a('string');"
+                  "pm.expect(jsonData.avatarUrl).to.be.a('string');",
+                  "pm.collectionVariables.set('avatarUrl', jsonData.avatarUrl);"
                 ]
               }
             }
@@ -414,7 +422,68 @@
                   "    pm.response.to.have.status(200);",
                   "});",
                   "var jsonData = pm.response.json();",
-                  "pm.expect(jsonData.avatarUrl).to.be.a('string');"
+                  "pm.expect(jsonData.avatarUrl).to.be.a('string');",
+                  "pm.collectionVariables.set('avatarUrl', jsonData.avatarUrl);"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "Get My Avatar File",
+          "request": {
+            "method": "GET",
+            "url": "{{baseUrl}}{{avatarUrl}}",
+            "header": [
+              {
+                "key": "Authorization",
+                "value": "Bearer {{customerToken}}",
+                "type": "text"
+              }
+            ]
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "pm.test('Status code is 200', function () {",
+                  "    pm.response.to.have.status(200);",
+                  "});",
+                  "pm.test('Avatar response is an image', function () {",
+                  "    pm.expect(pm.response.headers.get('Content-Type')).to.include('image/');",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "Get User Avatar File As Staff",
+          "request": {
+            "method": "GET",
+            "url": "{{baseUrl}}/api/v1/users/{{userId}}/avatar/file",
+            "header": [
+              {
+                "key": "Authorization",
+                "value": "Bearer {{staffToken}}",
+                "type": "text"
+              }
+            ]
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "pm.test('Status code is 200', function () {",
+                  "    pm.response.to.have.status(200);",
+                  "});",
+                  "pm.test('Avatar response is an image', function () {",
+                  "    pm.expect(pm.response.headers.get('Content-Type')).to.include('image/');",
+                  "});"
                 ]
               }
             }