Windshaft-cartodb/test/acceptance/templates-test.js

'use strict';

var assert = require('../support/assert');
var _ = require('underscore');
var redis = require('redis');
var step = require('step');
var strftime = require('strftime');
var QueryTables = require('cartodb-query-tables').queryTables;
var NamedMapsCacheEntry = require('../../lib/cache/model/named-maps-entry');
var redis_stats_db = 5;

// Pollute the PG environment to make sure
// configuration settings are always enforced
// See https://github.com/CartoDB/Windshaft-cartodb/issues/174
process.env.PGPORT = '666';
process.env.PGHOST = 'fake';

var path = require('path');
var fs = require('fs');
var http = require('http');

var helper = require('../support/test-helper');

var CartodbWindshaft = require('../../lib/server');
var serverOptions = require('../../lib/server-options');

var LayergroupToken = require('../../lib/models/layergroup-token');

describe('template_api', function () {
    var server;

    before(function () {
        server = new CartodbWindshaft(serverOptions);
        server.setMaxListeners(0);
        // FIXME: we need a better way to reset cache while running tests
        server.layergroupAffectedTablesCache.cache.reset();
    });

    var httpRendererResourcesServer;
    before(function (done) {
        // Start a server to test external resources
        httpRendererResourcesServer = http.createServer(function (request, response) {
            var filename = path.join(__dirname, '/../fixtures/http/light_nolabels-1-0-0.png');
            fs.readFile(filename, { encoding: 'binary' }, function (err, file) {
                if (err) {
                    return done();
                }
                response.writeHead(200);
                response.write(file, 'binary');
                response.end();
            });
        });
        httpRendererResourcesServer.listen(8033, done);
    });

    after(function (done) {
        httpRendererResourcesServer.close(done);
    });

    var keysToDelete;
    beforeEach(function () {
        keysToDelete = {};
    });

    afterEach(function (done) {
        helper.deleteRedisKeys(keysToDelete, done);
    });

    var template_acceptance1 = {
        version: '0.0.1',
        name: 'acceptance1',
        auth: { method: 'open' },
        layergroup: {
            version: '1.0.0',
            layers: [
                {
                    options: {
                        sql: 'select cartodb_id, ST_Translate(the_geom_webmercator, -5e6, 0) as the_geom_webmercator' +
                     ' from test_table limit 2 offset 2',
                        cartocss: '#layer { marker-fill:blue; marker-allow-overlap:true; }',
                        cartocss_version: '2.0.2',
                        interactivity: 'cartodb_id'
                    }
                }
            ]
        }
    };

    function makeTemplate (templateName) {
        return {
            version: '0.0.1',
            name: templateName || 'acceptance1',
            auth: { method: 'open' },
            layergroup: {
                version: '1.0.0',
                layers: [
                    {
                        options: {
                            sql: 'select cartodb_id, ST_Translate(the_geom_webmercator, -5e6, 0) as the_geom_webmercator' +
                            ' from test_table limit 2 offset 2',
                            cartocss: '#layer { marker-fill:blue; marker-allow-overlap:true; }',
                            cartocss_version: '2.0.2',
                            interactivity: 'cartodb_id'
                        }
                    }
                ]
            }
        };
    }

    function extendDefaultsTemplate (template) {
        return _.extend({}, template, { auth: { method: 'open' }, placeholders: {} });
    }

    it('can add template, returning id', function (done) {
        var expected_tpl_id = 'acceptance1';
        var post_request_1 = {
            url: '/api/v1/map/named',
            method: 'POST',
            headers: { host: 'localhost', 'Content-Type': 'application/json' },
            data: JSON.stringify(template_acceptance1)
        };
        step(
            function postUnauthenticated () {
                var next = this;
                assert.response(server, post_request_1, {},
                    function (res) { next(null, res); });
            },
            function postTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'), res.body);
                err = parsed.errors[0];
                assert.ok(err.match(/only.*authenticated.*user/i),
                    'Unexpected error response: ' + err);
                post_request_1.url += '?api_key=1234';
                var next = this;
                assert.response(server, post_request_1, {},
                    function (res) { next(null, res); });
            },
            function rePostTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsedBody = JSON.parse(res.body);
                var expectedBody = { template_id: expected_tpl_id };
                assert.deepStrictEqual(parsedBody, expectedBody);

                keysToDelete['map_tpl|localhost'] = 0;

                var next = this;
                assert.response(server, post_request_1, {},
                    function (res) { next(null, res); });
            },
            function checkFailure (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 400, res.body);
                var parsedBody = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsedBody, 'errors'), res.body);
                assert.ok(parsedBody.errors[0].match(/already exists/i),
                    'Unexpected error for pre-existing template name: ' + parsedBody.errors);

                done();
            }
        );
    });

    // See https://github.com/CartoDB/Windshaft-cartodb/issues/128
    it("cannot create template with auth='token' and no valid tokens", function (done) {
        var tpl_id;
        step(
            function postTemplate1 () {
                // clone the valid one, and give it another name
                var broken_template = JSON.parse(JSON.stringify(template_acceptance1));
                broken_template.name = 'broken1';
                // Set auth='token' and specify no tokens
                broken_template.auth.method = 'token';
                delete broken_template.auth.tokens;
                var post_request_1 = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(broken_template)
                };
                var next = this;
                assert.response(server, post_request_1, {},
                    function (res) { next(null, res); });
            },
            function checkFailure1 (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 400, res.body);
                var parsedBody = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsedBody, 'errors'), res.body);
                var re = /invalid.*authentication.*missing/i;
                assert.ok(parsedBody.errors[0].match(re),
                    'Error for invalid authentication does not match ' + re + ': ' + parsedBody.errors);
                return null;
            },
            function postTemplate2 (err) {
                assert.ifError(err);
                // clone the valid one and rename it
                var broken_template = JSON.parse(JSON.stringify(template_acceptance1));
                broken_template.name = 'broken1';
                // Set auth='token' and specify no tokens
                broken_template.auth.method = 'token';
                broken_template.auth.tokens = [];
                var post_request_1 = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(broken_template)
                };
                var next = this;
                assert.response(server, post_request_1, {},
                    function (res) { next(null, res); });
            },
            function checkFailure2 (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 400, res.body);
                var parsedBody = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsedBody, 'errors'), res.body);
                var re = new RegExp(/invalid.*authentication.*missing/i);
                assert.ok(parsedBody.errors[0].match(re),
                    'Error for invalid authentication does not match ' + re + ': ' + parsedBody.errors);
                return null;
            },
            function postTemplateValid (err) {
                assert.ifError(err);
                // clone the valid one and rename it
                var broken_template = JSON.parse(JSON.stringify(template_acceptance1));
                broken_template.name = 'broken1';
                var post_request_1 = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(broken_template)
                };
                var next = this;
                assert.response(server, post_request_1, {},
                    function (res) { next(null, res); });
            },
            function putTemplateInvalid (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                // clone the valid one and rename it
                var broken_template = JSON.parse(JSON.stringify(template_acceptance1));
                broken_template.name = 'broken1';
                // Set auth='token' and specify no tokens
                broken_template.auth.method = 'token';
                broken_template.auth.tokens = [];
                var put_request_1 = {
                    url: '/api/v1/map/named/' + tpl_id + '/?api_key=1234',
                    method: 'PUT',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(broken_template)
                };
                var next = this;
                assert.response(server, put_request_1, {},
                    function (res) { next(null, res); });
            },
            function deleteTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 400, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                var re = /invalid.*authentication.*missing/i;
                assert.ok(parsed.errors[0].match(re),
                    'Error for invalid authentication on PUT does not match ' +
            re + ': ' + parsed.errors);
                var del_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'DELETE',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, del_request, {},
                    function (res, err) { next(err, res); });
            },
            function checkDelete (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 204, res.statusCode + ': ' + res.body);
                assert.ok(!res.body, 'Unexpected body in DELETE /template response');

                done();
            }
        );
    });

    it('instance endpoint should return CORS headers', function (done) {
        step(function postTemplate1 () {
            var next = this;
            var post_request = {
                url: '/api/v1/map/named?api_key=1234',
                method: 'POST',
                headers: { host: 'localhost.localhost', 'Content-Type': 'application/json' },
                data: JSON.stringify(template_acceptance1)
            };
            assert.response(server, post_request, {}, function (res) { next(null, res); });
        },
        function testCORS () {
            const allowHeaders = 'X-Requested-With, X-Prototype-Version, X-CSRF-Token, Authorization, Content-Type';
            assert.response(server, {
                url: '/api/v1/map/named/acceptance1',
                method: 'OPTIONS'
            }, {
                status: 200,
                headers: {
                    'Access-Control-Allow-Headers': allowHeaders,
                    'Access-Control-Allow-Origin': '*'
                }
            }, function () { done(); });
        });
    });

    describe('server-metadata', function () {
        var serverMetadata;
        beforeEach(function () {
            serverMetadata = global.environment.serverMetadata;
            global.environment.serverMetadata = { cdn_url: { http: 'test', https: 'tests' } };
        });

        afterEach(function () {
            global.environment.serverMetadata = serverMetadata;
        });

        it('instance endpoint should return server metadata', function (done) {
            var tmpl = _.clone(template_acceptance1);
            tmpl.name = 'rambotemplate2';

            step(function postTemplate1 () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(tmpl)
                };
                assert.response(server, post_request, {}, function (res) {
                    next(null, res);
                });
            },
            function testCORS () {
                var next = this;
                assert.response(server, {
                    url: '/api/v1/map/named/' + tmpl.name,
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' }
                }, {
                    status: 200
                }, function (res) {
                    var parsed = JSON.parse(res.body);
                    keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;
                    keysToDelete['user:localhost:mapviews:global'] = 5;
                    assert.ok(_.isEqual(parsed.cdn_url, global.environment.serverMetadata.cdn_url));
                    next(null);
                });
            },
            function deleteTemplate (err) {
                assert.ifError(err);
                var del_request = {
                    url: '/api/v1/map/named/' + tmpl.name + '?api_key=1234',
                    method: 'DELETE',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' }
                };
                assert.response(server, del_request, {}, function () {
                    done();
                });
            }
            );
        });
    });

    it('can list templates', function (done) {
        var tplid1, tplid2;
        step(
            function postTemplate1 () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance1)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function postTemplate2 (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tplid1 = parsed.template_id;

                var next = this;
                var backup_name = template_acceptance1.name;
                template_acceptance1.name += '_new';
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance1)
                };
                template_acceptance1.name = backup_name;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function litsTemplatesUnauthenticated (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tplid2 = parsed.template_id;
                var next = this;
                var get_request = {
                    url: '/api/v1/map/named',
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function litsTemplates (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    'Missing error from response: ' + res.body);
                err = parsed.errors[0];
                assert.ok(err.match(/authenticated user/), err);
                var next = this;
                var get_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkList (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_ids'),
                    "Missing 'template_ids' from response body: " + res.body);
                var ids = parsed.template_ids;
                assert.strictEqual(ids.length, 2);
                assert.ok(ids.indexOf(tplid1) !== -1,
                    'Missing "' + tplid1 + "' from list response: " + ids.join(','));
                assert.ok(ids.indexOf(tplid2) !== -1,
                    'Missing "' + tplid2 + "' from list response: " + ids.join(','));

                keysToDelete['map_tpl|localhost'] = 0;

                done();
            }
        );
    });

    it('can update template', function (done) {
        var tpl_id;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(makeTemplate())
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function putMisnamedTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var backup_name = template_acceptance1.name;
                template_acceptance1.name = 'changed_name';
                var put_request = {
                    url: '/api/v1/map/named/' + tpl_id + '/?api_key=1234',
                    method: 'PUT',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance1)
                };
                template_acceptance1.name = backup_name;
                var next = this;
                assert.response(server, put_request, {},
                    function (res) { next(null, res); });
            },
            function putUnexistentTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 400, res.statusCode + ': ' + res.body);
                var parsedBody = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsedBody, 'errors'), res.body);
                assert.ok(parsedBody.errors[0].match(/cannot update name/i),
                    'Unexpected error for invalid update: ' + parsedBody.errors);
                var put_request = {
                    url: '/api/v1/map/named/unexistent/?api_key=1234',
                    method: 'PUT',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(makeTemplate())
                };
                var next = this;
                assert.response(server, put_request, {},
                    function (res) { next(null, res); });
            },
            function putValidTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 400, res.statusCode + ': ' + res.body);
                var parsedBody = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsedBody, 'errors'), res.body);
                assert.ok(parsedBody.errors[0].match(/cannot update name/i),
                    'Unexpected error for invalid update: ' + parsedBody.errors);
                var put_request = {
                    url: '/api/v1/map/named/' + tpl_id + '/?api_key=1234',
                    method: 'PUT',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(makeTemplate())
                };
                var next = this;
                assert.response(server, put_request, {},
                    function (res) { next(null, res); });
            },
            function checkValidUpate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                assert.strictEqual(tpl_id, parsed.template_id);

                keysToDelete['map_tpl|localhost'] = 0;

                done();
            }
        );
    });

    it('can get a template by id', function (done) {
        var tpl_id;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(makeTemplate())
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function getTemplateUnauthorized (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var get_request = {
                    url: '/api/v1/map/named/' + tpl_id,
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function getTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403, res.statusCode + ': ' + res.body);
                var parsedBody = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsedBody, 'errors'), res.body);
                assert.ok(parsedBody.errors[0].match(/only.*authenticated.*user/i),
                    'Unexpected error for unauthenticated template get: ' + parsedBody.errors);
                var get_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkReturnTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template'),
                    "Missing 'template' from response body: " + res.body);
                assert.deepStrictEqual(extendDefaultsTemplate(makeTemplate()), parsed.template);

                keysToDelete['map_tpl|localhost'] = 0;

                done();
            }
        );
    });

    it('can delete a template by id', function (done) {
        var tpl_id;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(makeTemplate())
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function getTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var get_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function deleteTemplateUnauthorized (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template'),
                    "Missing 'template' from response body: " + res.body);
                assert.deepStrictEqual(extendDefaultsTemplate(makeTemplate()), parsed.template);
                var del_request = {
                    url: '/api/v1/map/named/' + tpl_id,
                    method: 'DELETE',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, del_request, {},
                    function (res) { next(null, res); });
            },
            function deleteTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/only.*authenticated.*user/i),
                    'Unexpected error for unauthenticated template get: ' + parsed.errors);
                var del_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'DELETE',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, del_request, {},
                    function (res) { next(null, res); });
            },
            function getMissingTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 204, res.statusCode + ': ' + res.body);
                assert.ok(!res.body, 'Unexpected body in DELETE /template response');
                var get_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkGetFailure (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 404, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/cannot find/i),
                    'Unexpected error for missing template: ' + parsed.errors);

                done();
            }
        );
    });

    it('can instanciate a template by id wadus', function (done) {
        // This map fetches data from a private table
        var template_acceptance2 = {
            version: '0.0.1',
            name: 'acceptance1',
            auth: { method: 'token', valid_tokens: ['valid1', 'valid2'] },
            layergroup: {
                version: '1.0.0',
                layers: [
                    {
                        options: {
                            sql: 'select * from test_table_private_1 LIMIT 0',
                            cartocss: '#layer { marker-fill:blue; marker-allow-overlap:true; }',
                            cartocss_version: '2.0.2',
                            interactivity: 'cartodb_id'
                        }
                    }
                ]
            }
        };

        var template_params = {};

        var tpl_id;
        var layergroupid;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance2)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id,
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            // See https://github.com/CartoDB/Windshaft-cartodb/issues/173
            function instanciateForeignDB (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403,
                    'Unexpected success instanciating template with no auth: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/unauthorized/i),
                    'Unexpected error for unauthorized instance : ' + parsed.errors);
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?auth_token=valid2',
                    method: 'POST',
                    headers: { host: 'foreign', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 404, res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'), "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/not found/i), 'Unexpected error for forbidden instance : ' + parsed.errors);
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?auth_token=valid2',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function fetchTileNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Instantiating template: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'layergroupid'),
                    "Missing 'layergroupid' from response body: " + res.body);
                layergroupid = parsed.layergroupid;
                assert.ok(layergroupid.match(/^localhost@/),
                    'Returned layergroupid does not start with signer name: ' + layergroupid);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'last_updated'),
                    "Missing 'last_updated' from response body: " + res.body);

                keysToDelete['user:localhost:mapviews:global'] = 5;
                keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;

                // TODO: check value of last_updated ?
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb0/0/0/0.png',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function fetchTileAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403,
                    'Fetching tile with no auth: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/permission denied/i),
                    'Unexpected error for unauthorized instance (expected /permission denied/): ' + parsed.errors);
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + '/0/0/0.png?auth_token=valid1',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkTile (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Unexpected error for authorized instance: ' + res.statusCode + ' -- ' + res.body);
                assert.strictEqual(res.headers['content-type'], 'image/png');
                return null;
            },
            // See https://github.com/CartoDB/Windshaft-cartodb/issues/172
            function fetchTileForeignSignature (err) {
                assert.ifError(err);
                var foreignsigned = layergroupid.replace(/[^@]*@/, 'foreign@');
                var get_request = {
                    url: '/api/v1/map/' + foreignsigned + '/0/0/0.png?auth_token=valid1',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkForeignSignerError (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403,
                    'Unexpected error for authorized instance: ' + res.statusCode + ' -- ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/cannot use/i),
                    'Unexpected error for unauthorized instance (expected /cannot use/): ' + parsed.errors);
                return null;
            },
            function deleteTemplate (err) {
                assert.ifError(err);
                var del_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'DELETE',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, del_request, {},
                    function (res) { next(null, res); });
            },
            function fetchTileDeleted (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 204,
                    'Deleting template: ' + res.statusCode + ':' + res.body);
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + '/0/0/0.png?auth_token=valid1',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkTileAvailable (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, 'Tile should be accessible');
                assert.strictEqual(res.headers['content-type'], 'image/png');

                done();
            }
        );
    });

    it('can instanciate a template with torque layer by id', function (done) {
        // This map fetches data from a private table
        var template = {
            version: '0.0.1',
            name: 'acceptance1',
            auth: { method: 'token', valid_tokens: ['valid1', 'valid2'] },
            layergroup: {
                version: '1.1.0',
                layers: [
                    {
                        type: 'torque',
                        options: {
                            sql: 'select * from test_table_private_1 LIMIT 0',
                            cartocss: 'Map { -torque-frame-count:1; -torque-resolution:1; ' +
                       "-torque-aggregation-function:'count(*)'; -torque-time-attribute:'updated_at'; }"
                        }
                    }
                ]
            }
        };

        var template_params = {};

        var tpl_id;
        var layergroupid;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id,
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403,
                    'Unexpected success instanciating template with no auth: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/unauthorized/i),
                    'Unexpected error for unauthorized instance : ' + parsed.errors);
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?auth_token=valid2',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function fetchTileNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Instantiating template: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'layergroupid'),
                    "Missing 'layergroupid' from response body: " + res.body);
                layergroupid = parsed.layergroupid;
                assert.ok(layergroupid.match(/^localhost@/),
                    'Returned layergroupid does not start with signer name: ' + layergroupid);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'last_updated'),
                    "Missing 'last_updated' from response body: " + res.body);

                keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;
                keysToDelete['user:localhost:mapviews:global'] = 5;

                // TODO: check value of last_updated ?
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb0/0/0/0/0.json.torque',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function fetchTileAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403,
                    'Fetching tile with no auth: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/permission denied/i),
                    'Unexpected error for unauthorized instance (expected /permission denied): ' + parsed.errors);
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb1/0/0/0/0.json.torque?auth_token=valid1',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkTile_fetchOnRestart (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Unexpected error for authorized instance: ' + res.statusCode + ' -- ' + res.body);
                assert.strictEqual(res.headers['content-type'], 'application/json; charset=utf-8');
                var cc = res.headers['x-cache-channel'];
                var expectedCC = 'test_windshaft_cartodb_user_1_db:public.test_table_private_1';
                assert.ok(cc);
                assert.strictEqual(cc, expectedCC);
                // hack simulating restart...
                // FIXME: we need a better way to reset cache while running tests
                server.layergroupAffectedTablesCache.cache.reset(); // need to clean channel cache
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb1/0/0/0/1.json.torque?auth_token=valid1',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkCacheChannel (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Unexpected error for authorized instance: ' + res.statusCode + ' -- ' + res.body);
                assert.strictEqual(res.headers['content-type'], 'application/json; charset=utf-8');
                var cc = res.headers['x-cache-channel'];
                var expectedCC = 'test_windshaft_cartodb_user_1_db:public.test_table_private_1';
                assert.ok(cc, 'Missing X-Cache-Channel on fetch-after-restart');
                assert.strictEqual(cc, expectedCC);
                return null;
            },
            function deleteTemplate (err) {
                assert.ifError(err);
                var del_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'DELETE',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, del_request, {},
                    function (res) { next(null, res); });
            },
            function fetchTileDeleted (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 204,
                    'Deleting template: ' + res.statusCode + ':' + res.body);
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb2/0/0/0/0.json.torque?auth_token=valid1',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkTorqueTileAvailable (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, 'Torque tile should be accessible');
                assert.strictEqual(res.headers['content-type'], 'application/json; charset=utf-8');

                done();
            }
        );
    });

    it('can instanciate a template with attribute service by id', function (done) {
        // This map fetches data from a private table
        var template = {
            version: '0.0.1',
            name: 'acceptance1',
            auth: { method: 'token', valid_tokens: ['valid1', 'valid2'] },
            layergroup: {
                version: '1.1.0',
                layers: [
                    {
                        options: {
                            sql: 'select * from test_table_private_1 where cartodb_id in ( 5,6 )',
                            cartocss: '#layer { marker-fill:blue; marker-allow-overlap:true; }',
                            cartocss_version: '2.0.2',
                            attributes: { id: 'cartodb_id', columns: ['name', 'address'] }
                        }
                    }
                ]
            }
        };

        var template_params = {};

        var tpl_id;
        var layergroupid;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id,
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403,
                    'Unexpected success instanciating template with no auth: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/unauthorized/i),
                    'Unexpected error for unauthorized instance : ' + parsed.errors);
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?auth_token=valid2',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function fetchAttributeNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Instantiating template: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'layergroupid'),
                    "Missing 'layergroupid' from response body: " + res.body);
                layergroupid = parsed.layergroupid;
                assert.ok(layergroupid.match(/^localhost@/),
                    'Returned layergroupid does not start with signer name: ' + layergroupid);
                assert.strictEqual(res.headers['x-layergroup-id'], parsed.layergroupid);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'last_updated'),
                    "Missing 'last_updated' from response body: " + res.body);

                keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;
                keysToDelete['user:localhost:mapviews:global'] = 5;

                // TODO: check value of last_updated ?
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb0/0/attributes/5',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function fetchAttributeAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 403,
                    'Fetching tile with no auth: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'errors'),
                    "Missing 'errors' from response body: " + res.body);
                assert.ok(parsed.errors[0].match(/permission denied/i),
                    'Unexpected error for unauthorized getAttributes (expected /permission denied/): ' + parsed.errors);
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb1/0/attributes/5?auth_token=valid2',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkAttribute (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Unexpected error for authorized getAttributes: ' + res.statusCode + ' -- ' + res.body);
                assert.strictEqual(res.headers['content-type'], 'application/json; charset=utf-8');
                return null;
            },
            function deleteTemplate (err) {
                assert.ifError(err);
                var del_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?api_key=1234',
                    method: 'DELETE',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, del_request, {},
                    function (res) { next(null, res); });
            },
            function fetchAttrDeleted (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 204,
                    'Deleting template: ' + res.statusCode + ':' + res.body);
                var get_request = {
                    url: '/api/v1/map/' + layergroupid + ':cb2/0/attributes/5?auth_token=valid2',
                    method: 'GET',
                    headers: { host: 'localhost' },
                    encoding: 'binary'
                };
                var next = this;
                assert.response(server, get_request, {},
                    function (res) { next(null, res); });
            },
            function checkLayerAttributesAvailable (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, 'Layer attributes should be accessible');
                assert.strictEqual(res.headers['content-type'], 'application/json; charset=utf-8');

                done();
            }
        );
    });

    it('can instanciate a template by id with open auth', function (done) {
        // This map fetches data from a private table
        var template_acceptance_open = {
            version: '0.0.1',
            name: 'acceptance_open',
            auth: { method: 'open' },
            layergroup: {
                version: '1.0.0',
                layers: [
                    {
                        options: {
                            sql: 'select * from test_table_private_1 LIMIT 0',
                            cartocss: '#layer { marker-fill:blue; marker-allow-overlap:true; }',
                            cartocss_version: '2.0.2',
                            interactivity: 'cartodb_id'
                        }
                    }
                ]
            }
        };

        var template_params = {};

        var tpl_id;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance_open)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id,
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                helper.checkNoCache(res);
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Unexpected success instanciating template with no auth: ' + res.statusCode + ': ' + res.body);

                keysToDelete['map_cfg|' + LayergroupToken.parse(JSON.parse(res.body).layergroupid).token] = 0;
                keysToDelete['map_tpl|localhost'] = 0;
                keysToDelete['user:localhost:mapviews:global'] = 5;

                done();
            }
        );
    });

    it('can instanciate a template using jsonp', function (done) {
        // This map fetches data from a private table
        var template_acceptance_open = {
            version: '0.0.1',
            name: 'acceptance_open_jsonp',
            auth: { method: 'open' },
            layergroup: {
                version: '1.0.0',
                layers: [
                    {
                        options: {
                            sql: 'select * from test_table_private_1 LIMIT 0',
                            cartocss: '#layer { marker-fill:blue; marker-allow-overlap:true; }',
                            cartocss_version: '2.0.2',
                            interactivity: 'cartodb_id'
                        }
                    }
                ]
            }
        };

        var tpl_id;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance_open)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '/jsonp?callback=json_test',
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function checkInstanciation (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.statusCode + ': ' + res.body);
                // See https://github.com/CartoDB/Windshaft-cartodb/issues/176
                helper.checkCache(res);
                var expectedSurrogateKey = [
                    new QueryTables.QueryMetadata([{
                        dbname: 'test_windshaft_cartodb_user_1_db',
                        schema_name: 'public',
                        table_name: 'test_table_private_1'
                    }]).key(),
                    new NamedMapsCacheEntry('localhost', template_acceptance_open.name).key()
                ].join(' ');
                helper.checkSurrogateKey(res, expectedSurrogateKey);

                // jshint ignore:start
                function json_test (body) {
                    keysToDelete['map_cfg|' + LayergroupToken.parse(body.layergroupid).token] = 0;
                }
                eval(res.body);
                // jshint ignore:end
                keysToDelete['map_tpl|localhost'] = 0;
                keysToDelete['user:localhost:mapviews:global'] = 5;

                return null;
            },
            function finish (err) {
                done(err);
            }
        );
    });

    it('can instanciate a template using jsonp with params', function (done) {
        // This map fetches data from a private table
        var template_acceptance_open = {
            version: '0.0.1',
            name: 'acceptance_open_jsonp_params',
            auth: { method: 'open' },
            placeholders: {
                color: { type: 'css_color', default: 'red' }
            },
            layergroup: {
                version: '1.0.0',
                layers: [
                    {
                        options: {
                            sql: 'select * from test_table_private_1 LIMIT 0',
                            cartocss: '#layer { marker-fill: <%= color %>; marker-allow-overlap:true; }',
                            cartocss_version: '2.0.2',
                            interactivity: 'cartodb_id'
                        }
                    }
                ]
            }
        };

        var tpl_id;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance_open)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instanciateNoAuth (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '/jsonp?callback=json_test&config=' + JSON.stringify({ color: 'blue' }),
                    method: 'GET',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function checkInstanciation (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.statusCode + ': ' + res.body);
                // See https://github.com/CartoDB/Windshaft-cartodb/issues/176
                helper.checkCache(res);
                var expectedSurrogateKey = [
                    new QueryTables.QueryMetadata([{
                        dbname: 'test_windshaft_cartodb_user_1_db',
                        schema_name: 'public',
                        table_name: 'test_table_private_1'
                    }]).key(),
                    new NamedMapsCacheEntry('localhost', template_acceptance_open.name).key()
                ].join(' ');
                helper.checkSurrogateKey(res, expectedSurrogateKey);

                // jshint ignore:start
                function json_test (body) {
                    keysToDelete['map_cfg|' + LayergroupToken.parse(body.layergroupid).token] = 0;
                }
                eval(res.body);
                // jshint ignore:end
                keysToDelete['map_tpl|localhost'] = 0;
                keysToDelete['user:localhost:mapviews:global'] = 5;

                done();
            }
        );
    });

    it('template instantiation raises mapviews counter', function (done) {
        var layergroup = {
            stat_tag: 'random_tag',
            version: '1.0.0',
            layers: [
                {
                    options: {
                        sql: 'select 1 as cartodb_id, !pixel_height! as h,' +
                   ' ST_Buffer(!bbox!, -32*greatest(!pixel_width!,!pixel_height!)) as the_geom_webmercator',
                        cartocss: '#layer { polygon-fill:red; }',
                        cartocss_version: '2.0.1'
                    }
                }
            ]
        };
        var template = {
            version: '0.0.1',
            name: 'stat_gathering',
            auth: { method: 'open' },
            layergroup: layergroup
        };
        var statskey = 'user:localhost:mapviews';
        var redis_stats_client = redis.createClient(global.environment.redis.port);
        var template_id; // will be set on template post
        var now = strftime('%Y%m%d', new Date());
        var errors = [];
        step(
            function clean_stats () {
                var next = this;
                redis_stats_client.select(redis_stats_db, function (err) {
                    if (err) {
                        next(err);
                    } else {
                        redis_stats_client.del(statskey + ':global', next);
                    }
                });
            },
            function do_post_tempate (err) {
                assert.ifError(err);
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instantiateTemplate (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                template_id = JSON.parse(res.body).template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + template_id,
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify({})
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function check_global_stats (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Instantiating template: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'layergroupid'),
                    "Missing 'layergroupid' from response body: " + res.body);
                keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;
                redis_stats_client.ZSCORE(statskey + ':global', now, this);
            },
            function check_tag_stats (err, val) {
                assert.ifError(err);
                assert.strictEqual(val, '1', 'Expected score of ' + now + ' in ' + statskey + ':global to be 1, got ' + val);
                redis_stats_client.ZSCORE(statskey + ':stat_tag:random_tag', now, this);
            },
            function check_tag_stats_value (err, val) {
                assert.ifError(err);
                assert.equal(val, '1', 'Expected score of ' + now + ' in ' + statskey + ':stat_tag:' + layergroup.stat_tag +
              ' to be 1, got ' + val);
                return null;
            },
            function deleteTemplate (err) {
                assert.ifError(err);
                var del_request = {
                    url: '/api/v1/map/named/' + template_id + '?api_key=1234',
                    method: 'DELETE',
                    headers: { host: 'localhost' }
                };
                var next = this;
                assert.response(server, del_request, {},
                    function (res) { next(null, res); });
            },
            function cleanup_stats (err, res) {
                if (err) {
                    return done(err);
                }
                assert.strictEqual(res.statusCode, 204, res.statusCode + ': ' + res.body);
                if (err) {
                    errors.push('' + err);
                }

                keysToDelete['user:localhost:mapviews:global'] = 5;
                keysToDelete[statskey + ':stat_tag:' + layergroup.stat_tag] = 5;

                done();
            }
        );
    });

    it('instance map token changes with templates certificate changes', function (done) {
        // This map fetches data from a private table
        var template_acceptance2 = {
            version: '0.0.1',
            name: 'acceptance2',
            auth: { method: 'token', valid_tokens: ['valid1', 'valid2'] },
            layergroup: {
                version: '1.0.0',
                layers: [
                    {
                        options: {
                            sql: 'select * from test_table_private_1 LIMIT 0',
                            cartocss: '#layer { marker-fill:blue; marker-allow-overlap:true; }',
                            cartocss_version: '2.0.2',
                            interactivity: 'cartodb_id'
                        }
                    }
                ]
            }
        };

        var template_params = {};

        var tpl_id;
        var layergroupid;
        step(
            function postTemplate () {
                var next = this;
                var post_request = {
                    url: '/api/v1/map/named?api_key=1234',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_acceptance2)
                };
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instance1 (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                tpl_id = parsed.template_id;
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?auth_token=valid2',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res, err) { next(err, res); });
            },
            function checkInstance1 (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Instantiating template: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'layergroupid'),
                    "Missing 'layergroupid' from response body: " + res.body);
                layergroupid = parsed.layergroupid;
                helper.checkSurrogateKey(res, new NamedMapsCacheEntry('localhost', template_acceptance2.name).key());

                keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;
                return null;
            },
            function updateTemplate (err) {
                assert.ifError(err);
                // clone the valid one and rename it
                var changedTemplate = JSON.parse(JSON.stringify(template_acceptance2));
                changedTemplate.auth.method = 'open';
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '/?api_key=1234',
                    method: 'PUT',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(changedTemplate)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res) { next(null, res); });
            },
            function instance2 (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200, res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'),
                    "Missing 'template_id' from response body: " + res.body);
                assert.strictEqual(tpl_id, parsed.template_id);
                var post_request = {
                    url: '/api/v1/map/named/' + tpl_id + '?auth_token=valid2',
                    method: 'POST',
                    headers: { host: 'localhost', 'Content-Type': 'application/json' },
                    data: JSON.stringify(template_params)
                };
                var next = this;
                assert.response(server, post_request, {},
                    function (res, err) { next(err, res); });
            },
            function checkInstance2 (err, res) {
                assert.ifError(err);
                assert.strictEqual(res.statusCode, 200,
                    'Instantiating template: ' + res.statusCode + ': ' + res.body);
                var parsed = JSON.parse(res.body);
                assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'layergroupid'),
                    "Missing 'layergroupid' from response body: " + res.body);
                assert.ok(layergroupid !== parsed.layergroupid);
                helper.checkSurrogateKey(res, new NamedMapsCacheEntry('localhost', template_acceptance2.name).key());

                keysToDelete['map_tpl|localhost'] = 0;
                keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;
                keysToDelete['user:localhost:mapviews:global'] = 5;

                done();
            }
        );
    });

    it('can use an http layer', function (done) {
        var username = 'localhost';

        var httpTemplateName = 'acceptance_http';
        var httpTemplate = {
            version: '0.0.1',
            name: httpTemplateName,
            layergroup: {
                version: '1.3.0',
                layers: [
                    {
                        type: 'http',
                        options: {
                            urlTemplate: 'http://127.0.0.1:8033/{s}/{z}/{x}/{y}.png',
                            subdomains: [
                                'a',
                                'b',
                                'c'
                            ]
                        }
                    },
                    {
                        type: 'cartodb',
                        options: {
                            sql: 'select * from test_table_private_1',
                            cartocss: '#layer { marker-fill:blue; }',
                            cartocss_version: '2.0.2',
                            interactivity: 'cartodb_id'
                        }
                    }
                ]
            }
        };

        var template_params = {};

        var expectedTemplateId = httpTemplateName;
        var layergroupid;
        step(
            function createTemplate () {
                var next = this;
                assert.response(
                    server,
                    {
                        url: '/api/v1/map/named?api_key=1234',
                        method: 'POST',
                        headers: {
                            host: username,
                            'Content-Type': 'application/json'
                        },
                        data: JSON.stringify(httpTemplate)
                    },
                    {
                        status: 200
                    },
                    function (res, err) {
                        next(err, res);
                    }
                );
            },
            function instantiateTemplate (err, res) {
                if (err) {
                    throw err;
                }
                assert.deepStrictEqual(JSON.parse(res.body), { template_id: expectedTemplateId });
                var next = this;
                assert.response(
                    server,
                    {
                        url: '/api/v1/map/named/' + expectedTemplateId,
                        method: 'POST',
                        headers: {
                            host: username,
                            'Content-Type': 'application/json'
                        },
                        data: JSON.stringify(template_params)
                    },
                    {
                        status: 200
                    },
                    function (res) {
                        next(null, res);
                    }
                );
            },
            function fetchTile (err, res) {
                if (err) {
                    throw err;
                }

                var parsed = JSON.parse(res.body);
                assert.ok(
                    Object.prototype.hasOwnProperty.call(parsed, 'layergroupid'), "Missing 'layergroupid' from response body: " + res.body);
                layergroupid = parsed.layergroupid;

                keysToDelete['map_cfg|' + LayergroupToken.parse(parsed.layergroupid).token] = 0;
                keysToDelete['user:localhost:mapviews:global'] = 5;

                var next = this;
                assert.response(
                    server,
                    {
                        url: '/api/v1/map/' + layergroupid + '/all/0/0/0.png',
                        method: 'GET',
                        headers: {
                            host: username
                        },
                        encoding: 'binary'
                    },
                    {
                        status: 200
                    },
                    function (res) {
                        next(null, res);
                    }
                );
            },
            function checkTile (err, res) {
                if (err) {
                    throw err;
                }
                assert.strictEqual(res.headers['content-type'], 'image/png');
                return null;
            },
            function deleteTemplate (err) {
                if (err) {
                    throw err;
                }
                var next = this;
                assert.response(
                    server,
                    {
                        url: '/api/v1/map/named/' + expectedTemplateId + '?api_key=1234',
                        method: 'DELETE',
                        headers: {
                            host: username
                        }
                    },
                    {
                        status: 204
                    },
                    function (res, err) {
                        next(err, res);
                    }
                );
            },
            function finish (err) {
                done(err);
            }
        );
    });

    describe('named map nonexistent tokens', function () {
        var username = 'localhost';
        var templateHash = 'deadbeef';
        var nonexistentToken = 'wadus';

        function request (token) {
            return {
                url: '/api/v1/map/' + token + '/all/0/0/0.png',
                method: 'GET',
                headers: {
                    host: username
                },
                encoding: 'binary'
            };
        }

        var expectedResponse = {
            headers: {
                'Content-Type': 'application/json; charset=utf-8'
            },
            status: 400
        };

        function checkTileFn (done) {
            return function checkTile (res, err) {
                if (err) {
                    return done(err);
                }
                assert.deepStrictEqual(JSON.parse(res.body).errors,
                    ["Invalid or nonexistent map configuration token '" + nonexistentToken + "'"]);

                done();
            };
        }

        it('returns an error for named map nonexistent tokens', function (done) {
            var nonexistentNamedMapToken = username + '@' + templateHash + '@' + nonexistentToken;

            assert.response(
                server,
                request(nonexistentNamedMapToken),
                expectedResponse,
                checkTileFn(done)
            );
        });

        it('returns an error for named map nonexistent tokens without template hash', function (done) {
            var nonexistentNamedMapToken = username + '@' + nonexistentToken;

            assert.response(
                server,
                request(nonexistentNamedMapToken),
                expectedResponse,
                checkTileFn(done)
            );
        });
    });

    var torqueParamsScenarios = [
        {
            templateParams: {},
            expectedTile: [{ x__uint8: 125, y__uint8: 159, vals__uint8: [2], dates__uint16: [0] }]
        },
        {
            templateParams: { namesFilter: "'Hawai'" },
            expectedTile: [{ x__uint8: 125, y__uint8: 159, vals__uint8: [1], dates__uint16: [0] }]
        }
    ];
    torqueParamsScenarios.forEach(function (scenario) {
        it('can instantiate with torque layer and params=' + JSON.stringify(scenario.templateParams), function (done) {
            var torqueParamsTemplate = {
                version: '0.0.1',
                name: 'acceptance_torque_params',
                auth: {
                    method: 'open'
                },
                placeholders: {
                    namesFilter: {
                        type: 'sql_ident',
                        default: "'Hawai', 'El Estocolmo'"
                    }
                },
                layergroup: {
                    version: '1.4.0',
                    layers: [
                        {
                            type: 'torque',
                            options: {
                                sql: 'select * from test_table_private_1 where name in (<%= namesFilter %>)',
                                cartocss: 'Map { -torque-frame-count:1; -torque-resolution:1; ' +
                                "-torque-aggregation-function:'count(*)'; -torque-time-attribute:'cartodb_id'; }",
                                cartocss_version: '2.0.2'
                            }
                        }
                    ]
                }
            };

            var layergroupIdToDelete;
            step(
                function createTemplate () {
                    var next = this;
                    var createTemplateRequest = {
                        url: '/api/v1/map/named?api_key=1234',
                        method: 'POST',
                        headers: {
                            host: 'localhost',
                            'Content-Type': 'application/json'
                        },
                        data: JSON.stringify(torqueParamsTemplate)
                    };
                    assert.response(
                        server,
                        createTemplateRequest,
                        {
                            status: 200
                        },
                        function (res, err) {
                            next(err, res);
                        }
                    );
                },
                function instantiateTemplate (err, res) {
                    assert.ifError(err);
                    var parsed = JSON.parse(res.body);
                    assert.ok(Object.prototype.hasOwnProperty.call(parsed, 'template_id'), "Missing 'template_id' from response: " + res.body);
                    var templateId = parsed.template_id;
                    var instantiatePostRequest = {
                        url: '/api/v1/map/named/' + templateId,
                        method: 'POST',
                        headers: {
                            host: 'localhost',
                            'Content-Type': 'application/json'
                        },
                        data: JSON.stringify(scenario.templateParams)
                    };
                    var next = this;
                    assert.response(
                        server,
                        instantiatePostRequest,
                        {
                            status: 200
                        },
                        function (res, err) {
                            return next(err, res);
                        }
                    );
                },
                function requestTile (err, res) {
                    assert.ifError(err);

                    var layergroupId = JSON.parse(res.body).layergroupid;
                    layergroupIdToDelete = LayergroupToken.parse(layergroupId).token;

                    var torqueTileRequest = {
                        url: '/api/v1/map/' + layergroupId + '/0/0/0/0.torque.json',
                        method: 'GET',
                        headers: {
                            host: 'localhost'
                        }
                    };
                    var next = this;
                    assert.response(
                        server,
                        torqueTileRequest,
                        {
                            status: 200
                        },
                        function (res, err) {
                            return next(err, res);
                        }
                    );
                },
                function validateTileAndFinish (err, res) {
                    if (err) {
                        return done(err);
                    }

                    keysToDelete['map_cfg|' + layergroupIdToDelete] = 0;
                    keysToDelete['map_tpl|localhost'] = 0;
                    keysToDelete['user:localhost:mapviews:global'] = 5;

                    assert.deepStrictEqual(
                        JSON.parse(res.body),
                        scenario.expectedTile
                    );

                    done();
                }
            );
        });
    });
});