From e822b6f31a24ca0a899115164119a26f78694edb Mon Sep 17 00:00:00 2001
From: Lakhan Samani <lakhan.m.samani@gmail.com>
Date: Wed, 29 Mar 2023 07:06:33 +0530
Subject: [PATCH] fix: queries for webhooks + improve tests

---
 dashboard/src/constants.ts                    |  1 +
 dashboard/src/graphql/queries/index.ts        |  2 ++
 dashboard/src/pages/Webhooks.tsx              |  9 +++--
 server/db/models/webhook.go                   |  8 +----
 server/db/providers/arangodb/webhook.go       |  3 --
 server/db/providers/cassandradb/provider.go   |  7 ++++
 server/db/providers/cassandradb/webhook.go    |  5 +--
 server/db/providers/couchbase/webhook.go      | 18 +++++-----
 server/db/providers/dynamodb/webhook.go       |  3 --
 server/db/providers/mongodb/webhook.go        |  9 ++---
 .../db/providers/provider_template/webhook.go |  3 --
 server/db/providers/sql/webhook.go            |  3 --
 server/graph/generated/generated.go           |  2 +-
 server/graph/schema.graphqls                  |  2 +-
 server/resolvers/add_webhook.go               |  7 ++--
 server/resolvers/update_webhook.go            | 27 ++++++---------
 server/test/add_webhook_test.go               | 19 ++++++++++-
 server/test/admin_signup_test.go              |  2 +-
 server/test/delete_webhook_test.go            |  4 +--
 server/test/enable_access_test.go             |  2 ++
 server/test/forgot_password_test.go           |  9 ++---
 server/test/invite_member_test.go             |  5 ++-
 server/test/login_test.go                     |  7 ++--
 server/test/logout_test.go                    | 12 ++++---
 server/test/magic_link_login_test.go          |  2 ++
 server/test/mobile_signup_test.go             | 20 ++++++-----
 server/test/profile_test.go                   |  2 ++
 server/test/resend_otp_test.go                |  7 ++--
 server/test/resend_verify_email_test.go       |  5 ++-
 server/test/reset_password_test.go            |  4 +--
 server/test/revoke_access_test.go             |  4 ++-
 server/test/session_test.go                   |  5 ++-
 server/test/signup_test.go                    | 10 +++---
 server/test/test.go                           | 20 ++++++++++-
 server/test/update_all_users_tests.go         |  6 ++--
 server/test/update_profile_test.go            |  4 ++-
 server/test/update_webhook_test.go            | 34 ++++++++++++++++---
 server/test/users_test.go                     |  2 +-
 server/test/validate_jwt_token_test.go        |  4 ++-
 server/test/verification_requests_test.go     |  4 +--
 server/test/verify_email_test.go              |  3 +-
 server/test/webhook_logs_test.go              |  9 +++--
 server/test/webhook_test.go                   |  4 +--
 server/test/webhooks_test.go                  | 10 ++++--
 server/utils/webhook.go                       | 23 +++++++------
 45 files changed, 213 insertions(+), 138 deletions(-)

diff --git a/dashboard/src/constants.ts b/dashboard/src/constants.ts
index 6028ca2..d9c8f3e 100644
--- a/dashboard/src/constants.ts
+++ b/dashboard/src/constants.ts
@@ -179,6 +179,7 @@ export const envSubViews = {
 
 export enum WebhookInputDataFields {
 	ID = 'id',
+	EVENT_DESCRIPTION = 'event_description',
 	EVENT_NAME = 'event_name',
 	ENDPOINT = 'endpoint',
 	ENABLED = 'enabled',
diff --git a/dashboard/src/graphql/queries/index.ts b/dashboard/src/graphql/queries/index.ts
index 3003333..8c01d6e 100644
--- a/dashboard/src/graphql/queries/index.ts
+++ b/dashboard/src/graphql/queries/index.ts
@@ -118,6 +118,8 @@ export const WebhooksDataQuery = `
     _webhooks(params: $params){
       webhooks{
         id
+        event
+        event_description
         event_name
         endpoint
         enabled
diff --git a/dashboard/src/pages/Webhooks.tsx b/dashboard/src/pages/Webhooks.tsx
index 07a5235..215151b 100644
--- a/dashboard/src/pages/Webhooks.tsx
+++ b/dashboard/src/pages/Webhooks.tsx
@@ -56,6 +56,7 @@ interface paginationPropTypes {
 interface webhookDataTypes {
 	[WebhookInputDataFields.ID]: string;
 	[WebhookInputDataFields.EVENT_NAME]: string;
+	[WebhookInputDataFields.EVENT_DESCRIPTION]: string;
 	[WebhookInputDataFields.ENDPOINT]: string;
 	[WebhookInputDataFields.ENABLED]: boolean;
 	[WebhookInputDataFields.HEADERS]?: Record<string, string>;
@@ -134,6 +135,7 @@ const Webhooks = () => {
 						<Thead>
 							<Tr>
 								<Th>Event Name</Th>
+								<Th>Event Description</Th>
 								<Th>Endpoint</Th>
 								<Th>Enabled</Th>
 								<Th>Headers</Th>
@@ -147,7 +149,10 @@ const Webhooks = () => {
 									style={{ fontSize: 14 }}
 								>
 									<Td maxW="300">
-										{webhook[WebhookInputDataFields.EVENT_NAME]}
+										{webhook[WebhookInputDataFields.EVENT_NAME].split('-')[0]}
+									</Td>
+									<Td maxW="300">
+										{webhook[WebhookInputDataFields.EVENT_DESCRIPTION]}
 									</Td>
 									<Td>{webhook[WebhookInputDataFields.ENDPOINT]}</Td>
 									<Td>
@@ -264,7 +269,7 @@ const Webhooks = () => {
 											</Text>
 										</Text>
 										<Flex alignItems="center">
-											<Text flexShrink="0">Go to page:</Text>{' '}
+											<Text>Go to page:</Text>{' '}
 											<NumberInput
 												ml={2}
 												mr={8}
diff --git a/server/db/models/webhook.go b/server/db/models/webhook.go
index 8cf6d11..f86ee80 100644
--- a/server/db/models/webhook.go
+++ b/server/db/models/webhook.go
@@ -34,18 +34,12 @@ func (w *Webhook) AsAPIWebhook() *model.Webhook {
 	if strings.Contains(id, Collections.Webhook+"/") {
 		id = strings.TrimPrefix(id, Collections.Webhook+"/")
 	}
-	// If event name contains timestamp trim that part
-	if strings.Contains(w.EventName, "-") {
-		splitData := strings.Split(w.EventName, "-")
-		w.EventName = splitData[0]
-	}
 	// set default title to event name without dot(.)
 	if w.EventDescription == "" {
 		w.EventDescription = strings.Join(strings.Split(w.EventName, "."), " ")
 	}
 	return &model.Webhook{
-		ID: id,
-		// Title:     refs.NewStringRef(w.EventDescription),
+		ID:        id,
 		EventName: refs.NewStringRef(w.EventName),
 		Endpoint:  refs.NewStringRef(w.EndPoint),
 		Headers:   headersMap,
diff --git a/server/db/providers/arangodb/webhook.go b/server/db/providers/arangodb/webhook.go
index 7a86046..73cefad 100644
--- a/server/db/providers/arangodb/webhook.go
+++ b/server/db/providers/arangodb/webhook.go
@@ -20,9 +20,6 @@ func (p *provider) AddWebhook(ctx context.Context, webhook models.Webhook) (*mod
 		webhook.Key = webhook.ID
 	}
 	webhook.Key = webhook.ID
-	if webhook.EventDescription == "" {
-		webhook.EventDescription = strings.Join(strings.Split(webhook.EventName, "."), " ")
-	}
 	// Add timestamp to make event name unique for legacy version
 	webhook.EventName = fmt.Sprintf("%s-%d", webhook.EventName, time.Now().Unix())
 	webhook.CreatedAt = time.Now().Unix()
diff --git a/server/db/providers/cassandradb/provider.go b/server/db/providers/cassandradb/provider.go
index 6849089..1d8fa49 100644
--- a/server/db/providers/cassandradb/provider.go
+++ b/server/db/providers/cassandradb/provider.go
@@ -207,6 +207,13 @@ func NewProvider() (*provider, error) {
 	if err != nil {
 		return nil, err
 	}
+	// add event_description to webhook table
+	webhookAlterQuery := fmt.Sprintf(`ALTER TABLE %s.%s ADD (event_description text);`, KeySpace, models.Collections.Webhook)
+	err = session.Query(webhookAlterQuery).Exec()
+	if err != nil {
+		log.Debug("Failed to alter table as column exists: ", err)
+		// continue
+	}
 
 	webhookLogCollectionQuery := fmt.Sprintf("CREATE TABLE IF NOT EXISTS %s.%s (id text, http_status bigint, response text, request text, webhook_id text,updated_at bigint, created_at bigint, PRIMARY KEY (id))", KeySpace, models.Collections.WebhookLog)
 	err = session.Query(webhookLogCollectionQuery).Exec()
diff --git a/server/db/providers/cassandradb/webhook.go b/server/db/providers/cassandradb/webhook.go
index 1cff8c5..cb50f08 100644
--- a/server/db/providers/cassandradb/webhook.go
+++ b/server/db/providers/cassandradb/webhook.go
@@ -22,9 +22,6 @@ func (p *provider) AddWebhook(ctx context.Context, webhook models.Webhook) (*mod
 	webhook.Key = webhook.ID
 	webhook.CreatedAt = time.Now().Unix()
 	webhook.UpdatedAt = time.Now().Unix()
-	if webhook.EventDescription == "" {
-		webhook.EventDescription = strings.Join(strings.Split(webhook.EventName, "."), " ")
-	}
 	// Add timestamp to make event name unique for legacy version
 	webhook.EventName = fmt.Sprintf("%s-%d", webhook.EventName, time.Now().Unix())
 	insertQuery := fmt.Sprintf("INSERT INTO %s (id, event_description, event_name, endpoint, headers, enabled,  created_at, updated_at) VALUES ('%s', '%s', '%s', '%s', '%s', %t, %d, %d)", KeySpace+"."+models.Collections.Webhook, webhook.ID, webhook.EventDescription, webhook.EventName, webhook.EndPoint, webhook.Headers, webhook.Enabled, webhook.CreatedAt, webhook.UpdatedAt)
@@ -129,7 +126,7 @@ func (p *provider) GetWebhookByID(ctx context.Context, webhookID string) (*model
 
 // GetWebhookByEventName to get webhook by event_name
 func (p *provider) GetWebhookByEventName(ctx context.Context, eventName string) ([]*model.Webhook, error) {
-	query := fmt.Sprintf(`SELECT id, event_description, event_name, endpoint, headers, enabled, created_at, updated_at FROM %s WHERE event_name LIKE '%s' ALLOW FILTERING`, KeySpace+"."+models.Collections.Webhook, eventName+"%s")
+	query := fmt.Sprintf(`SELECT id, event_description, event_name, endpoint, headers, enabled, created_at, updated_at FROM %s WHERE event_name LIKE '%s' ALLOW FILTERING`, KeySpace+"."+models.Collections.Webhook, eventName+"%")
 	scanner := p.db.Query(query).Iter().Scanner()
 	webhooks := []*model.Webhook{}
 	for scanner.Next() {
diff --git a/server/db/providers/couchbase/webhook.go b/server/db/providers/couchbase/webhook.go
index 62d1bc3..2f51acd 100644
--- a/server/db/providers/couchbase/webhook.go
+++ b/server/db/providers/couchbase/webhook.go
@@ -22,9 +22,6 @@ func (p *provider) AddWebhook(ctx context.Context, webhook models.Webhook) (*mod
 	webhook.Key = webhook.ID
 	webhook.CreatedAt = time.Now().Unix()
 	webhook.UpdatedAt = time.Now().Unix()
-	if webhook.EventDescription == "" {
-		webhook.EventDescription = strings.Join(strings.Split(webhook.EventName, "."), " ")
-	}
 	// Add timestamp to make event name unique for legacy version
 	webhook.EventName = fmt.Sprintf("%s-%d", webhook.EventName, time.Now().Unix())
 	insertOpt := gocb.InsertOptions{
@@ -90,8 +87,6 @@ func (p *provider) ListWebhook(ctx context.Context, pagination model.Pagination)
 	})
 	if err != nil {
 		return nil, err
-	} else if err := queryResult.Err(); err != nil {
-		return nil, err
 	}
 	for queryResult.Next() {
 		var webhook models.Webhook
@@ -101,6 +96,9 @@ func (p *provider) ListWebhook(ctx context.Context, pagination model.Pagination)
 		}
 		webhooks = append(webhooks, webhook.AsAPIWebhook())
 	}
+	if err := queryResult.Err(); err != nil {
+		return nil, err
+	}
 	return &model.Webhooks{
 		Pagination: &paginationClone,
 		Webhooks:   webhooks,
@@ -131,8 +129,8 @@ func (p *provider) GetWebhookByID(ctx context.Context, webhookID string) (*model
 // GetWebhookByEventName to get webhook by event_name
 func (p *provider) GetWebhookByEventName(ctx context.Context, eventName string) ([]*model.Webhook, error) {
 	params := make(map[string]interface{}, 1)
-	params["event_name"] = eventName + "%"
-	query := fmt.Sprintf(`SELECT _id, event_description, event_name, endpoint, headers, enabled, created_at, updated_at FROM %s.%s WHERE event_name LIKE $event_name`, p.scopeName, models.Collections.Webhook)
+	// params["event_name"] = eventName + "%"
+	query := fmt.Sprintf(`SELECT _id, event_description, event_name, endpoint, headers, enabled, created_at, updated_at FROM %s.%s WHERE event_name LIKE '%s'`, p.scopeName, models.Collections.Webhook, eventName+"%")
 	queryResult, err := p.db.Query(query, &gocb.QueryOptions{
 		Context:         ctx,
 		ScanConsistency: gocb.QueryScanConsistencyRequestPlus,
@@ -140,8 +138,6 @@ func (p *provider) GetWebhookByEventName(ctx context.Context, eventName string)
 	})
 	if err != nil {
 		return nil, err
-	} else if err := queryResult.Err(); err != nil {
-		return nil, err
 	}
 	webhooks := []*model.Webhook{}
 	for queryResult.Next() {
@@ -152,12 +148,14 @@ func (p *provider) GetWebhookByEventName(ctx context.Context, eventName string)
 		}
 		webhooks = append(webhooks, webhook.AsAPIWebhook())
 	}
+	if err := queryResult.Err(); err != nil {
+		return nil, err
+	}
 	return webhooks, nil
 }
 
 // DeleteWebhook to delete webhook
 func (p *provider) DeleteWebhook(ctx context.Context, webhook *model.Webhook) error {
-
 	params := make(map[string]interface{}, 1)
 	params["webhook_id"] = webhook.ID
 	removeOpt := gocb.RemoveOptions{
diff --git a/server/db/providers/dynamodb/webhook.go b/server/db/providers/dynamodb/webhook.go
index c3e9a94..8f1ffb7 100644
--- a/server/db/providers/dynamodb/webhook.go
+++ b/server/db/providers/dynamodb/webhook.go
@@ -23,9 +23,6 @@ func (p *provider) AddWebhook(ctx context.Context, webhook models.Webhook) (*mod
 	webhook.Key = webhook.ID
 	webhook.CreatedAt = time.Now().Unix()
 	webhook.UpdatedAt = time.Now().Unix()
-	if webhook.EventDescription == "" {
-		webhook.EventDescription = strings.Join(strings.Split(webhook.EventName, "."), " ")
-	}
 	// Add timestamp to make event name unique for legacy version
 	webhook.EventName = fmt.Sprintf("%s-%d", webhook.EventName, time.Now().Unix())
 	err := collection.Put(webhook).RunWithContext(ctx)
diff --git a/server/db/providers/mongodb/webhook.go b/server/db/providers/mongodb/webhook.go
index d1b312a..843aec9 100644
--- a/server/db/providers/mongodb/webhook.go
+++ b/server/db/providers/mongodb/webhook.go
@@ -21,9 +21,6 @@ func (p *provider) AddWebhook(ctx context.Context, webhook models.Webhook) (*mod
 	webhook.Key = webhook.ID
 	webhook.CreatedAt = time.Now().Unix()
 	webhook.UpdatedAt = time.Now().Unix()
-	if webhook.EventDescription == "" {
-		webhook.EventDescription = strings.Join(strings.Split(webhook.EventName, "."), " ")
-	}
 	// Add timestamp to make event name unique for legacy version
 	webhook.EventName = fmt.Sprintf("%s-%d", webhook.EventName, time.Now().Unix())
 	webhookCollection := p.db.Collection(models.Collections.Webhook, options.Collection())
@@ -99,9 +96,9 @@ func (p *provider) GetWebhookByEventName(ctx context.Context, eventName string)
 	webhookCollection := p.db.Collection(models.Collections.Webhook, options.Collection())
 	opts := options.Find()
 	opts.SetSort(bson.M{"created_at": -1})
-	cursor, err := webhookCollection.Find(ctx, bson.M{
-		"event_name": fmt.Sprintf("'^%s'", eventName),
-	}, opts)
+	cursor, err := webhookCollection.Find(ctx, bson.M{"event_name": bson.M{
+		"$regex": fmt.Sprintf("^%s", eventName),
+	}}, opts)
 	if err != nil {
 		return nil, err
 	}
diff --git a/server/db/providers/provider_template/webhook.go b/server/db/providers/provider_template/webhook.go
index c3f4858..faf18fa 100644
--- a/server/db/providers/provider_template/webhook.go
+++ b/server/db/providers/provider_template/webhook.go
@@ -19,9 +19,6 @@ func (p *provider) AddWebhook(ctx context.Context, webhook models.Webhook) (*mod
 	webhook.Key = webhook.ID
 	webhook.CreatedAt = time.Now().Unix()
 	webhook.UpdatedAt = time.Now().Unix()
-	if webhook.EventDescription == "" {
-		webhook.EventDescription = strings.Join(strings.Split(webhook.EventName, "."), " ")
-	}
 	// Add timestamp to make event name unique for legacy version
 	webhook.EventName = fmt.Sprintf("%s-%d", webhook.EventName, time.Now().Unix())
 	return webhook.AsAPIWebhook(), nil
diff --git a/server/db/providers/sql/webhook.go b/server/db/providers/sql/webhook.go
index 51a50d7..72f3cb4 100644
--- a/server/db/providers/sql/webhook.go
+++ b/server/db/providers/sql/webhook.go
@@ -19,9 +19,6 @@ func (p *provider) AddWebhook(ctx context.Context, webhook models.Webhook) (*mod
 	webhook.Key = webhook.ID
 	webhook.CreatedAt = time.Now().Unix()
 	webhook.UpdatedAt = time.Now().Unix()
-	if webhook.EventDescription == "" {
-		webhook.EventDescription = strings.Join(strings.Split(webhook.EventName, "."), " ")
-	}
 	// Add timestamp to make event name unique for legacy version
 	webhook.EventName = fmt.Sprintf("%s-%d", webhook.EventName, time.Now().Unix())
 	res := p.db.Create(&webhook)
diff --git a/server/graph/generated/generated.go b/server/graph/generated/generated.go
index 34d77bb..a620c77 100644
--- a/server/graph/generated/generated.go
+++ b/server/graph/generated/generated.go
@@ -2218,7 +2218,7 @@ type GenerateJWTKeysResponse {
 
 type Webhook {
   id: ID!
-  event_name: String
+  event_name: String # this is unique string
   event_description: String
   endpoint: String
   enabled: Boolean
diff --git a/server/graph/schema.graphqls b/server/graph/schema.graphqls
index 798f8df..aa95de1 100644
--- a/server/graph/schema.graphqls
+++ b/server/graph/schema.graphqls
@@ -168,7 +168,7 @@ type GenerateJWTKeysResponse {
 
 type Webhook {
   id: ID!
-  event_name: String
+  event_name: String # this is unique string
   event_description: String
   endpoint: String
   enabled: Boolean
diff --git a/server/resolvers/add_webhook.go b/server/resolvers/add_webhook.go
index eb076b3..596b1e0 100644
--- a/server/resolvers/add_webhook.go
+++ b/server/resolvers/add_webhook.go
@@ -23,27 +23,26 @@ func AddWebhookResolver(ctx context.Context, params model.AddWebhookRequest) (*m
 		log.Debug("Failed to get GinContext: ", err)
 		return nil, err
 	}
-
 	if !token.IsSuperAdmin(gc) {
 		log.Debug("Not logged in as super admin")
 		return nil, fmt.Errorf("unauthorized")
 	}
-
 	if !validators.IsValidWebhookEventName(params.EventName) {
 		log.Debug("Invalid Event Name: ", params.EventName)
 		return nil, fmt.Errorf("invalid event name %s", params.EventName)
 	}
-
 	if strings.TrimSpace(params.Endpoint) == "" {
 		log.Debug("empty endpoint not allowed")
 		return nil, fmt.Errorf("empty endpoint not allowed")
 	}
-
 	headerBytes, err := json.Marshal(params.Headers)
 	if err != nil {
 		return nil, err
 	}
 
+	if params.EventDescription == nil {
+		params.EventDescription = refs.NewStringRef(strings.Join(strings.Split(params.EventName, "."), " "))
+	}
 	_, err = db.Provider.AddWebhook(ctx, models.Webhook{
 		EventDescription: refs.StringValue(params.EventDescription),
 		EventName:        params.EventName,
diff --git a/server/resolvers/update_webhook.go b/server/resolvers/update_webhook.go
index f1d1009..5783984 100644
--- a/server/resolvers/update_webhook.go
+++ b/server/resolvers/update_webhook.go
@@ -28,13 +28,11 @@ func UpdateWebhookResolver(ctx context.Context, params model.UpdateWebhookReques
 		log.Debug("Not logged in as super admin")
 		return nil, fmt.Errorf("unauthorized")
 	}
-
 	webhook, err := db.Provider.GetWebhookByID(ctx, params.ID)
 	if err != nil {
 		log.Debug("failed to get webhook: ", err)
 		return nil, err
 	}
-
 	headersString := ""
 	if webhook.Headers != nil {
 		headerBytes, err := json.Marshal(webhook.Headers)
@@ -43,17 +41,16 @@ func UpdateWebhookResolver(ctx context.Context, params model.UpdateWebhookReques
 		}
 		headersString = string(headerBytes)
 	}
-
 	webhookDetails := models.Webhook{
-		ID:        webhook.ID,
-		Key:       webhook.ID,
-		EventName: refs.StringValue(webhook.EventName),
-		EndPoint:  refs.StringValue(webhook.Endpoint),
-		Enabled:   refs.BoolValue(webhook.Enabled),
-		Headers:   headersString,
-		CreatedAt: refs.Int64Value(webhook.CreatedAt),
+		ID:               webhook.ID,
+		Key:              webhook.ID,
+		EventName:        refs.StringValue(webhook.EventName),
+		EventDescription: refs.StringValue(webhook.EventDescription),
+		EndPoint:         refs.StringValue(webhook.Endpoint),
+		Enabled:          refs.BoolValue(webhook.Enabled),
+		Headers:          headersString,
+		CreatedAt:        refs.Int64Value(webhook.CreatedAt),
 	}
-
 	if params.EventName != nil && webhookDetails.EventName != refs.StringValue(params.EventName) {
 		if isValid := validators.IsValidWebhookEventName(refs.StringValue(params.EventName)); !isValid {
 			log.Debug("invalid event name: ", refs.StringValue(params.EventName))
@@ -61,7 +58,6 @@ func UpdateWebhookResolver(ctx context.Context, params model.UpdateWebhookReques
 		}
 		webhookDetails.EventName = refs.StringValue(params.EventName)
 	}
-
 	if params.Endpoint != nil && webhookDetails.EndPoint != refs.StringValue(params.Endpoint) {
 		if strings.TrimSpace(refs.StringValue(params.Endpoint)) == "" {
 			log.Debug("empty endpoint not allowed")
@@ -69,11 +65,12 @@ func UpdateWebhookResolver(ctx context.Context, params model.UpdateWebhookReques
 		}
 		webhookDetails.EndPoint = refs.StringValue(params.Endpoint)
 	}
-
 	if params.Enabled != nil && webhookDetails.Enabled != refs.BoolValue(params.Enabled) {
 		webhookDetails.Enabled = refs.BoolValue(params.Enabled)
 	}
-
+	if params.EventDescription != nil && webhookDetails.EventDescription != refs.StringValue(params.EventDescription) {
+		webhookDetails.EventDescription = refs.StringValue(params.EventDescription)
+	}
 	if params.Headers != nil {
 		headerBytes, err := json.Marshal(params.Headers)
 		if err != nil {
@@ -83,12 +80,10 @@ func UpdateWebhookResolver(ctx context.Context, params model.UpdateWebhookReques
 
 		webhookDetails.Headers = string(headerBytes)
 	}
-
 	_, err = db.Provider.UpdateWebhook(ctx, webhookDetails)
 	if err != nil {
 		return nil, err
 	}
-
 	return &model.Response{
 		Message: `Webhook updated successfully.`,
 	}, nil
diff --git a/server/test/add_webhook_test.go b/server/test/add_webhook_test.go
index 3068740..500049f 100644
--- a/server/test/add_webhook_test.go
+++ b/server/test/add_webhook_test.go
@@ -3,11 +3,13 @@ package test
 import (
 	"fmt"
 	"testing"
+	"time"
 
 	"github.com/authorizerdev/authorizer/server/constants"
 	"github.com/authorizerdev/authorizer/server/crypto"
 	"github.com/authorizerdev/authorizer/server/graph/model"
 	"github.com/authorizerdev/authorizer/server/memorystore"
+	"github.com/authorizerdev/authorizer/server/refs"
 	"github.com/authorizerdev/authorizer/server/resolvers"
 	"github.com/stretchr/testify/assert"
 )
@@ -21,7 +23,6 @@ func addWebhookTest(t *testing.T, s TestSetup) {
 		h, err := crypto.EncryptPassword(adminSecret)
 		assert.NoError(t, err)
 		req.Header.Set("Cookie", fmt.Sprintf("%s=%s", constants.AdminCookieName, h))
-
 		for _, eventType := range s.TestInfo.TestWebhookEventTypes {
 			webhook, err := resolvers.AddWebhookResolver(ctx, model.AddWebhookRequest{
 				EventName: eventType,
@@ -35,5 +36,21 @@ func addWebhookTest(t *testing.T, s TestSetup) {
 			assert.NotNil(t, webhook)
 			assert.NotEmpty(t, webhook.Message)
 		}
+		time.Sleep(2 * time.Second)
+		// Allow setting multiple webhooks for same event
+		for _, eventType := range s.TestInfo.TestWebhookEventTypes {
+			webhook, err := resolvers.AddWebhookResolver(ctx, model.AddWebhookRequest{
+				EventName:        eventType,
+				Endpoint:         s.TestInfo.WebhookEndpoint,
+				Enabled:          true,
+				EventDescription: refs.NewStringRef(eventType + "-2"),
+				Headers: map[string]interface{}{
+					"x-test": "foo",
+				},
+			})
+			assert.NoError(t, err)
+			assert.NotNil(t, webhook)
+			assert.NotEmpty(t, webhook.Message)
+		}
 	})
 }
diff --git a/server/test/admin_signup_test.go b/server/test/admin_signup_test.go
index fc0b13a..9596f4d 100644
--- a/server/test/admin_signup_test.go
+++ b/server/test/admin_signup_test.go
@@ -25,6 +25,6 @@ func adminSignupTests(t *testing.T, s TestSetup) {
 		_, err = resolvers.AdminSignupResolver(ctx, model.AdminSignupInput{
 			AdminSecret: "admin123",
 		})
-		assert.Nil(t, err)
+		assert.NoError(t, err)
 	})
 }
diff --git a/server/test/delete_webhook_test.go b/server/test/delete_webhook_test.go
index 55df1ae..ab9b9f2 100644
--- a/server/test/delete_webhook_test.go
+++ b/server/test/delete_webhook_test.go
@@ -25,7 +25,7 @@ func deleteWebhookTest(t *testing.T, s TestSetup) {
 
 		// get all webhooks
 		webhooks, err := db.Provider.ListWebhook(ctx, model.Pagination{
-			Limit:  10,
+			Limit:  20,
 			Page:   1,
 			Offset: 0,
 		})
@@ -42,7 +42,7 @@ func deleteWebhookTest(t *testing.T, s TestSetup) {
 		}
 
 		webhooks, err = db.Provider.ListWebhook(ctx, model.Pagination{
-			Limit:  10,
+			Limit:  20,
 			Page:   1,
 			Offset: 0,
 		})
diff --git a/server/test/enable_access_test.go b/server/test/enable_access_test.go
index be49efc..9549968 100644
--- a/server/test/enable_access_test.go
+++ b/server/test/enable_access_test.go
@@ -23,6 +23,8 @@ func enableAccessTest(t *testing.T, s TestSetup) {
 		})
 		assert.NoError(t, err)
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeMagicLinkLogin)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		verifyRes, err := resolvers.VerifyEmailResolver(ctx, model.VerifyEmailInput{
 			Token: verificationRequest.Token,
 		})
diff --git a/server/test/forgot_password_test.go b/server/test/forgot_password_test.go
index cd09a0a..fd8a3bd 100644
--- a/server/test/forgot_password_test.go
+++ b/server/test/forgot_password_test.go
@@ -15,17 +15,18 @@ func forgotPasswordTest(t *testing.T, s TestSetup) {
 	t.Run(`should run forgot password`, func(t *testing.T) {
 		_, ctx := createContext(s)
 		email := "forgot_password." + s.TestInfo.Email
-		_, err := resolvers.SignupResolver(ctx, model.SignUpInput{
+		res, err := resolvers.SignupResolver(ctx, model.SignUpInput{
 			Email:           email,
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-
-		_, err = resolvers.ForgotPasswordResolver(ctx, model.ForgotPasswordInput{
+		assert.NoError(t, err)
+		assert.NotNil(t, res)
+		forgotPasswordRes, err := resolvers.ForgotPasswordResolver(ctx, model.ForgotPasswordInput{
 			Email: email,
 		})
 		assert.Nil(t, err, "no errors for forgot password")
-
+		assert.NotNil(t, forgotPasswordRes)
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeForgotPassword)
 		assert.Nil(t, err)
 
diff --git a/server/test/invite_member_test.go b/server/test/invite_member_test.go
index 42bc017..d26b5ed 100644
--- a/server/test/invite_member_test.go
+++ b/server/test/invite_member_test.go
@@ -41,21 +41,20 @@ func inviteUserTest(t *testing.T, s TestSetup) {
 		res, err = resolvers.InviteMembersResolver(ctx, model.InviteMemberInput{
 			Emails: invalidEmailsTest,
 		})
-
+		assert.Error(t, err)
+		assert.Nil(t, res)
 		// valid test
 		res, err = resolvers.InviteMembersResolver(ctx, model.InviteMemberInput{
 			Emails: emails,
 		})
 		assert.Nil(t, err)
 		assert.NotNil(t, res)
-
 		// duplicate error test
 		res, err = resolvers.InviteMembersResolver(ctx, model.InviteMemberInput{
 			Emails: emails,
 		})
 		assert.Error(t, err)
 		assert.Nil(t, res)
-
 		cleanData(emails[0])
 	})
 }
diff --git a/server/test/login_test.go b/server/test/login_test.go
index 3a85d0f..3599efc 100644
--- a/server/test/login_test.go
+++ b/server/test/login_test.go
@@ -16,12 +16,13 @@ func loginTests(t *testing.T, s TestSetup) {
 	t.Run(`should login`, func(t *testing.T) {
 		_, ctx := createContext(s)
 		email := "login." + s.TestInfo.Email
-		_, err := resolvers.SignupResolver(ctx, model.SignUpInput{
+		signUpRes, err := resolvers.SignupResolver(ctx, model.SignUpInput{
 			Email:           email,
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-
+		assert.NoError(t, err)
+		assert.NotNil(t, signUpRes)
 		res, err := resolvers.LoginResolver(ctx, model.LoginInput{
 			Email:    email,
 			Password: s.TestInfo.Password,
@@ -30,6 +31,8 @@ func loginTests(t *testing.T, s TestSetup) {
 		assert.NotNil(t, err, "should fail because email is not verified")
 		assert.Nil(t, res)
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeBasicAuthSignup)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		n, err := utils.EncryptNonce(verificationRequest.Nonce)
 		assert.NoError(t, err)
 		assert.NotEmpty(t, n)
diff --git a/server/test/logout_test.go b/server/test/logout_test.go
index 3e1c6ff..3d95cf5 100644
--- a/server/test/logout_test.go
+++ b/server/test/logout_test.go
@@ -20,22 +20,24 @@ func logoutTests(t *testing.T, s TestSetup) {
 		req, ctx := createContext(s)
 		email := "logout." + s.TestInfo.Email
 
-		_, err := resolvers.MagicLinkLoginResolver(ctx, model.MagicLinkLoginInput{
+		magicLoginRes, err := resolvers.MagicLinkLoginResolver(ctx, model.MagicLinkLoginInput{
 			Email: email,
 		})
-
+		assert.NoError(t, err)
+		assert.NotNil(t, magicLoginRes)
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeMagicLinkLogin)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		verifyRes, err := resolvers.VerifyEmailResolver(ctx, model.VerifyEmailInput{
 			Token: verificationRequest.Token,
 		})
-
+		assert.NoError(t, err)
+		assert.NotNil(t, verifyRes)
 		accessToken := *verifyRes.AccessToken
 		assert.NotEmpty(t, accessToken)
-
 		claims, err := token.ParseJWTToken(accessToken)
 		assert.NoError(t, err)
 		assert.NotEmpty(t, claims)
-
 		loginMethod := claims["login_method"]
 		sessionKey := verifyRes.User.ID
 		if loginMethod != nil && loginMethod != "" {
diff --git a/server/test/magic_link_login_test.go b/server/test/magic_link_login_test.go
index b2cff2c..03b9c86 100644
--- a/server/test/magic_link_login_test.go
+++ b/server/test/magic_link_login_test.go
@@ -30,6 +30,8 @@ func magicLinkLoginTests(t *testing.T, s TestSetup) {
 		assert.Nil(t, err, "signup should be successful")
 
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeMagicLinkLogin)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		verifyRes, err := resolvers.VerifyEmailResolver(ctx, model.VerifyEmailInput{
 			Token: verificationRequest.Token,
 		})
diff --git a/server/test/mobile_signup_test.go b/server/test/mobile_signup_test.go
index 0135a66..11deccc 100644
--- a/server/test/mobile_signup_test.go
+++ b/server/test/mobile_signup_test.go
@@ -29,24 +29,25 @@ func mobileSingupTest(t *testing.T, s TestSetup) {
 			Password:        "test",
 			ConfirmPassword: "test",
 		})
-		assert.NotNil(t, err, "invalid password")
-
+		assert.Error(t, err)
+		assert.Nil(t, res)
 		memorystore.Provider.UpdateEnvVariable(constants.EnvKeyDisableSignUp, true)
 		res, err = resolvers.MobileSignupResolver(ctx, &model.MobileSignUpInput{
 			Email:           refs.NewStringRef(email),
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-		assert.NotNil(t, err, "singup disabled")
+		assert.Error(t, err)
+		assert.Nil(t, res)
 		memorystore.Provider.UpdateEnvVariable(constants.EnvKeyDisableSignUp, false)
-
 		memorystore.Provider.UpdateEnvVariable(constants.EnvKeyDisableMobileBasicAuthentication, true)
 		res, err = resolvers.MobileSignupResolver(ctx, &model.MobileSignUpInput{
 			Email:           refs.NewStringRef(email),
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-		assert.NotNil(t, err, "singup disabled")
+		assert.Error(t, err)
+		assert.Nil(t, res)
 		memorystore.Provider.UpdateEnvVariable(constants.EnvKeyDisableMobileBasicAuthentication, false)
 
 		res, err = resolvers.MobileSignupResolver(ctx, &model.MobileSignUpInput{
@@ -54,14 +55,16 @@ func mobileSingupTest(t *testing.T, s TestSetup) {
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-		assert.NotNil(t, err, "invalid mobile")
+		assert.Error(t, err)
+		assert.Nil(t, res)
 
 		res, err = resolvers.MobileSignupResolver(ctx, &model.MobileSignUpInput{
 			PhoneNumber:     "test",
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-		assert.NotNil(t, err, "invalid mobile")
+		assert.Error(t, err)
+		assert.Nil(t, res)
 
 		res, err = resolvers.MobileSignupResolver(ctx, &model.MobileSignUpInput{
 			PhoneNumber:     "1234567890",
@@ -77,7 +80,8 @@ func mobileSingupTest(t *testing.T, s TestSetup) {
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-		assert.Error(t, err, "user exists")
+		assert.Error(t, err)
+		assert.Nil(t, res)
 
 		cleanData(email)
 		cleanData("1234567890@authorizer.dev")
diff --git a/server/test/profile_test.go b/server/test/profile_test.go
index edb52a0..81fc6b7 100644
--- a/server/test/profile_test.go
+++ b/server/test/profile_test.go
@@ -27,6 +27,8 @@ func profileTests(t *testing.T, s TestSetup) {
 		assert.NotNil(t, err, "unauthorized")
 
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeBasicAuthSignup)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		verifyRes, err := resolvers.VerifyEmailResolver(ctx, model.VerifyEmailInput{
 			Token: verificationRequest.Token,
 		})
diff --git a/server/test/resend_otp_test.go b/server/test/resend_otp_test.go
index 2ba256c..73e715d 100644
--- a/server/test/resend_otp_test.go
+++ b/server/test/resend_otp_test.go
@@ -44,10 +44,11 @@ func resendOTPTest(t *testing.T, s TestSetup) {
 		// Using access token update profile
 		s.GinContext.Request.Header.Set("Authorization", "Bearer "+refs.StringValue(verifyRes.AccessToken))
 		ctx = context.WithValue(req.Context(), "GinContextKey", s.GinContext)
-		_, err = resolvers.UpdateProfileResolver(ctx, model.UpdateProfileInput{
+		updateRes, err := resolvers.UpdateProfileResolver(ctx, model.UpdateProfileInput{
 			IsMultiFactorAuthEnabled: refs.NewBoolRef(true),
 		})
-
+		assert.NoError(t, err)
+		assert.NotNil(t, updateRes)
 		// Resend otp should return error as no initial opt is being sent
 		resendOtpRes, err := resolvers.ResendOTPResolver(ctx, model.ResendOTPRequest{
 			Email: email,
@@ -87,7 +88,7 @@ func resendOTPTest(t *testing.T, s TestSetup) {
 			Otp:   otp.Otp,
 		})
 		assert.Error(t, err)
-
+		assert.Nil(t, verifyOtpRes)
 		verifyOtpRes, err = resolvers.VerifyOtpResolver(ctx, model.VerifyOTPRequest{
 			Email: email,
 			Otp:   newOtp.Otp,
diff --git a/server/test/resend_verify_email_test.go b/server/test/resend_verify_email_test.go
index b3420b0..4119762 100644
--- a/server/test/resend_verify_email_test.go
+++ b/server/test/resend_verify_email_test.go
@@ -19,13 +19,12 @@ func resendVerifyEmailTests(t *testing.T, s TestSetup) {
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-
+		assert.NoError(t, err)
 		_, err = resolvers.ResendVerifyEmailResolver(ctx, model.ResendVerifyEmailInput{
 			Email:      email,
 			Identifier: constants.VerificationTypeBasicAuthSignup,
 		})
-
-		assert.Nil(t, err)
+		assert.NoError(t, err)
 
 		cleanData(email)
 	})
diff --git a/server/test/reset_password_test.go b/server/test/reset_password_test.go
index f33e774..8b0aa6f 100644
--- a/server/test/reset_password_test.go
+++ b/server/test/reset_password_test.go
@@ -20,7 +20,7 @@ func resetPasswordTest(t *testing.T, s TestSetup) {
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-
+		assert.NoError(t, err)
 		_, err = resolvers.ForgotPasswordResolver(ctx, model.ForgotPasswordInput{
 			Email: email,
 		})
@@ -28,7 +28,7 @@ func resetPasswordTest(t *testing.T, s TestSetup) {
 
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeForgotPassword)
 		assert.Nil(t, err, "should get forgot password request")
-
+		assert.NotNil(t, verificationRequest)
 		_, err = resolvers.ResetPasswordResolver(ctx, model.ResetPasswordInput{
 			Token:           verificationRequest.Token,
 			Password:        "test1",
diff --git a/server/test/revoke_access_test.go b/server/test/revoke_access_test.go
index 4223a0d..4be042d 100644
--- a/server/test/revoke_access_test.go
+++ b/server/test/revoke_access_test.go
@@ -23,6 +23,8 @@ func revokeAccessTest(t *testing.T, s TestSetup) {
 		})
 		assert.NoError(t, err)
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeMagicLinkLogin)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		verifyRes, err := resolvers.VerifyEmailResolver(ctx, model.VerifyEmailInput{
 			Token: verificationRequest.Token,
 		})
@@ -33,7 +35,7 @@ func revokeAccessTest(t *testing.T, s TestSetup) {
 			UserID: verifyRes.User.ID,
 		})
 		assert.Error(t, err)
-
+		assert.Nil(t, res)
 		adminSecret, err := memorystore.Provider.GetStringStoreEnvVariable(constants.EnvKeyAdminSecret)
 		assert.Nil(t, err)
 
diff --git a/server/test/session_test.go b/server/test/session_test.go
index 86b848a..273904b 100644
--- a/server/test/session_test.go
+++ b/server/test/session_test.go
@@ -30,10 +30,13 @@ func sessionTests(t *testing.T, s TestSetup) {
 		assert.NotNil(t, err, "unauthorized")
 
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeBasicAuthSignup)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		verifyRes, err := resolvers.VerifyEmailResolver(ctx, model.VerifyEmailInput{
 			Token: verificationRequest.Token,
 		})
-
+		assert.NoError(t, err)
+		assert.NotNil(t, verifyRes)
 		accessToken := *verifyRes.AccessToken
 		assert.NotEmpty(t, accessToken)
 
diff --git a/server/test/signup_test.go b/server/test/signup_test.go
index a66906c..85d179d 100644
--- a/server/test/signup_test.go
+++ b/server/test/signup_test.go
@@ -22,14 +22,14 @@ func signupTests(t *testing.T, s TestSetup) {
 			ConfirmPassword: s.TestInfo.Password + "s",
 		})
 		assert.NotNil(t, err, "invalid password")
-
+		assert.Nil(t, res)
 		res, err = resolvers.SignupResolver(ctx, model.SignUpInput{
 			Email:           email,
 			Password:        "test",
 			ConfirmPassword: "test",
 		})
 		assert.NotNil(t, err, "invalid password")
-
+		assert.Nil(t, res)
 		memorystore.Provider.UpdateEnvVariable(constants.EnvKeyDisableSignUp, true)
 		res, err = resolvers.SignupResolver(ctx, model.SignUpInput{
 			Email:           email,
@@ -37,7 +37,7 @@ func signupTests(t *testing.T, s TestSetup) {
 			ConfirmPassword: s.TestInfo.Password,
 		})
 		assert.NotNil(t, err, "singup disabled")
-
+		assert.Nil(t, res)
 		memorystore.Provider.UpdateEnvVariable(constants.EnvKeyDisableSignUp, false)
 		res, err = resolvers.SignupResolver(ctx, model.SignUpInput{
 			Email:           email,
@@ -48,15 +48,13 @@ func signupTests(t *testing.T, s TestSetup) {
 		user := *res.User
 		assert.Equal(t, email, user.Email)
 		assert.Nil(t, res.AccessToken, "access token should be nil")
-
 		res, err = resolvers.SignupResolver(ctx, model.SignUpInput{
 			Email:           email,
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-
 		assert.NotNil(t, err, "should throw duplicate email error")
-
+		assert.Nil(t, res)
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeBasicAuthSignup)
 		assert.Nil(t, err)
 		assert.Equal(t, email, verificationRequest.Email)
diff --git a/server/test/test.go b/server/test/test.go
index 1fb6492..b2727ea 100644
--- a/server/test/test.go
+++ b/server/test/test.go
@@ -40,31 +40,49 @@ func cleanData(email string) {
 	verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeBasicAuthSignup)
 	if err == nil {
 		err = db.Provider.DeleteVerificationRequest(ctx, verificationRequest)
+		if err != nil {
+			log.Debug("DeleteVerificationRequest err", err)
+		}
 	}
 
 	verificationRequest, err = db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeForgotPassword)
 	if err == nil {
 		err = db.Provider.DeleteVerificationRequest(ctx, verificationRequest)
+		if err != nil {
+			log.Debug("DeleteVerificationRequest err", err)
+		}
 	}
 
 	verificationRequest, err = db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeUpdateEmail)
 	if err == nil {
 		err = db.Provider.DeleteVerificationRequest(ctx, verificationRequest)
+		if err != nil {
+			log.Debug("DeleteVerificationRequest err", err)
+		}
 	}
 
 	verificationRequest, err = db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeMagicLinkLogin)
 	if err == nil {
 		err = db.Provider.DeleteVerificationRequest(ctx, verificationRequest)
+		if err != nil {
+			log.Debug("DeleteVerificationRequest err", err)
+		}
 	}
 
 	otp, err := db.Provider.GetOTPByEmail(ctx, email)
 	if err == nil {
 		err = db.Provider.DeleteOTP(ctx, otp)
+		if err != nil {
+			log.Debug("DeleteOTP err", err)
+		}
 	}
 
 	dbUser, err := db.Provider.GetUserByEmail(ctx, email)
 	if err == nil {
-		db.Provider.DeleteUser(ctx, dbUser)
+		err = db.Provider.DeleteUser(ctx, dbUser)
+		if err != nil {
+			log.Debug("DeleteUser err", err)
+		}
 	}
 }
 
diff --git a/server/test/update_all_users_tests.go b/server/test/update_all_users_tests.go
index 6473908..375158f 100644
--- a/server/test/update_all_users_tests.go
+++ b/server/test/update_all_users_tests.go
@@ -17,15 +17,12 @@ func updateAllUsersTest(t *testing.T, s TestSetup) {
 	t.Helper()
 	t.Run("Should update all users", func(t *testing.T) {
 		_, ctx := createContext(s)
-
-		users := []models.User{}
 		for i := 0; i < 10; i++ {
 			user := models.User{
 				Email:         fmt.Sprintf("update_all_user_%d_%s", i, s.TestInfo.Email),
 				SignupMethods: constants.AuthRecipeMethodBasicAuth,
 				Roles:         "user",
 			}
-			users = append(users, user)
 			u, err := db.Provider.AddUser(ctx, user)
 			assert.NoError(t, err)
 			assert.NotNil(t, u)
@@ -56,12 +53,15 @@ func updateAllUsersTest(t *testing.T, s TestSetup) {
 			Limit:  20,
 			Offset: 0,
 		})
+		assert.NoError(t, err)
+		assert.NotNil(t, listUsers)
 		for _, u := range listUsers.Users {
 			if utils.StringSliceContains(updateIds, u.ID) {
 				assert.False(t, refs.BoolValue(u.IsMultiFactorAuthEnabled))
 			} else {
 				assert.True(t, refs.BoolValue(u.IsMultiFactorAuthEnabled))
 			}
+			cleanData(u.Email)
 		}
 	})
 }
diff --git a/server/test/update_profile_test.go b/server/test/update_profile_test.go
index d8e4f0f..70f974a 100644
--- a/server/test/update_profile_test.go
+++ b/server/test/update_profile_test.go
@@ -30,11 +30,13 @@ func updateProfileTests(t *testing.T, s TestSetup) {
 		assert.NotNil(t, err, "unauthorized")
 
 		verificationRequest, err := db.Provider.GetVerificationRequestByEmail(ctx, email, constants.VerificationTypeBasicAuthSignup)
+		assert.NoError(t, err)
+		assert.NotNil(t, verificationRequest)
 		verifyRes, err := resolvers.VerifyEmailResolver(ctx, model.VerifyEmailInput{
 			Token: verificationRequest.Token,
 		})
 		assert.NoError(t, err)
-
+		assert.NotNil(t, verifyRes)
 		s.GinContext.Request.Header.Set("Authorization", "Bearer "+*verifyRes.AccessToken)
 		ctx = context.WithValue(req.Context(), "GinContextKey", s.GinContext)
 
diff --git a/server/test/update_webhook_test.go b/server/test/update_webhook_test.go
index f1863cb..14ccb94 100644
--- a/server/test/update_webhook_test.go
+++ b/server/test/update_webhook_test.go
@@ -27,7 +27,7 @@ func updateWebhookTest(t *testing.T, s TestSetup) {
 		webhooks, err := db.Provider.GetWebhookByEventName(ctx, constants.UserDeletedWebhookEvent)
 		assert.NoError(t, err)
 		assert.NotNil(t, webhooks)
-		assert.Greater(t, len(webhooks), 0)
+		assert.Equal(t, 2, len(webhooks))
 		for _, webhook := range webhooks {
 			// it should completely replace headers
 			webhook.Headers = map[string]interface{}{
@@ -43,18 +43,44 @@ func updateWebhookTest(t *testing.T, s TestSetup) {
 			assert.NotEmpty(t, res)
 			assert.NotEmpty(t, res.Message)
 		}
-
+		if len(webhooks) == 0 {
+			// avoid index out of range error
+			return
+		}
+		// Test updating webhook name
+		w := webhooks[0]
+		res, err := resolvers.UpdateWebhookResolver(ctx, model.UpdateWebhookRequest{
+			ID:        w.ID,
+			EventName: refs.NewStringRef(constants.UserAccessEnabledWebhookEvent),
+		})
+		assert.NoError(t, err)
+		assert.NotNil(t, res)
+		// Check if webhooks with new name is as per expected len
+		accessWebhooks, err := db.Provider.GetWebhookByEventName(ctx, constants.UserAccessEnabledWebhookEvent)
+		assert.NoError(t, err)
+		assert.Equal(t, 3, len(accessWebhooks))
+		// Revert name change
+		res, err = resolvers.UpdateWebhookResolver(ctx, model.UpdateWebhookRequest{
+			ID:        w.ID,
+			EventName: refs.NewStringRef(constants.UserDeletedWebhookEvent),
+		})
+		assert.NoError(t, err)
+		assert.NotNil(t, res)
 		updatedWebhooks, err := db.Provider.GetWebhookByEventName(ctx, constants.UserDeletedWebhookEvent)
 		assert.NoError(t, err)
 		assert.NotNil(t, updatedWebhooks)
+		assert.Equal(t, 2, len(updatedWebhooks))
 		for _, updatedWebhook := range updatedWebhooks {
 			assert.Contains(t, refs.StringValue(updatedWebhook.EventName), constants.UserDeletedWebhookEvent)
 			assert.Len(t, updatedWebhook.Headers, 1)
 			assert.False(t, refs.BoolValue(updatedWebhook.Enabled))
+			foundUpdatedHeader := false
 			for key, val := range updatedWebhook.Headers {
-				assert.Equal(t, "x-new-test", key)
-				assert.Equal(t, "test", val)
+				if key == "x-new-test" && val == "test" {
+					foundUpdatedHeader = true
+				}
 			}
+			assert.True(t, foundUpdatedHeader)
 			assert.Equal(t, "https://sometest.com", refs.StringValue(updatedWebhook.Endpoint))
 			res, err := resolvers.UpdateWebhookResolver(ctx, model.UpdateWebhookRequest{
 				ID:       updatedWebhook.ID,
diff --git a/server/test/users_test.go b/server/test/users_test.go
index 96e6537..26d7a61 100644
--- a/server/test/users_test.go
+++ b/server/test/users_test.go
@@ -34,7 +34,7 @@ func usersTest(t *testing.T, s TestSetup) {
 
 		usersRes, err := resolvers.UsersResolver(ctx, pagination)
 		assert.NotNil(t, err, "unauthorized")
-
+		assert.Nil(t, usersRes)
 		adminSecret, err := memorystore.Provider.GetStringStoreEnvVariable(constants.EnvKeyAdminSecret)
 		assert.Nil(t, err)
 		h, err := crypto.EncryptPassword(adminSecret)
diff --git a/server/test/validate_jwt_token_test.go b/server/test/validate_jwt_token_test.go
index 52ce50b..e2fcf8c 100644
--- a/server/test/validate_jwt_token_test.go
+++ b/server/test/validate_jwt_token_test.go
@@ -53,6 +53,8 @@ func validateJwtTokenTest(t *testing.T, s TestSetup) {
 	sessionKey := constants.AuthRecipeMethodBasicAuth + ":" + user.ID
 	nonce := uuid.New().String()
 	authToken, err := token.CreateAuthToken(gc, user, roles, scope, constants.AuthRecipeMethodBasicAuth, nonce, "")
+	assert.NoError(t, err)
+	assert.NotNil(t, authToken)
 	memorystore.Provider.SetUserSession(sessionKey, constants.TokenTypeSessionToken+"_"+authToken.FingerPrint, authToken.FingerPrintHash)
 	memorystore.Provider.SetUserSession(sessionKey, constants.TokenTypeAccessToken+"_"+authToken.FingerPrint, authToken.AccessToken.Token)
 
@@ -74,8 +76,8 @@ func validateJwtTokenTest(t *testing.T, s TestSetup) {
 			Token:     authToken.AccessToken.Token,
 			Roles:     []string{"invalid_role"},
 		})
-
 		assert.Error(t, err)
+		assert.Nil(t, res)
 	})
 
 	t.Run(`should validate the refresh token`, func(t *testing.T) {
diff --git a/server/test/verification_requests_test.go b/server/test/verification_requests_test.go
index 8cbb762..0d0ce65 100644
--- a/server/test/verification_requests_test.go
+++ b/server/test/verification_requests_test.go
@@ -17,17 +17,14 @@ func verificationRequestsTest(t *testing.T, s TestSetup) {
 
 	t.Run(`should get verification requests with admin secret only`, func(t *testing.T) {
 		req, ctx := createContext(s)
-
 		email := "verification_requests." + s.TestInfo.Email
 		res, err := resolvers.SignupResolver(ctx, model.SignUpInput{
 			Email:           email,
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-
 		assert.NoError(t, err)
 		assert.NotNil(t, res)
-
 		limit := int64(10)
 		page := int64(1)
 		pagination := &model.PaginatedInput{
@@ -39,6 +36,7 @@ func verificationRequestsTest(t *testing.T, s TestSetup) {
 
 		requests, err := resolvers.VerificationRequestsResolver(ctx, pagination)
 		assert.NotNil(t, err, "unauthorized")
+		assert.Nil(t, requests)
 		adminSecret, err := memorystore.Provider.GetStringStoreEnvVariable(constants.EnvKeyAdminSecret)
 		assert.Nil(t, err)
 
diff --git a/server/test/verify_email_test.go b/server/test/verify_email_test.go
index 146dd27..2a07656 100644
--- a/server/test/verify_email_test.go
+++ b/server/test/verify_email_test.go
@@ -20,7 +20,8 @@ func verifyEmailTest(t *testing.T, s TestSetup) {
 			Password:        s.TestInfo.Password,
 			ConfirmPassword: s.TestInfo.Password,
 		})
-
+		assert.NoError(t, err)
+		assert.NotNil(t, res)
 		user := *res.User
 		assert.Equal(t, email, user.Email)
 		assert.Nil(t, res.AccessToken, "access token should be nil")
diff --git a/server/test/webhook_logs_test.go b/server/test/webhook_logs_test.go
index 8b9a04a..25210a3 100644
--- a/server/test/webhook_logs_test.go
+++ b/server/test/webhook_logs_test.go
@@ -29,17 +29,20 @@ func webhookLogsTest(t *testing.T, s TestSetup) {
 		assert.NoError(t, err)
 		assert.Greater(t, len(webhookLogs.WebhookLogs), 1)
 
-		webhooks, err := resolvers.WebhooksResolver(ctx, nil)
+		webhooks, err := resolvers.WebhooksResolver(ctx, &model.PaginatedInput{
+			Pagination: &model.PaginationInput{
+				Limit: refs.NewInt64Ref(20),
+			},
+		})
 		assert.NoError(t, err)
 		assert.NotEmpty(t, webhooks)
-
 		for _, w := range webhooks.Webhooks {
 			t.Run(fmt.Sprintf("should get webhook for webhook_id:%s", w.ID), func(t *testing.T) {
 				webhookLogs, err := resolvers.WebhookLogsResolver(ctx, &model.ListWebhookLogRequest{
 					WebhookID: &w.ID,
 				})
 				assert.NoError(t, err)
-				assert.GreaterOrEqual(t, len(webhookLogs.WebhookLogs), 1)
+				assert.GreaterOrEqual(t, len(webhookLogs.WebhookLogs), 1, refs.StringValue(w.EventName))
 				for _, wl := range webhookLogs.WebhookLogs {
 					assert.Equal(t, refs.StringValue(wl.WebhookID), w.ID)
 				}
diff --git a/server/test/webhook_test.go b/server/test/webhook_test.go
index f52fa62..0fb789f 100644
--- a/server/test/webhook_test.go
+++ b/server/test/webhook_test.go
@@ -28,7 +28,7 @@ func webhookTest(t *testing.T, s TestSetup) {
 		webhooks, err := db.Provider.GetWebhookByEventName(ctx, constants.UserCreatedWebhookEvent)
 		assert.NoError(t, err)
 		assert.NotNil(t, webhooks)
-		assert.Greater(t, len(webhooks), 0)
+		assert.Equal(t, 2, len(webhooks))
 		for _, webhook := range webhooks {
 			res, err := resolvers.WebhookResolver(ctx, model.WebhookRequest{
 				ID: webhook.ID,
@@ -36,7 +36,7 @@ func webhookTest(t *testing.T, s TestSetup) {
 			assert.NoError(t, err)
 			assert.Equal(t, res.ID, webhook.ID)
 			assert.Equal(t, refs.StringValue(res.Endpoint), refs.StringValue(webhook.Endpoint))
-			assert.Equal(t, refs.StringValue(res.EventName), refs.StringValue(webhook.EventName))
+			// assert.Equal(t, refs.StringValue(res.EventName), refs.StringValue(webhook.EventName))
 			assert.Equal(t, refs.BoolValue(res.Enabled), refs.BoolValue(webhook.Enabled))
 			assert.Len(t, res.Headers, len(webhook.Headers))
 		}
diff --git a/server/test/webhooks_test.go b/server/test/webhooks_test.go
index b4ec561..6ed1bb2 100644
--- a/server/test/webhooks_test.go
+++ b/server/test/webhooks_test.go
@@ -6,7 +6,9 @@ import (
 
 	"github.com/authorizerdev/authorizer/server/constants"
 	"github.com/authorizerdev/authorizer/server/crypto"
+	"github.com/authorizerdev/authorizer/server/graph/model"
 	"github.com/authorizerdev/authorizer/server/memorystore"
+	"github.com/authorizerdev/authorizer/server/refs"
 	"github.com/authorizerdev/authorizer/server/resolvers"
 	"github.com/stretchr/testify/assert"
 )
@@ -21,9 +23,13 @@ func webhooksTest(t *testing.T, s TestSetup) {
 		assert.NoError(t, err)
 		req.Header.Set("Cookie", fmt.Sprintf("%s=%s", constants.AdminCookieName, h))
 
-		webhooks, err := resolvers.WebhooksResolver(ctx, nil)
+		webhooks, err := resolvers.WebhooksResolver(ctx, &model.PaginatedInput{
+			Pagination: &model.PaginationInput{
+				Limit: refs.NewInt64Ref(20),
+			},
+		})
 		assert.NoError(t, err)
 		assert.NotEmpty(t, webhooks)
-		assert.Len(t, webhooks.Webhooks, len(s.TestInfo.TestWebhookEventTypes))
+		assert.Len(t, webhooks.Webhooks, len(s.TestInfo.TestWebhookEventTypes)*2)
 	})
 }
diff --git a/server/utils/webhook.go b/server/utils/webhook.go
index 9cc2ab2..32848f8 100644
--- a/server/utils/webhook.go
+++ b/server/utils/webhook.go
@@ -24,7 +24,7 @@ func RegisterEvent(ctx context.Context, eventName string, authRecipe string, use
 	}
 	for _, webhook := range webhooks {
 		if !refs.BoolValue(webhook.Enabled) {
-			return nil
+			continue
 		}
 		userBytes, err := json.Marshal(user.AsAPIUser())
 		if err != nil {
@@ -51,30 +51,32 @@ func RegisterEvent(ctx context.Context, eventName string, authRecipe string, use
 		requestBody, err := json.Marshal(reqBody)
 		if err != nil {
 			log.Debug("error marshalling requestBody obj: ", err)
-			return err
+			continue
 		}
 
 		// dont trigger webhook call in case of test
 		envKey, err := memorystore.Provider.GetStringStoreEnvVariable(constants.EnvKeyEnv)
 		if err != nil {
-			return err
+			continue
 		}
 		if envKey == constants.TestEnv {
-			db.Provider.AddWebhookLog(ctx, models.WebhookLog{
+			_, err := db.Provider.AddWebhookLog(ctx, models.WebhookLog{
 				HttpStatus: 200,
 				Request:    string(requestBody),
 				Response:   string(`{"message": "test"}`),
 				WebhookID:  webhook.ID,
 			})
-
-			return nil
+			if err != nil {
+				log.Debug("error saving webhook log:", err)
+			}
+			continue
 		}
 
 		requestBytesBuffer := bytes.NewBuffer(requestBody)
 		req, err := http.NewRequest("POST", refs.StringValue(webhook.Endpoint), requestBytesBuffer)
 		if err != nil {
 			log.Debug("error creating webhook post request: ", err)
-			return err
+			continue
 		}
 		req.Header.Set("Content-Type", "application/json")
 
@@ -88,14 +90,14 @@ func RegisterEvent(ctx context.Context, eventName string, authRecipe string, use
 		resp, err := client.Do(req)
 		if err != nil {
 			log.Debug("error making request: ", err)
-			return err
+			continue
 		}
 		defer resp.Body.Close()
 
 		responseBytes, err := ioutil.ReadAll(resp.Body)
 		if err != nil {
 			log.Debug("error reading response: ", err)
-			return err
+			continue
 		}
 
 		statusCode := int64(resp.StatusCode)
@@ -105,10 +107,9 @@ func RegisterEvent(ctx context.Context, eventName string, authRecipe string, use
 			Response:   string(responseBytes),
 			WebhookID:  webhook.ID,
 		})
-
 		if err != nil {
 			log.Debug("failed to add webhook log: ", err)
-			return err
+			continue
 		}
 	}
 	return nil