Node.js - Beginner -- What am I missing?

You could add a check if the id actually exists to your code, but that will not help to make your code pass.
All in all, for 100 points that's too much code. Try this:

exports.getDraft = async (req, res) => {
    return res.status(401).send("Unauthorized");
}

-> When testers fail to implement proper tests, the customer get's partially functional software. At least the tests are passed and the code can be shipped to production immediately.