Rewrite and expand EUnit suite; run unit tests in CI from shared test image. Refs EventHub/EventHubBack#36 [skip ci]

2026-07-17 15:16:46 +03:00
parent 9d2780fef4
commit 4fa802702f
54 changed files with 4240 additions and 2281 deletions
@@ -0,0 +1,83 @@
+-module(admin_handler_refresh_tests).
+-include_lib("eunit/include/eunit.hrl").
+-include("records.hrl").
+
+-define(TABLES, [admin, admin_audit, auth_session, ticket]).
+-define(ADMIN_ID, <<"adm_test_1">>).
+
+setup() ->
+  eh_test_support:start_mnesia(),
+  eh_test_support:ensure_tables(?TABLES),
+  _ = mnesia:add_table_index(auth_session, #auth_session.family_id),
+  _ = mnesia:add_table_index(auth_session, #auth_session.subject_id),
+  eh_test_support:ensure_jwt(),
+  catch ets:new(eventhub_counters, [named_table, public, set, {write_concurrency, true}]),
+  eh_test_support:seed_admin(#{id => ?ADMIN_ID, role => admin}),
+  ok.
+
+cleanup(_) ->
+  eh_test_support:unload_cowboy(),
+  eh_test_support:delete_tables(?TABLES),
+  eh_test_support:stop_mnesia(),
+  ok.
+
+admin_refresh_test_() ->
+  {foreach, fun setup/0, fun cleanup/1, [
+    {"POST refresh – success", {timeout, 60, fun test_refresh_ok/0}},
+    {"POST refresh – invalid token", {timeout, 60, fun test_refresh_invalid/0}},
+    {"POST refresh – missing field", {timeout, 60, fun test_refresh_missing_field/0}},
+    {"POST refresh – invalid JSON", {timeout, 60, fun test_refresh_invalid_json/0}},
+    {"GET refresh – method not allowed", {timeout, 60, fun test_wrong_method/0}}
+  ]}.
+
+test_refresh_ok() ->
+  {ok, _Access, Refresh} = logic_auth_session:issue_admin_tokens(?ADMIN_ID, <<"admin">>),
+  {Status, _, Body} = eh_test_support:call(admin_handler_refresh, #{
+    method => <<"POST">>,
+    path => <<"/v1/admin/refresh">>,
+    auth => none,
+    body => jsx:encode(#{<<"refresh_token">> => Refresh})
+  }),
+  ?assertEqual(200, Status),
+  Resp = jsx:decode(Body, [return_maps]),
+  ?assert(is_map_key(<<"token">>, Resp)),
+  ?assert(is_map_key(<<"refresh_token">>, Resp)),
+  NewRefresh = maps:get(<<"refresh_token">>, Resp),
+  ?assertNotEqual(Refresh, NewRefresh),
+  {ok, _, _} = eventhub_auth:verify_admin_token(maps:get(<<"token">>, Resp)).
+
+test_refresh_invalid() ->
+  {Status, _, Body} = eh_test_support:call(admin_handler_refresh, #{
+    method => <<"POST">>,
+    path => <<"/v1/admin/refresh">>,
+    auth => none,
+    body => jsx:encode(#{<<"refresh_token">> => <<"not-a-valid-token">>})
+  }),
+  ?assertEqual(401, Status),
+  #{<<"error">> := _} = jsx:decode(Body, [return_maps]).
+
+test_refresh_missing_field() ->
+  {Status, _, _} = eh_test_support:call(admin_handler_refresh, #{
+    method => <<"POST">>,
+    path => <<"/v1/admin/refresh">>,
+    auth => none,
+    body => jsx:encode(#{<<"token">> => <<"x">>})
+  }),
+  ?assertEqual(400, Status).
+
+test_refresh_invalid_json() ->
+  {Status, _, _} = eh_test_support:call(admin_handler_refresh, #{
+    method => <<"POST">>,
+    path => <<"/v1/admin/refresh">>,
+    auth => none,
+    body => <<"not-json">>
+  }),
+  ?assertEqual(400, Status).
+
+test_wrong_method() ->
+  {Status, _, _} = eh_test_support:call(admin_handler_refresh, #{
+    method => <<"GET">>,
+    path => <<"/v1/admin/refresh">>,
+    auth => none
+  }),
+  ?assertEqual(405, Status).