хендлер рефреш токена для админа #22

test/api/admins/admin_refresh_tests.erl

@@ -0,0 +1,48 @@
+%%%-------------------------------------------------------------------
+%%% @doc Тесты административного API для обновления токена.
+%%% Покрывает эндпоинт:
+%%%   POST /v1/admin/refresh
+%%% @end
+%%%-------------------------------------------------------------------
+-module(admin_refresh_tests).
+-include_lib("eunit/include/eunit.hrl").
+-export([test/0]).
+
+-spec test() -> ok.
+test() ->
+  ct:pal("=== Admin Refresh Tests ==="),
+  RefreshToken = api_test_runner:get_admin_refresh_token(),
+  test_successful_refresh(RefreshToken),
+  test_invalid_refresh_token(),
+  test_missing_refresh_token(),
+  ct:pal("=== All admin refresh tests passed ==="),
+  ok.
+
+-spec test_successful_refresh(binary()) -> ok.
+test_successful_refresh(RefreshToken) ->
+  ct:pal(" TEST: Successful admin token refresh"),
+  Resp = api_test_runner:admin_request(post, <<"/v1/admin/refresh">>, <<>>,
+    jsx:encode(#{refresh_token => RefreshToken})),
+  {ok, 200, _, Body} = Resp,
+  #{<<"token">> := NewToken, <<"refresh_token">> := NewRefresh} =
+    jsx:decode(list_to_binary(Body), [return_maps]),
+  ?assert(is_binary(NewToken)),
+  ?assert(is_binary(NewRefresh)),
+  ?assertNotEqual(RefreshToken, NewRefresh),
+  ct:pal(" OK: got new admin token pair").
+
+-spec test_invalid_refresh_token() -> ok.
+test_invalid_refresh_token() ->
+  ct:pal(" TEST: Invalid admin refresh token"),
+  Resp = api_test_runner:admin_request(post, <<"/v1/admin/refresh">>, <<>>,
+    jsx:encode(#{refresh_token => <<"bad">>})),
+  {ok, 401, _, _} = Resp,
+  ct:pal(" OK: got 401").
+
+-spec test_missing_refresh_token() -> ok.
+test_missing_refresh_token() ->
+  ct:pal(" TEST: Missing refresh_token field for admin"),
+  Resp = api_test_runner:admin_request(post, <<"/v1/admin/refresh">>, <<>>,
+    jsx:encode(#{})),
+  ?assertMatch({ok, 400, _, _}, Resp),
+  ct:pal(" OK: got 400").

test/api/api_test_runner.erl

@@ -23,7 +23,7 @@
   register_and_login/2,
   create_calendar/2,
   create_event/3
-]).
+  , get_admin_refresh_token/0]).
 -export([
   admin_request/3,
   admin_request/4,
@@ -133,6 +133,15 @@ get_moderator_token() ->
 get_support_token() ->
   get_or_login(support, admin_support_email(), admin_support_password()).
 
+-spec get_admin_refresh_token() -> binary().
+get_admin_refresh_token() ->
+  Email = admin_email(),
+  Password = admin_password(),
+  Body = jsx:encode(#{email => Email, password => Password}),
+  {ok, 200, _, RespBody} = admin_request(post, <<"/v1/admin/login">>, <<>>, Body),
+  #{<<"refresh_token">> := RefreshToken} = jsx:decode(list_to_binary(RespBody), [return_maps]),
+  RefreshToken.
+
 -spec get_or_login(atom(), binary(), binary()) -> binary().
 get_or_login(Role, Email, Password) ->
   Key = {?MODULE, admin_token, Role},

test/api_admins_SUITE.erl

@@ -36,6 +36,7 @@ all() ->
     admin_test_audit,
     admin_test_stats,
     admin_test_me,
+    admin_test_refresh,
     admin_test_admins,
     admin_test_websocket
   ].
@@ -118,6 +119,9 @@ admin_test_stats(_Config) ->
 admin_test_me(_Config) ->
   admin_me_tests:test().
 
+admin_test_refresh(_Config) ->
+  admin_refresh_tests:test().
+
 admin_test_admins(_Config) ->
   admin_admins_tests:test().