190 lines
9.0 KiB
Erlang
190 lines
9.0 KiB
Erlang
-module(admin_handler_user_by_id_tests).
|
||
-include_lib("eunit/include/eunit.hrl").
|
||
-include("records.hrl").
|
||
|
||
setup() ->
|
||
ok = meck:new(cowboy_req, [non_strict]),
|
||
ok = meck:new(handler_auth, [non_strict]),
|
||
ok = meck:new(core_user, [non_strict]),
|
||
ok.
|
||
|
||
cleanup(_) ->
|
||
meck:unload(core_user),
|
||
meck:unload(handler_auth),
|
||
meck:unload(cowboy_req).
|
||
|
||
admin_user_by_id_test_() ->
|
||
{setup, fun setup/0, fun cleanup/1, [
|
||
{"GET /admin/users/:id – success", fun test_get_user/0},
|
||
{"GET /admin/users/:id – not found", fun test_get_user_not_found/0},
|
||
{"GET /admin/users/:id – forbidden", fun test_get_user_forbidden/0},
|
||
{"PUT /admin/users/:id – success", fun test_update_user/0},
|
||
{"PUT /admin/users/:id – not found", fun test_update_user_not_found/0},
|
||
{"DELETE /admin/users/:id – success", fun test_delete_user/0},
|
||
{"DELETE /admin/users/:id – not found", fun test_delete_user_not_found/0},
|
||
{"POST /admin/users/:id – method not allowed", fun test_wrong_method/0},
|
||
{"convert_updates/1", fun test_convert_updates/0}
|
||
]}.
|
||
|
||
%% ── GET – success ─────────────────────────────────────────
|
||
test_get_user() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"GET">> end),
|
||
ok = meck:expect(handler_auth, authenticate,
|
||
fun(Req) -> {ok, <<"admin1">>, Req} end),
|
||
AdminUser = #user{id = <<"admin1">>, role = admin},
|
||
ok = meck:expect(core_user, get_by_id,
|
||
fun(<<"admin1">>) -> {ok, AdminUser};
|
||
(<<"user1">>) -> {ok, #user{id = <<"user1">>, email = <<"u@t.com">>,
|
||
role = user, status = active,
|
||
created_at = {{2026,4,27},{12,0,0}},
|
||
updated_at = {{2026,4,27},{12,0,0}}}}
|
||
end),
|
||
ok = meck:expect(cowboy_req, binding,
|
||
fun(id, _) -> <<"user1">> end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(200, Status),
|
||
#{<<"id">> := <<"user1">>, <<"email">> := <<"u@t.com">>, <<"role">> := <<"user">>}
|
||
= jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── GET – not found ───────────────────────────────────────
|
||
test_get_user_not_found() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"GET">> end),
|
||
ok = meck:expect(handler_auth, authenticate,
|
||
fun(Req) -> {ok, <<"admin1">>, Req} end),
|
||
AdminUser = #user{id = <<"admin1">>, role = admin},
|
||
ok = meck:expect(core_user, get_by_id,
|
||
fun(<<"admin1">>) -> {ok, AdminUser};
|
||
(_) -> {error, not_found}
|
||
end),
|
||
ok = meck:expect(cowboy_req, binding, fun(id, _) -> <<"missing">> end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(404, Status),
|
||
#{<<"error">> := <<"User not found">>} = jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── GET – forbidden ───────────────────────────────────────
|
||
test_get_user_forbidden() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"GET">> end),
|
||
ok = meck:expect(handler_auth, authenticate,
|
||
fun(Req) -> {error, 403, <<"Admin access required">>, Req} end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(403, Status),
|
||
#{<<"error">> := <<"Admin access required">>} = jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── PUT – success ─────────────────────────────────────────
|
||
test_update_user() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"PUT">> end),
|
||
ok = meck:expect(handler_auth, authenticate,
|
||
fun(Req) -> {ok, <<"admin1">>, Req} end),
|
||
AdminUser = #user{id = <<"admin1">>, role = admin},
|
||
ok = meck:expect(core_user, get_by_id,
|
||
fun(<<"admin1">>) -> {ok, AdminUser} end),
|
||
User = #user{id = <<"user1">>, email = <<"u@t.com">>, role = user, status = frozen,
|
||
created_at = {{2026,4,27},{12,0,0}}, updated_at = {{2026,4,27},{13,0,0}}},
|
||
ok = meck:expect(core_user, update, fun(<<"user1">>, _) -> {ok, User} end),
|
||
ok = meck:expect(cowboy_req, binding, fun(id, _) -> <<"user1">> end),
|
||
ok = meck:expect(cowboy_req, read_body, fun(Req) -> {ok, jsx:encode(#{status => <<"frozen">>}), Req} end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(200, Status),
|
||
#{<<"status">> := <<"frozen">>} = jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── PUT – not found ──────────────────────────────────────
|
||
test_update_user_not_found() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"PUT">> end),
|
||
ok = meck:expect(handler_auth, authenticate,
|
||
fun(Req) -> {ok, <<"admin1">>, Req} end),
|
||
AdminUser = #user{id = <<"admin1">>, role = admin},
|
||
ok = meck:expect(core_user, get_by_id,
|
||
fun(<<"admin1">>) -> {ok, AdminUser} end),
|
||
ok = meck:expect(core_user, update, fun(_, _) -> {error, not_found} end),
|
||
ok = meck:expect(cowboy_req, binding, fun(id, _) -> <<"missing">> end),
|
||
ok = meck:expect(cowboy_req, read_body, fun(Req) -> {ok, <<"{}">>, Req} end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(404, Status),
|
||
#{<<"error">> := <<"User not found">>} = jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── DELETE – success ─────────────────────────────────────
|
||
test_delete_user() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"DELETE">> end),
|
||
ok = meck:expect(handler_auth, authenticate,
|
||
fun(Req) -> {ok, <<"admin1">>, Req} end),
|
||
AdminUser = #user{id = <<"admin1">>, role = admin},
|
||
ok = meck:expect(core_user, get_by_id,
|
||
fun(<<"admin1">>) -> {ok, AdminUser} end),
|
||
ok = meck:expect(core_user, delete, fun(<<"user1">>) -> {ok, deleted} end),
|
||
ok = meck:expect(cowboy_req, binding, fun(id, _) -> <<"user1">> end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(200, Status),
|
||
#{<<"status">> := <<"deleted">>} = jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── DELETE – not found ───────────────────────────────────
|
||
test_delete_user_not_found() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"DELETE">> end),
|
||
ok = meck:expect(handler_auth, authenticate,
|
||
fun(Req) -> {ok, <<"admin1">>, Req} end),
|
||
AdminUser = #user{id = <<"admin1">>, role = admin},
|
||
ok = meck:expect(core_user, get_by_id,
|
||
fun(<<"admin1">>) -> {ok, AdminUser} end),
|
||
ok = meck:expect(core_user, delete, fun(_) -> {error, not_found} end),
|
||
ok = meck:expect(cowboy_req, binding, fun(id, _) -> <<"missing">> end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(404, Status),
|
||
#{<<"error">> := <<"User not found">>} = jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── Wrong method ─────────────────────────────────────────
|
||
test_wrong_method() ->
|
||
ok = meck:expect(cowboy_req, method, fun(_) -> <<"POST">> end),
|
||
ok = meck:expect(cowboy_req, reply,
|
||
fun(Code, Headers, Body, Req) ->
|
||
put(test_reply, {Code, Headers, Body, Req})
|
||
end),
|
||
{ok, _, _} = admin_handler_user_by_id:init(req, []),
|
||
{Status, _, RespBody, _} = erase(test_reply),
|
||
?assertEqual(405, Status),
|
||
#{<<"error">> := <<"Method not allowed">>} = jsx:decode(RespBody, [return_maps]).
|
||
|
||
%% ── convert_updates/1 ────────────────────────────────────
|
||
test_convert_updates() ->
|
||
Updates = [
|
||
{<<"status">>, <<"frozen">>},
|
||
{<<"role">>, <<"admin">>},
|
||
{<<"email">>, <<"test@test.com">>}
|
||
],
|
||
Converted = admin_handler_user_by_id:convert_updates(Updates),
|
||
?assertEqual({status, frozen}, lists:keyfind(status, 1, Converted)),
|
||
?assertEqual({role, admin}, lists:keyfind(role, 1, Converted)),
|
||
?assertEqual({<<"email">>, <<"test@test.com">>}, lists:keyfind(<<"email">>, 1, Converted)). |