104 lines
4.7 KiB
Go
104 lines
4.7 KiB
Go
// Vikunja is a to-do list application to facilitate your life.
|
|
// Copyright 2018-present Vikunja and contributors. All rights reserved.
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
package webtests
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
// reactionMapFromBody decodes the v2 reactions list body — a map keyed by
|
|
// reaction value, each value the list of users who reacted with it.
|
|
func reactionMapFromBody(t *testing.T, body []byte) map[string][]struct {
|
|
ID int64 `json:"id"`
|
|
Username string `json:"username"`
|
|
} {
|
|
t.Helper()
|
|
var m map[string][]struct {
|
|
ID int64 `json:"id"`
|
|
Username string `json:"username"`
|
|
}
|
|
require.NoError(t, json.Unmarshal(body, &m), "list body must be a reaction map: %s", string(body))
|
|
return m
|
|
}
|
|
|
|
// TestHumaReaction exercises the v2 reaction surface, mirroring the v1
|
|
// model-level matrix in pkg/models/reaction_test.go. Fixture reactions.yml
|
|
// seeds reaction #1: user1 reacted "👋" on task #1.
|
|
func TestHumaReaction(t *testing.T) {
|
|
e, err := setupTestEnv()
|
|
require.NoError(t, err)
|
|
token := humaTokenFor(t, &testuser1)
|
|
|
|
t.Run("List returns the map with the reacting user", func(t *testing.T) {
|
|
rec := humaRequest(t, e, http.MethodGet, "/api/v2/tasks/1/reactions", "", token, "")
|
|
require.Equal(t, http.StatusOK, rec.Code, "body: %s", rec.Body.String())
|
|
m := reactionMapFromBody(t, rec.Body.Bytes())
|
|
require.Len(t, m["👋"], 1, "fixture reaction must be present; body: %s", rec.Body.String())
|
|
assert.Equal(t, int64(1), m["👋"][0].ID, "the reacting user is user1")
|
|
})
|
|
|
|
t.Run("Create then list reflects the new reaction", func(t *testing.T) {
|
|
rec := humaRequest(t, e, http.MethodPost, "/api/v2/tasks/1/reactions", `{"value":"🦙"}`, token, "")
|
|
require.Equal(t, http.StatusCreated, rec.Code, "body: %s", rec.Body.String())
|
|
assert.Contains(t, rec.Body.String(), `"value":"🦙"`)
|
|
|
|
rec = humaRequest(t, e, http.MethodGet, "/api/v2/tasks/1/reactions", "", token, "")
|
|
require.Equal(t, http.StatusOK, rec.Code, "body: %s", rec.Body.String())
|
|
m := reactionMapFromBody(t, rec.Body.Bytes())
|
|
require.Len(t, m["🦙"], 1, "created reaction must appear in the list; body: %s", rec.Body.String())
|
|
assert.Equal(t, int64(1), m["🦙"][0].ID)
|
|
})
|
|
|
|
t.Run("Delete removes the reaction", func(t *testing.T) {
|
|
// Remove the fixture reaction (user1's "👋" on task #1) and confirm via a follow-up list.
|
|
rec := humaRequest(t, e, http.MethodPost, "/api/v2/tasks/1/reactions/delete", `{"value":"👋"}`, token, "")
|
|
require.Equal(t, http.StatusOK, rec.Code, "delete is POST-with-body returning 200; body: %s", rec.Body.String())
|
|
|
|
rec = humaRequest(t, e, http.MethodGet, "/api/v2/tasks/1/reactions", "", token, "")
|
|
require.Equal(t, http.StatusOK, rec.Code, "body: %s", rec.Body.String())
|
|
m := reactionMapFromBody(t, rec.Body.Bytes())
|
|
assert.NotContains(t, m, "👋", "deleted reaction must be gone; body: %s", rec.Body.String())
|
|
})
|
|
|
|
t.Run("Invalid entitykind is rejected", func(t *testing.T) {
|
|
// The enum tag on the path param makes Huma reject unknown kinds before the handler runs.
|
|
rec := humaRequest(t, e, http.MethodGet, "/api/v2/loremipsum/1/reactions", "", token, "")
|
|
assert.Equal(t, http.StatusUnprocessableEntity, rec.Code, "body: %s", rec.Body.String())
|
|
})
|
|
|
|
t.Run("Forbidden - no access to the entity", func(t *testing.T) {
|
|
// Task #34 lives in a private project user1 cannot see.
|
|
rec := humaRequest(t, e, http.MethodGet, "/api/v2/tasks/34/reactions", "", token, "")
|
|
assert.Equal(t, http.StatusForbidden, rec.Code, "body: %s", rec.Body.String())
|
|
})
|
|
|
|
t.Run("Nonexistent entity", func(t *testing.T) {
|
|
rec := humaRequest(t, e, http.MethodGet, "/api/v2/tasks/9999999/reactions", "", token, "")
|
|
assert.Equal(t, http.StatusNotFound, rec.Code, "body: %s", rec.Body.String())
|
|
})
|
|
|
|
t.Run("Create forbidden - no access to the entity", func(t *testing.T) {
|
|
rec := humaRequest(t, e, http.MethodPost, "/api/v2/tasks/34/reactions", `{"value":"🦙"}`, token, "")
|
|
assert.Equal(t, http.StatusForbidden, rec.Code, "body: %s", rec.Body.String())
|
|
})
|
|
}
|