sm-journal-plugin/integration_test.go

package journal_test

import (
	"encoding/json"
	"fmt"
	"net/http"
	"os"
	"path/filepath"
	"strings"
	"testing"
	"time"

	"git.golem15.com/golem15/sm-journal-plugin/controllers"
	"git.golem15.com/golem15/sm-journal-plugin/models"
)

func TestJournalEndToEnd(t *testing.T) {
	env := newIntegrationEnv(t)

	if len(env.plugins) != 3 {
		ids := make([]string, len(env.plugins))
		for i, p := range env.plugins {
			ids[i] = p.ID()
		}
		t.Fatalf("activated plugins = %v, want user+translate+journal", ids)
	}
	if env.plugins[0].ID() != "golem15.user" || env.plugins[1].ID() != "golem15.translate" || env.plugins[2].ID() != "golem15.journal" {
		ids := make([]string, len(env.plugins))
		for i, p := range env.plugins {
			ids[i] = p.ID()
		}
		t.Fatalf("Requires order = %v", ids)
	}
	if !env.app.HasPlugin("golem15.user") || !env.app.HasPlugin("golem15.translate") || !env.app.HasPlugin("golem15.journal") {
		t.Fatal("activated plugin set is incomplete")
	}

	if !env.gdb.Migrator().HasColumn("golem15_journal_posts", "redactor_id") {
		t.Fatal("redactor_id column missing")
	}
	for _, name := range (models.Post{}).Fillable() {
		if name == "redactor_id" || name == "user_id" {
			t.Fatalf("Fillable includes forbidden %q", name)
		}
	}

	ownerTok := env.admin(t, controllers.PermissionAccessPosts, controllers.PermissionAccessPublish)
	ownerID := env.lastUserID(t)
	otherTok := env.admin(t, controllers.PermissionAccessPosts)
	privTok := env.admin(t, controllers.PermissionAccessPosts, controllers.PermissionAccessOtherPosts)

	past := time.Now().UTC().Add(-time.Hour).Format(time.RFC3339)
	created := env.expect(t, http.StatusCreated, http.MethodPost, adminAPI(adminPostsPath), ownerTok, map[string]any{
		"title":        map[string]any{"en": "Hello", "pl": "Witaj"},
		"slug":         map[string]any{"en": "hello-e2e", "pl": "witaj-e2e"},
		"content":      map[string]any{"en": "Hello **world**", "pl": "Witaj **świecie**"},
		"excerpt":      map[string]any{"en": "Excerpt", "pl": "Wyjątek"},
		"published":    true,
		"published_at": past,
	})
	var published struct {
		ID uint `json:"id"`
	}
	if err := json.Unmarshal(adminDecode(t, created).Data, &published); err != nil || published.ID == 0 {
		t.Fatalf("published create data %s: %v", created.Body.String(), err)
	}

	var host models.Post
	if err := env.gdb.First(&host, published.ID).Error; err != nil {
		t.Fatal(err)
	}
	if host.Title != "Hello" || host.Slug != "hello-e2e" {
		t.Fatalf("host columns = title %q slug %q", host.Title, host.Slug)
	}
	if host.UserID == nil || *host.UserID != ownerID {
		t.Fatalf("host user_id = %v, want %d", host.UserID, ownerID)
	}

	var attrs []struct {
		Locale        string  `gorm:"column:locale"`
		AttributeData *string `gorm:"column:attribute_data"`
	}
	if err := env.gdb.Table("golem15_translate_attributes").
		Where("model_id = ? AND model_type = ?", fmt.Sprint(host.ID), host.MorphName()).
		Find(&attrs).Error; err != nil {
		t.Fatal(err)
	}
	if len(attrs) != 1 || attrs[0].Locale != "pl" || attrs[0].AttributeData == nil {
		t.Fatalf("translate attributes = %+v", attrs)
	}
	var data map[string]any
	if err := json.Unmarshal([]byte(*attrs[0].AttributeData), &data); err != nil {
		t.Fatal(err)
	}
	if data["title"] != "Witaj" {
		t.Fatalf("polish title = %#v", data["title"])
	}

	rid := uint(42)
	host.RedactorID = &rid
	if err := env.gdb.Save(&host).Error; err != nil {
		t.Fatalf("explicit redactor_id assign: %v", err)
	}
	var stored models.Post
	if err := env.gdb.First(&stored, host.ID).Error; err != nil {
		t.Fatal(err)
	}
	if stored.RedactorID == nil || *stored.RedactorID != 42 {
		t.Fatalf("redactor_id after explicit assign = %v", stored.RedactorID)
	}

	draftRec := env.expect(t, http.StatusCreated, http.MethodPost, adminAPI(adminPostsPath), ownerTok, map[string]any{
		"title":   map[string]any{"en": "Draft", "pl": "Szkic"},
		"slug":    map[string]any{"en": "draft-e2e", "pl": "szkic-e2e"},
		"content": map[string]any{"en": "Draft body", "pl": "Treść szkicu"},
	})
	var draft struct {
		ID uint `json:"id"`
	}
	if err := json.Unmarshal(adminDecode(t, draftRec).Data, &draft); err != nil || draft.ID == 0 {
		t.Fatalf("draft create data %s: %v", draftRec.Body.String(), err)
	}

	list := env.call(t, http.MethodGet, "/_journal/api/v1/posts", "", nil)
	if list.Code != http.StatusOK {
		t.Fatalf("anonymous list = %d %s", list.Code, list.Body.String())
	}
	var listBody struct {
		Data []struct {
			Slug string `json:"slug"`
		} `json:"data"`
	}
	if err := json.Unmarshal(list.Body.Bytes(), &listBody); err != nil {
		t.Fatalf("list json: %s err=%v", list.Body.String(), err)
	}
	if len(listBody.Data) != 1 || listBody.Data[0].Slug != "hello-e2e" {
		t.Fatalf("anonymous list = %#v, want only hello-e2e", listBody.Data)
	}

	unauth := env.call(t, http.MethodPost, "/_journal/api/v1/posts", "", map[string]any{
		"title":   "Nope",
		"content": "Body",
	})
	if unauth.Code != http.StatusUnauthorized {
		t.Fatalf("POST without Bearer = %d, want 401: %s", unauth.Code, unauth.Body.String())
	}
	msg, unauthBody := phpErrorString(t, unauth.Body.Bytes())
	if msg != "Authentication required" {
		t.Fatalf("401 error = %#v", unauthBody["error"])
	}
	if _, has := unauthBody["data"]; has {
		t.Fatalf("401 must not include data: %s", unauth.Body.String())
	}

	apiCreated := env.call(t, http.MethodPost, "/_journal/api/v1/posts", ownerTok, map[string]any{
		"title":   "API created",
		"content": "Bearer write",
		"slug":    "api-created-e2e",
	})
	if apiCreated.Code != http.StatusCreated {
		t.Fatalf("Bearer POST = %d, want 201: %s", apiCreated.Code, apiCreated.Body.String())
	}

	anonDraft := env.call(t, http.MethodGet, "/_journal/api/v1/posts/draft-e2e", "", nil)
	if anonDraft.Code != http.StatusNotFound {
		t.Fatalf("anonymous draft show = %d, want 404: %s", anonDraft.Code, anonDraft.Body.String())
	}
	_, anonBody := phpErrorString(t, anonDraft.Body.Bytes())
	if _, has := anonBody["data"]; has {
		t.Fatalf("JOURNAL-005: 404 must not include data: %s", anonDraft.Body.String())
	}

	stranger := env.call(t, http.MethodGet, "/_journal/api/v1/posts/draft-e2e", otherTok, nil)
	if stranger.Code != http.StatusNotFound {
		t.Fatalf("stranger draft show = %d, want 404: %s", stranger.Code, stranger.Body.String())
	}

	ownerShow := env.call(t, http.MethodGet, "/_journal/api/v1/posts/draft-e2e", ownerTok, nil)
	if ownerShow.Code != http.StatusOK {
		t.Fatalf("owner draft show = %d, want 200: %s", ownerShow.Code, ownerShow.Body.String())
	}

	privShow := env.call(t, http.MethodGet, "/_journal/api/v1/posts/draft-e2e", privTok, nil)
	if privShow.Code != http.StatusOK {
		t.Fatalf("access_other_posts draft show = %d, want 200: %s", privShow.Code, privShow.Body.String())
	}

	assertFixtureAbsentFromProduction(t)
}

func TestJournalEndToEndFixtureAbsentFromProduction(t *testing.T) {
	assertFixtureAbsentFromProduction(t)
}

func assertFixtureAbsentFromProduction(t *testing.T) {
	t.Helper()
	root, err := os.Getwd()
	if err != nil {
		t.Fatal(err)
	}
	err = filepath.Walk(root, func(path string, info os.FileInfo, err error) error {
		if err != nil {
			return err
		}
		if info.IsDir() {
			if info.Name() == ".git" {
				return filepath.SkipDir
			}
			return nil
		}
		if strings.HasSuffix(path, "_test.go") || !strings.HasSuffix(path, ".go") {
			return nil
		}
		body, err := os.ReadFile(path)
		if err != nil {
			return err
		}
		text := string(body)
		if strings.Contains(text, "acme.fixture") || strings.Contains(text, `Acme\Fixture\Models\Post`) {
			t.Errorf("production source %s names the test fixture", path)
		}
		if strings.Contains(text, `"git.golem15.com/golem15/sm-user-plugin"`) {
			t.Errorf("production source %s imports sm-user-plugin", path)
		}
		return nil
	})
	if err != nil {
		t.Fatal(err)
	}
}