wakapi/routes/utils/user_utils_test.go

package utils

import (
	"context"
	"github.com/go-chi/chi/v5"
	"github.com/muety/wakapi/middlewares"
	"github.com/muety/wakapi/mocks"
	"github.com/muety/wakapi/models"
	"github.com/stretchr/testify/assert"
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"
)

func TestCheckEffectiveUser_Current(t *testing.T) {
	// request current as normal user -> return myself
	r, w, userServiceMock := mockUserAwareRequest("current", "user1")
	user, err := CheckEffectiveUser(w, r, userServiceMock, "current")
	assert.Nil(t, err)
	assert.Equal(t, "user1", user.ID)
	userServiceMock.AssertNumberOfCalls(t, "GetUserById", 0)
}

func TestCheckEffectiveUser_Other(t *testing.T) {
	// request someone else as admin -> return someone else
	r, w, userServiceMock := mockUserAwareRequest("user2", "admin")
	user, err := CheckEffectiveUser(w, r, userServiceMock, "current")
	assert.Nil(t, err)
	assert.Equal(t, "user2", user.ID)
	userServiceMock.AssertCalled(t, "GetUserById", "user2")
	userServiceMock.AssertNumberOfCalls(t, "GetUserById", 1)
}

func TestCheckEffectiveUser_FallbackUnauthorized(t *testing.T) {
	// request someone else as non-admin -> error
	r, w, userServiceMock := mockUserAwareRequest("user2", "user1")
	user, err := CheckEffectiveUser(w, r, userServiceMock, "current")
	assert.NotNil(t, err)
	assert.Nil(t, user)
	userServiceMock.AssertNumberOfCalls(t, "GetUserById", 0)
}

func TestCheckEffectiveUser_FallbackEmpty(t *testing.T) {
	// request none -> return myself
	r, w, userServiceMock := mockUserAwareRequest("", "user1")
	user, err := CheckEffectiveUser(w, r, userServiceMock, "current")
	assert.Nil(t, err)
	assert.Equal(t, "user1", user.ID)
	userServiceMock.AssertNumberOfCalls(t, "GetUserById", 0)
}

func TestCheckEffectiveUser_FallbackUnauthenticated(t *testing.T) {
	// request anyone without authentication -> error
	r, w, userServiceMock := mockUserAwareRequest("user1", "")
	user, err := CheckEffectiveUser(w, r, userServiceMock, "current")
	assert.NotNil(t, err)
	assert.Nil(t, user)
	userServiceMock.AssertNumberOfCalls(t, "GetUserById", 0)
}

func mockUserAwareRequest(requestedUser, authorizedUser string) (*http.Request, http.ResponseWriter, *mocks.UserServiceMock) {
	testUser := models.User{
		ID:      authorizedUser,
		IsAdmin: authorizedUser == "admin",
	}

	testPrincipal := middlewares.PrincipalContainer{}
	if authorizedUser != "" {
		testPrincipal.SetPrincipal(&testUser)
	}

	r := httptest.NewRequest("GET", "http://localhost:3000/api/{user}/data", nil)
	r = withUrlParam(r, "user", requestedUser)
	r = r.WithContext(context.WithValue(r.Context(), "principal", &testPrincipal))

	userServiceMock := new(mocks.UserServiceMock)
	userServiceMock.On("GetUserById", "user1").Return(&models.User{ID: "user1"}, nil)
	userServiceMock.On("GetUserById", "user2").Return(&models.User{ID: "user2"}, nil)
	userServiceMock.On("GetUserById", "admin").Return(&models.User{ID: "admin"}, nil)

	return r, httptest.NewRecorder(), userServiceMock
}

func withUrlParam(r *http.Request, key, value string) *http.Request {
	r.URL.RawPath = strings.Replace(r.URL.RawPath, "{"+key+"}", value, 1)
	r.URL.Path = strings.Replace(r.URL.Path, "{"+key+"}", value, 1)
	rctx := chi.NewRouteContext()
	rctx.URLParams.Add(key, value)
	r = r.WithContext(context.WithValue(r.Context(), chi.RouteCtxKey, rctx))
	return r
}