112 lines
3.0 KiB
TypeScript
112 lines
3.0 KiB
TypeScript
import { NextRequest } from "next/server";
|
|
import { beforeEach, describe, expect, it, vi } from "vitest";
|
|
|
|
const isDatabaseConfiguredMock = vi.fn();
|
|
const findUniqueMock = vi.fn();
|
|
const updateMock = vi.fn();
|
|
const getSessionUserMock = vi.fn();
|
|
|
|
vi.mock("../../lib/server/env", () => ({
|
|
isDatabaseConfigured: () => isDatabaseConfiguredMock(),
|
|
}));
|
|
|
|
vi.mock("../../lib/server/db", () => ({
|
|
prisma: {
|
|
publishedRule: {
|
|
findUnique: (...args: unknown[]) => findUniqueMock(...args),
|
|
update: (...args: unknown[]) => updateMock(...args),
|
|
},
|
|
},
|
|
}));
|
|
|
|
vi.mock("../../lib/server/session", () => ({
|
|
getSessionUser: () => getSessionUserMock(),
|
|
}));
|
|
|
|
import { PATCH } from "../../app/api/rules/[id]/route";
|
|
|
|
function makeContext(id: string) {
|
|
return { params: Promise.resolve({ id }) };
|
|
}
|
|
|
|
beforeEach(() => {
|
|
isDatabaseConfiguredMock.mockReset();
|
|
findUniqueMock.mockReset();
|
|
updateMock.mockReset();
|
|
getSessionUserMock.mockReset();
|
|
getSessionUserMock.mockResolvedValue({ id: "user-1", email: "a@b.c" });
|
|
});
|
|
|
|
describe("PATCH /api/rules/[id]", () => {
|
|
it("returns 401 when unauthenticated", async () => {
|
|
isDatabaseConfiguredMock.mockReturnValue(true);
|
|
getSessionUserMock.mockResolvedValueOnce(null);
|
|
const res = await PATCH(
|
|
new NextRequest("https://x.test/api/rules/r1", {
|
|
method: "PATCH",
|
|
body: JSON.stringify({
|
|
title: "T",
|
|
summary: null,
|
|
document: { sections: [] },
|
|
}),
|
|
}),
|
|
makeContext("r1"),
|
|
);
|
|
expect(res.status).toBe(401);
|
|
expect(updateMock).not.toHaveBeenCalled();
|
|
});
|
|
|
|
it("returns 403 when the rule belongs to another user", async () => {
|
|
isDatabaseConfiguredMock.mockReturnValue(true);
|
|
findUniqueMock.mockResolvedValueOnce({
|
|
id: "r1",
|
|
userId: "other",
|
|
});
|
|
const res = await PATCH(
|
|
new NextRequest("https://x.test/api/rules/r1", {
|
|
method: "PATCH",
|
|
body: JSON.stringify({
|
|
title: "T",
|
|
summary: null,
|
|
document: { sections: [] },
|
|
}),
|
|
}),
|
|
makeContext("r1"),
|
|
);
|
|
expect(res.status).toBe(403);
|
|
expect(updateMock).not.toHaveBeenCalled();
|
|
});
|
|
|
|
it("updates the rule when owner matches", async () => {
|
|
isDatabaseConfiguredMock.mockReturnValue(true);
|
|
findUniqueMock.mockResolvedValueOnce({
|
|
id: "r1",
|
|
userId: "user-1",
|
|
});
|
|
updateMock.mockResolvedValueOnce({});
|
|
const res = await PATCH(
|
|
new NextRequest("https://x.test/api/rules/r1", {
|
|
method: "PATCH",
|
|
body: JSON.stringify({
|
|
title: "Updated",
|
|
summary: "Context",
|
|
document: { sections: [], coreValues: [] },
|
|
}),
|
|
}),
|
|
makeContext("r1"),
|
|
);
|
|
expect(res.status).toBe(200);
|
|
const body = (await res.json()) as { ok: boolean };
|
|
expect(body.ok).toBe(true);
|
|
expect(updateMock).toHaveBeenCalledWith(
|
|
expect.objectContaining({
|
|
where: { id: "r1" },
|
|
data: expect.objectContaining({
|
|
title: "Updated",
|
|
summary: "Context",
|
|
}),
|
|
}),
|
|
);
|
|
});
|
|
});
|