import { INestApplication } from '@nestjs/common'; import * as bcrypt from 'bcryptjs'; import request from 'supertest'; import { App } from 'supertest/types'; import { PrismaService } from '../src/prisma/prisma.service'; import { createTestApp } from './utils/create-test-app'; import { login } from './utils/api'; interface InspectionBody { id: string; colonyId: string; } interface TaskBody { id: string; sourceInspectionId: string | null; } describe('Inspections (e2e)', () => { let app: INestApplication; let prisma: PrismaService; const staffEmail = `inspections-e2e-staff-${Date.now()}@example.com`; const readonlyEmail = `inspections-e2e-readonly-${Date.now()}@example.com`; const password = 'SuperSecret123!'; let staffId: string; let readonlyId: string; let staffToken: string; let readonlyToken: string; let apiaryId: string; let colonyId: string; let inspectionId: string; let taskId: string; beforeAll(async () => { app = await createTestApp(); prisma = app.get(PrismaService); const passwordHash = await bcrypt.hash(password, 12); const staff = await prisma.user.create({ data: { email: staffEmail, passwordHash, name: 'Staff', legacyRole: 'STAFF', role: { connect: { key: 'STAFF' } }, }, }); staffId = staff.id; const readonly = await prisma.user.create({ data: { email: readonlyEmail, passwordHash, name: 'Readonly', legacyRole: 'READONLY', role: { connect: { key: 'READONLY' } }, }, }); readonlyId = readonly.id; staffToken = (await login(app, staffEmail, password)).accessToken; readonlyToken = (await login(app, readonlyEmail, password)).accessToken; const apiary = await prisma.apiary.create({ data: { name: `Stand ${Date.now()}` }, }); apiaryId = apiary.id; const colony = await prisma.colony.create({ data: { code: `V-${Date.now()}`, apiaryId, colonyType: 'PRODUCTION_COLONY', }, }); colonyId = colony.id; }); afterAll(async () => { if (taskId) { await prisma.task.delete({ where: { id: taskId } }); } await prisma.inspection.deleteMany({ where: { colonyId } }); await prisma.colony.deleteMany({ where: { id: colonyId } }); await prisma.apiary.deleteMany({ where: { id: apiaryId } }); await prisma.refreshToken.deleteMany({ where: { userId: { in: [staffId, readonlyId] } }, }); await prisma.auditLog.deleteMany({ where: { userId: { in: [staffId, readonlyId] } }, }); await prisma.user.deleteMany({ where: { id: { in: [staffId, readonlyId] } }, }); await app.close(); }); it('rejects create for a READONLY user', () => { return request(app.getHttpServer()) .post('/api/v1/inspections') .set('Authorization', `Bearer ${readonlyToken}`) .send({ colonyId, date: new Date().toISOString() }) .expect(403); }); it('lets a STAFF user document an inspection', async () => { const response = await request(app.getHttpServer()) .post('/api/v1/inspections') .set('Authorization', `Bearer ${staffToken}`) .send({ colonyId, date: new Date().toISOString(), queenSeen: true, colonyStrength: 8, }) .expect(201); inspectionId = (response.body as InspectionBody).id; expect(inspectionId).toEqual(expect.any(String)); }); it('lists inspections for the colony', async () => { const response = await request(app.getHttpServer()) .get(`/api/v1/colonies/${colonyId}/inspections`) .set('Authorization', `Bearer ${readonlyToken}`) .expect(200); const inspections = response.body as InspectionBody[]; expect(inspections.some((entry) => entry.id === inspectionId)).toBe(true); }); it('creates a follow-up task from the inspection', async () => { const response = await request(app.getHttpServer()) .post(`/api/v1/inspections/${inspectionId}/create-task`) .set('Authorization', `Bearer ${staffToken}`) .send({ title: 'Varroabehandlung planen' }) .expect(201); const task = response.body as TaskBody; taskId = task.id; expect(task.sourceInspectionId).toBe(inspectionId); }); });