import { INestApplication } from '@nestjs/common'; import * as bcrypt from 'bcryptjs'; import request from 'supertest'; import { App } from 'supertest/types'; import { PrismaService } from '../src/prisma/prisma.service'; import { createTestApp } from './utils/create-test-app'; import { login } from './utils/api'; interface TreatmentBody { id: string; colonyId: string; } describe('Treatments (e2e)', () => { let app: INestApplication; let prisma: PrismaService; const beekeeperEmail = `treatments-e2e-beekeeper-${Date.now()}@example.com`; const staffEmail = `treatments-e2e-staff-${Date.now()}@example.com`; const password = 'SuperSecret123!'; let beekeeperId: string; let staffId: string; let beekeeperToken: string; let staffToken: string; let apiaryId: string; let colonyId: string; let treatmentId: string; beforeAll(async () => { app = await createTestApp(); prisma = app.get(PrismaService); const passwordHash = await bcrypt.hash(password, 12); const beekeeper = await prisma.user.create({ data: { email: beekeeperEmail, passwordHash, name: 'Beekeeper', role: 'BEEKEEPER', }, }); beekeeperId = beekeeper.id; const staff = await prisma.user.create({ data: { email: staffEmail, passwordHash, name: 'Staff', role: 'STAFF' }, }); staffId = staff.id; beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken; staffToken = (await login(app, staffEmail, password)).accessToken; const apiary = await prisma.apiary.create({ data: { name: `Stand ${Date.now()}` }, }); apiaryId = apiary.id; const colony = await prisma.colony.create({ data: { code: `V-${Date.now()}`, apiaryId, colonyType: 'PRODUCTION_COLONY', }, }); colonyId = colony.id; }); afterAll(async () => { await prisma.treatment.deleteMany({ where: { colonyId } }); await prisma.colony.deleteMany({ where: { id: colonyId } }); await prisma.apiary.deleteMany({ where: { id: apiaryId } }); await prisma.refreshToken.deleteMany({ where: { userId: { in: [beekeeperId, staffId] } }, }); await prisma.auditLog.deleteMany({ where: { userId: { in: [beekeeperId, staffId] } }, }); await prisma.user.deleteMany({ where: { id: { in: [beekeeperId, staffId] } }, }); await app.close(); }); it('rejects create for a STAFF user', () => { return request(app.getHttpServer()) .post('/api/v1/treatments') .set('Authorization', `Bearer ${staffToken}`) .send({ colonyId, date: new Date().toISOString(), product: 'Ameisensäure', }) .expect(403); }); it('lets a BEEKEEPER user record a treatment', async () => { const response = await request(app.getHttpServer()) .post('/api/v1/treatments') .set('Authorization', `Bearer ${beekeeperToken}`) .send({ colonyId, date: new Date().toISOString(), product: 'Ameisensäure', amount: '15 ml', }) .expect(201); treatmentId = (response.body as TreatmentBody).id; expect(treatmentId).toEqual(expect.any(String)); }); it('lists treatments for the colony', async () => { const response = await request(app.getHttpServer()) .get(`/api/v1/colonies/${colonyId}/treatments`) .set('Authorization', `Bearer ${staffToken}`) .expect(200); const treatments = response.body as TreatmentBody[]; expect(treatments.some((entry) => entry.id === treatmentId)).toBe(true); }); });