import { INestApplication } from '@nestjs/common'; import * as bcrypt from 'bcryptjs'; import request from 'supertest'; import { App } from 'supertest/types'; import { PrismaService } from '../src/prisma/prisma.service'; import { createTestApp } from './utils/create-test-app'; import { login } from './utils/api'; interface NotificationBody { id: string; priority: string; read: boolean; } describe('Notifications (e2e)', () => { let app: INestApplication; let prisma: PrismaService; const beekeeperEmail = `notifications-e2e-beekeeper-${Date.now()}@example.com`; const password = 'SuperSecret123!'; const staffEmail = `notifications-e2e-staff-${Date.now()}@example.com`; let beekeeperId: string; let staffId: string; let beekeeperToken: string; let staffToken: string; let notificationId: string; beforeAll(async () => { app = await createTestApp(); prisma = app.get(PrismaService); const passwordHash = await bcrypt.hash(password, 12); const beekeeper = await prisma.user.create({ data: { email: beekeeperEmail, passwordHash, name: 'Beekeeper', role: 'BEEKEEPER', }, }); beekeeperId = beekeeper.id; const staff = await prisma.user.create({ data: { email: staffEmail, passwordHash, name: 'Staff', role: 'STAFF' }, }); staffId = staff.id; beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken; staffToken = (await login(app, staffEmail, password)).accessToken; const notification = await prisma.notification.create({ data: { userId: beekeeperId, priority: 'KRITISCH', message: `Kritischer Testalarm ${Date.now()}`, }, }); notificationId = notification.id; }); afterAll(async () => { await prisma.notification.deleteMany({ where: { id: notificationId } }); await prisma.refreshToken.deleteMany({ where: { userId: { in: [beekeeperId, staffId] } }, }); await prisma.auditLog.deleteMany({ where: { userId: { in: [beekeeperId, staffId] } }, }); await prisma.user.deleteMany({ where: { id: { in: [beekeeperId, staffId] } }, }); await app.close(); }); it('lists notifications for the authenticated user', async () => { const response = await request(app.getHttpServer()) .get('/api/v1/notifications') .set('Authorization', `Bearer ${beekeeperToken}`) .expect(200); const notifications = response.body as NotificationBody[]; expect( notifications.some( (notification) => notification.id === notificationId && notification.priority === 'KRITISCH', ), ).toBe(true); }); it("rejects marking another user's notification as read", () => { return request(app.getHttpServer()) .post(`/api/v1/notifications/${notificationId}/read`) .set('Authorization', `Bearer ${staffToken}`) .expect(403); }); it('marks a notification as read', async () => { const response = await request(app.getHttpServer()) .post(`/api/v1/notifications/${notificationId}/read`) .set('Authorization', `Bearer ${beekeeperToken}`) .expect(201); const notification = response.body as NotificationBody; expect(notification.read).toBe(true); }); });