ApiCore/ApiCore-Backend/test/notifications.e2e-spec.ts

import { INestApplication } from '@nestjs/common';
import * as bcrypt from 'bcryptjs';
import request from 'supertest';
import { App } from 'supertest/types';
import { PrismaService } from '../src/prisma/prisma.service';
import { createTestApp } from './utils/create-test-app';
import { login } from './utils/api';

interface NotificationBody {
  id: string;
  priority: string;
  read: boolean;
}

describe('Notifications (e2e)', () => {
  let app: INestApplication<App>;
  let prisma: PrismaService;
  const beekeeperEmail = `notifications-e2e-beekeeper-${Date.now()}@example.com`;
  const password = 'SuperSecret123!';
  const staffEmail = `notifications-e2e-staff-${Date.now()}@example.com`;
  let beekeeperId: string;
  let staffId: string;
  let beekeeperToken: string;
  let staffToken: string;
  let notificationId: string;

  beforeAll(async () => {
    app = await createTestApp();
    prisma = app.get(PrismaService);

    const passwordHash = await bcrypt.hash(password, 12);
    const beekeeper = await prisma.user.create({
      data: {
        email: beekeeperEmail,
        passwordHash,
        name: 'Beekeeper',
        legacyRole: 'BEEKEEPER',
        role: { connect: { key: 'BEEKEEPER' } },
      },
    });
    beekeeperId = beekeeper.id;
    const staff = await prisma.user.create({
      data: {
        email: staffEmail,
        passwordHash,
        name: 'Staff',
        legacyRole: 'STAFF',
        role: { connect: { key: 'STAFF' } },
      },
    });
    staffId = staff.id;
    beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken;
    staffToken = (await login(app, staffEmail, password)).accessToken;

    const notification = await prisma.notification.create({
      data: {
        userId: beekeeperId,
        priority: 'KRITISCH',
        message: `Kritischer Testalarm ${Date.now()}`,
      },
    });
    notificationId = notification.id;
  });

  afterAll(async () => {
    await prisma.notification.deleteMany({ where: { id: notificationId } });
    await prisma.refreshToken.deleteMany({
      where: { userId: { in: [beekeeperId, staffId] } },
    });
    await prisma.auditLog.deleteMany({
      where: { userId: { in: [beekeeperId, staffId] } },
    });
    await prisma.user.deleteMany({
      where: { id: { in: [beekeeperId, staffId] } },
    });
    await app.close();
  });

  it('lists notifications for the authenticated user', async () => {
    const response = await request(app.getHttpServer())
      .get('/api/v1/notifications')
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .expect(200);
    const notifications = response.body as NotificationBody[];
    expect(
      notifications.some(
        (notification) =>
          notification.id === notificationId &&
          notification.priority === 'KRITISCH',
      ),
    ).toBe(true);
  });

  it("rejects marking another user's notification as read", () => {
    return request(app.getHttpServer())
      .post(`/api/v1/notifications/${notificationId}/read`)
      .set('Authorization', `Bearer ${staffToken}`)
      .expect(403);
  });

  it('marks a notification as read', async () => {
    const response = await request(app.getHttpServer())
      .post(`/api/v1/notifications/${notificationId}/read`)
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .expect(201);
    const notification = response.body as NotificationBody;
    expect(notification.read).toBe(true);
  });
});