ApiCore/ApiCore-Backend/test/apiaries.e2e-spec.ts

import { INestApplication } from '@nestjs/common';
import * as bcrypt from 'bcryptjs';
import request from 'supertest';
import { App } from 'supertest/types';
import { PrismaService } from '../src/prisma/prisma.service';
import { createTestApp } from './utils/create-test-app';
import { login } from './utils/api';

interface ApiaryBody {
  id: string;
  status: string;
  notes: string | null;
}

describe('Apiaries (e2e)', () => {
  let app: INestApplication<App>;
  let prisma: PrismaService;
  const beekeeperEmail = `apiaries-e2e-beekeeper-${Date.now()}@example.com`;
  const readonlyEmail = `apiaries-e2e-readonly-${Date.now()}@example.com`;
  const password = 'SuperSecret123!';
  let beekeeperId: string;
  let readonlyId: string;
  let beekeeperToken: string;
  let readonlyToken: string;
  let apiaryId: string;

  beforeAll(async () => {
    app = await createTestApp();
    prisma = app.get(PrismaService);

    const passwordHash = await bcrypt.hash(password, 12);
    const beekeeper = await prisma.user.create({
      data: {
        email: beekeeperEmail,
        passwordHash,
        name: 'Beekeeper',
        role: 'BEEKEEPER',
      },
    });
    beekeeperId = beekeeper.id;
    const readonly = await prisma.user.create({
      data: {
        email: readonlyEmail,
        passwordHash,
        name: 'Readonly',
        role: 'READONLY',
      },
    });
    readonlyId = readonly.id;

    beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken;
    readonlyToken = (await login(app, readonlyEmail, password)).accessToken;
  });

  afterAll(async () => {
    if (apiaryId) {
      await prisma.apiary.delete({ where: { id: apiaryId } });
    }
    await prisma.refreshToken.deleteMany({
      where: { userId: { in: [beekeeperId, readonlyId] } },
    });
    await prisma.auditLog.deleteMany({
      where: { userId: { in: [beekeeperId, readonlyId] } },
    });
    await prisma.user.deleteMany({
      where: { id: { in: [beekeeperId, readonlyId] } },
    });
    await app.close();
  });

  it('rejects create for a READONLY user', () => {
    return request(app.getHttpServer())
      .post('/api/v1/apiaries')
      .set('Authorization', `Bearer ${readonlyToken}`)
      .send({ name: 'Sollte nicht klappen' })
      .expect(403);
  });

  it('lets a BEEKEEPER create an apiary', async () => {
    const response = await request(app.getHttpServer())
      .post('/api/v1/apiaries')
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .send({ name: 'Heimstand', location: 'Garten' })
      .expect(201);

    const created = response.body as ApiaryBody;
    expect(created.id).toEqual(expect.any(String));
    apiaryId = created.id;
  });

  it('lets a READONLY user list and read apiaries', async () => {
    const list = await request(app.getHttpServer())
      .get('/api/v1/apiaries')
      .set('Authorization', `Bearer ${readonlyToken}`)
      .expect(200);
    const apiaries = list.body as ApiaryBody[];
    expect(apiaries.some((apiary) => apiary.id === apiaryId)).toBe(true);

    await request(app.getHttpServer())
      .get(`/api/v1/apiaries/${apiaryId}`)
      .set('Authorization', `Bearer ${readonlyToken}`)
      .expect(200);
  });

  it('lets a BEEKEEPER update and deactivate an apiary', async () => {
    const updated = await request(app.getHttpServer())
      .patch(`/api/v1/apiaries/${apiaryId}`)
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .send({ notes: 'aktualisiert' })
      .expect(200);
    expect((updated.body as ApiaryBody).notes).toBe('aktualisiert');

    const deactivated = await request(app.getHttpServer())
      .post(`/api/v1/apiaries/${apiaryId}/deactivate`)
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .expect(201);
    expect((deactivated.body as ApiaryBody).status).toBe('INACTIVE');
  });
});