ApiCore/ApiCore-Backend/test/qr.e2e-spec.ts

import { INestApplication } from '@nestjs/common';
import * as bcrypt from 'bcryptjs';
import request from 'supertest';
import { App } from 'supertest/types';
import { PrismaService } from '../src/prisma/prisma.service';
import { createTestApp } from './utils/create-test-app';
import { login } from './utils/api';

describe('QR codes (e2e)', () => {
  let app: INestApplication<App>;
  let prisma: PrismaService;
  const beekeeperEmail = `qr-e2e-beekeeper-${Date.now()}@example.com`;
  const password = 'SuperSecret123!';
  let beekeeperId: string;
  let beekeeperToken: string;
  let apiaryId: string;
  let colonyId: string;

  beforeAll(async () => {
    app = await createTestApp();
    prisma = app.get(PrismaService);

    const passwordHash = await bcrypt.hash(password, 12);
    const beekeeper = await prisma.user.create({
      data: {
        email: beekeeperEmail,
        passwordHash,
        name: 'Beekeeper',
        role: 'BEEKEEPER',
      },
    });
    beekeeperId = beekeeper.id;
    beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken;

    const apiary = await prisma.apiary.create({
      data: { name: `Stand ${Date.now()}` },
    });
    apiaryId = apiary.id;
    const colony = await prisma.colony.create({
      data: {
        code: `V-${Date.now()}`,
        apiaryId,
        colonyType: 'PRODUCTION_COLONY',
      },
    });
    colonyId = colony.id;
  });

  afterAll(async () => {
    await prisma.colony.deleteMany({ where: { id: colonyId } });
    await prisma.apiary.deleteMany({ where: { id: apiaryId } });
    await prisma.refreshToken.deleteMany({ where: { userId: beekeeperId } });
    await prisma.auditLog.deleteMany({ where: { userId: beekeeperId } });
    await prisma.user.deleteMany({ where: { id: beekeeperId } });
    await app.close();
  });

  it('returns an SVG QR code for an existing colony', async () => {
    const response = await request(app.getHttpServer())
      .get(`/api/v1/qr/colonies/${colonyId}.svg`)
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .expect(200);
    expect(response.headers['content-type']).toContain('image/svg+xml');
    const svgBody = response.body as Buffer;
    expect(svgBody.toString('utf-8')).toContain('<svg');
  });

  it('returns 404 for a colony that does not exist', () => {
    return request(app.getHttpServer())
      .get('/api/v1/qr/colonies/does-not-exist.svg')
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .expect(404);
  });

  it('returns 400 for an unsupported entity type', () => {
    return request(app.getHttpServer())
      .get(`/api/v1/qr/unknown/${colonyId}.svg`)
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .expect(400);
  });

  it('returns the plain deep-link URL for NFC writing', async () => {
    const response = await request(app.getHttpServer())
      .get(`/api/v1/qr/colonies/${colonyId}/link`)
      .set('Authorization', `Bearer ${beekeeperToken}`)
      .expect(200);
    const body = response.body as { url: string };
    expect(body.url).toContain(`colonyId=${colonyId}`);
  });
});