309 lines
9.5 KiB
JavaScript
309 lines
9.5 KiB
JavaScript
'use strict';
|
|
|
|
const request = require('supertest');
|
|
const app = require('../../src/main/app');
|
|
const { setDb } = require('../../src/db/knex');
|
|
const { createTestDb } = require('../helpers/testDb');
|
|
const { issueToken } = require('../../src/utils/jwt');
|
|
|
|
function makeUser(overrides = {}) {
|
|
return {
|
|
id: require('uuid').v4(),
|
|
email: 'jane@example.com',
|
|
name: 'Jane Doe',
|
|
profile_picture_url: null,
|
|
email_verified: true,
|
|
deleted_at: null,
|
|
deletion_scheduled_at: null,
|
|
created_at: new Date().toISOString(),
|
|
updated_at: new Date().toISOString(),
|
|
...overrides,
|
|
};
|
|
}
|
|
|
|
describe('Pantry Routes', () => {
|
|
let db;
|
|
let user;
|
|
let token;
|
|
|
|
beforeEach(() => {
|
|
user = makeUser();
|
|
db = createTestDb({ users: [user] });
|
|
setDb(db);
|
|
token = issueToken(user).token;
|
|
});
|
|
|
|
// ── GET /v1/pantry ──────────────────────────────────────────────────────────
|
|
|
|
describe('GET /v1/pantry', () => {
|
|
it('returns empty items array for new user', async () => {
|
|
const res = await request(app)
|
|
.get('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`);
|
|
|
|
expect(res.status).toBe(200);
|
|
expect(res.body.items).toEqual([]);
|
|
expect(res.body.synced_at).toBeDefined();
|
|
});
|
|
|
|
it('returns pantry items for authenticated user', async () => {
|
|
db.seedTable('pantry_items', [
|
|
{
|
|
id: 'item-1',
|
|
user_id: user.id,
|
|
item_name: 'Flour',
|
|
item_name_lower: 'flour',
|
|
quantity: 5,
|
|
last_modified: new Date().toISOString(),
|
|
created_at: new Date().toISOString(),
|
|
updated_at: new Date().toISOString(),
|
|
},
|
|
]);
|
|
|
|
const res = await request(app)
|
|
.get('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`);
|
|
|
|
expect(res.status).toBe(200);
|
|
expect(res.body.items).toHaveLength(1);
|
|
expect(res.body.items[0].item_name).toBe('Flour');
|
|
});
|
|
|
|
it('returns 401 without token', async () => {
|
|
const res = await request(app).get('/v1/pantry');
|
|
expect(res.status).toBe(401);
|
|
});
|
|
|
|
it('does not return items belonging to other users', async () => {
|
|
const otherUser = makeUser({ id: 'other-user-id', email: 'other@example.com' });
|
|
db.seedTable('pantry_items', [
|
|
{
|
|
id: 'item-other',
|
|
user_id: otherUser.id,
|
|
item_name: 'Sugar',
|
|
item_name_lower: 'sugar',
|
|
quantity: 2,
|
|
last_modified: new Date().toISOString(),
|
|
created_at: new Date().toISOString(),
|
|
updated_at: new Date().toISOString(),
|
|
},
|
|
]);
|
|
|
|
const res = await request(app)
|
|
.get('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`);
|
|
|
|
expect(res.status).toBe(200);
|
|
expect(res.body.items).toHaveLength(0);
|
|
});
|
|
});
|
|
|
|
// ── POST /v1/pantry ─────────────────────────────────────────────────────────
|
|
|
|
describe('POST /v1/pantry', () => {
|
|
it('adds a new pantry item', async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Flour', quantity: 5 });
|
|
|
|
expect(res.status).toBe(201);
|
|
expect(res.body.item.item_name).toBe('Flour');
|
|
expect(res.body.item.quantity).toBe(5);
|
|
expect(res.body.item.id).toBeDefined();
|
|
});
|
|
|
|
it('returns 409 for duplicate item (case-insensitive)', async () => {
|
|
await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Flour', quantity: 5 });
|
|
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'flour', quantity: 3 });
|
|
|
|
expect(res.status).toBe(409);
|
|
expect(res.body.code).toBe('DUPLICATE_ITEM');
|
|
});
|
|
|
|
it('returns 409 for duplicate with different capitalisation', async () => {
|
|
await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Protein Powder', quantity: 1 });
|
|
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'PROTEIN POWDER', quantity: 1 });
|
|
|
|
expect(res.status).toBe(409);
|
|
});
|
|
|
|
it('returns 400 for zero quantity', async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Flour', quantity: 0 });
|
|
|
|
expect(res.status).toBe(400);
|
|
});
|
|
|
|
it('returns 400 for negative quantity', async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Flour', quantity: -1 });
|
|
|
|
expect(res.status).toBe(400);
|
|
});
|
|
|
|
it('returns 400 for fractional quantity', async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Flour', quantity: 1.5 });
|
|
|
|
expect(res.status).toBe(400);
|
|
});
|
|
|
|
it('returns 400 for missing item_name', async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ quantity: 5 });
|
|
|
|
expect(res.status).toBe(400);
|
|
});
|
|
|
|
it('returns 400 for blank item_name', async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: ' ', quantity: 5 });
|
|
|
|
expect(res.status).toBe(400);
|
|
});
|
|
|
|
it('returns 401 without token', async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.send({ item_name: 'Flour', quantity: 5 });
|
|
|
|
expect(res.status).toBe(401);
|
|
});
|
|
});
|
|
|
|
// ── PUT /v1/pantry/:item_id ─────────────────────────────────────────────────
|
|
|
|
describe('PUT /v1/pantry/:item_id', () => {
|
|
let itemId;
|
|
|
|
beforeEach(async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Flour', quantity: 5 });
|
|
itemId = res.body.item.id;
|
|
});
|
|
|
|
it('updates quantity of existing item', async () => {
|
|
const res = await request(app)
|
|
.put(`/v1/pantry/${itemId}`)
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ quantity: 10 });
|
|
|
|
expect(res.status).toBe(200);
|
|
expect(res.body.item.quantity).toBe(10);
|
|
});
|
|
|
|
it('returns 404 for non-existent item', async () => {
|
|
const res = await request(app)
|
|
.put('/v1/pantry/00000000-0000-0000-0000-000000000000')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ quantity: 10 });
|
|
|
|
expect(res.status).toBe(404);
|
|
});
|
|
|
|
it('returns 404 for item belonging to another user', async () => {
|
|
const otherUser = makeUser({ id: 'other-id', email: 'other@example.com' });
|
|
const otherToken = issueToken(otherUser).token;
|
|
|
|
const res = await request(app)
|
|
.put(`/v1/pantry/${itemId}`)
|
|
.set('Authorization', `Bearer ${otherToken}`)
|
|
.send({ quantity: 10 });
|
|
|
|
expect(res.status).toBe(404);
|
|
});
|
|
|
|
it('returns 400 for invalid quantity', async () => {
|
|
const res = await request(app)
|
|
.put(`/v1/pantry/${itemId}`)
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ quantity: -5 });
|
|
|
|
expect(res.status).toBe(400);
|
|
});
|
|
});
|
|
|
|
// ── DELETE /v1/pantry/:item_id ──────────────────────────────────────────────
|
|
|
|
describe('DELETE /v1/pantry/:item_id', () => {
|
|
let itemId;
|
|
|
|
beforeEach(async () => {
|
|
const res = await request(app)
|
|
.post('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`)
|
|
.send({ item_name: 'Butter', quantity: 2 });
|
|
itemId = res.body.item.id;
|
|
});
|
|
|
|
it('deletes an existing pantry item', async () => {
|
|
const res = await request(app)
|
|
.delete(`/v1/pantry/${itemId}`)
|
|
.set('Authorization', `Bearer ${token}`);
|
|
|
|
expect(res.status).toBe(204);
|
|
|
|
// Verify item is gone
|
|
const getRes = await request(app)
|
|
.get('/v1/pantry')
|
|
.set('Authorization', `Bearer ${token}`);
|
|
expect(getRes.body.items).toHaveLength(0);
|
|
});
|
|
|
|
it('records a tombstone for sync', async () => {
|
|
await request(app)
|
|
.delete(`/v1/pantry/${itemId}`)
|
|
.set('Authorization', `Bearer ${token}`);
|
|
|
|
const tombstones = db.getTable('deleted_records');
|
|
expect(tombstones.some((t) => t.record_id === itemId)).toBe(true);
|
|
});
|
|
|
|
it('returns 404 for non-existent item', async () => {
|
|
const res = await request(app)
|
|
.delete('/v1/pantry/00000000-0000-0000-0000-000000000000')
|
|
.set('Authorization', `Bearer ${token}`);
|
|
|
|
expect(res.status).toBe(404);
|
|
});
|
|
|
|
it('returns 404 for item belonging to another user', async () => {
|
|
const otherUser = makeUser({ id: 'other-id', email: 'other@example.com' });
|
|
const otherToken = issueToken(otherUser).token;
|
|
|
|
const res = await request(app)
|
|
.delete(`/v1/pantry/${itemId}`)
|
|
.set('Authorization', `Bearer ${otherToken}`);
|
|
|
|
expect(res.status).toBe(404);
|
|
});
|
|
});
|
|
});
|