spend-sparrow/test/auth_test.go

package test

import (
	"spend-sparrow/internal/db"
	"spend-sparrow/internal/types"
	"testing"
	"time"

	"github.com/google/uuid"
	"github.com/jmoiron/sqlx"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
)

func setupDb(t *testing.T) *sqlx.DB {
	t.Helper()

	d, err := sqlx.Open("sqlite3", ":memory:")
	if err != nil {
		t.Fatalf("Error opening database: %v", err)
	}
	t.Cleanup(func() {
		err := d.Close()
		if err != nil {
			panic(err)
		}
	})

	err = db.RunMigrations(d, "../")
	if err != nil {
		t.Fatalf("Error running migrations: %v", err)
	}

	return d
}

func TestUser(t *testing.T) {
	t.Parallel()

	t.Run("should insert and get the same", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		verifiedAt := time.Date(2020, 1, 5, 13, 0, 0, 0, time.UTC)
		createAt := time.Date(2020, 1, 5, 12, 0, 0, 0, time.UTC)
		expected := types.NewUser(uuid.New(), "some@email.de", true, &verifiedAt, false, []byte("somePass"), []byte("someSalt"), createAt)

		err := underTest.InsertUser(expected)
		require.NoError(t, err)

		actual, err := underTest.GetUser(expected.Id)
		require.NoError(t, err)
		assert.Equal(t, expected, actual)

		actual, err = underTest.GetUserByEmail(expected.Email)
		require.NoError(t, err)
		assert.Equal(t, expected, actual)
	})
	t.Run("should return ErrNotFound", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		_, err := underTest.GetUserByEmail("nonExistentEmail")
		assert.Equal(t, db.ErrNotFound, err)
	})
	t.Run("should return ErrUserExist", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		verifiedAt := time.Date(2020, 1, 5, 13, 0, 0, 0, time.UTC)
		createAt := time.Date(2020, 1, 5, 12, 0, 0, 0, time.UTC)
		user := types.NewUser(uuid.New(), "some@email.de", true, &verifiedAt, false, []byte("somePass"), []byte("someSalt"), createAt)

		err := underTest.InsertUser(user)
		require.NoError(t, err)

		err = underTest.InsertUser(user)
		assert.Equal(t, db.ErrAlreadyExists, err)
	})
	t.Run("should return ErrInternal on missing NOT NULL fields", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		createAt := time.Date(2020, 1, 5, 12, 0, 0, 0, time.UTC)
		user := types.NewUser(uuid.New(), "some@email.de", false, nil, false, []byte("somePass"), nil, createAt)

		err := underTest.InsertUser(user)
		assert.Equal(t, types.ErrInternal, err)
	})
}

func TestToken(t *testing.T) {
	t.Parallel()

	t.Run("should insert and get the same", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		createAt := time.Date(2020, 1, 5, 12, 0, 0, 0, time.UTC)
		expiresAt := createAt.Add(24 * time.Hour)
		expected := types.NewToken(uuid.New(), "sessionId", "token", types.TokenTypeCsrf, createAt, expiresAt)

		err := underTest.InsertToken(expected)
		require.NoError(t, err)

		actual, err := underTest.GetToken(expected.Token)
		require.NoError(t, err)
		assert.Equal(t, expected, actual)

		expected.SessionId = ""
		actuals, err := underTest.GetTokensByUserIdAndType(expected.UserId, expected.Type)
		require.NoError(t, err)
		assert.Equal(t, []*types.Token{expected}, actuals)

		expected.SessionId = "sessionId"
		expected.UserId = uuid.Nil
		actuals, err = underTest.GetTokensBySessionIdAndType(expected.SessionId, expected.Type)
		require.NoError(t, err)
		assert.Equal(t, []*types.Token{expected}, actuals)
	})
	t.Run("should insert and return multiple tokens", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		createAt := time.Date(2020, 1, 5, 12, 0, 0, 0, time.UTC)
		expiresAt := createAt.Add(24 * time.Hour)
		userId := uuid.New()
		expected1 := types.NewToken(userId, "sessionId", "token1", types.TokenTypeCsrf, createAt, expiresAt)
		expected2 := types.NewToken(userId, "sessionId", "token2", types.TokenTypeCsrf, createAt, expiresAt)

		err := underTest.InsertToken(expected1)
		require.NoError(t, err)
		err = underTest.InsertToken(expected2)
		require.NoError(t, err)

		expected1.UserId = uuid.Nil
		expected2.UserId = uuid.Nil
		actuals, err := underTest.GetTokensBySessionIdAndType(expected1.SessionId, expected1.Type)
		require.NoError(t, err)
		assert.Equal(t, []*types.Token{expected1, expected2}, actuals)

		expected1.SessionId = ""
		expected2.SessionId = ""
		expected1.UserId = userId
		expected2.UserId = userId
		actuals, err = underTest.GetTokensByUserIdAndType(userId, expected1.Type)
		require.NoError(t, err)
		assert.Equal(t, []*types.Token{expected1, expected2}, actuals)
	})
	t.Run("should return ErrNotFound", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		_, err := underTest.GetToken("nonExistent")
		assert.Equal(t, db.ErrNotFound, err)

		_, err = underTest.GetTokensByUserIdAndType(uuid.New(), types.TokenTypeEmailVerify)
		assert.Equal(t, db.ErrNotFound, err)

		_, err = underTest.GetTokensBySessionIdAndType("sessionId", types.TokenTypeEmailVerify)
		assert.Equal(t, db.ErrNotFound, err)
	})
	t.Run("should return ErrAlreadyExists", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		verifiedAt := time.Date(2020, 1, 5, 13, 0, 0, 0, time.UTC)
		createAt := time.Date(2020, 1, 5, 12, 0, 0, 0, time.UTC)
		user := types.NewUser(uuid.New(), "some@email.de", true, &verifiedAt, false, []byte("somePass"), []byte("someSalt"), createAt)

		err := underTest.InsertUser(user)
		require.NoError(t, err)

		err = underTest.InsertUser(user)
		assert.Equal(t, db.ErrAlreadyExists, err)
	})
	t.Run("should return ErrInternal on missing NOT NULL fields", func(t *testing.T) {
		t.Parallel()
		d := setupDb(t)

		underTest := db.NewAuthSqlite(d)

		createAt := time.Date(2020, 1, 5, 12, 0, 0, 0, time.UTC)
		user := types.NewUser(uuid.New(), "some@email.de", false, nil, false, []byte("somePass"), nil, createAt)

		err := underTest.InsertUser(user)
		assert.Equal(t, types.ErrInternal, err)
	})
}