nexarch/mail/internal/mailexportapi/mailexportapi_test.go

package mailexportapi

import (
	"context"
	"net/http"
	"net/http/httptest"
	"testing"

	"gitea.perlbach24.de/scripte/nexarch/common/moduleauth"
)

type fakeExportService struct {
	tenant string
}

func (f *fakeExportService) ExportMailboxZIP(_ context.Context, tenantSlug, _ string) ([]byte, int, error) {
	f.tenant = tenantSlug
	return []byte("zip"), 0, nil
}

func setupTestServer(t *testing.T) (url string, issuer *moduleauth.TestIssuer, svc *fakeExportService) {
	t.Helper()
	svc = &fakeExportService{}
	srv := NewServer(svc)
	mux := http.NewServeMux()
	verifier, iss := moduleauth.NewTestVerifierAndIssuer()
	srv.RegisterRoutes(mux, verifier)
	httpSrv := httptest.NewServer(mux)
	t.Cleanup(httpSrv.Close)
	return httpSrv.URL, iss, svc
}

func get(t *testing.T, url, token string) *http.Response {
	t.Helper()
	req, err := http.NewRequest(http.MethodGet, url, nil)
	if err != nil {
		t.Fatalf("request: %v", err)
	}
	if token != "" {
		req.Header.Set("Authorization", "Bearer "+token)
	}
	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		t.Fatalf("get: %v", err)
	}
	return resp
}

// TestExportRoute_RejectMissingOrInvalidToken belegt dasselbe Muster wie
// mailapi.TestRoutes_RejectMissingOrInvalidToken (INT-18): der frueher
// unauthentifizierte tenant-Query-Parameter ist entfernt, jeder Zugriff
// ohne gueltiges Modul-Token wird abgewiesen.
func TestExportRoute_RejectMissingOrInvalidToken(t *testing.T) {
	url, issuer, _ := setupTestServer(t)
	_, otherIssuer := moduleauth.NewTestVerifierAndIssuer()

	cases := []struct {
		name  string
		token string
	}{
		{"ohne_token", ""},
		{"fremde_signatur", otherIssuer.Token("angreifer", "mandant-a", "user", "mail", "")},
		{"falsches_zielmodul", issuer.Token("u1", "mandant-a", "user", "dms", "")},
		{"token_ohne_aud", issuer.Token("u1", "mandant-a", "user", "", "")},
	}
	for _, c := range cases {
		t.Run(c.name, func(t *testing.T) {
			resp := get(t, url+"/api/v1/mail/export", c.token)
			defer func() { _ = resp.Body.Close() }()
			if resp.StatusCode != http.StatusUnauthorized {
				t.Fatalf("erwartete 401, habe %d", resp.StatusCode)
			}
		})
	}
}

// TestExportRoute_TenantComesFromToken belegt Akzeptanzkriterium 3
// (Mandantenbindung): der Query-Parameter "tenant" wird ignoriert, der
// Dienst erhaelt ausschliesslich den Mandanten aus der Identitaet.
func TestExportRoute_TenantComesFromToken(t *testing.T) {
	url, issuer, svc := setupTestServer(t)
	token := issuer.Token("u1", "mandant-a", "user", "mail", "")

	resp := get(t, url+"/api/v1/mail/export?tenant=mandant-b", token)
	defer func() { _ = resp.Body.Close() }()
	if resp.StatusCode != http.StatusOK {
		t.Fatalf("erwartete 200, habe %d", resp.StatusCode)
	}
	if svc.tenant != "mandant-a" {
		t.Fatalf("tenant = %q, want mandant-a (aus token, nicht query)", svc.tenant)
	}
}