nexarch/web/task-board/app/api/tasks/route.test.ts

import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
import { NextRequest } from "next/server";
import { GET } from "./route";

describe("GET /api/tasks", () => {
  const originalFetch = global.fetch;
  const originalEnv = process.env.TASK_BOARD_API_URL;

  beforeEach(() => {
    process.env.TASK_BOARD_API_URL = "http://backend-mandant-a.local";
  });
  afterEach(() => {
    global.fetch = originalFetch;
    process.env.TASK_BOARD_API_URL = originalEnv;
  });

  it("liefert 400 ohne userId", async () => {
    const req = new NextRequest("http://localhost/api/tasks");
    const res = await GET(req);
    expect(res.status).toBe(400);
  });

  it("ruft ausschliesslich das konfigurierte Backend auf und reicht die Antwort durch", async () => {
    let capturedURL = "";
    let capturedHeaders: Headers | undefined;
    global.fetch = vi.fn(async (url: string | URL, init?: RequestInit) => {
      capturedURL = url.toString();
      capturedHeaders = new Headers(init?.headers);
      return new Response(JSON.stringify([{ ID: "1", Title: "x" }]), { status: 200 });
    }) as typeof fetch;

    const req = new NextRequest("http://localhost/api/tasks?userId=alice");
    const res = await GET(req);

    expect(res.status).toBe(200);
    expect(capturedURL).toBe("http://backend-mandant-a.local/tasks");
    expect(capturedHeaders?.get("X-User-Id")).toBe("alice");
  });

  // AK5: ein Client-seitiger Mandanten-Parameter darf die Zielinstanz
  // nicht umlenken -- die Route liest nur 'userId' aus der Anfrage, der
  // Mandant ist durch TASK_BOARD_API_URL beim Deployment fest gebunden.
  it("ignoriert einen client-seitigen Mandanten-Parameter, Ziel bleibt das konfigurierte Backend", async () => {
    let capturedURL = "";
    global.fetch = vi.fn(async (url: string | URL) => {
      capturedURL = url.toString();
      return new Response(JSON.stringify([]), { status: 200 });
    }) as typeof fetch;

    const req = new NextRequest("http://localhost/api/tasks?userId=alice&tenant=mandant-b&mandant=mandant-b");
    await GET(req);

    expect(capturedURL).toBe("http://backend-mandant-a.local/tasks");
  });
});