@redacto.io/consent-sdk-react 10.0.0-beta.7 → 10.0.0-beta.9

package/tests/Form.test.tsx

@@ -524,12 +524,14 @@ describe('Form (P2-SDK-3)', () => {
     expect(submitButton.disabled).toBe(true);
   });
 
-  it('skips the ledger picker overlay when no ledgerBaseUrl is configured', async () => {
-    // Without a ledger, consents still live in Python and the form/data
-    // groups are authoritative — the overlay must not fire a user-consents
-    // read (it would hit the legacy endpoint and mis-map its shape).
+  it('runs the picker overlay against the legacy endpoint when no ledgerBaseUrl is configured', async () => {
+    // `getUserConsents` serves the same grouped payload from either backend
+    // (ledger `/public/...` or Python `/dsar/privacy-center/...`), so the
+    // overlay must run in both modes — Python's form/data no longer emits
+    // product groups, and skipping the read leaves the picker empty.
     baseUrlStub.ledgerBaseUrl = undefined;
     setupSession();
+    fetchUserConsents.mockResolvedValue(null);
     getFormData.mockResolvedValue(
       makeFormData({
         direct_groups: [
@@ -545,12 +547,12 @@ describe('Form (P2-SDK-3)', () => {
 
     render(<Form onCreateRequest={vi.fn()} />);
     await waitFor(() => expect(getFormData).toHaveBeenCalled());
+    await waitFor(() => expect(fetchUserConsents).toHaveBeenCalled());
 
     pickRequestType(RequestTypeEnum.ERASURE);
     await waitFor(() => {
       expect(screen.getByText('Acme Loyalty')).toBeInTheDocument();
     });
-    expect(fetchUserConsents).not.toHaveBeenCalled();
   });
 
   it('runs the ledger picker overlay when ledgerBaseUrl is configured', async () => {
@@ -565,6 +567,141 @@ describe('Form (P2-SDK-3)', () => {
     await waitFor(() => expect(fetchUserConsents).toHaveBeenCalled());
   });
 
+  it('keeps the form/data groups when user-consents comes back with no groups', async () => {
+    // A successful-but-empty read must never overwrite groups form/data did
+    // supply — that turned a populated picker into "No products available".
+    setupSession();
+    fetchUserConsents.mockResolvedValue({ direct: [], nominated: [] });
+    getFormData.mockResolvedValue(
+      makeFormData({
+        direct_groups: [
+          makeGroup(),
+          makeGroup({
+            product_uuid: 'prod-direct-2',
+            product_name: 'Acme Rewards',
+            purposes: [basePurpose('purp-2', 'Analytics')],
+          }),
+        ],
+      }),
+    );
+
+    render(<Form onCreateRequest={vi.fn()} />);
+    await waitFor(() => expect(fetchUserConsents).toHaveBeenCalled());
+
+    pickRequestType(RequestTypeEnum.ERASURE);
+    await waitFor(() => {
+      expect(screen.getByText('Acme Loyalty')).toBeInTheDocument();
+    });
+    expect(screen.getByText('Acme Rewards')).toBeInTheDocument();
+    expect(screen.queryByText('No products available')).not.toBeInTheDocument();
+  });
+
+  it('falls back to the legacy flat purposes list when the backend exposes no product groups', async () => {
+    // Pre-grouping backends return purposes without any product grouping.
+    // Those consents must stay reachable under one synthetic group instead
+    // of the picker claiming the principal has none.
+    setupSession();
+    fetchUserConsents.mockResolvedValue(null);
+    getFormData.mockResolvedValue(
+      makeFormData({
+        direct_groups: [],
+        nominated_groups: [],
+        purposes: [{ purpose: basePurpose('purp-flat', 'Marketing') }],
+      }),
+    );
+
+    render(<Form onCreateRequest={vi.fn()} />);
+    await waitFor(() => expect(getFormData).toHaveBeenCalled());
+
+    pickRequestType(RequestTypeEnum.ACCESS);
+
+    await waitFor(() => {
+      expect(screen.getByText('Your data')).toBeInTheDocument();
+    });
+    expect(screen.getByText('Marketing')).toBeInTheDocument();
+    expect(screen.queryByText('No products available')).not.toBeInTheDocument();
+  });
+
+  it('keeps the empty state when the flat purposes carry no data elements', async () => {
+    // Nothing selectable survives `buildGroupPurposes`, so the synthetic group
+    // would render an unusable panel — the empty state is the honest answer.
+    setupSession();
+    fetchUserConsents.mockResolvedValue(null);
+    getFormData.mockResolvedValue(
+      makeFormData({
+        direct_groups: [],
+        nominated_groups: [],
+        purposes: [{ purpose: basePurpose('purp-flat', 'Marketing', []) }],
+      }),
+    );
+
+    render(<Form onCreateRequest={vi.fn()} />);
+    await waitFor(() => expect(getFormData).toHaveBeenCalled());
+
+    pickRequestType(RequestTypeEnum.ACCESS);
+
+    await waitFor(() => {
+      expect(screen.getByText('No products available')).toBeInTheDocument();
+    });
+    expect(screen.queryByText('Your data')).not.toBeInTheDocument();
+  });
+
+  it('submits the legacy flat fallback as an org-level case without a product anchor', async () => {
+    // The synthetic group has no server-side product, so the case must go up
+    // in the pre-grouping org-level shape rather than carrying a made-up
+    // `product_uuid` the backend cannot resolve.
+    setupSession();
+    fetchUserConsents.mockResolvedValue(null);
+    getFormData.mockResolvedValue(
+      makeFormData({
+        direct_groups: [],
+        nominated_groups: [],
+        purposes: [{ purpose: basePurpose('purp-flat', 'Marketing') }],
+      }),
+    );
+    createCaseRequest.mockResolvedValueOnce({
+      case_id: 'CASE-FLAT',
+      uuid: 'uuid-flat',
+    });
+
+    render(<Form onCreateRequest={vi.fn()} />);
+    await waitFor(() => expect(getFormData).toHaveBeenCalled());
+
+    pickRequestType(RequestTypeEnum.ACCESS);
+
+    await waitFor(() => {
+      expect(screen.getByText('Marketing')).toBeInTheDocument();
+    });
+
+    const marketingCheckbox = screen
+      .getByText('Marketing')
+      .closest('label')
+      ?.querySelector('input[type="checkbox"]') as HTMLInputElement | null;
+    expect(marketingCheckbox).toBeTruthy();
+    fireEvent.click(marketingCheckbox!);
+
+    const confirmCheckbox = (
+      screen.getAllByRole('checkbox') as HTMLInputElement[]
+    ).find((c) => c.closest('label')?.textContent?.includes('I confirm'));
+    expect(confirmCheckbox).toBeTruthy();
+    fireEvent.click(confirmCheckbox!);
+
+    const submitButton = screen.getByRole('button', { name: /^submit$/i });
+    expect(submitButton).not.toBeDisabled();
+    await act(async () => {
+      fireEvent.click(submitButton);
+    });
+
+    await waitFor(() => expect(createCaseRequest).toHaveBeenCalledTimes(1));
+
+    const payload = createCaseRequest.mock.calls[0][2];
+    expect('product_uuid' in payload).toBe(false);
+    expect('data_principal_uuid' in payload).toBe(false);
+    expect(payload.request_details.purposes).toEqual([
+      { purpose_uuid: 'purp-flat', data_element_uuids: ['purp-flat-de1'] },
+    ]);
+  });
+
   it('renders the product step for DSAR types when direct_groups is present', async () => {
     setupSession();
     const direct = makeGroup({

package/tests/consentClient.test.ts

@@ -93,6 +93,24 @@ describe('createConsentClient — legacy mode (no ledgerBaseUrl)', () => {
     });
   });
 
+  it('records the selected language in the legacy manage-consent body', async () => {
+    await client.manageConsent(
+      baseRequest,
+      'purp-1',
+      'jane@example.com',
+      'revoke',
+      undefined,
+      undefined,
+      undefined,
+      undefined,
+      undefined,
+      undefined,
+      undefined,
+      'doi',
+    );
+    expect(fetchedBody()).toMatchObject({ language: 'doi' });
+  });
+
   it('routes getReceipts to the legacy dsar/privacy-center path', async () => {
     await client.getReceipts(baseRequest, { skip: 0, limit: 10 });
     expect(fetchedUrl()).toBe(`${LEGACY_PREFIX}/receipts?skip=0&limit=10`);
@@ -103,6 +121,16 @@ describe('createConsentClient — legacy mode (no ledgerBaseUrl)', () => {
     await client.getReceiptPdf(baseRequest, 'r-1');
     expect(fetchedUrl()).toBe(`${LEGACY_PREFIX}/receipts/r-1/pdf`);
   });
+
+  it('appends the language query param to getActivities when provided', async () => {
+    await client.getActivities(baseRequest, 0, 15, 'doi');
+    expect(fetchedUrl()).toContain('language=doi');
+  });
+
+  it('omits the language query param from getActivities for the default language', async () => {
+    await client.getActivities(baseRequest, 0, 15);
+    expect(fetchedUrl()).not.toContain('language=');
+  });
 });
 
 describe('createConsentClient — ledger mode (ledgerBaseUrl set)', () => {
@@ -151,6 +179,24 @@ describe('createConsentClient — ledger mode (ledgerBaseUrl set)', () => {
     });
   });
 
+  it('records the selected language in the ledger partial submit body', async () => {
+    await client.manageConsent(
+      baseRequest,
+      'purp-1',
+      'jane@example.com',
+      'revoke',
+      undefined,
+      undefined,
+      undefined,
+      undefined,
+      undefined,
+      'notice-1',
+      [{ uuid: 'de-1', selected: true }],
+      'doi',
+    );
+    expect(fetchedBody()).toMatchObject({ language: 'doi' });
+  });
+
   it('throws from manageConsent when noticeUuid is missing', async () => {
     await expect(
       client.manageConsent(baseRequest, 'purp-1', 'jane@example.com', 'revoke'),