create-ailk 0.23.0 → 0.25.1

package/templates/apps/api/src/routes/auth/__tests__/user.test.ts

@@ -1,609 +0,0 @@
-import { FastifyInstance } from 'fastify';
-import { userRoutes } from '../user';
-
-// Mock Prisma — lib/prisma.ts wraps the external DB boundary (PrismaClient
-// requires a live connection). This call auto-resolves to the manual mock at
-// src/lib/__mocks__/prisma.ts which covers user/userData/apiToken models.
-// eslint-disable-next-line no-restricted-syntax -- lib/prisma.ts wraps the external DB boundary (PrismaClient requires a live connection); __mocks__/prisma.ts is the repo-standard test double for this boundary.
-jest.mock('../../../lib/prisma.js');
-
-import { prisma } from '../../../lib/prisma.js';
-
-// Helper to create authenticated request
-function createAuthenticatedRequest(userId: string) {
-  return {
-    userId,
-  };
-}
-
-describe('User Routes', () => {
-  let app: FastifyInstance;
-
-  beforeEach(async () => {
-    const fastify = require('fastify')();
-    // Add userId decorator for testing
-    fastify.decorateRequest('userId', null);
-    await fastify.register(userRoutes);
-    app = fastify;
-    jest.clearAllMocks();
-  });
-
-  afterEach(async () => {
-    await app.close();
-  });
-
-  describe('GET /v1/user/profile', () => {
-    it('should return 401 when user is not authenticated', async () => {
-      // ACT
-      const response = await app.inject({
-        method: 'GET',
-        url: '/v1/user/profile',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(401);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('Authentication required');
-    });
-
-    it('should return user profile when authenticated', async () => {
-      // ARRANGE
-      const mockUser = {
-        id: 'user_123',
-        email: 'test@example.com',
-        name: 'Test User',
-        image: null,
-        role: 'USER',
-        createdAt: new Date(),
-      };
-
-      (prisma.user.findUnique as jest.Mock).mockResolvedValue(mockUser);
-
-      // Create a new app instance with userId set via hook
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      
-      // Add preHandler to set userId
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'GET',
-        url: '/v1/user/profile',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(200);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(true);
-      expect(body.data.id).toBe('user_123');
-
-      await fastify2.close();
-    });
-
-    it('should return 404 when user is not found', async () => {
-      // ARRANGE
-      (prisma.user.findUnique as jest.Mock).mockResolvedValue(null);
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'GET',
-        url: '/v1/user/profile',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(404);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('User not found');
-
-      await fastify2.close();
-    });
-
-    it('should return 500 on database error', async () => {
-      // ARRANGE
-      (prisma.user.findUnique as jest.Mock).mockRejectedValue(
-        new Error('Database error')
-      );
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'GET',
-        url: '/v1/user/profile',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(500);
-
-      await fastify2.close();
-    });
-  });
-
-  describe('PATCH /v1/user/profile', () => {
-    it('should return 401 when user is not authenticated', async () => {
-      const response = await app.inject({
-        method: 'PATCH',
-        url: '/v1/user/profile',
-        payload: { name: 'New Name' },
-      });
-
-      expect(response.statusCode).toBe(401);
-    });
-
-    it('should update user profile with valid data', async () => {
-      // ARRANGE
-      const updatedUser = {
-        id: 'user_123',
-        email: 'test@example.com',
-        name: 'New Name',
-        image: 'https://example.com/avatar.jpg',
-        role: 'USER',
-        updatedAt: new Date(),
-      };
-
-      (prisma.user.update as jest.Mock).mockResolvedValue(updatedUser);
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'PATCH',
-        url: '/v1/user/profile',
-        payload: { name: 'New Name', image: 'https://example.com/avatar.jpg' },
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(200);
-      expect(prisma.user.update).toHaveBeenCalledWith({
-        where: { id: 'user_123' },
-        data: { name: 'New Name', image: 'https://example.com/avatar.jpg' },
-        select: expect.any(Object),
-      });
-
-      await fastify2.close();
-    });
-
-    it('should return 400 on validation error', async () => {
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      const response = await fastify2.inject({
-        method: 'PATCH',
-        url: '/v1/user/profile',
-        payload: { image: 'not-a-url' }, // Invalid URL
-      });
-
-      expect(response.statusCode).toBe(400);
-
-      await fastify2.close();
-    });
-
-    it('should return 500 on non-ZodError database error', async () => {
-      // ARRANGE — throw a plain Error (not ZodError) to hit the 500 branch
-      (prisma.user.update as jest.Mock).mockRejectedValue(
-        new Error('DB connection lost')
-      );
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'PATCH',
-        url: '/v1/user/profile',
-        payload: { name: 'New Name' },
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(500);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('Internal server error');
-
-      await fastify2.close();
-    });
-  });
-
-  describe('GET /v1/user/data/:key', () => {
-    it('should return 401 when user is not authenticated', async () => {
-      const response = await app.inject({
-        method: 'GET',
-        url: '/v1/user/data/preferences',
-      });
-
-      expect(response.statusCode).toBe(401);
-    });
-
-    it('should return user data when found', async () => {
-      // ARRANGE
-      const mockUserData = {
-        userId: 'user_123',
-        key: 'preferences',
-        value: { theme: 'dark' },
-      };
-
-      (prisma.userData.findUnique as jest.Mock).mockResolvedValue(mockUserData);
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'GET',
-        url: '/v1/user/data/preferences',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(200);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(true);
-
-      await fastify2.close();
-    });
-
-    it('should return 404 when data is not found', async () => {
-      (prisma.userData.findUnique as jest.Mock).mockResolvedValue(null);
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      const response = await fastify2.inject({
-        method: 'GET',
-        url: '/v1/user/data/nonexistent',
-      });
-
-      expect(response.statusCode).toBe(404);
-
-      await fastify2.close();
-    });
-  });
-
-  describe('reserved user-data keys — #6034 § D12', () => {
-    async function buildAuthenticatedApp(): Promise<FastifyInstance> {
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-      return fastify2;
-    }
-
-    it.each(['commerce.subscription_dunning', 'Commerce.Subscription_Dunning', 'system.anything'])(
-      'GET %s refuses 403 with zero Prisma calls',
-      async (key) => {
-        const fastify2 = await buildAuthenticatedApp();
-
-        const response = await fastify2.inject({
-          method: 'GET',
-          url: `/v1/user/data/${key}`,
-        });
-
-        expect(response.statusCode).toBe(403);
-        expect(JSON.parse(response.body)).toEqual({
-          success: false,
-          error: 'reserved-key',
-        });
-        expect(prisma.userData.findUnique).not.toHaveBeenCalled();
-
-        await fastify2.close();
-      },
-    );
-
-    it.each(['commerce.subscription_dunning', 'Commerce.Subscription_Dunning', 'system.anything'])(
-      'PUT %s refuses 403 with zero Prisma calls',
-      async (key) => {
-        const fastify2 = await buildAuthenticatedApp();
-
-        const response = await fastify2.inject({
-          method: 'PUT',
-          url: `/v1/user/data/${key}`,
-          payload: { status: 'active' },
-        });
-
-        expect(response.statusCode).toBe(403);
-        expect(JSON.parse(response.body)).toEqual({
-          success: false,
-          error: 'reserved-key',
-        });
-        expect(prisma.userData.upsert).not.toHaveBeenCalled();
-
-        await fastify2.close();
-      },
-    );
-
-    it.each(['commerce.subscription_dunning', 'Commerce.Subscription_Dunning', 'system.anything'])(
-      'DELETE %s refuses 403 with zero Prisma calls',
-      async (key) => {
-        const fastify2 = await buildAuthenticatedApp();
-
-        const response = await fastify2.inject({
-          method: 'DELETE',
-          url: `/v1/user/data/${key}`,
-        });
-
-        expect(response.statusCode).toBe(403);
-        expect(JSON.parse(response.body)).toEqual({
-          success: false,
-          error: 'reserved-key',
-        });
-        expect(prisma.userData.deleteMany).not.toHaveBeenCalled();
-
-        await fastify2.close();
-      },
-    );
-
-    it('an unreserved key is unaffected — the existing prefs path stays green', async () => {
-      const fastify2 = await buildAuthenticatedApp();
-      (prisma.userData.upsert as jest.Mock).mockResolvedValue({
-        userId: 'user_123',
-        key: 'preferences',
-        value: { theme: 'light' },
-      });
-
-      const response = await fastify2.inject({
-        method: 'PUT',
-        url: '/v1/user/data/preferences',
-        payload: { theme: 'light' },
-      });
-
-      expect(response.statusCode).toBe(200);
-      expect(prisma.userData.upsert).toHaveBeenCalled();
-
-      await fastify2.close();
-    });
-  });
-
-  describe('PUT /v1/user/data/:key', () => {
-    it('should return 401 when user is not authenticated', async () => {
-      const response = await app.inject({
-        method: 'PUT',
-        url: '/v1/user/data/preferences',
-        payload: { theme: 'light' },
-      });
-
-      expect(response.statusCode).toBe(401);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('Authentication required');
-    });
-
-    it('should create or update user data', async () => {
-      // ARRANGE
-      const mockUserData = {
-        userId: 'user_123',
-        key: 'preferences',
-        value: { theme: 'light' },
-      };
-
-      (prisma.userData.upsert as jest.Mock).mockResolvedValue(mockUserData);
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'PUT',
-        url: '/v1/user/data/preferences',
-        payload: { theme: 'light' },
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(200);
-      expect(prisma.userData.upsert).toHaveBeenCalled();
-
-      await fastify2.close();
-    });
-
-    it('should return 500 on database error', async () => {
-      // ARRANGE
-      (prisma.userData.upsert as jest.Mock).mockRejectedValue(
-        new Error('DB write failed')
-      );
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'PUT',
-        url: '/v1/user/data/preferences',
-        payload: { theme: 'light' },
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(500);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('Internal server error');
-
-      await fastify2.close();
-    });
-
-    it('rejects a value whose serialized size exceeds 64 KiB — #6034 § D12', async () => {
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      const oversized = { blob: 'x'.repeat(70 * 1024) };
-
-      const response = await fastify2.inject({
-        method: 'PUT',
-        url: '/v1/user/data/preferences',
-        payload: oversized,
-      });
-
-      expect(response.statusCode).toBe(400);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('value-too-large');
-      expect(prisma.userData.upsert).not.toHaveBeenCalled();
-
-      await fastify2.close();
-    });
-  });
-
-  describe('DELETE /v1/user/data/:key', () => {
-    it('should return 401 when user is not authenticated', async () => {
-      const response = await app.inject({
-        method: 'DELETE',
-        url: '/v1/user/data/preferences',
-      });
-
-      expect(response.statusCode).toBe(401);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('Authentication required');
-    });
-
-    it('should delete user data', async () => {
-      // ARRANGE
-      (prisma.userData.deleteMany as jest.Mock).mockResolvedValue({ count: 1 });
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'DELETE',
-        url: '/v1/user/data/preferences',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(200);
-      expect(prisma.userData.deleteMany).toHaveBeenCalledWith({
-        where: { userId: 'user_123', key: 'preferences' },
-      });
-
-      await fastify2.close();
-    });
-
-    it('should return 500 on database error', async () => {
-      // ARRANGE
-      (prisma.userData.deleteMany as jest.Mock).mockRejectedValue(
-        new Error('DB delete failed')
-      );
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'DELETE',
-        url: '/v1/user/data/preferences',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(500);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('Internal server error');
-
-      await fastify2.close();
-    });
-  });
-
-  describe('GET /v1/user/data/:key — error path', () => {
-    it('should return 500 on database error', async () => {
-      // ARRANGE
-      (prisma.userData.findUnique as jest.Mock).mockRejectedValue(
-        new Error('DB read failed')
-      );
-
-      const fastify2 = require('fastify')();
-      fastify2.decorateRequest('userId', null);
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any -- #506/#507: pre-existing test-hygiene violation
-      fastify2.addHook('preHandler', async (request: any) => {
-        request.userId = 'user_123';
-      });
-      await fastify2.register(userRoutes);
-
-      // ACT
-      const response = await fastify2.inject({
-        method: 'GET',
-        url: '/v1/user/data/preferences',
-      });
-
-      // ASSERT
-      expect(response.statusCode).toBe(500);
-      const body = JSON.parse(response.body);
-      expect(body.success).toBe(false);
-      expect(body.error).toBe('Internal server error');
-
-      await fastify2.close();
-    });
-  });
-});