test: write e2e tests for Fostering Requests API

apps/cat-fostering-api-e2e/src/cat-fostering-api/fostering.spec.ts

@@ -0,0 +1,178 @@
+import axios from 'axios';
+
+import {
+  axiosOptionsFactory,
+  createCatProfile,
+  createFosteringRequest,
+  createOryUser,
+  TestUser,
+} from './helpers';
+
+describe('E2E Fostering Requests API tests', () => {
+  let user1: TestUser;
+  let user2: TestUser;
+
+  beforeAll(async () => {
+    user1 = await createOryUser({
+      email: 'guardian@test.it',
+      password: 'p4s$worD!',
+    });
+
+    user2 = await createOryUser({
+      email: 'participant@test.it',
+      password: 'p4s$worD!',
+    });
+  }, 8000);
+
+  describe('POST /api/fostering', () => {
+    it('should create a fostering request', async () => {
+      const catProfile = await createCatProfile({
+        name: 'Godard',
+        description: 'Black and white cat, knows how to open doors',
+        age: 3,
+        sessionToken: user1.sessionToken,
+      });
+      const res = await axios.post(
+        `/api/fostering`,
+        {
+          startDate: new Date(),
+          endDate: new Date(),
+          catProfileId: catProfile.id,
+        },
+        axiosOptionsFactory(user2.sessionToken)
+      );
+
+      expect(res.status).toBe(201);
+    });
+
+    it(`should return 403 if the user is the cat profile owner`, async () => {
+      const catProfile = await createCatProfile({
+        name: 'Godard',
+        description: 'Black and white cat, knows how to open doors',
+        age: 3,
+        sessionToken: user1.sessionToken,
+      });
+      const res = await axios.post(
+        `/api/fostering`,
+        {
+          startDate: new Date(),
+          endDate: new Date(),
+          catProfileId: catProfile.id,
+        },
+        axiosOptionsFactory(user1.sessionToken)
+      );
+
+      expect(res.status).toBe(403);
+    });
+  });
+
+  describe('GET /api/fostering', () => {
+    it.todo('should only see her fostering requests');
+  });
+
+  describe('GET /api/fostering/:id', () => {
+    it.todo('should read the fostering request when user is the participant');
+
+    it.todo(
+      'should read the fostering request when user is the catprofile owner'
+    );
+
+    it.todo(
+      `should return 403 if the user is not the participant or the catprofile owner`
+    );
+  });
+
+  describe('PATCH /api/fostering/:id', () => {
+    it('should update a fostering request when user is the participant', async () => {
+      const catProfile = await createCatProfile({
+        name: 'Romeo',
+        description: 'Grey cat, loves to cuddle',
+        age: 2,
+        sessionToken: user1.sessionToken,
+      });
+      const fosteringRequest = await createFosteringRequest({
+        catProfileId: catProfile.id,
+        startDate: new Date(),
+        endDate: new Date(),
+        sessionToken: user2.sessionToken,
+      });
+
+      const res = await axios.patch(
+        `/api/fostering/${fosteringRequest.id}`,
+        { startDate: new Date() },
+        axiosOptionsFactory(user2.sessionToken)
+      );
+      expect(res.status).toBe(200);
+    });
+
+    it(`should return 403 if the user is not the participant`, async () => {
+      const catProfile = await createCatProfile({
+        name: 'Crousti',
+        description: 'Tabby brown, with a diva attitude',
+        age: 8,
+        sessionToken: user1.sessionToken,
+      });
+      const fosteringRequest = await createFosteringRequest({
+        catProfileId: catProfile.id,
+        startDate: new Date(),
+        endDate: new Date(),
+        sessionToken: user2.sessionToken,
+      });
+
+      const res = await axios.patch(
+        `/api/fostering/${fosteringRequest.id}`,
+        { startDate: new Date() },
+        axiosOptionsFactory(user1.sessionToken)
+      );
+      expect(res.status).toBe(403);
+    });
+  });
+
+  describe('PATCH /api/fostering/:id/approve', () => {
+    it('should approve a fostering request when user is the cat profile owner', async () => {
+      const catProfile = await createCatProfile({
+        name: 'Juliet',
+        description: 'White cat, loves to play',
+        age: 1,
+        sessionToken: user1.sessionToken,
+      });
+      const fosteringRequest = await createFosteringRequest({
+        catProfileId: catProfile.id,
+        startDate: new Date(),
+        endDate: new Date(),
+        sessionToken: user2.sessionToken,
+      });
+
+      const res = await axios.patch(
+        `/api/fostering/${fosteringRequest.id}/approve`,
+        {},
+        axiosOptionsFactory(user1.sessionToken)
+      );
+
+      expect(res.status).toBe(200);
+    });
+
+    it(`should return 403 if the user is not the cat profile owner`, async () => {
+      const catProfile = await createCatProfile({
+        name: 'Crousti',
+        description: 'Tabby brown, with a diva attitude',
+        age: 8,
+        sessionToken: user1.sessionToken,
+      });
+      const fosteringRequest = await createFosteringRequest({
+        catProfileId: catProfile.id,
+        startDate: new Date(),
+        endDate: new Date(),
+        sessionToken: user2.sessionToken,
+      });
+
+      const res = await axios.patch(
+        `/api/fostering/${fosteringRequest.id}/approve`,
+        {},
+        axiosOptionsFactory(user2.sessionToken)
+      );
+
+      expect(res.status).toBe(403);
+    });
+  });
+});

apps/cat-fostering-api-e2e/src/cat-fostering-api/helpers.ts

@@ -95,7 +95,7 @@ export const createOryAdminRelation = ({
   execSync(`npx @getlarge/keto-cli create --tuple '${relationTuple}'`);
 };
 
-export const createCat = async ({
+export const createCatProfile = async ({
   name,
   description,
   age,
@@ -128,6 +128,38 @@ export const createCat = async ({
   return res.data;
 };
 
+export const createFosteringRequest = async ({
+  catProfileId,
+  startDate,
+  endDate,
+  sessionToken,
+}: {
+  catProfileId: string;
+  startDate: Date;
+  endDate: Date;
+  sessionToken: string;
+}): Promise<{
+  startDate: Date;
+  endDate: Date;
+  id: string;
+}> => {
+  const res = await axios.post(
+    'api/fostering',
+    {
+      catProfileId,
+      startDate,
+      endDate,
+    },
+    {
+      headers: {
+        Authorization: `Bearer ${sessionToken}`,
+      },
+    }
+  );
+  expect(res.status).toBe(201);
+  return res.data;
+};
+
 export const axiosOptionsFactory = (
   sessionToken: string
 ): AxiosRequestConfig => ({

libs/fostering/nestjs-module/src/lib/fostering.controller.ts

@@ -94,6 +94,7 @@ export class FosteringController {
     new ValidationPipe({
       transform: true,
       transformOptions: { enableImplicitConversion: true },
+      whitelist: true,
     })
   )
   @Post()