feat: tests

internal/handler/auth_test.go

@@ -0,0 +1,136 @@
+package handler
+
+import (
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"testing"
+
+	"git.juancwu.dev/juancwu/budgit/internal/ctxkeys"
+	"git.juancwu.dev/juancwu/budgit/internal/repository"
+	"git.juancwu.dev/juancwu/budgit/internal/service"
+	"git.juancwu.dev/juancwu/budgit/internal/testutil"
+	"github.com/stretchr/testify/assert"
+)
+
+func newTestAuthHandler(dbi testutil.DBInfo) *authHandler {
+	cfg := testutil.TestConfig()
+	userRepo := repository.NewUserRepository(dbi.DB)
+	profileRepo := repository.NewProfileRepository(dbi.DB)
+	tokenRepo := repository.NewTokenRepository(dbi.DB)
+	spaceRepo := repository.NewSpaceRepository(dbi.DB)
+	inviteRepo := repository.NewInvitationRepository(dbi.DB)
+	spaceSvc := service.NewSpaceService(spaceRepo)
+	emailSvc := service.NewEmailService(nil, "test@example.com", "http://localhost:9999", "Budgit Test", false)
+	authSvc := service.NewAuthService(emailSvc, userRepo, profileRepo, tokenRepo, spaceSvc, cfg.JWTSecret, cfg.JWTExpiry, cfg.TokenMagicLinkExpiry, false)
+	inviteSvc := service.NewInviteService(inviteRepo, spaceRepo, userRepo, emailSvc)
+	return NewAuthHandler(authSvc, inviteSvc, spaceSvc)
+}
+
+func guestContext() context.Context {
+	ctx := context.Background()
+	ctx = ctxkeys.WithConfig(ctx, testutil.TestConfig().Sanitized())
+	ctx = ctxkeys.WithCSRFToken(ctx, "test")
+	ctx = ctxkeys.WithAppVersion(ctx, "test")
+	return ctx
+}
+
+func TestAuthHandler_AuthPage(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestAuthHandler(dbi)
+
+		req := httptest.NewRequest(http.MethodGet, "/auth", nil)
+		req = req.WithContext(guestContext())
+
+		w := httptest.NewRecorder()
+		h.AuthPage(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestAuthHandler_SendMagicLink(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestAuthHandler(dbi)
+
+		form := url.Values{"email": {"newuser@example.com"}}
+		req := httptest.NewRequest(http.MethodPost, "/auth/magic-link", nil)
+		req = req.WithContext(guestContext())
+		req.PostForm = form
+
+		w := httptest.NewRecorder()
+		h.SendMagicLink(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestAuthHandler_SendMagicLink_EmptyEmail(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestAuthHandler(dbi)
+
+		form := url.Values{"email": {""}}
+		req := httptest.NewRequest(http.MethodPost, "/auth/magic-link", nil)
+		req = req.WithContext(guestContext())
+		req.PostForm = form
+
+		w := httptest.NewRecorder()
+		h.SendMagicLink(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestAuthHandler_Logout(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestAuthHandler(dbi)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test User")
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/auth/logout", user, profile, nil)
+
+		w := httptest.NewRecorder()
+		h.Logout(w, req)
+
+		assert.Equal(t, http.StatusSeeOther, w.Code)
+		assert.Equal(t, "/", w.Header().Get("Location"))
+	})
+}
+
+func TestAuthHandler_CompleteOnboarding_Step2(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestAuthHandler(dbi)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/auth/onboarding", user, profile, url.Values{
+			"step": {"2"},
+			"name": {"John"},
+		})
+
+		w := httptest.NewRecorder()
+		h.CompleteOnboarding(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestAuthHandler_CompleteOnboarding_Step3(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestAuthHandler(dbi)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/auth/onboarding", user, profile, url.Values{
+			"step":       {"3"},
+			"name":       {"John"},
+			"space_name": {"My Space"},
+		})
+
+		w := httptest.NewRecorder()
+		h.CompleteOnboarding(w, req)
+
+		assert.Equal(t, http.StatusSeeOther, w.Code)
+		assert.Equal(t, "/app/dashboard", w.Header().Get("Location"))
+	})
+}

internal/handler/dashboard_test.go

@@ -0,0 +1,70 @@
+package handler
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"strings"
+	"testing"
+
+	"git.juancwu.dev/juancwu/budgit/internal/repository"
+	"git.juancwu.dev/juancwu/budgit/internal/service"
+	"git.juancwu.dev/juancwu/budgit/internal/testutil"
+	"github.com/stretchr/testify/assert"
+)
+
+func TestDashboardHandler_DashboardPage(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		spaceRepo := repository.NewSpaceRepository(dbi.DB)
+		expenseRepo := repository.NewExpenseRepository(dbi.DB)
+		spaceSvc := service.NewSpaceService(spaceRepo)
+		expenseSvc := service.NewExpenseService(expenseRepo)
+		h := NewDashboardHandler(spaceSvc, expenseSvc)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test User")
+		testutil.CreateTestSpace(t, dbi.DB, user.ID, "My Space")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodGet, "/app/dashboard", user, profile, nil)
+		w := httptest.NewRecorder()
+		h.DashboardPage(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestDashboardHandler_CreateSpace(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		spaceRepo := repository.NewSpaceRepository(dbi.DB)
+		expenseRepo := repository.NewExpenseRepository(dbi.DB)
+		spaceSvc := service.NewSpaceService(spaceRepo)
+		expenseSvc := service.NewExpenseService(expenseRepo)
+		h := NewDashboardHandler(spaceSvc, expenseSvc)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test User")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/dashboard/spaces", user, profile, url.Values{"name": {"New Space"}})
+		w := httptest.NewRecorder()
+		h.CreateSpace(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+		assert.True(t, strings.HasPrefix(w.Header().Get("HX-Redirect"), "/app/spaces/"))
+	})
+}
+
+func TestDashboardHandler_CreateSpace_EmptyName(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		spaceRepo := repository.NewSpaceRepository(dbi.DB)
+		expenseRepo := repository.NewExpenseRepository(dbi.DB)
+		spaceSvc := service.NewSpaceService(spaceRepo)
+		expenseSvc := service.NewExpenseService(expenseRepo)
+		h := NewDashboardHandler(spaceSvc, expenseSvc)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test User")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/dashboard/spaces", user, profile, url.Values{"name": {""}})
+		w := httptest.NewRecorder()
+		h.CreateSpace(w, req)
+
+		assert.Equal(t, http.StatusBadRequest, w.Code)
+	})
+}

internal/handler/home_test.go

@@ -0,0 +1,43 @@
+package handler
+
+import (
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"git.juancwu.dev/juancwu/budgit/internal/ctxkeys"
+	"git.juancwu.dev/juancwu/budgit/internal/model"
+	"git.juancwu.dev/juancwu/budgit/internal/testutil"
+	"github.com/stretchr/testify/assert"
+)
+
+func TestHomeHandler_HomePage_Guest(t *testing.T) {
+	h := NewHomeHandler()
+
+	req := httptest.NewRequest(http.MethodGet, "/", nil)
+	ctx := context.Background()
+	ctx = ctxkeys.WithConfig(ctx, testutil.TestConfig().Sanitized())
+	ctx = ctxkeys.WithCSRFToken(ctx, "test")
+	req = req.WithContext(ctx)
+
+	w := httptest.NewRecorder()
+	h.HomePage(w, req)
+
+	assert.Equal(t, http.StatusSeeOther, w.Code)
+	assert.Equal(t, "/auth", w.Header().Get("Location"))
+}
+
+func TestHomeHandler_HomePage_Authenticated(t *testing.T) {
+	h := NewHomeHandler()
+
+	user := &model.User{ID: "user-1", Email: "test@example.com"}
+	profile := &model.Profile{ID: "prof-1", UserID: "user-1", Name: "Test"}
+	req := testutil.NewAuthenticatedRequest(t, http.MethodGet, "/", user, profile, nil)
+
+	w := httptest.NewRecorder()
+	h.HomePage(w, req)
+
+	assert.Equal(t, http.StatusSeeOther, w.Code)
+	assert.Equal(t, "/app/dashboard", w.Header().Get("Location"))
+}

internal/handler/settings_test.go

@@ -0,0 +1,74 @@
+package handler
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"testing"
+
+	"git.juancwu.dev/juancwu/budgit/internal/repository"
+	"git.juancwu.dev/juancwu/budgit/internal/service"
+	"git.juancwu.dev/juancwu/budgit/internal/testutil"
+	"github.com/stretchr/testify/assert"
+)
+
+func newTestSettingsHandler(dbi testutil.DBInfo) (*settingsHandler, *service.AuthService) {
+	cfg := testutil.TestConfig()
+	userRepo := repository.NewUserRepository(dbi.DB)
+	profileRepo := repository.NewProfileRepository(dbi.DB)
+	tokenRepo := repository.NewTokenRepository(dbi.DB)
+	spaceRepo := repository.NewSpaceRepository(dbi.DB)
+	spaceSvc := service.NewSpaceService(spaceRepo)
+	emailSvc := service.NewEmailService(nil, "test@example.com", "http://localhost:9999", "Budgit Test", false)
+	authSvc := service.NewAuthService(emailSvc, userRepo, profileRepo, tokenRepo, spaceSvc, cfg.JWTSecret, cfg.JWTExpiry, cfg.TokenMagicLinkExpiry, false)
+	userSvc := service.NewUserService(userRepo)
+	return NewSettingsHandler(authSvc, userSvc), authSvc
+}
+
+func TestSettingsHandler_SettingsPage(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h, _ := newTestSettingsHandler(dbi)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test User")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodGet, "/app/settings", user, profile, nil)
+		w := httptest.NewRecorder()
+		h.SettingsPage(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSettingsHandler_SetPassword(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h, _ := newTestSettingsHandler(dbi)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test User")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/settings/password", user, profile, url.Values{
+			"new_password":     {"testpassword1"},
+			"confirm_password": {"testpassword1"},
+		})
+		w := httptest.NewRecorder()
+		h.SetPassword(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSettingsHandler_SetPassword_Mismatch(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h, _ := newTestSettingsHandler(dbi)
+
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test User")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/settings/password", user, profile, url.Values{
+			"new_password":     {"testpassword1"},
+			"confirm_password": {"differentpassword"},
+		})
+		w := httptest.NewRecorder()
+		h.SetPassword(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}

internal/handler/space_test.go

@@ -0,0 +1,174 @@
+package handler
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"testing"
+
+	"git.juancwu.dev/juancwu/budgit/internal/repository"
+	"git.juancwu.dev/juancwu/budgit/internal/service"
+	"git.juancwu.dev/juancwu/budgit/internal/testutil"
+	"github.com/stretchr/testify/assert"
+)
+
+func newTestSpaceHandler(t *testing.T, dbi testutil.DBInfo) *SpaceHandler {
+	t.Helper()
+	spaceRepo := repository.NewSpaceRepository(dbi.DB)
+	tagRepo := repository.NewTagRepository(dbi.DB)
+	listRepo := repository.NewShoppingListRepository(dbi.DB)
+	itemRepo := repository.NewListItemRepository(dbi.DB)
+	expenseRepo := repository.NewExpenseRepository(dbi.DB)
+	inviteRepo := repository.NewInvitationRepository(dbi.DB)
+	accountRepo := repository.NewMoneyAccountRepository(dbi.DB)
+	methodRepo := repository.NewPaymentMethodRepository(dbi.DB)
+	userRepo := repository.NewUserRepository(dbi.DB)
+	emailSvc := service.NewEmailService(nil, "test@example.com", "http://localhost:9999", "Budgit Test", false)
+	return NewSpaceHandler(
+		service.NewSpaceService(spaceRepo),
+		service.NewTagService(tagRepo),
+		service.NewShoppingListService(listRepo, itemRepo),
+		service.NewExpenseService(expenseRepo),
+		service.NewInviteService(inviteRepo, spaceRepo, userRepo, emailSvc),
+		service.NewMoneyAccountService(accountRepo),
+		service.NewPaymentMethodService(methodRepo),
+	)
+}
+
+func TestSpaceHandler_CreateList(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/lists", user, profile, url.Values{"name": {"Groceries"}})
+		req.SetPathValue("spaceID", space.ID)
+
+		w := httptest.NewRecorder()
+		h.CreateList(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSpaceHandler_CreateList_EmptyName(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/lists", user, profile, url.Values{"name": {""}})
+		req.SetPathValue("spaceID", space.ID)
+
+		w := httptest.NewRecorder()
+		h.CreateList(w, req)
+
+		assert.Equal(t, http.StatusBadRequest, w.Code)
+	})
+}
+
+func TestSpaceHandler_DeleteList(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+		list := testutil.CreateTestShoppingList(t, dbi.DB, space.ID, "Groceries")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/lists/"+list.ID+"?from=card", user, profile, nil)
+		req.SetPathValue("spaceID", space.ID)
+		req.SetPathValue("listID", list.ID)
+
+		w := httptest.NewRecorder()
+		h.DeleteList(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSpaceHandler_AddItemToList(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+		list := testutil.CreateTestShoppingList(t, dbi.DB, space.ID, "Groceries")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/lists/"+list.ID+"/items", user, profile, url.Values{"name": {"Milk"}})
+		req.SetPathValue("spaceID", space.ID)
+		req.SetPathValue("listID", list.ID)
+
+		w := httptest.NewRecorder()
+		h.AddItemToList(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSpaceHandler_CreateTag(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/tags", user, profile, url.Values{"name": {"food"}})
+		req.SetPathValue("spaceID", space.ID)
+
+		w := httptest.NewRecorder()
+		h.CreateTag(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSpaceHandler_DeleteTag(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+		tag := testutil.CreateTestTag(t, dbi.DB, space.ID, "food", nil)
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/tags/"+tag.ID, user, profile, nil)
+		req.SetPathValue("spaceID", space.ID)
+		req.SetPathValue("tagID", tag.ID)
+
+		w := httptest.NewRecorder()
+		h.DeleteTag(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSpaceHandler_CreateAccount(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/accounts", user, profile, url.Values{"name": {"Savings"}})
+		req.SetPathValue("spaceID", space.ID)
+
+		w := httptest.NewRecorder()
+		h.CreateAccount(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}
+
+func TestSpaceHandler_CreatePaymentMethod(t *testing.T) {
+	testutil.ForEachDB(t, func(t *testing.T, dbi testutil.DBInfo) {
+		h := newTestSpaceHandler(t, dbi)
+		user, profile := testutil.CreateTestUserWithProfile(t, dbi.DB, "test@example.com", "Test")
+		space := testutil.CreateTestSpace(t, dbi.DB, user.ID, "Test Space")
+
+		req := testutil.NewAuthenticatedRequest(t, http.MethodPost, "/app/spaces/"+space.ID+"/payment-methods", user, profile, url.Values{
+			"name":      {"Visa"},
+			"type":      {"credit"},
+			"last_four": {"4242"},
+		})
+		req.SetPathValue("spaceID", space.ID)
+
+		w := httptest.NewRecorder()
+		h.CreatePaymentMethod(w, req)
+
+		assert.Equal(t, http.StatusOK, w.Code)
+	})
+}