defmodule MobilizonWeb.Resolvers.EventResolverTest do use MobilizonWeb.ConnCase alias Mobilizon.Events alias MobilizonWeb.AbsintheHelpers import Mobilizon.Factory @event %{ description: "some body", title: "some title", begins_on: DateTime.utc_now() |> DateTime.truncate(:second), uuid: "b5126423-f1af-43e4-a923-002a03003ba4", url: "some url" } setup %{conn: conn} do user = insert(:user) actor = insert(:actor, user: user, preferred_username: "test") {:ok, conn: conn, actor: actor, user: user} end describe "Event Resolver" do test "find_event/3 returns an event", context do category = insert(:category) event = @event |> Map.put(:organizer_actor_id, context.actor.id) |> Map.put(:category_id, category.id) {:ok, event} = Events.create_event(event) query = """ { event(uuid: "#{event.uuid}") { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["event"]["uuid"] == to_string(event.uuid) query = """ { event(uuid: "bad uuid") { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert [%{"message" => "Argument \"uuid\" has invalid value \"bad uuid\"."}] = json_response(res, 200)["errors"] end test "create_event/3 creates an event", %{conn: conn, actor: actor, user: user} do category = insert(:category) mutation = """ mutation { createEvent( title: "come to my event", description: "it will be fine", begins_on: "#{ DateTime.utc_now() |> DateTime.truncate(:second) |> DateTime.to_iso8601() }", organizer_actor_id: "#{actor.id}", category: "#{category.title}" ) { title, uuid } } """ res = conn |> auth_conn(user) |> post("/api", AbsintheHelpers.mutation_skeleton(mutation)) assert json_response(res, 200)["data"]["createEvent"]["title"] == "come to my event" end test "search_events_and_actors/3 finds events and actors", %{conn: conn, actor: actor} do event = insert(:event, title: "test") query = """ { search(search: "test") { ...on Event { title, uuid, __typename }, ...on Actor { preferredUsername, __typename } } } """ res = conn |> get("/api", AbsintheHelpers.query_skeleton(query, "search")) assert hd(json_response(res, 200)["data"]["search"])["uuid"] == to_string(event.uuid) assert hd(tl(json_response(res, 200)["data"]["search"]))["preferredUsername"] == actor.preferred_username end test "list_events/3 returns events", context do event = insert(:event) query = """ { events { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["events"] |> Enum.map(& &1["uuid"]) == [event.uuid] Enum.each(0..15, fn _ -> insert(:event) end) query = """ { events { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["events"] |> length == 10 query = """ { events(page: 2) { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["events"] |> length == 7 query = """ { events(page: 2, limit: 15) { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["events"] |> length == 2 query = """ { events(page: 3, limit: 15) { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["events"] |> length == 0 end test "list_events/3 doesn't list private events", context do insert(:event, visibility: :private) insert(:event, visibility: :unlisted) insert(:event, visibility: :restricted) query = """ { events { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["events"] |> Enum.map(& &1["uuid"]) == [] end test "find_event/3 returns an unlisted event", context do event = insert(:event, visibility: :unlisted) query = """ { event(uuid: "#{event.uuid}") { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["data"]["event"]["uuid"] == to_string(event.uuid) end test "find_event/3 doesn't return a private event", context do event = insert(:event, visibility: :private) query = """ { event(uuid: "#{event.uuid}") { uuid, } } """ res = context.conn |> get("/api", AbsintheHelpers.query_skeleton(query, "event")) assert json_response(res, 200)["errors"] |> hd |> Map.get("message") == "Event with UUID #{event.uuid} not found" end test "delete_event/3 deletes an event", %{conn: conn, user: user, actor: actor} do event = insert(:event, organizer_actor: actor) mutation = """ mutation { deleteEvent( actor_id: #{actor.id}, event_id: #{event.id} ) { id } } """ res = conn |> auth_conn(user) |> post("/api", AbsintheHelpers.mutation_skeleton(mutation)) assert json_response(res, 200)["errors"] == nil assert json_response(res, 200)["data"]["deleteEvent"]["id"] == event.id res = conn |> auth_conn(user) |> post("/api", AbsintheHelpers.mutation_skeleton(mutation)) assert hd(json_response(res, 200)["errors"])["message"] =~ "not found" end test "delete_event/3 should check the user is authenticated", %{conn: conn, actor: actor} do event = insert(:event, organizer_actor: actor) mutation = """ mutation { deleteEvent( actor_id: #{actor.id}, event_id: #{event.id} ) { id } } """ res = conn |> post("/api", AbsintheHelpers.mutation_skeleton(mutation)) assert hd(json_response(res, 200)["errors"])["message"] =~ "logged-in" end test "delete_event/3 should check the actor id is owned by the user", %{ conn: conn, user: user, actor: actor } do event = insert(:event, organizer_actor: actor) mutation = """ mutation { deleteEvent( actor_id: 1042, event_id: #{event.id} ) { id } } """ res = conn |> auth_conn(user) |> post("/api", AbsintheHelpers.mutation_skeleton(mutation)) assert hd(json_response(res, 200)["errors"])["message"] =~ "not owned" end test "delete_event/3 should check the event can be deleted by the user", %{ conn: conn, user: user, actor: actor } do actor2 = insert(:actor) event = insert(:event, organizer_actor: actor2) mutation = """ mutation { deleteEvent( actor_id: #{actor.id}, event_id: #{event.id} ) { id } } """ res = conn |> auth_conn(user) |> post("/api", AbsintheHelpers.mutation_skeleton(mutation)) assert hd(json_response(res, 200)["errors"])["message"] =~ "cannot delete" end end end