// #109 - E2E tests for /students endpoints // Appelle les handlers Fresh directement avec un vrai contexte + vraie DB import { assertEquals, assertExists } from "@std/assert"; import { makeContextWithAffiliation, makeEmployeeContext, makeGetRequest, makeJsonRequest, } from "../helpers/handler.ts"; import { seedPromotions, seedStudents, truncateAll, } from "../helpers/db_integration.ts"; import { handler as studentsHandler } from "$apps/students/api/students.ts"; import { handler as studentHandler } from "$apps/students/api/students/[numEtud].ts"; // --- GET /students --- Deno.test({ name: "e2e students: GET /students returns all students as employee", async fn() { await truncateAll(); await seedPromotions([{ id: "PEIP1-2024" }]); await seedStudents([ { nom: "Dupont", prenom: "Jean", idPromo: "PEIP1-2024" }, { nom: "Martin", prenom: "Alice", idPromo: "PEIP1-2024" }, ]); const req = makeGetRequest("/students"); const ctx = makeEmployeeContext(); const res = await studentsHandler.GET!(req, ctx); assertEquals(res.status, 200); const body = await res.json(); assertEquals(body.length, 2); assertExists(body.find((s: { nom: string }) => s.nom === "Dupont")); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: GET /students returns empty array for non-employee", async fn() { await truncateAll(); await seedPromotions([{ id: "PEIP1-2024" }]); await seedStudents([ { nom: "Dupont", prenom: "Jean", idPromo: "PEIP1-2024" }, ]); const req = makeGetRequest("/students"); const ctx = makeContextWithAffiliation("student"); const res = await studentsHandler.GET!(req, ctx); assertEquals(res.status, 200); const body = await res.json(); assertEquals(body.length, 0); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: GET /students?idPromo filters by promotion", async fn() { await truncateAll(); await seedPromotions([{ id: "PEIP1-2024" }, { id: "PEIP2-2024" }]); await seedStudents([ { nom: "Dupont", prenom: "Jean", idPromo: "PEIP1-2024" }, { nom: "Martin", prenom: "Alice", idPromo: "PEIP1-2024" }, { nom: "Durand", prenom: "Claire", idPromo: "PEIP2-2024" }, ]); const req = makeGetRequest("/students", { idPromo: "PEIP1-2024" }); const ctx = makeEmployeeContext(); const res = await studentsHandler.GET!(req, ctx); assertEquals(res.status, 200); const body = await res.json(); assertEquals(body.length, 2); assertEquals(body.every((s: { idPromo: string }) => s.idPromo === "PEIP1-2024"), true); }, sanitizeResources: false, sanitizeOps: false, }); // --- POST /students --- Deno.test({ name: "e2e students: POST /students creates a student (201)", async fn() { await truncateAll(); await seedPromotions([{ id: "INFO3-2024" }]); const req = makeJsonRequest("/students", "POST", { nom: "Leroy", prenom: "Paul", idPromo: "INFO3-2024", }); const ctx = makeEmployeeContext(); const res = await studentsHandler.POST!(req, ctx); assertEquals(res.status, 201); const body = await res.json(); assertExists(body.numEtud); assertEquals(body.nom, "Leroy"); assertEquals(body.idPromo, "INFO3-2024"); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: POST /students 403 for non-employee", async fn() { await truncateAll(); const req = makeJsonRequest("/students", "POST", { nom: "Test", prenom: "User", idPromo: "PEIP1-2024", }); const ctx = makeContextWithAffiliation("student"); const res = await studentsHandler.POST!(req, ctx); assertEquals(res.status, 403); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: POST /students 400 when missing required fields", async fn() { await truncateAll(); const req = makeJsonRequest("/students", "POST", { nom: "Leroy" }); const ctx = makeEmployeeContext(); const res = await studentsHandler.POST!(req, ctx); assertEquals(res.status, 400); }, sanitizeResources: false, sanitizeOps: false, }); // --- GET /students/:numEtud --- Deno.test({ name: "e2e students: GET /students/:numEtud returns student", async fn() { await truncateAll(); await seedPromotions([{ id: "INFO3-2024" }]); const [s] = await seedStudents([ { nom: "Bernard", prenom: "Lucie", idPromo: "INFO3-2024" }, ]); const req = makeGetRequest(`/students/${s.numEtud}`); const ctx = makeEmployeeContext({ numEtud: String(s.numEtud) }); const res = await studentHandler.GET!(req, ctx); assertEquals(res.status, 200); const body = await res.json(); assertEquals(body.numEtud, s.numEtud); assertEquals(body.nom, "Bernard"); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: GET /students/:numEtud 404 when not found", async fn() { await truncateAll(); const req = makeGetRequest("/students/999999"); const ctx = makeEmployeeContext({ numEtud: "999999" }); const res = await studentHandler.GET!(req, ctx); assertEquals(res.status, 404); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: GET /students/:numEtud 403 for non-employee", async fn() { await truncateAll(); const req = makeGetRequest("/students/12345"); const ctx = makeContextWithAffiliation("student", { numEtud: "12345" }); const res = await studentHandler.GET!(req, ctx); assertEquals(res.status, 403); }, sanitizeResources: false, sanitizeOps: false, }); // --- PUT /students/:numEtud --- Deno.test({ name: "e2e students: PUT /students/:numEtud updates student", async fn() { await truncateAll(); await seedPromotions([{ id: "INFO3-2024" }, { id: "INFO4-2024" }]); const [s] = await seedStudents([ { nom: "Petit", prenom: "Hugo", idPromo: "INFO3-2024" }, ]); const req = makeJsonRequest(`/students/${s.numEtud}`, "PUT", { nom: "Grand", prenom: "Hugo", idPromo: "INFO4-2024", }); const ctx = makeEmployeeContext({ numEtud: String(s.numEtud) }); const res = await studentHandler.PUT!(req, ctx); assertEquals(res.status, 200); const body = await res.json(); assertEquals(body.nom, "Grand"); assertEquals(body.idPromo, "INFO4-2024"); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: PUT /students/:numEtud 404 when not found", async fn() { await truncateAll(); await seedPromotions([{ id: "INFO3-2024" }]); const req = makeJsonRequest("/students/999999", "PUT", { nom: "Ghost", prenom: "Ghost", idPromo: "INFO3-2024", }); const ctx = makeEmployeeContext({ numEtud: "999999" }); const res = await studentHandler.PUT!(req, ctx); assertEquals(res.status, 404); }, sanitizeResources: false, sanitizeOps: false, }); // --- DELETE /students/:numEtud --- Deno.test({ name: "e2e students: DELETE /students/:numEtud returns 204", async fn() { await truncateAll(); await seedPromotions([{ id: "INFO3-2024" }]); const [s] = await seedStudents([ { nom: "Thomas", prenom: "Eva", idPromo: "INFO3-2024" }, ]); const req = makeGetRequest(`/students/${s.numEtud}`); const ctx = makeEmployeeContext({ numEtud: String(s.numEtud) }); const res = await studentHandler.DELETE!(req, ctx); assertEquals(res.status, 204); }, sanitizeResources: false, sanitizeOps: false, }); Deno.test({ name: "e2e students: DELETE /students/:numEtud 404 when not found", async fn() { await truncateAll(); const req = makeGetRequest("/students/999999"); const ctx = makeEmployeeContext({ numEtud: "999999" }); const res = await studentHandler.DELETE!(req, ctx); assertEquals(res.status, 404); }, sanitizeResources: false, sanitizeOps: false, });