services/self-service/src/test/java/com/epam/datalab/backendapi/resources/UserGroupResourceTest.java

/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package com.epam.datalab.backendapi.resources;

import com.epam.datalab.auth.UserInfo;
import com.epam.datalab.backendapi.dao.ProjectDAO;
import com.epam.datalab.backendapi.resources.dto.GroupDTO;
import com.epam.datalab.backendapi.resources.dto.UpdateGroupDTO;
import com.epam.datalab.backendapi.resources.dto.UserGroupDto;
import com.epam.datalab.backendapi.service.UserGroupService;
import io.dropwizard.auth.AuthenticationException;
import io.dropwizard.testing.junit.ResourceTestRule;
import org.apache.http.HttpStatus;
import org.junit.Before;
import org.junit.Rule;
import org.junit.Test;

import javax.ws.rs.client.Entity;
import javax.ws.rs.core.GenericType;
import javax.ws.rs.core.HttpHeaders;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import java.util.Collections;
import java.util.List;
import java.util.Map;
import java.util.Set;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertTrue;
import static org.mockito.Mockito.any;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.verifyNoMoreInteractions;
import static org.mockito.Mockito.verifyZeroInteractions;
import static org.mockito.Mockito.when;

public class UserGroupResourceTest extends TestBase {

    private static final String USER = "user";
    private static final String ROLE_ID = "id";
    private static final String ROLE_DESCRIPTION = "description";
    private static final String GROUP = "group";
    private UserGroupService userGroupService = mock(UserGroupService.class);
    private ProjectDAO projectDAO = mock(ProjectDAO.class);

    @Before
    public void setup() throws AuthenticationException {
        authSetup();
    }

    @Rule
    public final ResourceTestRule resources =
            getResourceTestRuleInstance(new UserGroupResource(userGroupService));

    @Test
    public void createGroup() {

        final Response response = resources.getJerseyTest()
                .target("/group")
                .request()
                .header("Authorization", "Bearer " + TOKEN)
                .post(Entity.json(getCreateGroupDto(GROUP, Collections.singletonMap(ROLE_ID, ROLE_DESCRIPTION))));

        assertEquals(HttpStatus.SC_OK, response.getStatus());

        verify(userGroupService).createGroup(getUserInfo(), GROUP, Collections.singleton(ROLE_ID), Collections.singleton(USER));
        verifyNoMoreInteractions(userGroupService);
    }

    @Test
    public void createGroupWhenGroupNameIsEmpty() {

        final Response response = resources.getJerseyTest()
                .target("/group")
                .request()
                .header("Authorization", "Bearer " + TOKEN)
                .post(Entity.json(getCreateGroupDto("", Collections.singletonMap(ROLE_ID, ROLE_DESCRIPTION))));

        assertEquals(HttpStatus.SC_UNPROCESSABLE_ENTITY, response.getStatus());

        verifyZeroInteractions(userGroupService);
    }

    @Test
    public void createGroupWhenRoleIdIsEmpty() {

        final Response response = resources.getJerseyTest()
                .target("/group")
                .request()
                .header("Authorization", "Bearer " + TOKEN)
                .post(Entity.json(getCreateGroupDto(GROUP, Collections.emptyMap())));

        assertEquals(HttpStatus.SC_UNPROCESSABLE_ENTITY, response.getStatus());

        verifyZeroInteractions(userGroupService);
    }

    @Test
    public void updateGroup() {

        final Response response = resources.getJerseyTest()
                .target("/group")
                .request()
                .header("Authorization", "Bearer " + TOKEN)
                .put(Entity.json(getUpdaeGroupDto(GROUP, Collections.singletonMap(ROLE_ID, ROLE_DESCRIPTION), Collections.singleton(USER))));

        assertEquals(HttpStatus.SC_OK, response.getStatus());

        verify(userGroupService).updateGroup(getUserInfo(), GROUP, Collections.singletonMap(ROLE_ID, ROLE_DESCRIPTION), Collections.singleton(USER));
        verifyNoMoreInteractions(userGroupService);
    }

    @Test
    public void getGroups() {
        when(userGroupService.getAggregatedRolesByGroup(any(UserInfo.class))).thenReturn(Collections.singletonList(getUserGroup()));

        final Response response = resources.getJerseyTest()
                .target("/group")
                .request()
                .header("Authorization", "Bearer " + TOKEN)
                .get();

        final List<UserGroupDto> actualRoles = response.readEntity(new GenericType<List<UserGroupDto>>() {
        });

        assertEquals(HttpStatus.SC_OK, response.getStatus());
        assertEquals(GROUP, actualRoles.get(0).getGroup());
        assertTrue(actualRoles.get(0).getRoles().isEmpty());
        assertEquals(MediaType.APPLICATION_JSON, response.getHeaderString(HttpHeaders.CONTENT_TYPE));

        verify(userGroupService).getAggregatedRolesByGroup(getUserInfo());
        verifyNoMoreInteractions(userGroupService);
    }

    @Test
    public void deleteGroup() {
        final Response response = resources.getJerseyTest()
                .target("/group/" + GROUP)
                .request()
                .header("Authorization", "Bearer " + TOKEN)
                .delete();

        assertEquals(HttpStatus.SC_OK, response.getStatus());


        verify(userGroupService).removeGroup(getUserInfo(), GROUP);
        verifyNoMoreInteractions(userGroupService);
    }

    private UserGroupDto getUserGroup() {
        return new UserGroupDto(GROUP, Collections.emptyList(), Collections.emptySet());
    }

    private GroupDTO getCreateGroupDto(String group, Map<String, String> roleIds) {
        final GroupDTO dto = new GroupDTO();
        dto.setName(group);
        dto.setRoleIds(roleIds);
        dto.setUsers(Collections.singleton(USER));
        return dto;
    }

    private UpdateGroupDTO getUpdaeGroupDto(String group, Map<String, String> roles, Set<String> users) {
        UpdateGroupDTO updateGroupDTO = new UpdateGroupDTO();
        updateGroupDTO.setName(group);
        updateGroupDTO.setRoles(roles);
        updateGroupDTO.setUsers(users);
        return updateGroupDTO;
    }
}