Add Telegram bot integration and enhance user management features

- Introduced Telegram.Bot package for bot functionality. - Updated user management to include Telegram linking and blocking features. - Enhanced activation request handling with notifications via Telegram. - Added new database entities for Telegram link tokens and login requests. - Implemented traffic synchronization for client stats in the XuiPanelGateway. - Updated application structure to support new test projects and improved dependency injection for Telegram services.
2026-07-02 01:01:03 +03:00
parent 1a8d33efa3
commit 7b6fe9ad78
142 changed files with 7570 additions and 22 deletions
@@ -0,0 +1,58 @@
+using NSubstitute;
+using PnvPanel.Application.Auth;
+using PnvPanel.Application.Auth.ChangePassword;
+using PnvPanel.Application.Common.Interfaces;
+using PnvPanel.Application.Common.Models;
+using PnvPanel.Application.Tests.TestSupport;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Auth;
+
+public class ChangePasswordCommandHandlerTests
+{
+    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
+
+    [Fact]
+    public async Task Handle_Unauthenticated_ReturnsUnauthorized()
+    {
+        var handler = new ChangePasswordCommandHandler(_identityService, FakeCurrentUser.Anonymous());
+
+        var result = await handler.Handle(new ChangePasswordCommand("old", "new"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.Unauthorized, result.Error);
+        await _identityService.DidNotReceive().ChangePasswordAsync(
+            Arg.Any<Guid>(), Arg.Any<string>(), Arg.Any<string>(), Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task Handle_Authenticated_DelegatesToIdentityService()
+    {
+        var userId = Guid.NewGuid();
+        _identityService.ChangePasswordAsync(userId, "old-pass", "new-pass", Arg.Any<CancellationToken>())
+            .Returns(Result.Success());
+
+        var handler = new ChangePasswordCommandHandler(_identityService, FakeCurrentUser.Authenticated(userId));
+
+        var result = await handler.Handle(new ChangePasswordCommand("old-pass", "new-pass"), CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        await _identityService.Received(1).ChangePasswordAsync(userId, "old-pass", "new-pass", Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task Handle_IdentityServiceFails_PropagatesFailure()
+    {
+        var userId = Guid.NewGuid();
+        var error = Error.Validation("Auth.WrongCurrentPassword", "Текущий пароль неверен.");
+        _identityService.ChangePasswordAsync(userId, "wrong", "new-pass", Arg.Any<CancellationToken>())
+            .Returns(Result.Failure(error));
+
+        var handler = new ChangePasswordCommandHandler(_identityService, FakeCurrentUser.Authenticated(userId));
+
+        var result = await handler.Handle(new ChangePasswordCommand("wrong", "new-pass"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(error, result.Error);
+    }
+}
@@ -0,0 +1,59 @@
+using NSubstitute;
+using PnvPanel.Application.Auth;
+using PnvPanel.Application.Auth.Me;
+using PnvPanel.Application.Common.Interfaces;
+using PnvPanel.Application.Tests.TestSupport;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Auth;
+
+public class GetCurrentUserQueryHandlerTests
+{
+    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
+
+    [Fact]
+    public async Task Handle_Unauthenticated_ReturnsUnauthorized()
+    {
+        var handler = new GetCurrentUserQueryHandler(_identityService, FakeCurrentUser.Anonymous());
+
+        var result = await handler.Handle(new GetCurrentUserQuery(), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.Unauthorized, result.Error);
+    }
+
+    [Fact]
+    public async Task Handle_ProfileMissing_ReturnsUnauthorized()
+    {
+        var userId = Guid.NewGuid();
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns((CurrentUserProfile?)null);
+
+        var handler = new GetCurrentUserQueryHandler(_identityService, FakeCurrentUser.Authenticated(userId));
+
+        var result = await handler.Handle(new GetCurrentUserQuery(), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.Unauthorized, result.Error);
+    }
+
+    [Fact]
+    public async Task Handle_AuthenticatedWithProfile_ReturnsCurrentUserDto()
+    {
+        var userId = Guid.NewGuid();
+        var profile = new CurrentUserProfile(userId, "alice", Guid.NewGuid(), "user", true, false, 3);
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns(profile);
+        _identityService.GetTelegramLinkInfoAsync(userId, Arg.Any<CancellationToken>())
+            .Returns(new TelegramLinkInfo(true, 42, "alice_tg"));
+
+        var handler = new GetCurrentUserQueryHandler(_identityService, FakeCurrentUser.Authenticated(userId, "alice"));
+
+        var result = await handler.Handle(new GetCurrentUserQuery(), CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Equal(userId, result.Value.Id);
+        Assert.Equal("alice", result.Value.UserName);
+        Assert.Equal("user", result.Value.Role);
+        Assert.True(result.Value.IsActivated);
+        Assert.True(result.Value.TelegramLinked);
+    }
+}
@@ -0,0 +1,72 @@
+using NSubstitute;
+using PnvPanel.Application.Auth;
+using PnvPanel.Application.Auth.Login;
+using PnvPanel.Application.Common.Interfaces;
+using PnvPanel.Application.Common.Models;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Auth;
+
+public class LoginCommandHandlerTests
+{
+    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
+    private readonly IJwtTokenService _jwtTokenService = Substitute.For<IJwtTokenService>();
+    private readonly IRefreshTokenService _refreshTokenService = Substitute.For<IRefreshTokenService>();
+
+    private LoginCommandHandler CreateHandler() => new(_identityService, _jwtTokenService, _refreshTokenService);
+
+    [Fact]
+    public async Task Handle_WithValidCredentials_ReturnsAuthResult()
+    {
+        var userId = Guid.NewGuid();
+        var authUser = new AuthenticatedUser(userId, "alice", "user");
+        var profile = new CurrentUserProfile(userId, "alice", Guid.NewGuid(), "user", IsActivated: true, IsBlocked: false, MaxConfigs: 3);
+
+        _identityService.ValidateCredentialsAsync("alice", "P@ssw0rd", Arg.Any<CancellationToken>())
+            .Returns(Result.Success(authUser));
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns(profile);
+        _identityService.GetTelegramLinkInfoAsync(userId, Arg.Any<CancellationToken>())
+            .Returns(new TelegramLinkInfo(true, 123456, "alice_tg"));
+        _jwtTokenService.GenerateAccessToken(Arg.Any<AuthenticatedUser>())
+            .Returns(("access-token", DateTimeOffset.UtcNow.AddMinutes(15)));
+        _refreshTokenService.IssueAsync(userId, Arg.Any<CancellationToken>())
+            .Returns(new IssuedRefreshToken("refresh-token", DateTimeOffset.UtcNow.AddDays(30)));
+
+        var result = await CreateHandler().Handle(new LoginCommand("alice", "P@ssw0rd"), CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Equal("access-token", result.Value.AccessToken);
+        Assert.Equal("refresh-token", result.Value.RefreshToken);
+        Assert.Equal("alice", result.Value.User.UserName);
+        Assert.True(result.Value.User.TelegramLinked);
+    }
+
+    [Fact]
+    public async Task Handle_WithInvalidCredentials_ReturnsFailureWithoutIssuingTokens()
+    {
+        _identityService.ValidateCredentialsAsync("alice", "wrong", Arg.Any<CancellationToken>())
+            .Returns(Result.Failure<AuthenticatedUser>(AuthErrors.InvalidCredentials));
+
+        var result = await CreateHandler().Handle(new LoginCommand("alice", "wrong"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.InvalidCredentials, result.Error);
+        await _refreshTokenService.DidNotReceive().IssueAsync(Arg.Any<Guid>(), Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task Handle_WhenProfileMissingAfterValidCredentials_ReturnsInvalidCredentials()
+    {
+        var userId = Guid.NewGuid();
+        var authUser = new AuthenticatedUser(userId, "alice", "user");
+
+        _identityService.ValidateCredentialsAsync("alice", "P@ssw0rd", Arg.Any<CancellationToken>())
+            .Returns(Result.Success(authUser));
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns((CurrentUserProfile?)null);
+
+        var result = await CreateHandler().Handle(new LoginCommand("alice", "P@ssw0rd"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.InvalidCredentials, result.Error);
+    }
+}
@@ -0,0 +1,66 @@
+using NSubstitute;
+using PnvPanel.Application.Auth;
+using PnvPanel.Application.Auth.Refresh;
+using PnvPanel.Application.Common.Interfaces;
+using PnvPanel.Application.Common.Models;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Auth;
+
+public class RefreshCommandHandlerTests
+{
+    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
+    private readonly IJwtTokenService _jwtTokenService = Substitute.For<IJwtTokenService>();
+    private readonly IRefreshTokenService _refreshTokenService = Substitute.For<IRefreshTokenService>();
+
+    private RefreshCommandHandler CreateHandler() => new(_identityService, _jwtTokenService, _refreshTokenService);
+
+    [Fact]
+    public async Task Handle_WithValidToken_RotatesAndReturnsNewAuthResult()
+    {
+        var userId = Guid.NewGuid();
+        var profile = new CurrentUserProfile(userId, "alice", Guid.NewGuid(), "user", IsActivated: true, IsBlocked: false, MaxConfigs: 3);
+        var rotated = new RotatedRefreshToken(userId, "new-refresh-token", DateTimeOffset.UtcNow.AddDays(30));
+
+        _refreshTokenService.RotateAsync("old-token", Arg.Any<CancellationToken>()).Returns(Result.Success(rotated));
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns(profile);
+        _identityService.GetTelegramLinkInfoAsync(userId, Arg.Any<CancellationToken>())
+            .Returns(new TelegramLinkInfo(false, null, null));
+        _jwtTokenService.GenerateAccessToken(Arg.Any<AuthenticatedUser>())
+            .Returns(("new-access-token", DateTimeOffset.UtcNow.AddMinutes(15)));
+
+        var result = await CreateHandler().Handle(new RefreshCommand("old-token"), CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Equal("new-access-token", result.Value.AccessToken);
+        Assert.Equal("new-refresh-token", result.Value.RefreshToken);
+    }
+
+    [Fact]
+    public async Task Handle_WithInvalidOrReusedToken_ReturnsFailure()
+    {
+        _refreshTokenService.RotateAsync("stolen-token", Arg.Any<CancellationToken>())
+            .Returns(Result.Failure<RotatedRefreshToken>(AuthErrors.InvalidRefreshToken));
+
+        var result = await CreateHandler().Handle(new RefreshCommand("stolen-token"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.InvalidRefreshToken, result.Error);
+        await _identityService.DidNotReceive().GetProfileAsync(Arg.Any<Guid>(), Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task Handle_WhenProfileNoLongerExists_ReturnsInvalidRefreshToken()
+    {
+        var userId = Guid.NewGuid();
+        var rotated = new RotatedRefreshToken(userId, "new-refresh-token", DateTimeOffset.UtcNow.AddDays(30));
+
+        _refreshTokenService.RotateAsync("old-token", Arg.Any<CancellationToken>()).Returns(Result.Success(rotated));
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns((CurrentUserProfile?)null);
+
+        var result = await CreateHandler().Handle(new RefreshCommand("old-token"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.InvalidRefreshToken, result.Error);
+    }
+}