Add Telegram bot integration and enhance user management features

- Introduced Telegram.Bot package for bot functionality. - Updated user management to include Telegram linking and blocking features. - Enhanced activation request handling with notifications via Telegram. - Added new database entities for Telegram link tokens and login requests. - Implemented traffic synchronization for client stats in the XuiPanelGateway. - Updated application structure to support new test projects and improved dependency injection for Telegram services.
2026-07-02 01:01:03 +03:00
parent 1a8d33efa3
commit 7b6fe9ad78
142 changed files with 7570 additions and 22 deletions
@@ -0,0 +1,66 @@
+using NSubstitute;
+using PnvPanel.Application.Auth;
+using PnvPanel.Application.Auth.Refresh;
+using PnvPanel.Application.Common.Interfaces;
+using PnvPanel.Application.Common.Models;
+using Xunit;
+
+namespace PnvPanel.Application.Tests.Auth;
+
+public class RefreshCommandHandlerTests
+{
+    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
+    private readonly IJwtTokenService _jwtTokenService = Substitute.For<IJwtTokenService>();
+    private readonly IRefreshTokenService _refreshTokenService = Substitute.For<IRefreshTokenService>();
+
+    private RefreshCommandHandler CreateHandler() => new(_identityService, _jwtTokenService, _refreshTokenService);
+
+    [Fact]
+    public async Task Handle_WithValidToken_RotatesAndReturnsNewAuthResult()
+    {
+        var userId = Guid.NewGuid();
+        var profile = new CurrentUserProfile(userId, "alice", Guid.NewGuid(), "user", IsActivated: true, IsBlocked: false, MaxConfigs: 3);
+        var rotated = new RotatedRefreshToken(userId, "new-refresh-token", DateTimeOffset.UtcNow.AddDays(30));
+
+        _refreshTokenService.RotateAsync("old-token", Arg.Any<CancellationToken>()).Returns(Result.Success(rotated));
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns(profile);
+        _identityService.GetTelegramLinkInfoAsync(userId, Arg.Any<CancellationToken>())
+            .Returns(new TelegramLinkInfo(false, null, null));
+        _jwtTokenService.GenerateAccessToken(Arg.Any<AuthenticatedUser>())
+            .Returns(("new-access-token", DateTimeOffset.UtcNow.AddMinutes(15)));
+
+        var result = await CreateHandler().Handle(new RefreshCommand("old-token"), CancellationToken.None);
+
+        Assert.True(result.IsSuccess);
+        Assert.Equal("new-access-token", result.Value.AccessToken);
+        Assert.Equal("new-refresh-token", result.Value.RefreshToken);
+    }
+
+    [Fact]
+    public async Task Handle_WithInvalidOrReusedToken_ReturnsFailure()
+    {
+        _refreshTokenService.RotateAsync("stolen-token", Arg.Any<CancellationToken>())
+            .Returns(Result.Failure<RotatedRefreshToken>(AuthErrors.InvalidRefreshToken));
+
+        var result = await CreateHandler().Handle(new RefreshCommand("stolen-token"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.InvalidRefreshToken, result.Error);
+        await _identityService.DidNotReceive().GetProfileAsync(Arg.Any<Guid>(), Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task Handle_WhenProfileNoLongerExists_ReturnsInvalidRefreshToken()
+    {
+        var userId = Guid.NewGuid();
+        var rotated = new RotatedRefreshToken(userId, "new-refresh-token", DateTimeOffset.UtcNow.AddDays(30));
+
+        _refreshTokenService.RotateAsync("old-token", Arg.Any<CancellationToken>()).Returns(Result.Success(rotated));
+        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns((CurrentUserProfile?)null);
+
+        var result = await CreateHandler().Handle(new RefreshCommand("old-token"), CancellationToken.None);
+
+        Assert.False(result.IsSuccess);
+        Assert.Equal(AuthErrors.InvalidRefreshToken, result.Error);
+    }
+}