PnvPanel/backend/tests/PnvPanel.Application.Tests/Telegram/GetLoginRequestStatusQueryHandlerTests.cs

using NSubstitute;
using PnvPanel.Application.Auth;
using PnvPanel.Application.Common.Interfaces;
using PnvPanel.Application.Common.Models;
using PnvPanel.Application.Tests.TestSupport;
using PnvPanel.Domain.Telegram;
using Xunit;
using TelegramNs = PnvPanel.Application.Telegram;

namespace PnvPanel.Application.Tests.Telegram;

public class GetLoginRequestStatusQueryHandlerTests
{
    private readonly IIdentityService _identityService = Substitute.For<IIdentityService>();
    private readonly IJwtTokenService _jwtTokenService = Substitute.For<IJwtTokenService>();
    private readonly IRefreshTokenService _refreshTokenService =
        Substitute.For<IRefreshTokenService>();

    private TelegramNs.GetLoginRequestStatusQueryHandler CreateHandler(
        PnvPanel.Infrastructure.Persistence.AppDbContext dbContext
    ) => new(dbContext, _identityService, _jwtTokenService, _refreshTokenService);

    [Fact]
    public async Task Handle_WhenRequestNotFound_ReturnsNotFound()
    {
        using var dbContext = InMemoryDbContextFactory.Create();

        var handler = CreateHandler(dbContext);

        var result = await handler.Handle(
            new TelegramNs.GetLoginRequestStatusQuery(Guid.NewGuid()),
            CancellationToken.None
        );

        Assert.False(result.IsSuccess);
        Assert.Equal(TelegramNs.TelegramErrors.LoginRequestNotFound, result.Error);
    }

    [Fact]
    public async Task Handle_WhenPendingAndExpired_ReturnsExpiredStatusWithoutIssuingTokens()
    {
        using var dbContext = InMemoryDbContextFactory.Create();
        var request = TelegramLoginRequest.Create(TimeSpan.FromMinutes(-5), null);
        dbContext.TelegramLoginRequests.Add(request);
        await dbContext.SaveChangesAsync(CancellationToken.None);

        var handler = CreateHandler(dbContext);

        var result = await handler.Handle(
            new TelegramNs.GetLoginRequestStatusQuery(request.Id),
            CancellationToken.None
        );

        Assert.True(result.IsSuccess);
        Assert.Equal(TelegramLoginStatus.Expired, result.Value.Status);
        Assert.Null(result.Value.Auth);
        await _refreshTokenService
            .DidNotReceive()
            .IssueAsync(Arg.Any<Guid>(), Arg.Any<CancellationToken>());
    }

    [Fact]
    public async Task Handle_WhenStillPending_ReturnsPendingStatusWithoutAuth()
    {
        using var dbContext = InMemoryDbContextFactory.Create();
        var request = TelegramLoginRequest.Create(TimeSpan.FromMinutes(5), null);
        dbContext.TelegramLoginRequests.Add(request);
        await dbContext.SaveChangesAsync(CancellationToken.None);

        var handler = CreateHandler(dbContext);

        var result = await handler.Handle(
            new TelegramNs.GetLoginRequestStatusQuery(request.Id),
            CancellationToken.None
        );

        Assert.True(result.IsSuccess);
        Assert.Equal(TelegramLoginStatus.Pending, result.Value.Status);
        Assert.Null(result.Value.Auth);
    }

    [Fact]
    public async Task Handle_WhenApproved_ConsumesRequestAndReturnsAuthResult()
    {
        using var dbContext = InMemoryDbContextFactory.Create();
        var userId = Guid.NewGuid();
        var request = TelegramLoginRequest.Create(TimeSpan.FromMinutes(5), null);
        request.Approve(userId);
        dbContext.TelegramLoginRequests.Add(request);
        await dbContext.SaveChangesAsync(CancellationToken.None);

        var profile = new CurrentUserProfile(
            userId,
            "alice",
            Guid.NewGuid(),
            "user",
            true,
            false,
            3,
            RoleQuota.Unlimited,
            "sub-token",
            false,
            null,
            false
        );
        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns(profile);
        _jwtTokenService
            .GenerateAccessToken(Arg.Any<AuthenticatedUser>())
            .Returns(("access-token", DateTimeOffset.UtcNow.AddMinutes(15)));
        _refreshTokenService
            .IssueAsync(userId, Arg.Any<CancellationToken>())
            .Returns(new IssuedRefreshToken("refresh-token", DateTimeOffset.UtcNow.AddDays(30)));

        var handler = CreateHandler(dbContext);

        var result = await handler.Handle(
            new TelegramNs.GetLoginRequestStatusQuery(request.Id),
            CancellationToken.None
        );

        Assert.True(result.IsSuccess);
        Assert.Equal(TelegramLoginStatus.Approved, result.Value.Status);
        Assert.NotNull(result.Value.Auth);
        Assert.Equal("access-token", result.Value.Auth!.AccessToken);
        Assert.True(result.Value.Auth.User.TelegramLinked);
        Assert.Equal(TelegramLoginStatus.Consumed, request.Status);
    }

    [Fact]
    public async Task Handle_WhenApprovedButProfileMissing_ReturnsUnauthorized()
    {
        using var dbContext = InMemoryDbContextFactory.Create();
        var userId = Guid.NewGuid();
        var request = TelegramLoginRequest.Create(TimeSpan.FromMinutes(5), null);
        request.Approve(userId);
        dbContext.TelegramLoginRequests.Add(request);
        await dbContext.SaveChangesAsync(CancellationToken.None);

        _identityService
            .GetProfileAsync(userId, Arg.Any<CancellationToken>())
            .Returns((CurrentUserProfile?)null);

        var handler = CreateHandler(dbContext);

        var result = await handler.Handle(
            new TelegramNs.GetLoginRequestStatusQuery(request.Id),
            CancellationToken.None
        );

        Assert.False(result.IsSuccess);
        Assert.Equal(AuthErrors.Unauthorized, result.Error);
    }

    [Fact]
    public async Task Handle_WhenApprovedAndUserBlocked_ReturnsUserBlockedWithoutIssuingTokens()
    {
        using var dbContext = InMemoryDbContextFactory.Create();
        var userId = Guid.NewGuid();
        var request = TelegramLoginRequest.Create(TimeSpan.FromMinutes(5), null);
        request.Approve(userId);
        dbContext.TelegramLoginRequests.Add(request);
        await dbContext.SaveChangesAsync(CancellationToken.None);

        var profile = new CurrentUserProfile(
            userId,
            "alice",
            Guid.NewGuid(),
            "user",
            true,
            true,
            3,
            RoleQuota.Unlimited,
            "sub-token",
            false,
            null,
            false
        );
        _identityService.GetProfileAsync(userId, Arg.Any<CancellationToken>()).Returns(profile);

        var handler = CreateHandler(dbContext);

        var result = await handler.Handle(
            new TelegramNs.GetLoginRequestStatusQuery(request.Id),
            CancellationToken.None
        );

        Assert.False(result.IsSuccess);
        Assert.Equal(AuthErrors.UserBlocked, result.Error);
        // Уже потреблён предыдущим прогоном лока — токены выпустить не успели, но повторно claim'ить нельзя.
        Assert.Equal(TelegramLoginStatus.Consumed, request.Status);
        await _refreshTokenService
            .DidNotReceive()
            .IssueAsync(Arg.Any<Guid>(), Arg.Any<CancellationToken>());
    }

    [Fact]
    public async Task Handle_WhenAlreadyConsumedByAnotherPoll_ReturnsConsumedWithoutTokens()
    {
        // Второй поллер той же вкладки после того, как первый уже забрал вход (Consume()) —
        // короткий путь ДО AdvisoryLock (status != Approved), токены повторно не выпускаются.
        using var dbContext = InMemoryDbContextFactory.Create();
        var userId = Guid.NewGuid();
        var request = TelegramLoginRequest.Create(TimeSpan.FromMinutes(5), null);
        request.Approve(userId);
        request.Consume();
        dbContext.TelegramLoginRequests.Add(request);
        await dbContext.SaveChangesAsync(CancellationToken.None);

        var handler = CreateHandler(dbContext);

        var result = await handler.Handle(
            new TelegramNs.GetLoginRequestStatusQuery(request.Id),
            CancellationToken.None
        );

        Assert.True(result.IsSuccess);
        Assert.Equal(TelegramLoginStatus.Consumed, result.Value.Status);
        Assert.Null(result.Value.Auth);
        await _refreshTokenService
            .DidNotReceive()
            .IssueAsync(Arg.Any<Guid>(), Arg.Any<CancellationToken>());
    }
}