Initial commit

spec/api/v2/admin/profiles_spec.rb

@@ -0,0 +1,211 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+describe API::V2::Admin::Profiles do
+  include_context 'bearer authentication'
+
+  let!(:create_admin_permission) do
+    create :permission,
+           role: 'admin'
+    create :permission,
+           role: 'superadmin'
+  end
+
+  let!(:create_member_permission) do
+    create :permission,
+           role: 'member'
+  end
+  let!(:test_user) { create(:user, role: 'superadmin') }
+  let!(:profile1) { create(:profile) }
+  let!(:profile2) { create(:profile) }
+  let!(:profile3) { create(:profile) }
+  let!(:profile4) { create(:profile) }
+  let!(:profile5) { create(:profile) }
+
+  describe 'GET /api/v2/admin/profiles' do
+    context 'successful response' do
+      it 'returns all profiles' do
+        get '/api/v2/admin/profiles', headers: auth_header
+
+        result = JSON.parse(response.body)
+        expect(response).to be_successful
+
+        expect(result.count).to eq(Profile.count)
+        expect(result.first.keys).to match_array %w[first_name last_name dob address postcode city country state metadata created_at updated_at]
+      end
+
+      it 'returns paginated profiles' do
+        get '/api/v2/admin/profiles', params: { limit: 1, page: 1 }, headers: auth_header
+        result = JSON.parse(response.body)
+
+        expect(response).to be_successful
+        expect(response.headers.fetch('Total')).to eq '5'
+        expect(result.size).to eq 1
+        expect(result.first['first_name']).to eq profile1.first_name
+        expect(result.first['last_name']).to eq profile1.last_name
+        expect(result.first['dob']).to eq profile1.dob.to_s
+
+        get '/api/v2/admin/profiles', params: { limit: 1, page: 2 }, headers: auth_header
+        result = JSON.parse(response.body)
+
+        expect(response).to be_successful
+        expect(response.headers.fetch('Total')).to eq '5'
+        expect(result.size).to eq 1
+        expect(result.first['first_name']).to eq profile2.first_name
+        expect(result.first['last_name']).to eq profile2.last_name
+        expect(result.first['dob']).to eq profile2.dob.to_s
+
+      end
+    end
+  end
+
+  describe 'POST /api/v2/admin/profiles' do
+    let(:user) { create :user }
+    let!(:request_params) do
+      {
+        last_name: Faker::Name.last_name,
+        first_name: Faker::Name.first_name,
+        dob: Faker::Date.birthday,
+        country: Faker::Address.country_code_long,
+        city: Faker::Address.city,
+        address: Faker::Address.street_address,
+        postcode: Faker::Address.zip_code
+      }
+    end
+
+    context 'successful response' do
+      it 'works correctly' do
+        expect { post '/api/v2/admin/profiles', params: request_params.merge(uid: user.uid), headers: auth_header }
+          .to change { Profile.count }.by(1)
+
+        expect(response.status).to eq(201)
+        expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
+        expect(json_body[:first_name]).to eq Profile.last.first_name
+        expect(json_body[:last_name]).to eq Profile.last.last_name
+        expect(json_body[:dob]).to eq Profile.last.dob.to_s
+        expect(json_body[:state]).to eq('submitted')
+        expect(json_body[:metadata]).to be_blank
+        expect(Profile.last.author).to eq(test_user.uid)
+      end
+    end
+  end
+
+  describe 'PUT /api/v2/admin/profiles' do
+    context 'successful response' do
+      let!(:member_with_profile) do
+        @member = create :user, role: 'member'
+        create(:profile, user_id: @member.id, state: 'submitted')
+      end
+
+      it 'returns profile' do
+        put '/api/v2/admin/profiles', params: { uid: @member.uid, state: 'verified' }, headers: auth_header
+
+        expect(response.status).to eq(200)
+        profile = @member.profiles.last
+        expect(profile).to be
+        expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
+        expect(json_body[:first_name]).to eq profile.first_name
+        expect(json_body[:last_name]).to eq profile.last_name
+        expect(json_body[:dob]).to eq profile.dob.to_s
+        expect(json_body[:state]).to eq('verified')
+        expect(profile.state).to eq('verified')
+      end
+
+      let!(:superadmin_with_profile) do
+        @user = create :user, role: 'superadmin'
+        create(:profile, user_id: @user.id, state: 'submitted')
+      end
+
+      it 'return profiles when superadmin updates superadmin' do
+        test_user.update!(role: 'superadmin')
+        put '/api/v2/admin/profiles', params: { uid: @user.uid, state: 'verified' }, headers: auth_header
+
+        expect(response.status).to eq(200)
+        profile = @user.profiles.last
+        expect(profile).to be
+        expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
+        expect(json_body[:first_name]).to eq profile.first_name
+        expect(json_body[:last_name]).to eq profile.last_name
+        expect(json_body[:dob]).to eq profile.dob.to_s
+        expect(json_body[:state]).to eq('verified')
+        expect(profile.state).to eq('verified')
+        expect(profile.metadata).to be_blank
+      end
+    end
+
+    context 'unsuccessful response' do
+      let!(:admin_test) { test_user.update(role: 'admin') }
+
+      let!(:superadmin_with_profile) do
+        @user = create :user, role: 'superadmin'
+        create(:profile, user_id: @user.id, state: 'submitted', author: test_user.uid)
+
+        @user_admin = create :user, role: 'admin'
+        create(:profile, user_id: @user_admin.id, state: 'submitted', author: test_user.uid)
+      end
+
+      it 'return error when non-superadmin user updates superadmin' do
+        put '/api/v2/admin/profiles', params: { uid: @user.uid, state: 'rejected' }, headers: auth_header
+
+        result = JSON.parse(response.body)
+        expect(response.code).to eq '422'
+        expect(result['errors']).to eq(['admin.profiles.superadmin_change'])
+      end
+
+      it 'return error when author is trying to approve himself' do
+        allow(Barong::App.config).to receive_messages(profile_double_verification: 'true')
+
+        put '/api/v2/admin/profiles', params: { uid: @user_admin.uid, state: 'rejected' }, headers: auth_header
+
+        result = JSON.parse(response.body)
+        expect(response.code).to eq '422'
+        expect(result['errors']).to eq(['admin.profiles.second_admin_approval'])
+      end
+
+      it 'renders an error when profile doesnt exist' do
+        put '/api/v2/admin/profiles', params: { uid: '0', state: 'rejected' }, headers: auth_header
+        expect_status.to eq(404)
+        expect_body.to eq(errors: ['admin.profiles.doesnt_exist_or_not_editable'])
+      end
+
+      it 'renders an error when profile is not editable' do
+        put '/api/v2/admin/profiles', params: { uid: profile3.user.uid, state: 'rejected' }, headers: auth_header
+        expect_status.to eq(404)
+        expect_body.to eq(errors: ['admin.profiles.doesnt_exist_or_not_editable'])
+      end
+    end
+
+    context 'user with different amount of profile fields' do
+      let!(:profile) { create(:profile, user: test_user, last_name: nil, first_name: nil, state: 'submitted') }
+
+      it 'returns partial updated profile' do
+        put '/api/v2/admin/profiles', params: { uid: test_user.uid, state: 'rejected' }, headers: auth_header
+
+        expect(response.status).to eq(200)
+        profile = test_user.profiles.last
+        expect(profile).to be
+        expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
+        expect(json_body[:first_name]).to eq profile.first_name
+        expect(json_body[:last_name]).to eq profile.last_name
+        expect(json_body[:dob]).to eq profile.dob.to_s
+        expect(json_body[:state]).to eq('rejected')
+        expect(profile.state).to eq('rejected')
+      end
+
+      it 'returns full updated profile' do
+        put '/api/v2/admin/profiles', params: { uid: test_user.uid, state: 'rejected' }, headers: auth_header
+
+        expect(response.status).to eq(200)
+        profile = test_user.profiles.last
+        expect(profile).to be
+        expect(json_body.keys).to match_array %i[first_name last_name dob address postcode city country state metadata created_at updated_at]
+        expect(json_body[:first_name]).to eq profile.first_name
+        expect(json_body[:last_name]).to eq profile.last_name
+        expect(json_body[:dob]).to eq profile.dob.to_s
+        expect(json_body[:state]).to eq('rejected')
+        expect(profile.state).to eq('rejected')
+        expect(profile.metadata).to be_blank
+      end
+    end
+  end
+end