test_workspace.py

from django.contrib.auth import get_user_model
from django.core.cache import cache
from unittest import mock

from api.models.workspace import Workspace, WorkspaceMember, WorkspaceInvitation
from api.tests import DryccTestCase

User = get_user_model()


class WorkspaceTest(DryccTestCase):
    """Tests creation and management of workspaces"""

    fixtures = ['tests.json']

    def setUp(self):
        self.user = User.objects.get(username='autotest')
        self.token = self.get_or_create_token(self.user)
        self.client.credentials(HTTP_AUTHORIZATION='Token ' + self.token)

        self.user2 = User.objects.get(username='autotest2')
        self.token2 = self.get_or_create_token(self.user2)

    def tearDown(self):
        cache.clear()

    def test_workspace_lifecycle(self):
        """Test workspace create, list, retrieve, update, delete"""
        # Create
        response = self.client.post(
            '/v2/workspaces', {'name': 'testworkspace', 'email': 'test@example.com'}
        )
        self.assertEqual(response.status_code, 201, response.data)
        self.assertEqual(response.data['name'], 'testworkspace')

        # Verify admin member created
        workspace = Workspace.objects.get(name='testworkspace')
        self.assertTrue(workspace.has_member(self.user, role='admin'))

        # List
        response = self.client.get('/v2/workspaces')
        self.assertEqual(response.status_code, 200, response.data)
        self.assertEqual(len(response.data['results']), 1)

        # Retrieve
        response = self.client.get('/v2/workspaces/testworkspace')
        self.assertEqual(response.status_code, 200, response.data)
        self.assertEqual(response.data['name'], 'testworkspace')

        # Update (personal workspace NOT allowed)
        response = self.client.patch(
            f'/v2/workspaces/{self.user.username}', {'email': 'new@example.com'}
        )
        self.assertEqual(response.status_code, 404, response.data)

        # Update
        response = self.client.patch('/v2/workspaces/testworkspace', {'email': 'new@example.com'})
        self.assertEqual(response.status_code, 200, response.data)
        self.assertEqual(response.data['email'], 'new@example.com')

        # Delete
        response = self.client.delete('/v2/workspaces/testworkspace')
        self.assertEqual(response.status_code, 204, response.data)

    def test_workspace_isolation(self):
        # User 1 creates workspace
        self.client.post('/v2/workspaces', {'name': 'testisolated', 'email': 'test@example.com'})

        # User 2 tries to access User 1's workspace
        self.client.credentials(HTTP_AUTHORIZATION='Token ' + self.token2)
        response = self.client.get('/v2/workspaces/testisolated')
        self.assertEqual(response.status_code, 404, response.data)  # Not found for user2


class WorkspaceMemberTest(DryccTestCase):
    fixtures = ['tests.json']

    def setUp(self):
        self.user = User.objects.get(username='autotest')
        self.user2 = User.objects.get(username='autotest2')
        self.token = self.get_or_create_token(self.user)
        self.client.credentials(HTTP_AUTHORIZATION='Token ' + self.token)

        # Create a workspace
        self.client.post('/v2/workspaces', {'name': 'testmembers', 'email': 'test@example.com'})
        self.workspace = Workspace.objects.get(name='testmembers')

    def test_member_management(self):
        # Add member via DB (since POST /members is not supported, users join via invitations)
        WorkspaceMember.objects.create(user=self.user2, workspace=self.workspace, role='member')

        # List members
        response = self.client.get('/v2/workspaces/testmembers/members')
        self.assertEqual(response.status_code, 200, response.data)
        self.assertEqual(len(response.data['results']), 2)

        # Update member role (admin updating user2)
        response = self.client.patch(
            f'/v2/workspaces/testmembers/members/{self.user2.username}', {'role': 'viewer'}
        )
        self.assertEqual(response.status_code, 200, response.data)
        self.assertEqual(response.data['role'], 'viewer')

        # Non-admin user2 cannot update other members
        token2 = self.get_or_create_token(self.user2)
        self.client.credentials(HTTP_AUTHORIZATION='Token ' + token2)
        response = self.client.patch(
            f'/v2/workspaces/testmembers/members/{self.user.username}', {'role': 'viewer'}
        )
        self.assertEqual(response.status_code, 403, response.data)

        # Admin delete member
        self.client.credentials(HTTP_AUTHORIZATION='Token ' + self.token)
        response = self.client.delete(f'/v2/workspaces/testmembers/members/{self.user2.username}')
        self.assertEqual(response.status_code, 204, response.data)


class WorkspaceInvitationTest(DryccTestCase):
    fixtures = ['tests.json']

    def setUp(self):
        self.user = User.objects.get(username='autotest')
        self.user2 = User.objects.get(username='autotest2')
        self.token = self.get_or_create_token(self.user)
        self.client.credentials(HTTP_AUTHORIZATION='Token ' + self.token)

        self.client.post('/v2/workspaces', {'name': 'testinvite', 'email': 'test@example.com'})
        self.workspace = Workspace.objects.get(name='testinvite')

    @mock.patch('api.models.workspace.send_mail')
    def test_invitation_lifecycle(self, mock_send_mail):
        # Create invitation
        response = self.client.post(
            '/v2/workspaces/testinvite/invitations', {'email': self.user2.email}
        )
        self.assertEqual(response.status_code, 201, response.data)
        mock_send_mail.assert_called_once()

        invitation = WorkspaceInvitation.objects.get(email=self.user2.email)

        # List invitations
        response = self.client.get('/v2/workspaces/testinvite/invitations')
        self.assertEqual(response.status_code, 200, response.data)
        self.assertEqual(len(response.data['results']), 1)

        # Accept invitation via API (JSON response)
        response = self.client.get(f'/v2/workspaces/testinvite/invitations/{invitation.token}')
        self.assertEqual(response.status_code, 200, response.data)
        self.assertIn('workspace_name', response.data)
        self.assertEqual(response.data['workspace_name'], 'testinvite')
        self.assertIn('user_exists', response.data)
        self.assertIn('register_url', response.data)

        # Verify user became a member
        self.assertTrue(
            WorkspaceMember.objects.filter(
                workspace=self.workspace,
                user=self.user2
            ).exists()
        )

        # Test delete invitation
        response = self.client.post(
            '/v2/workspaces/testinvite/invitations', {'email': 'test-invite2@example.com'}
        )
        invitation2 = WorkspaceInvitation.objects.get(email='test-invite2@example.com')
        response = self.client.delete(
            f'/v2/workspaces/testinvite/invitations/{invitation2.token}'
        )
        self.assertEqual(response.status_code, 204, response.data)

    @mock.patch('api.models.workspace.send_mail')
    def test_invitation_accept_browser(self, mock_send_mail):
        """Test accepting invitation via browser returns HTML"""
        response = self.client.post(
            '/v2/workspaces/testinvite/invitations', {'email': self.user2.email}
        )
        self.assertEqual(response.status_code, 201, response.data)
        invitation = WorkspaceInvitation.objects.get(email=self.user2.email)

        # Accept invitation via browser (HTML response)
        response = self.client.get(
            f'/v2/workspaces/testinvite/invitations/{invitation.token}',
            HTTP_ACCEPT='text/html',
        )
        self.assertEqual(response.status_code, 200)
        self.assertEqual(response['Content-Type'], 'text/html; charset=utf-8')
        self.assertIn(b'testinvite', response.content)

        # Verify user became a member
        self.assertTrue(
            WorkspaceMember.objects.filter(
                workspace=self.workspace,
                user=self.user2
            ).exists()
        )