internetee-registry/test/integration/api/v1/registrant/contacts/update_test.rb

require 'test_helper'
require 'auth_token/auth_token_creator'

class RegistrantApiV1ContactUpdateTest < ActionDispatch::IntegrationTest
  setup do
    @contact = contacts(:john)
    @contact_org = contacts(:acme_ltd)

    @original_address_processing = Setting.address_processing
    @original_fax_enabled_setting = ENV['fax_enabled']
    @user = users(:registrant)
  end

  teardown do
    Setting.address_processing = @original_address_processing
    ENV['fax_enabled'] = @original_fax_enabled_setting
  end

  def test_update_contact
    @contact.update!(name: 'John',
                     email: 'john@shop.test',
                     phone: '+111.1')

    patch api_v1_registrant_contact_path(@contact.uuid), params: { name: 'William',
                                                                   email: 'william@shop.test',
                                                                   phone: '+222.2' },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    assert_response :ok
    @contact.reload

    assert_equal 'William', @contact.name
    assert_equal 'william@shop.test', @contact.email
    assert_equal '+222.2', @contact.phone
  end

  def test_notify_registrar
    assert_difference -> { @contact.registrar.notifications.count } do
      patch api_v1_registrant_contact_path(@contact.uuid), params: { name: 'new name' },
            as: :json,
            headers: { 'HTTP_AUTHORIZATION' => auth_token }
    end
    notification = @contact.registrar.notifications.last
    assert_equal 'Contact john-001 has been updated by registrant', notification.text
  end

  def test_update_fax_when_enabled
    @contact.update!(fax: '+666.6')
    ENV['fax_enabled'] = 'true'

    patch api_v1_registrant_contact_path(@contact.uuid), params: { fax: '+777.7' },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }

    assert_response :ok
    @contact.reload
    assert_equal '+777.7', @contact.fax
  end

  def test_fax_cannot_be_updated_when_disabled
    ENV['fax_enabled'] = 'false'

    patch api_v1_registrant_contact_path(@contact.uuid), params: { fax: '+823.7' },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }

    assert_response :bad_request
    @contact.reload
    assert_not_equal '+823.7', @contact.fax

    error_msg = 'Fax processing is disabled and therefore cannot be updated'
    assert_equal ({ errors: [{ address: [error_msg] }] }), JSON.parse(response.body,
                                                                      symbolize_names: true)
  end

  def test_update_address_when_enabled
    Setting.address_processing = true

    patch api_v1_registrant_contact_path(@contact.uuid), params: { address: { city: 'new city',
                                                                              street: 'new street',
                                                                              zip: '92837',
                                                                              country_code: 'RU',
                                                                              state: 'new state' } },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }

    assert_response :ok
    @contact.reload
    assert_equal Contact::Address.new('new street', '92837', 'new city', 'new state', 'RU'),
                 @contact.address
  end

  def test_update_address_when_enabled_without_address_params
    Setting.address_processing = false

    patch api_v1_registrant_contact_path(@contact.uuid), params: { address: { } },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }

    assert_response :bad_request
    @contact.reload
    assert_equal Contact::Address.new(nil, nil, nil, nil, nil),
                 @contact.address
  end

  def test_address_is_optional_when_enabled
    Setting.address_processing = true
    @contact.update!(street: 'any', zip: 'any', city: 'any', state: 'any', country_code: 'US')

    patch api_v1_registrant_contact_path(@contact.uuid), params: { name: 'any' },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }

    assert_response :ok
  end

  def test_address_cannot_be_updated_when_disabled
    @contact.update!(street: 'old street')
    Setting.address_processing = false

    patch api_v1_registrant_contact_path(@contact.uuid),
          params: { address: { street: 'new street' } },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    @contact.reload

    assert_response :bad_request
    assert_not_equal 'new street', @contact.street

    error_msg = 'Address processing is disabled and therefore cannot be updated'
    assert_equal ({ errors: [{ address: [error_msg] }] }), JSON.parse(response.body,
                                                                      symbolize_names: true)
  end

  def test_disclose_private_persons_data
    @contact.update!(ident_type: Contact::PRIV,
                     disclosed_attributes: %w[])

    patch api_v1_registrant_contact_path(@contact.uuid),
          params: { disclosed_attributes: %w[name] },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    @contact.reload

    assert_response :ok
    assert_equal %w[name], @contact.disclosed_attributes
  end

  def test_updates_org_person_data
    name = 'SomeWeirdName'
    @contact.update!(ident_type: Contact::ORG,
                     disclosed_attributes: %w[])

    patch api_v1_registrant_contact_path(@contact.uuid),
          params: { disclosed_attributes: %w[], name: name },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    @contact.reload

    assert_response :ok
    assert_equal name, @contact.name
  end

  def test_conceal_private_persons_data
    @contact.update!(ident_type: Contact::PRIV, disclosed_attributes: %w[name])

    patch api_v1_registrant_contact_path(@contact.uuid),
          params: { disclosed_attributes: [] },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }

    @contact.reload

    assert_response :ok
    assert_empty @contact.disclosed_attributes
  end

  # def test_legal_persons_disclosed_attributes_cannot_be_changed
  #   @contact = contacts(:acme_ltd)

  #   contacts(:acme_ltd).ident
  #   assert_equal '1234567', @contact.ident

  #   assert_equal Contact::ORG, @contact.ident_type
  #   assert_equal 'US', @contact.ident_country_code
  #   @contact.update!(disclosed_attributes: %w[])
  #   assert_equal 'US-1234', @user.registrant_ident

  #   assert_no_changes -> { @contact.disclosed_attributes } do
  #     patch api_v1_registrant_contact_path(@contact.uuid),
  #           params: { disclosed_attributes: %w[name] },
  #           as: :json,
  #           headers: { 'HTTP_AUTHORIZATION' => auth_token }
  #     @contact.reload
  #   end
  #   assert_response :bad_request

  #   error_msg = "Legal person's data is visible by default and cannot be concealed." \
  #               ' Please remove this parameter.'
  #   assert_equal ({ errors: [{ disclosed_attributes: [error_msg] }] }),
  #                JSON.parse(response.body, symbolize_names: true)
  # end

  def test_legal_persons_disclosed_attributes_change_when_phone
    @contact = contacts(:acme_ltd)
    @contact.update!(disclosed_attributes: %w[])

    patch api_v1_registrant_contact_path(@contact.uuid),
          params: { disclosed_attributes: %w[phone] },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    @contact.reload

    assert_response :ok
    assert_equal %w[phone], @contact.disclosed_attributes
  end

  def test_registrant_publishable_change_when_true
    @contact = contacts(:acme_ltd)
    @contact.update!(registrant_publishable: false)

    patch api_v1_registrant_contact_path(@contact.uuid),
          params: { disclosed_attributes: %w[], registrant_publishable: true },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    @contact.reload

    assert_response :ok
    assert @contact.registrant_publishable
  end

  def test_registrant_publishable_change_when_false
    @contact = contacts(:acme_ltd)
    @contact.update!(registrant_publishable: true)

    patch api_v1_registrant_contact_path(@contact.uuid),
          params: { disclosed_attributes: %w[], registrant_publishable: false },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    @contact.reload

    assert_response :ok
    assert_not @contact.registrant_publishable
  end

  def test_errors
    patch api_v1_registrant_contact_path(@contact.uuid), params: { phone: 'invalid' },
                                                         as: :json,
                                                         headers: { 'HTTP_AUTHORIZATION' => auth_token }

    assert_response :bad_request
    assert_equal ({ errors: { phone: ['Phone nr is invalid'] } }), JSON.parse(response.body,
                                                                              symbolize_names: true)
  end

  def test_org_disclosed_attributes
    patch api_v1_registrant_contact_path(@contact_org.uuid), params: { disclosed_attributes: ["some_attr"] },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }

    assert_response :bad_request

    err_msg = "Request contains extra attributes: some_attr"

    response_json = JSON.parse(response.body, symbolize_names: true)
    response_msg = response_json[:errors][0][:disclosed_attributes][0]

    assert_equal err_msg, response_msg
  end

  def test_unmanaged_contact_cannot_be_updated
    assert_equal 'US-1234', @user.registrant_ident
    @contact.update!(ident: '12345')
    companies = Contact.where(ident_type: 'org')
    companies.update_all(ident: '78964521')
    companies.reload

    patch api_v1_registrant_contact_path(@contact.uuid), params: { name: 'new name' },
          as: :json,
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    @contact.reload

    assert_response :not_found
    assert_not_equal 'new name', @contact.name
  end

  def test_non_existent_contact
    patch api_v1_registrant_contact_path('non-existent'),
          headers: { 'HTTP_AUTHORIZATION' => auth_token }
    assert_response :not_found
    assert_equal ({ errors: [{ base: ['Not found'] }] }),
                 JSON.parse(response.body, symbolize_names: true)
  end

  def test_anonymous_user
    patch api_v1_registrant_contact_path(@contact.uuid)
    assert_response :unauthorized
    assert_equal ({ errors: [{ base: ['Not authorized'] }] }),
                 JSON.parse(response.body, symbolize_names: true)
  end

  private

  def auth_token
    token_creator = AuthTokenCreator.create_with_defaults(@user)
    hash = token_creator.token_in_hash
    "Bearer #{hash[:access_token]}"
  end
end