Musify/backend/Tests/Musify.Api.Tests/Endpoints/AlbumEndpointsTests.cs

using System.Net;
using System.Net.Http.Json;
using Musify.Api.DataTransferObjects.Albums;
using Musify.Api.DataTransferObjects.Users;
using Musify.Api.Tests.TestSupport;
using Musify.Application.Albums.Responses;
using Xunit;

namespace Musify.Api.Tests.Endpoints;

[Collection(ApiCollection.Name)]
public sealed class AlbumEndpointsTests(ApiTestFixture fixture)
{
    private async Task<long> CreateUserAsync()
    {
        var userId = Random.Shared.NextInt64(1, long.MaxValue);
        var response = await fixture.CreateAnonymousClient()
            .PostAsJsonAsync("/users", new CreateUserRequest(userId, $"user-{userId}", null, null));
        response.EnsureSuccessStatusCode();
        return userId;
    }

    [Fact]
    public async Task PostAlbums_NoAuthHeader_ReturnsUnauthorized()
    {
        var response = await fixture.CreateAnonymousClient()
            .PostAsJsonAsync("/albums", new CreateAlbumRequest("Unauthorized Album", null, null), TestContext.Current.CancellationToken);

        Assert.Equal(HttpStatusCode.Unauthorized, response.StatusCode);
    }

    [Fact]
    public async Task PostAlbums_AuthenticatedExistingUser_ReturnsCreatedAlbum()
    {
        var userId = await CreateUserAsync();
        var client = fixture.CreateAuthenticatedClient(userId);

        var response = await client.PostAsJsonAsync("/albums", new CreateAlbumRequest("My Album", "desc", 2024), TestContext.Current.CancellationToken);

        Assert.Equal(HttpStatusCode.Created, response.StatusCode);
        var body = await response.Content.ReadFromJsonAsync<AlbumApplicationResponse>(TestContext.Current.CancellationToken);
        Assert.NotNull(body);
        Assert.Equal("My Album", body.Title);
        Assert.Equal(userId, body.OwnerUserId);
    }

    [Fact]
    public async Task PostAlbums_BlankTitle_ReturnsValidationProblem()
    {
        var userId = await CreateUserAsync();
        var client = fixture.CreateAuthenticatedClient(userId);

        var response = await client.PostAsJsonAsync("/albums", new CreateAlbumRequest("", null, null), TestContext.Current.CancellationToken);

        Assert.Equal(HttpStatusCode.BadRequest, response.StatusCode);
    }

    [Fact]
    public async Task GetAlbumById_AfterCreate_ReturnsIt()
    {
        var userId = await CreateUserAsync();
        var client = fixture.CreateAuthenticatedClient(userId);
        var created = await (await client.PostAsJsonAsync("/albums", new CreateAlbumRequest("Findable", null, null), TestContext.Current.CancellationToken))
            .Content.ReadFromJsonAsync<AlbumApplicationResponse>(TestContext.Current.CancellationToken);

        var response = await fixture.CreateAnonymousClient().GetAsync($"/albums/{created!.Id}", TestContext.Current.CancellationToken);

        Assert.Equal(HttpStatusCode.OK, response.StatusCode);
    }

    [Fact]
    public async Task DeleteAlbum_NotTheOwner_ReturnsUnauthorized()
    {
        var owner = await CreateUserAsync();
        var stranger = await CreateUserAsync();
        var created = await (await fixture.CreateAuthenticatedClient(owner).PostAsJsonAsync("/albums", new CreateAlbumRequest("Owned", null, null), TestContext.Current.CancellationToken))
            .Content.ReadFromJsonAsync<AlbumApplicationResponse>(TestContext.Current.CancellationToken);

        var response = await fixture.CreateAuthenticatedClient(stranger).DeleteAsync($"/albums/{created!.Id}", TestContext.Current.CancellationToken);

        Assert.Equal(HttpStatusCode.Unauthorized, response.StatusCode);
    }

    [Fact]
    public async Task DeleteAlbum_Owner_ReturnsNoContentAndAlbumIsGone()
    {
        var userId = await CreateUserAsync();
        var client = fixture.CreateAuthenticatedClient(userId);
        var created = await (await client.PostAsJsonAsync("/albums", new CreateAlbumRequest("Deletable", null, null), TestContext.Current.CancellationToken))
            .Content.ReadFromJsonAsync<AlbumApplicationResponse>(TestContext.Current.CancellationToken);

        var deleteResponse = await client.DeleteAsync($"/albums/{created!.Id}", TestContext.Current.CancellationToken);
        var getResponse = await fixture.CreateAnonymousClient().GetAsync($"/albums/{created.Id}", TestContext.Current.CancellationToken);

        Assert.Equal(HttpStatusCode.NoContent, deleteResponse.StatusCode);
        Assert.Equal(HttpStatusCode.NotFound, getResponse.StatusCode);
    }
}