autonomous.contact/tests/04_create_topic.test.ts

import { api, API_CLIENT } from '../utils/api.ts';
import * as asserts from '@std/assert';
import { delete_user, EPHEMERAL_SERVER, get_ephemeral_listen_server, get_new_user, set_user_permissions } from './helpers.ts';
import { generateTotp } from '../utils/totp.ts';
import { clear_topic_events_cache } from '../models/event.ts';

Deno.test({
	name: 'API - TOPICS - Create',
	permissions: {
		env: true,
		read: true,
		write: true,
		net: true
	},
	fn: async () => {
		let test_server_info: EPHEMERAL_SERVER | null = null;
		try {
			test_server_info = await get_ephemeral_listen_server();
			const client: API_CLIENT = api({
				prefix: '/api',
				hostname: test_server_info.hostname,
				port: test_server_info.port
			});

			const root_user_info = await get_new_user(client);

			try {
				const root_user_topic = await client.fetch('/topics', {
					method: 'POST',
					headers: {
						'x-session_id': root_user_info.session.id,
						'x-totp': await generateTotp(root_user_info.session.secret)
					},
					json: {
						name: 'this is the root user topic'
					}
				});

				asserts.assert(root_user_topic);
			} catch (error) {
				const reason: string = (error as Error).cause as string ?? (error as Error).toString();
				asserts.fail(reason);
			}

			const regular_user_info = await get_new_user(client, {}, root_user_info);

			try {
				const _permission_denied_topic = await client.fetch('/topics', {
					method: 'POST',
					headers: {
						'x-session_id': regular_user_info.session.id,
						'x-totp': await generateTotp(regular_user_info.session.secret)
					},
					json: {
						name: 'this should not be allowed'
					}
				});

				asserts.fail('allowed creation of a topic without topic creation permissions');
			} catch (error) {
				asserts.assertEquals((error as Error).cause, 'permission_denied');
			}

			await set_user_permissions(client, regular_user_info.user, regular_user_info.session, [...regular_user_info.user.permissions, 'topics.create']);

			try {
				const _too_long_name_topic = await client.fetch('/topics', {
					method: 'POST',
					headers: {
						'x-session_id': regular_user_info.session.id,
						'x-totp': await generateTotp(regular_user_info.session.secret)
					},
					json: {
						name: 'X'.repeat(1024)
					}
				});

				asserts.fail('allowed creation of a topic with an excessively long name');
			} catch (error) {
				asserts.assertEquals((error as Error).cause, 'invalid_topic_name');
			}

			const new_topic = await client.fetch('/topics', {
				method: 'POST',
				headers: {
					'x-session_id': regular_user_info.session.id,
					'x-totp': await generateTotp(regular_user_info.session.secret)
				},
				json: {
					name: 'test topic'
				}
			});

			asserts.assert(new_topic);

			await delete_user(client, regular_user_info);
			await delete_user(client, root_user_info);
		} finally {
			clear_topic_events_cache();
			if (test_server_info) {
				await test_server_info?.server?.stop();
			}
		}
	}
});