server/tests/api.test.ts

/* eslint-disable @typescript-eslint/no-unsafe-member-access */
/* eslint-disable @typescript-eslint/no-explicit-any */
import { getConfig } from "@config";
import { afterAll, beforeAll, describe, expect, test } from "bun:test";
import { AppDataSource } from "~database/datasource";
import { Application } from "~database/entities/Application";
import { RawActivity } from "~database/entities/RawActivity";
import { Token, TokenType } from "~database/entities/Token";
import { User } from "~database/entities/User";
import { APIAccount } from "~types/entities/account";
import { APIRelationship } from "~types/entities/relationship";
import { APIStatus } from "~types/entities/status";

const config = getConfig();

let token: Token;
let user: User;
let user2: User;

beforeAll(async () => {
	if (!AppDataSource.isInitialized) await AppDataSource.initialize();

	// Initialize test user
	user = await User.createNew({
		email: "test@test.com",
		username: "test",
		password: "test",
		display_name: "",
	});

	// Initialize second test user
	user2 = await User.createNew({
		email: "test2@test.com",
		username: "test2",
		password: "test2",
		display_name: "",
	});

	const app = new Application();

	app.name = "Test Application";
	app.website = "https://example.com";
	app.client_id = "test";
	app.redirect_uris = "https://example.com";
	app.scopes = "read write";
	app.secret = "test";
	app.vapid_key = null;

	await app.save();

	// Initialize test token
	token = new Token();

	token.access_token = "test";
	token.application = app;
	token.code = "test";
	token.scope = "read write";
	token.token_type = TokenType.BEARER;
	token.user = user;

	token = await token.save();
});

describe("POST /api/v1/accounts/:id", () => {
	test("should return a 404 error when trying to fetch a non-existent user", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/999999`,
			{
				method: "GET",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
			}
		);

		expect(response.status).toBe(404);
		expect(response.headers.get("content-type")).toBe("application/json");
	});
});

describe("POST /api/v1/statuses", () => {
	test("should create a new status and return an APIStatus object", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/statuses`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({
					status: "Hello, world!",
					visibility: "public",
				}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const status: APIStatus = await response.json();

		expect(status.content).toBe("Hello, world!");
		expect(status.visibility).toBe("public");
		expect(status.account.id).toBe(user.id);
		expect(status.replies_count).toBe(0);
		expect(status.favourites_count).toBe(0);
		expect(status.reblogged).toBe(false);
		expect(status.favourited).toBe(false);
		expect(status.media_attachments).toEqual([]);
		expect(status.mentions).toEqual([]);
		expect(status.tags).toEqual([]);
		expect(status.sensitive).toBe(false);
		expect(status.spoiler_text).toBe("");
		expect(status.language).toBeNull();
		expect(status.pinned).toBe(false);
		expect(status.visibility).toBe("public");
		expect(status.card).toBeNull();
		expect(status.poll).toBeNull();
		expect(status.emojis).toEqual([]);
		expect(status.in_reply_to_id).toBeNull();
		expect(status.in_reply_to_account_id).toBeNull();
	});
});

describe("PATCH /api/v1/accounts/update_credentials", () => {
	test("should update the authenticated user's display name", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/update_credentials`,
			{
				method: "PATCH",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({
					display_name: "New Display Name",
				}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const user: APIAccount = await response.json();

		expect(user.display_name).toBe("New Display Name");
	});
});

describe("GET /api/v1/accounts/verify_credentials", () => {
	test("should return the authenticated user's account information", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/verify_credentials`,
			{
				method: "GET",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIAccount = await response.json();

		expect(account.username).toBe(user.username);
		expect(account.bot).toBe(false);
		expect(account.locked).toBe(false);
		expect(account.created_at).toBeDefined();
		expect(account.followers_count).toBe(0);
		expect(account.following_count).toBe(0);
		expect(account.statuses_count).toBe(0);
		expect(account.note).toBe("");
		expect(account.url).toBe(`${config.http.base_url}/@${user.username}`);
		expect(account.avatar).toBeDefined();
		expect(account.avatar_static).toBeDefined();
		expect(account.header).toBeDefined();
		expect(account.header_static).toBeDefined();
		expect(account.emojis).toEqual([]);
		expect(account.fields).toEqual([]);
		expect(account.source?.fields).toEqual([]);
		expect(account.source?.privacy).toBe("public");
		expect(account.source?.language).toBeNull();
		expect(account.source?.note).toBe("");
		expect(account.source?.sensitive).toBe(false);
	});
});

describe("GET /api/v1/accounts/:id/statuses", () => {
	test("should return the statuses of the specified user", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user.id}/statuses`,
			{
				method: "GET",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const statuses: APIStatus[] = await response.json();

		expect(statuses.length).toBe(1);

		const status1 = statuses[0];

		// Basic validation
		expect(status1.content).toBe("Hello, world!");
		expect(status1.visibility).toBe("public");
		expect(status1.account.id).toBe(user.id);
	});
});

describe("POST /api/v1/accounts/:id/follow", () => {
	test("should follow the specified user and return an APIRelationship object", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/follow`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.following).toBe(true);
	});
});

describe("POST /api/v1/accounts/:id/unfollow", () => {
	test("should unfollow the specified user and return an APIRelationship object", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/unfollow`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.following).toBe(false);
	});
});

describe("POST /api/v1/accounts/:id/remove_from_followers", () => {
	test("should remove the specified user from the authenticated user's followers and return an APIRelationship object", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/remove_from_followers`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.followed_by).toBe(false);
	});
});

describe("POST /api/v1/accounts/:id/block", () => {
	test("should block the specified user and return an APIRelationship object", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/block`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.blocking).toBe(true);
	});
});

describe("POST /api/v1/accounts/:id/unblock", () => {
	test("should unblock the specified user and return an APIRelationship object", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/unblock`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.blocking).toBe(false);
	});
});

describe("POST /api/v1/accounts/:id/mute with notifications parameter", () => {
	test("should mute the specified user and return an APIRelationship object with notifications set to false", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/mute`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({ notifications: true }),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.muting).toBe(true);
		expect(account.muting_notifications).toBe(true);
	});

	test("should mute the specified user and return an APIRelationship object with notifications set to true", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/mute`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({ notifications: false }),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.muting).toBe(true);
		expect(account.muting_notifications).toBe(true);
	});
});

describe("POST /api/v1/accounts/:id/unmute", () => {
	test("should unmute the specified user and return an APIRelationship object", async () => {
		const response = await fetch(
			`${config.http.base_url}/api/v1/accounts/${user2.id}/unmute`,
			{
				method: "POST",
				headers: {
					Authorization: `Bearer ${token.access_token}`,
					"Content-Type": "application/json",
				},
				body: JSON.stringify({}),
			}
		);

		expect(response.status).toBe(200);
		expect(response.headers.get("content-type")).toBe("application/json");

		const account: APIRelationship = await response.json();

		expect(account.id).toBe(user2.id);
		expect(account.muting).toBe(false);
	});
});

afterAll(async () => {
	const activities = await RawActivity.createQueryBuilder("activity")
		.where("activity.data->>'actor' = :actor", {
			actor: `${config.http.base_url}/@test`,
		})
		.leftJoinAndSelect("activity.objects", "objects")
		.getMany();

	// Delete all created objects and activities as part of testing
	await Promise.all(
		activities.map(async activity => {
			await Promise.all(
				activity.objects.map(async object => await object.remove())
			);
			await activity.remove();
		})
	);

	await user.selfDestruct();
	await user.remove();

	await user2.selfDestruct();
	await user2.remove();
});