baron-sso/backend/internal/service/user_group_service_test.go

package service

import (
	"baron-sso-backend/internal/domain"
	"context"
	"testing"

	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/mock"
)

// --- Mocks for Repositories ---

type MockUserGroupRepository struct {
	mock.Mock
}

func (m *MockUserGroupRepository) Create(ctx context.Context, group *domain.UserGroup) error {
	return m.Called(ctx, group).Error(0)
}

func (m *MockUserGroupRepository) Update(ctx context.Context, group *domain.UserGroup) error {
	return m.Called(ctx, group).Error(0)
}

func (m *MockUserGroupRepository) Delete(ctx context.Context, id string) error {
	return m.Called(ctx, id).Error(0)
}

func (m *MockUserGroupRepository) FindByID(ctx context.Context, id string) (*domain.UserGroup, error) {
	args := m.Called(ctx, id)
	if args.Get(0) == nil {
		return nil, args.Error(1)
	}
	return args.Get(0).(*domain.UserGroup), args.Error(1)
}

func (m *MockUserGroupRepository) ListByTenantID(ctx context.Context, tenantID string) ([]domain.UserGroup, error) {
	args := m.Called(ctx, tenantID)
	return args.Get(0).([]domain.UserGroup), args.Error(1)
}

type MockUserRepository struct {
	mock.Mock
}

func (m *MockUserRepository) Create(ctx context.Context, user *domain.User) error { return nil }
func (m *MockUserRepository) Update(ctx context.Context, user *domain.User) error { return nil }
func (m *MockUserRepository) FindByEmail(ctx context.Context, email string) (*domain.User, error) {
	return nil, nil
}

func (m *MockUserRepository) FindByID(ctx context.Context, id string) (*domain.User, error) {
	return nil, nil
}

func (m *MockUserRepository) FindByIDs(ctx context.Context, ids []string) ([]domain.User, error) {
	args := m.Called(ctx, ids)
	return args.Get(0).([]domain.User), args.Error(1)
}

func (m *MockUserRepository) ListByTenant(ctx context.Context, tenantID string) ([]domain.User, error) {
	return nil, nil
}

func (m *MockUserRepository) List(ctx context.Context, offset, limit int, search string) ([]domain.User, int64, error) {
	return nil, 0, nil
}

type MockTenantRepository struct {
	mock.Mock
}

func (m *MockTenantRepository) Create(ctx context.Context, tenant *domain.Tenant) error {
	return m.Called(ctx, tenant).Error(0)
}
func (m *MockTenantRepository) Update(ctx context.Context, tenant *domain.Tenant) error { return nil }
func (m *MockTenantRepository) FindByID(ctx context.Context, id string) (*domain.Tenant, error) {
	return nil, nil
}

func (m *MockTenantRepository) FindByIDs(ctx context.Context, ids []string) ([]domain.Tenant, error) {
	args := m.Called(ctx, ids)
	return args.Get(0).([]domain.Tenant), args.Error(1)
}

func (m *MockTenantRepository) FindBySlug(ctx context.Context, slug string) (*domain.Tenant, error) {
	return nil, nil
}

func (m *MockTenantRepository) FindByName(ctx context.Context, name string) (*domain.Tenant, error) {
	return nil, nil
}

func (m *MockTenantRepository) FindByDomain(ctx context.Context, domainName string) (*domain.Tenant, error) {
	return nil, nil
}

func (m *MockTenantRepository) AddDomain(ctx context.Context, tenantID string, domainName string, verified bool) error {
	return nil
}

func TestUserGroupService_Create(t *testing.T) {
	mockRepo := new(MockUserGroupRepository)
	mockTenantRepo := new(MockTenantRepository)
	mockKeto := new(MockKetoServiceShared)
	mockOutbox := new(MockKetoOutboxRepositoryShared)
	svc := NewUserGroupService(mockRepo, nil, mockTenantRepo, mockKeto, mockOutbox, nil)

	group := &domain.UserGroup{
		ID:       "group-1",
		TenantID: "company-1",
		Name:     "Test Group",
	}

	// Mock Tenant creation (Polymorphic)
	mockTenantRepo.On("Create", mock.Anything, mock.MatchedBy(func(ten *domain.Tenant) bool {
		return ten.Type == domain.TenantTypeUserGroup && ten.ID == group.ID
	})).Return(nil)

	// Mock UserGroup creation
	mockRepo.On("Create", mock.Anything, group).Return(nil)

	// Mock Keto sync via Outbox
	mockOutbox.On("Create", mock.Anything, mock.MatchedBy(func(e *domain.KetoOutbox) bool {
		return e.Namespace == "Tenant" && e.Object == group.ID && e.Relation == "parents" && e.Subject == "Tenant:"+group.TenantID
	})).Return(nil)

	err := svc.Create(context.Background(), group)
	assert.NoError(t, err)
	mockTenantRepo.AssertExpectations(t)
	mockRepo.AssertExpectations(t)
	mockOutbox.AssertExpectations(t)
}

func TestUserGroupService_AddMember(t *testing.T) {
	mockOutbox := new(MockKetoOutboxRepositoryShared)
	svc := NewUserGroupService(nil, nil, nil, nil, mockOutbox, nil)

	groupID := "group-1"
	userID := "user-1"

	// Using Outbox and Tenant namespace
	mockOutbox.On("Create", mock.Anything, mock.MatchedBy(func(e *domain.KetoOutbox) bool {
		return e.Namespace == "Tenant" && e.Object == groupID && e.Relation == "members" && e.Subject == "User:"+userID
	})).Return(nil)

	err := svc.AddMember(context.Background(), groupID, userID)
	assert.NoError(t, err)
	mockOutbox.AssertExpectations(t)
}

func TestUserGroupService_AssignRoleToTenant(t *testing.T) {
	mockOutbox := new(MockKetoOutboxRepositoryShared)
	svc := NewUserGroupService(nil, nil, nil, nil, mockOutbox, nil)

	groupID := "group-1"
	tenantID := "tenant-alpha"
	relation := "manage"

	expectedSubject := "Tenant:" + groupID + "#members"
	mockOutbox.On("Create", mock.Anything, mock.MatchedBy(func(e *domain.KetoOutbox) bool {
		return e.Namespace == "Tenant" && e.Object == tenantID && e.Relation == relation && e.Subject == expectedSubject
	})).Return(nil)

	err := svc.AssignRoleToTenant(context.Background(), groupID, tenantID, relation)
	assert.NoError(t, err)
	mockOutbox.AssertExpectations(t)
}

func TestUserGroupService_ListRoles(t *testing.T) {
	mockKeto := new(MockKetoServiceShared)
	mockTenantRepo := new(MockTenantRepository)
	svc := NewUserGroupService(nil, nil, mockTenantRepo, mockKeto, nil, nil)

	groupID := "group-1"
	subject := "Tenant:" + groupID + "#members"

	// Mock Keto relations
	tuples := []RelationTuple{
		{Object: "t1", Relation: "manage", SubjectID: subject},
		{Object: "t2", Relation: "view", SubjectID: subject},
	}
	mockKeto.On("ListRelations", mock.Anything, "Tenant", "", "", subject).Return(tuples, nil)

	// Mock Tenant fetching
	tenants := []domain.Tenant{
		{ID: "t1", Name: "Tenant One"},
		{ID: "t2", Name: "Tenant Two"},
	}
	mockTenantRepo.On("FindByIDs", mock.Anything, []string{"t1", "t2"}).Return(tenants, nil)

	roles, err := svc.ListRoles(context.Background(), groupID)
	assert.NoError(t, err)
	assert.Len(t, roles, 2)
	assert.Equal(t, "Tenant One", roles[0].TenantName)
	assert.Equal(t, "manage", roles[0].Relation)
	assert.Equal(t, "Tenant Two", roles[1].TenantName)
	assert.Equal(t, "view", roles[1].Relation)

	mockKeto.AssertExpectations(t)
	mockTenantRepo.AssertExpectations(t)
}

func TestUserGroupService_Get_WithKratosFallback(t *testing.T) {
	mockRepo := new(MockUserGroupRepository)
	mockKeto := new(MockKetoServiceShared)
	mockUserRepo := new(MockUserRepository)

	svc := NewUserGroupService(mockRepo, mockUserRepo, nil, mockKeto, nil, nil)

	groupID := "group-1"
	mockRepo.On("FindByID", mock.Anything, groupID).Return(&domain.UserGroup{ID: groupID, Name: "Test"}, nil)

	tuples := []RelationTuple{
		{Object: groupID, Relation: "members", SubjectID: "User:u1"},
	}
	// Note: Transitioned to 'Tenant' namespace for groups
	mockKeto.On("ListRelations", mock.Anything, "Tenant", groupID, "members", "").Return(tuples, nil)

	mockUserRepo.On("FindByIDs", mock.Anything, []string{"u1"}).Return([]domain.User{}, nil)

	group, err := svc.Get(context.Background(), groupID)
	assert.NoError(t, err)
	assert.NotNil(t, group)
	assert.Len(t, group.Members, 0)
}