gochat/internal/handler/api/v1/agent_bot_handler_test.go

package v1

import (
	"bytes"
	"encoding/json"
	"fmt"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/gin-gonic/gin"
	"github.com/gochat/gochat/internal/model"
	"github.com/gochat/gochat/internal/repository"
	"github.com/gochat/gochat/internal/service"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/suite"
	"gorm.io/driver/sqlite"
	"gorm.io/gorm"
	"gorm.io/gorm/logger"
)

type AgentBotHandlerTestSuite struct {
	suite.Suite
	db      *gorm.DB
	handler *AgentBotHandler

	account *model.Account
	user    *model.User
}

func (s *AgentBotHandlerTestSuite) SetupSuite() {
	gin.SetMode(gin.TestMode)
	db, err := gorm.Open(sqlite.Open("file::memory:"), &gorm.Config{
		Logger: logger.Default.LogMode(logger.Silent),
	})
	s.Require().NoError(err)
	s.Require().NoError(db.AutoMigrate(&model.Account{}, &model.User{}, &model.AgentBot{}, &model.AgentBotInbox{}))
	s.db = db

	repo := repository.NewAgentBotRepo(db)
	svc := service.NewAgentBotService(repo)
	s.handler = NewAgentBotHandler(svc)

	s.account = &model.Account{Name: "test-agent-bot-account"}
	s.db.Create(s.account)
	s.user = &model.User{Name: "test-agent-bot-user", Email: "bot@example.com"}
	s.db.Create(s.user)
}

func (s *AgentBotHandlerTestSuite) TearDownSuite() {
	if s.db != nil {
		sqlDB, _ := s.db.DB()
		sqlDB.Close()
	}
}

func TestAgentBotHandlerSuite(t *testing.T) {
	suite.Run(t, new(AgentBotHandlerTestSuite))
}

func (s *AgentBotHandlerTestSuite) TestPlatformList() {
	r := gin.New()
	r.GET("/platform/api/v1/agent_bots", s.handler.PlatformList)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("GET", "/platform/api/v1/agent_bots", nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusOK, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestPlatformCreate_Success() {
	r := gin.New()
	r.POST("/platform/api/v1/agent_bots", s.handler.PlatformCreate)

	body := map[string]interface{}{
		"name":         "test-global-bot",
		"bot_type":     "webhook",
		"outgoing_url": "https://example.com/webhook",
	}
	b, _ := json.Marshal(body)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("POST", "/platform/api/v1/agent_bots", bytes.NewBuffer(b))
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusCreated, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestPlatformCreate_BadRequest() {
	r := gin.New()
	r.POST("/platform/api/v1/agent_bots", s.handler.PlatformCreate)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("POST", "/platform/api/v1/agent_bots", nil)
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusBadRequest, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestAccountList() {
	r := gin.New()
	r.GET("/api/v1/accounts/:account_id/agent_bots", s.handler.List)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("GET", fmt.Sprintf("/api/v1/accounts/%d/agent_bots", s.account.ID), nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusOK, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestAccountCreate_Success() {
	r := gin.New()
	r.POST("/api/v1/accounts/:account_id/agent_bots", s.handler.Create)

	body := map[string]interface{}{
		"name":         "test-account-bot",
		"bot_type":     "webhook",
		"outgoing_url": "https://example.com/webhook",
	}
	b, _ := json.Marshal(body)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("POST", fmt.Sprintf("/api/v1/accounts/%d/agent_bots", s.account.ID), bytes.NewBuffer(b))
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusOK, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestAccountChatwootPayloadsAndRoutes() {
	r := gin.New()
	r.GET("/api/v1/accounts/:account_id/agent_bots", s.handler.List)
	r.POST("/api/v1/accounts/:account_id/agent_bots", s.handler.Create)
	r.GET("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id", s.handler.Get)
	r.PATCH("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id", s.handler.Update)
	r.DELETE("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id", s.handler.Delete)
	r.DELETE("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id/avatar", s.handler.DeleteAvatar)
	r.POST("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id/reset_access_token", s.handler.ResetToken)
	r.POST("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id/reset_secret", s.handler.ResetSecret)

	global := &model.AgentBot{Name: "system-bot", BotType: "webhook", OutgoingURL: "https://system.example/hook", AccessToken: "global-token", Secret: "global-secret", Config: json.RawMessage(`{"mode":"system"}`)}
	s.Require().NoError(s.db.Create(global).Error)

	createBody := []byte(`{"name":"chatwoot-bot","description":"before","bot_type":"webhook","outgoing_url":"https://example.com/webhook","avatar_url":"https://example.com/bot.png","bot_config":{"handoff":true}}`)
	w := httptest.NewRecorder()
	req, _ := http.NewRequest(http.MethodPost, fmt.Sprintf("/api/v1/accounts/%d/agent_bots", s.account.ID), bytes.NewReader(createBody))
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusOK, w.Code)

	var created map[string]interface{}
	s.Require().NoError(json.Unmarshal(w.Body.Bytes(), &created))
	botID := uint(created["id"].(float64))
	assert.NotContains(s.T(), created, "success")
	assert.Equal(s.T(), "chatwoot-bot", created["name"])
	assert.Equal(s.T(), "https://example.com/bot.png", created["thumbnail"])
	assert.Equal(s.T(), "https://example.com/webhook", created["outgoing_url"])
	assert.Equal(s.T(), false, created["system_bot"])
	assert.NotEmpty(s.T(), created["access_token"])
	assert.NotEmpty(s.T(), created["secret"])
	assert.Contains(s.T(), created, "bot_config")

	w = httptest.NewRecorder()
	req, _ = http.NewRequest(http.MethodGet, fmt.Sprintf("/api/v1/accounts/%d/agent_bots", s.account.ID), nil)
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusOK, w.Code)
	var list []map[string]interface{}
	s.Require().NoError(json.Unmarshal(w.Body.Bytes(), &list))
	assert.GreaterOrEqual(s.T(), len(list), 2)
	assert.NotContains(s.T(), list[0], "success")

	w = httptest.NewRecorder()
	updateBody := []byte(`{"description":"","outgoing_url":"","bot_config":{"handoff":false}}`)
	req, _ = http.NewRequest(http.MethodPatch, fmt.Sprintf("/api/v1/accounts/%d/agent_bots/%d", s.account.ID, botID), bytes.NewReader(updateBody))
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusOK, w.Code)
	var updated map[string]interface{}
	s.Require().NoError(json.Unmarshal(w.Body.Bytes(), &updated))
	assert.Equal(s.T(), "", updated["description"])
	assert.Equal(s.T(), "", updated["outgoing_url"])

	w = httptest.NewRecorder()
	req, _ = http.NewRequest(http.MethodPatch, fmt.Sprintf("/api/v1/accounts/%d/agent_bots/%d", s.account.ID, global.ID), bytes.NewReader([]byte(`{"name":"blocked"}`)))
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusNotFound, w.Code)

	oldToken := created["access_token"]
	w = httptest.NewRecorder()
	req, _ = http.NewRequest(http.MethodPost, fmt.Sprintf("/api/v1/accounts/%d/agent_bots/%d/reset_access_token", s.account.ID, botID), nil)
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusOK, w.Code)
	var resetToken map[string]interface{}
	s.Require().NoError(json.Unmarshal(w.Body.Bytes(), &resetToken))
	assert.Equal(s.T(), float64(botID), resetToken["id"])
	assert.NotEqual(s.T(), oldToken, resetToken["access_token"])
	assert.NotContains(s.T(), resetToken, "data")

	oldSecret := resetToken["secret"]
	w = httptest.NewRecorder()
	req, _ = http.NewRequest(http.MethodPost, fmt.Sprintf("/api/v1/accounts/%d/agent_bots/%d/reset_secret", s.account.ID, botID), nil)
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusOK, w.Code)
	var resetSecret map[string]interface{}
	s.Require().NoError(json.Unmarshal(w.Body.Bytes(), &resetSecret))
	assert.NotEqual(s.T(), oldSecret, resetSecret["secret"])

	w = httptest.NewRecorder()
	req, _ = http.NewRequest(http.MethodDelete, fmt.Sprintf("/api/v1/accounts/%d/agent_bots/%d/avatar", s.account.ID, botID), nil)
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusOK, w.Code)
	var avatar map[string]interface{}
	s.Require().NoError(json.Unmarshal(w.Body.Bytes(), &avatar))
	assert.Equal(s.T(), "", avatar["thumbnail"])

	w = httptest.NewRecorder()
	req, _ = http.NewRequest(http.MethodDelete, fmt.Sprintf("/api/v1/accounts/%d/agent_bots/%d", s.account.ID, botID), nil)
	r.ServeHTTP(w, req)
	assert.Equal(s.T(), http.StatusOK, w.Code)
	assert.Empty(s.T(), w.Body.String())
}

func (s *AgentBotHandlerTestSuite) TestAccountCreate_BadRequest() {
	r := gin.New()
	r.POST("/api/v1/accounts/:account_id/agent_bots", s.handler.Create)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("POST", fmt.Sprintf("/api/v1/accounts/%d/agent_bots", s.account.ID), nil)
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusBadRequest, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestAccountGet_NotFound() {
	r := gin.New()
	r.GET("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id", s.handler.Get)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("GET", fmt.Sprintf("/api/v1/accounts/%d/agent_bots/99999", s.account.ID), nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusNotFound, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestPlatformGet_NotFound() {
	r := gin.New()
	r.GET("/platform/api/v1/agent_bots/:agent_bot_id", s.handler.PlatformGet)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("GET", "/platform/api/v1/agent_bots/99999", nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusNotFound, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestUpdate_BadRequest() {
	r := gin.New()
	r.PUT("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id", s.handler.Update)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("PUT", fmt.Sprintf("/api/v1/accounts/%d/agent_bots/abc", s.account.ID), nil)
	req.Header.Set("Content-Type", "application/json")
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusBadRequest, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestDelete_BadRequest() {
	r := gin.New()
	r.DELETE("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id", s.handler.Delete)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("DELETE", fmt.Sprintf("/api/v1/accounts/%d/agent_bots/abc", s.account.ID), nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusBadRequest, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestResetToken_BadRequest() {
	r := gin.New()
	r.POST("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id/reset_token", s.handler.ResetToken)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("POST", fmt.Sprintf("/api/v1/accounts/%d/agent_bots/abc/reset_token", s.account.ID), nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusBadRequest, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestResetSecret_BadRequest() {
	r := gin.New()
	r.POST("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id/reset_secret", s.handler.ResetSecret)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("POST", fmt.Sprintf("/api/v1/accounts/%d/agent_bots/abc/reset_secret", s.account.ID), nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusBadRequest, w.Code)
}

func (s *AgentBotHandlerTestSuite) TestDeleteAvatar_BadRequest() {
	r := gin.New()
	r.DELETE("/api/v1/accounts/:account_id/agent_bots/:agent_bot_id/avatar", s.handler.DeleteAvatar)

	w := httptest.NewRecorder()
	req, _ := http.NewRequest("DELETE", fmt.Sprintf("/api/v1/accounts/%d/agent_bots/abc/avatar", s.account.ID), nil)
	r.ServeHTTP(w, req)

	assert.Equal(s.T(), http.StatusBadRequest, w.Code)
}