Files
zarinpal-analytics-backend/internal/api/server_test.go
Amirhossein Khalili d6de48fd15 fix: harden terminal-scoped analytics contracts
Keep JSON and bounded CSV exports on one canonical predicate, replace replayable offsets with encrypted tenant/filter-bound keyset cursors, and suppress merchant-grain peers under terminal scope. Validate period filters and align OpenAPI and capability specs with runtime behavior.
2026-08-20 21:29:18 +03:30

126 lines
4.0 KiB
Go

package api
import (
"errors"
"net/http/httptest"
"strings"
"testing"
"time"
"git.amiirkhl.ir/starcoach-hackathon/zarinpal-analytics-backend/internal/analytics"
)
func TestServerCookieName(t *testing.T) {
t.Parallel()
tests := []struct {
name string
secure bool
expected string
}{
{name: "local development", secure: false, expected: "zpa_session"},
{name: "secure deployment", secure: true, expected: "__Host-zpa_session"},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
server := &Server{cookieSecure: tt.secure}
if got := server.cookieName(); got != tt.expected {
t.Fatalf("cookieName() = %q, want %q", got, tt.expected)
}
})
}
}
func TestRenderExportCSVIsBoundedAndFormulaSafe(t *testing.T) {
t.Parallel()
item := analytics.ExportDetail{Detail: analytics.Detail{
SessionID: "=session", TerminalID: "+terminal", SessionStatus: "Verified",
AmountRial: 1000, FeeAmountRial: 10, CreatedAt: time.Date(2026, time.June, 20, 8, 0, 0, 0, time.UTC),
}}
encoded, err := renderExportCSV([]analytics.ExportDetail{item}, 4096)
if err != nil {
t.Fatal(err)
}
text := string(encoded)
if !strings.Contains(text, "'=session") || !strings.Contains(text, "'+terminal") {
t.Fatalf("renderExportCSV() did not neutralize formulas: %q", text)
}
if _, err := renderExportCSV([]analytics.ExportDetail{item}, 10); !errors.Is(err, errExportBytesExceeded) {
t.Fatalf("renderExportCSV() error = %v, want errExportBytesExceeded", err)
}
}
func TestPersianStatus(t *testing.T) {
t.Parallel()
if got := persianStatus("Verified"); got != "تأیید شده" {
t.Fatalf("persianStatus() = %q", got)
}
}
func TestOptionalNonNegativeInt64(t *testing.T) {
t.Parallel()
tests := []struct {
name, input string
want *int64
valid bool
}{
{name: "omitted", valid: true},
{name: "zero", input: "0", want: int64Pointer(0), valid: true},
{name: "positive", input: "125000", want: int64Pointer(125000), valid: true},
{name: "negative", input: "-1"},
{name: "not a number", input: "یک"},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
got, valid := optionalNonNegativeInt64(tt.input)
if valid != tt.valid || !equalInt64Pointers(got, tt.want) {
t.Fatalf("optionalNonNegativeInt64(%q) = %v,%v, want %v,%v", tt.input, got, valid, tt.want, tt.valid)
}
})
}
}
func int64Pointer(value int64) *int64 { return &value }
func equalInt64Pointers(left, right *int64) bool {
if left == nil || right == nil {
return left == right
}
return *left == *right
}
func TestDetailFilterFromRequestParsesCanonicalFilters(t *testing.T) {
t.Parallel()
request := httptest.NewRequest("GET", "/?view=ALL&failureStage=&terminalId=T318&status=Verified&minAmountRial=1000&maxAmountRial=9000&cursor=opaque", nil)
filter, err := detailFilterFromRequest(request, 25)
if err != nil {
t.Fatal(err)
}
if filter.View != "ALL" || filter.TerminalID != "T318" || filter.Status != "Verified" || filter.Cursor != "opaque" || filter.Limit != 25 {
t.Fatalf("detailFilterFromRequest() = %+v", filter)
}
if filter.MinAmountRial == nil || *filter.MinAmountRial != 1000 || filter.MaxAmountRial == nil || *filter.MaxAmountRial != 9000 {
t.Fatalf("detailFilterFromRequest() amount bounds = %v/%v", filter.MinAmountRial, filter.MaxAmountRial)
}
}
func TestDetailFilterFromRequestRejectsDescendingAmountRange(t *testing.T) {
t.Parallel()
request := httptest.NewRequest("GET", "/?view=ALL&minAmountRial=9000&maxAmountRial=1000", nil)
if _, err := detailFilterFromRequest(request, 25); err == nil {
t.Fatal("detailFilterFromRequest() error = nil")
}
}
func TestFilterPeriodsByType(t *testing.T) {
t.Parallel()
periods := []analytics.Period{{PeriodType: "DAY"}, {PeriodType: "WEEK"}}
filtered, err := filterPeriodsByType(periods, "DAY")
if err != nil || len(filtered) != 1 || filtered[0].PeriodType != "DAY" || !filtered[0].IsDefault {
t.Fatalf("filterPeriodsByType() = %+v, %v", filtered, err)
}
if _, err := filterPeriodsByType(periods, "MONTH"); err == nil {
t.Fatal("filterPeriodsByType() accepted invalid type")
}
}