crewli/api/tests/Feature/FestivalSection/FestivalSectionTest.php

<?php

declare(strict_types=1);

namespace Tests\Feature\FestivalSection;

use App\Models\Event;
use App\Models\FestivalSection;
use App\Models\Organisation;
use App\Models\User;
use Database\Seeders\RoleSeeder;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Laravel\Sanctum\Sanctum;
use Tests\TestCase;

class FestivalSectionTest extends TestCase
{
    use RefreshDatabase;

    private User $orgAdmin;
    private User $outsider;
    private Organisation $organisation;
    private Organisation $otherOrganisation;
    private Event $event;

    protected function setUp(): void
    {
        parent::setUp();
        $this->seed(RoleSeeder::class);

        $this->organisation = Organisation::factory()->create();
        $this->otherOrganisation = Organisation::factory()->create();

        $this->orgAdmin = User::factory()->create();
        $this->organisation->users()->attach($this->orgAdmin, ['role' => 'org_admin']);

        $this->outsider = User::factory()->create();
        $this->otherOrganisation->users()->attach($this->outsider, ['role' => 'org_admin']);

        $this->event = Event::factory()->create(['organisation_id' => $this->organisation->id]);
    }

    public function test_index_returns_sections_for_event(): void
    {
        FestivalSection::factory()->count(3)->create(['event_id' => $this->event->id]);

        // Section on another event should not appear
        $otherEvent = Event::factory()->create(['organisation_id' => $this->organisation->id]);
        FestivalSection::factory()->create(['event_id' => $otherEvent->id]);

        Sanctum::actingAs($this->orgAdmin);

        $response = $this->getJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections");

        $response->assertOk();
        $this->assertCount(3, $response->json('data'));
    }

    public function test_index_cross_org_returns_403(): void
    {
        Sanctum::actingAs($this->outsider);

        $response = $this->getJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections");

        $response->assertForbidden();
    }

    public function test_store_creates_section(): void
    {
        Sanctum::actingAs($this->orgAdmin);

        $response = $this->postJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections", [
            'name' => 'Bar',
            'sort_order' => 1,
        ]);

        $response->assertCreated()
            ->assertJson(['data' => ['name' => 'Bar', 'sort_order' => 1]]);

        $this->assertDatabaseHas('festival_sections', [
            'event_id' => $this->event->id,
            'name' => 'Bar',
        ]);
    }

    public function test_store_unauthenticated_returns_401(): void
    {
        $response = $this->postJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections", [
            'name' => 'Bar',
            'sort_order' => 1,
        ]);

        $response->assertUnauthorized();
    }

    public function test_store_missing_name_returns_422(): void
    {
        Sanctum::actingAs($this->orgAdmin);

        $response = $this->postJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections", [
            'sort_order' => 1,
        ]);

        $response->assertUnprocessable()
            ->assertJsonValidationErrors('name');
    }

    public function test_update_section(): void
    {
        $section = FestivalSection::factory()->create([
            'event_id' => $this->event->id,
            'name' => 'Bar',
        ]);

        Sanctum::actingAs($this->orgAdmin);

        $response = $this->putJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections/{$section->id}", [
            'name' => 'Bar Updated',
        ]);

        $response->assertOk()
            ->assertJson(['data' => ['name' => 'Bar Updated']]);
    }

    public function test_destroy_soft_deletes_section(): void
    {
        $section = FestivalSection::factory()->create(['event_id' => $this->event->id]);

        Sanctum::actingAs($this->orgAdmin);

        $response = $this->deleteJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections/{$section->id}");

        $response->assertNoContent();
        $this->assertSoftDeleted('festival_sections', ['id' => $section->id]);
    }

    public function test_update_cross_org_returns_403(): void
    {
        $section = FestivalSection::factory()->create(['event_id' => $this->event->id]);

        Sanctum::actingAs($this->outsider);

        $response = $this->putJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections/{$section->id}", [
            'name' => 'Hacked',
        ]);

        $response->assertForbidden();
    }

    public function test_destroy_cross_org_returns_403(): void
    {
        $section = FestivalSection::factory()->create(['event_id' => $this->event->id]);

        Sanctum::actingAs($this->outsider);

        $response = $this->deleteJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections/{$section->id}");

        $response->assertForbidden();
    }

    public function test_store_section_with_category_and_icon(): void
    {
        Sanctum::actingAs($this->orgAdmin);

        $response = $this->postJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections", [
            'name' => 'Tapkraan',
            'category' => 'Bar',
            'icon' => 'tabler-beer',
            'sort_order' => 0,
        ]);

        $response->assertCreated()
            ->assertJson(['data' => [
                'name' => 'Tapkraan',
                'category' => 'Bar',
                'icon' => 'tabler-beer',
            ]]);

        $this->assertDatabaseHas('festival_sections', [
            'event_id' => $this->event->id,
            'name' => 'Tapkraan',
            'category' => 'Bar',
            'icon' => 'tabler-beer',
        ]);
    }

    public function test_section_categories_endpoint(): void
    {
        FestivalSection::factory()->create([
            'event_id' => $this->event->id,
            'category' => 'Bar',
        ]);
        FestivalSection::factory()->create([
            'event_id' => $this->event->id,
            'category' => 'Podium',
        ]);
        // Duplicate category should not appear twice
        FestivalSection::factory()->create([
            'event_id' => $this->event->id,
            'category' => 'Bar',
        ]);
        // Null category should not appear
        FestivalSection::factory()->create([
            'event_id' => $this->event->id,
            'category' => null,
        ]);

        Sanctum::actingAs($this->orgAdmin);

        $response = $this->getJson("/api/v1/organisations/{$this->organisation->id}/section-categories");

        $response->assertOk()
            ->assertJson(['data' => ['Bar', 'Podium']]);

        $this->assertCount(2, $response->json('data'));
    }

    public function test_section_categories_cross_org_returns_403(): void
    {
        Sanctum::actingAs($this->outsider);

        $response = $this->getJson("/api/v1/organisations/{$this->organisation->id}/section-categories");

        $response->assertForbidden();
    }

    public function test_reorder_updates_sort_order(): void
    {
        $sectionA = FestivalSection::factory()->create([
            'event_id' => $this->event->id,
            'sort_order' => 1,
        ]);
        $sectionB = FestivalSection::factory()->create([
            'event_id' => $this->event->id,
            'sort_order' => 2,
        ]);

        Sanctum::actingAs($this->orgAdmin);

        $response = $this->postJson("/api/v1/organisations/{$this->organisation->id}/events/{$this->event->id}/sections/reorder", [
            'sections' => [$sectionB->id, $sectionA->id],
        ]);

        $response->assertOk();

        $this->assertDatabaseHas('festival_sections', [
            'id' => $sectionB->id,
            'sort_order' => 0,
        ]);
        $this->assertDatabaseHas('festival_sections', [
            'id' => $sectionA->id,
            'sort_order' => 1,
        ]);
    }
}