Function TestAddUserToGroupHandler

overlord/admin_api_test.go:556–617

TestAddUserToGroupHandler tests the addUserToGroupHandler function

(t *testing.T)

// TestAddUserToGroupHandler tests the addUserToGroupHandler function
func TestAddUserToGroupHandler(t *testing.T) {
	ovl, cleanup := setupTestOverlord(t)
	defer cleanup()

	// Get the router with proper configuration
	router := ovl.registerRoutes()

	// Login to get a JWT token
	adminJWTToken, err := loginAs(router, adminUsername)
	if err != nil {
		t.Fatalf("Failed to login: %v", err)
	}

	// Prepare request body
	addRequest := struct {
		Username string `json:"username"`
	}{
		Username: "testuser",
	}

	body, _ := json.Marshal(addRequest)

	// Test with admin user
	req := createAuthRequest(adminJWTToken, "POST", "/api/groups/testgroup/users", body)
	rr := httptest.NewRecorder()

	router.ServeHTTP(rr, req)

	// Check response
	if rr.Code != http.StatusOK {
		t.Errorf("Expected status code 200, got %d", rr.Code)
	}

	// Verify user was added to the group
	users, _ := ovl.dbManager.GetGroupUsers("testgroup")
	found := false
	for _, user := range users {
		if user.Username == "testuser" {
			found = true
			break
		}
	}
	if !found {
		t.Errorf("User 'testuser' should be in group 'testgroup'")
	}

	// Test with non-admin user (should be forbidden by middleware)
	userJWTToken, err := loginAs(router, testUsername)
	if err != nil {
		t.Fatalf("Failed to login: %v", err)
	}

	req = createAuthRequest(userJWTToken, "POST", "/api/groups/testgroup/users", body)
	rr = httptest.NewRecorder()

	router.ServeHTTP(rr, req)

	// Check response - should be forbidden by middleware