Function TestCreateGroupHandler

overlord/admin_api_test.go:440–503

TestCreateGroupHandler tests the createGroupHandler function

(t *testing.T)

// TestCreateGroupHandler tests the createGroupHandler function
func TestCreateGroupHandler(t *testing.T) {
	ovl, cleanup := setupTestOverlord(t)
	defer cleanup()

	// Get the router with proper configuration
	router := ovl.registerRoutes()

	// Login to get a JWT token
	adminJWTToken, err := loginAs(router, adminUsername)
	if err != nil {
		t.Fatalf("Failed to login: %v", err)
	}

	// Prepare request body
	newGroup := struct {
		Name string `json:"name"`
	}{
		Name: "newgroup",
	}

	body, _ := json.Marshal(newGroup)

	// Test with admin user
	req := createAuthRequest(adminJWTToken, "POST", "/api/groups", body)
	rr := httptest.NewRecorder()

	router.ServeHTTP(rr, req)

	// Check response
	if rr.Code != http.StatusOK {
		t.Errorf("Expected status code 200, got %d", rr.Code)
	}

	// Verify the group was created
	groups, _ := ovl.dbManager.GetAllGroups()
	found := false
	for _, group := range groups {
		if group.Name == "newgroup" {
			found = true
			break
		}
	}
	if !found {
		t.Errorf("Group 'newgroup' should exist in the database")
	}

	// Test with non-admin user (should be forbidden by middleware)
	userJWTToken, err := loginAs(router, testUsername)
	if err != nil {
		t.Fatalf("Failed to login: %v", err)
	}

	newGroup.Name = "anothergroup"
	body, _ = json.Marshal(newGroup)
	req = createAuthRequest(userJWTToken, "POST", "/api/groups", body)
	rr = httptest.NewRecorder()

	router.ServeHTTP(rr, req)