Function TestCreateUserHandler

overlord/admin_api_test.go:228–300

TestCreateUserHandler tests the createUserHandler function

(t *testing.T)

// TestCreateUserHandler tests the createUserHandler function
func TestCreateUserHandler(t *testing.T) {
	ovl, cleanup := setupTestOverlord(t)
	defer cleanup()

	// Get the router with proper configuration
	router := ovl.registerRoutes()

	// Login to get a JWT token
	adminJWTToken, err := loginAs(router, adminUsername)
	if err != nil {
		t.Fatalf("Failed to login: %v", err)
	}

	// Prepare request body
	newUser := struct {
		Username string `json:"username"`
		Password string `json:"password"`
		IsAdmin  bool   `json:"is_admin"`
	}{
		Username: "newuser",
		Password: "newpass",
		IsAdmin:  false,
	}

	body, err := json.Marshal(newUser)
	if err != nil {
		t.Fatalf("Failed to marshal new user: %v", err)
	}

	// Test with admin user
	req := createAuthRequest(adminJWTToken, "POST", "/api/users", body)
	rr := httptest.NewRecorder()

	router.ServeHTTP(rr, req)

	// Check response
	if rr.Code != http.StatusOK {
		t.Errorf("Expected status code 200, got %d", rr.Code)
	}

	// Verify the user was created in the database
	exists, err := userExists(ovl.dbManager, "newuser")
	if err != nil {
		t.Fatalf("Error checking if user exists: %v", err)
	}
	if !exists {
		t.Errorf("User 'newuser' should exist in the database")
	}

	// Test with non-admin user (should be forbidden by middleware)
	userJWTToken, err := loginAs(router, testUsername)
	if err != nil {
		t.Fatalf("Failed to login: %v", err)
	}

	newUser.Username = "anotheruser"
	body, _ = json.Marshal(newUser)
	req = createAuthRequest(userJWTToken, "POST", "/api/users", body)