Files
KanzlAI-mGMT/backend/internal/integration_test.go
m 325fbeb5de test: comprehensive E2E and API test suite for full KanzlAI stack
Backend (Go):
- Expanded integration_test.go: health, auth middleware (expired/invalid/wrong-secret JWT),
  tenant CRUD, case CRUD (create/list/get/update/delete + filters + validation),
  deadline CRUD (create/list/update/complete/delete), appointment CRUD,
  dashboard (verifies all sections), deadline calculator (valid/invalid/unknown type),
  proceeding types & rules, document endpoints, AI extraction (no-key path),
  and full critical path E2E (auth -> case -> deadline -> appointment -> dashboard -> complete)
- New handler unit tests: case (10), appointment (11), dashboard (1), calculate (5),
  document (10), AI (4) — all testing validation, auth guards, and error paths without DB
- Total: ~80 backend tests (unit + integration)

Frontend (TypeScript/Vitest):
- Installed vitest 2.x, @testing-library/react, @testing-library/jest-dom, jsdom 24, msw
- vitest.config.ts with jsdom env, esbuild JSX automatic, path aliases
- API client tests (13): URL construction, no double /api/, auth header, tenant header,
  POST/PUT/PATCH/DELETE methods, error handling, 204 responses
- DeadlineTrafficLights tests (5): renders cards, correct counts, zero state, onFilter callback
- CaseOverviewGrid tests (4): renders categories, counts, header, zero state
- LoginPage tests (8): form rendering, mode toggle, password login, redirect, error display,
  magic link, registration link
- Total: 30 frontend tests

Makefile: test-frontend target now runs vitest instead of placeholder echo.
2026-03-25 16:19:00 +01:00

1149 lines
36 KiB
Go

package internal_test
import (
"bytes"
"encoding/json"
"fmt"
"net/http"
"net/http/httptest"
"os"
"testing"
"time"
"mgit.msbls.de/m/KanzlAI-mGMT/internal/auth"
"mgit.msbls.de/m/KanzlAI-mGMT/internal/config"
"mgit.msbls.de/m/KanzlAI-mGMT/internal/db"
"mgit.msbls.de/m/KanzlAI-mGMT/internal/router"
"github.com/golang-jwt/jwt/v5"
"github.com/google/uuid"
)
// testServer sets up the full router with a real DB connection.
// Requires DATABASE_URL and SUPABASE_JWT_SECRET env vars.
func testServer(t *testing.T) (http.Handler, func()) {
t.Helper()
dbURL := os.Getenv("DATABASE_URL")
if dbURL == "" {
t.Skip("DATABASE_URL not set, skipping integration test")
}
jwtSecret := os.Getenv("SUPABASE_JWT_SECRET")
if jwtSecret == "" {
jwtSecret = "test-jwt-secret-for-integration-tests"
os.Setenv("SUPABASE_JWT_SECRET", jwtSecret)
}
database, err := db.Connect(dbURL)
if err != nil {
t.Fatalf("connecting to database: %v", err)
}
cfg := &config.Config{
Port: "0",
DatabaseURL: dbURL,
SupabaseJWTSecret: jwtSecret,
}
authMW := auth.NewMiddleware(jwtSecret, database)
handler := router.New(database, authMW, cfg, nil)
return handler, func() { database.Close() }
}
// createTestJWT creates a JWT for the given user ID, signed with the test secret.
func createTestJWT(t *testing.T, userID uuid.UUID) string {
t.Helper()
secret := os.Getenv("SUPABASE_JWT_SECRET")
if secret == "" {
secret = "test-jwt-secret-for-integration-tests"
}
claims := jwt.MapClaims{
"sub": userID.String(),
"aud": "authenticated",
"exp": time.Now().Add(1 * time.Hour).Unix(),
"iat": time.Now().Unix(),
}
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
signed, err := token.SignedString([]byte(secret))
if err != nil {
t.Fatalf("signing JWT: %v", err)
}
return signed
}
// createExpiredJWT creates an expired JWT for testing auth rejection.
func createExpiredJWT(t *testing.T, userID uuid.UUID) string {
t.Helper()
secret := os.Getenv("SUPABASE_JWT_SECRET")
if secret == "" {
secret = "test-jwt-secret-for-integration-tests"
}
claims := jwt.MapClaims{
"sub": userID.String(),
"aud": "authenticated",
"exp": time.Now().Add(-1 * time.Hour).Unix(),
"iat": time.Now().Add(-2 * time.Hour).Unix(),
}
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
signed, err := token.SignedString([]byte(secret))
if err != nil {
t.Fatalf("signing expired JWT: %v", err)
}
return signed
}
// setupTestTenant creates a temporary tenant and user_tenant for testing.
// Returns tenantID and userID. Cleans up on test completion.
func setupTestTenant(t *testing.T, _ http.Handler) (tenantID, userID uuid.UUID) {
t.Helper()
dbURL := os.Getenv("DATABASE_URL")
database, err := db.Connect(dbURL)
if err != nil {
t.Fatalf("connecting to database for setup: %v", err)
}
defer database.Close()
tenantID = uuid.New()
userID = uuid.New()
_, err = database.Exec(`INSERT INTO tenants (id, name, slug) VALUES ($1, $2, $3)`,
tenantID, "Integration Test Kanzlei "+tenantID.String()[:8], "test-"+tenantID.String()[:8])
if err != nil {
t.Fatalf("creating test tenant: %v", err)
}
// Create a user in auth.users so JWT auth works
_, err = database.Exec(`INSERT INTO auth.users (id, instance_id, role, aud, email, encrypted_password, email_confirmed_at, created_at, updated_at, confirmation_token, recovery_token)
VALUES ($1, '00000000-0000-0000-0000-000000000000', 'authenticated', 'authenticated', $2, '', NOW(), NOW(), NOW(), '', '')`,
userID, fmt.Sprintf("test-%s@kanzlai.test", userID.String()[:8]))
if err != nil {
t.Fatalf("creating test user: %v", err)
}
_, err = database.Exec(`INSERT INTO user_tenants (user_id, tenant_id, role) VALUES ($1, $2, 'owner')`,
userID, tenantID)
if err != nil {
t.Fatalf("creating user_tenant: %v", err)
}
t.Cleanup(func() {
cleanupDB, _ := db.Connect(dbURL)
if cleanupDB != nil {
cleanupDB.Exec(`DELETE FROM case_events WHERE tenant_id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM deadlines WHERE tenant_id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM appointments WHERE tenant_id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM parties WHERE tenant_id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM documents WHERE tenant_id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM cases WHERE tenant_id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM user_tenants WHERE tenant_id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM tenants WHERE id = $1`, tenantID)
cleanupDB.Exec(`DELETE FROM auth.users WHERE id = $1`, userID)
cleanupDB.Close()
}
})
return tenantID, userID
}
// doRequest is a test helper that makes an HTTP request to the test handler.
func doRequest(t *testing.T, handler http.Handler, method, path, token string, body any) *httptest.ResponseRecorder {
t.Helper()
var bodyReader *bytes.Buffer
if body != nil {
b, err := json.Marshal(body)
if err != nil {
t.Fatalf("marshaling request body: %v", err)
}
bodyReader = bytes.NewBuffer(b)
} else {
bodyReader = &bytes.Buffer{}
}
req := httptest.NewRequest(method, path, bodyReader)
if body != nil {
req.Header.Set("Content-Type", "application/json")
}
if token != "" {
req.Header.Set("Authorization", "Bearer "+token)
}
w := httptest.NewRecorder()
handler.ServeHTTP(w, req)
return w
}
// decodeJSON decodes the response body into the given target.
func decodeJSON(t *testing.T, w *httptest.ResponseRecorder, target any) {
t.Helper()
if err := json.Unmarshal(w.Body.Bytes(), target); err != nil {
t.Fatalf("decoding JSON response: %v (body: %s)", err, w.Body.String())
}
}
// ── Health ──────────────────────────────────────────────────────────────────
func TestHealthEndpoint(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
req := httptest.NewRequest("GET", "/health", nil)
w := httptest.NewRecorder()
handler.ServeHTTP(w, req)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]string
json.Unmarshal(w.Body.Bytes(), &resp)
if resp["status"] != "ok" {
t.Fatalf("expected status ok, got %v", resp)
}
}
// ── Auth Middleware ──────────────────────────────────────────────────────────
func TestUnauthenticatedAccess(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
endpoints := []struct {
method string
path string
}{
{"GET", "/api/cases"},
{"POST", "/api/cases"},
{"GET", "/api/tenants"},
{"GET", "/api/deadlines"},
{"GET", "/api/appointments"},
{"GET", "/api/dashboard"},
}
for _, ep := range endpoints {
t.Run(ep.method+" "+ep.path, func(t *testing.T) {
w := doRequest(t, handler, ep.method, ep.path, "", nil)
if w.Code != http.StatusUnauthorized {
t.Errorf("expected 401, got %d: %s", w.Code, w.Body.String())
}
})
}
}
func TestExpiredJWT(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
token := createExpiredJWT(t, uuid.New())
w := doRequest(t, handler, "GET", "/api/cases", token, nil)
if w.Code != http.StatusUnauthorized {
t.Errorf("expected 401 for expired token, got %d", w.Code)
}
}
func TestInvalidJWT(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
w := doRequest(t, handler, "GET", "/api/cases", "totally-not-a-jwt", nil)
if w.Code != http.StatusUnauthorized {
t.Errorf("expected 401 for invalid token, got %d", w.Code)
}
}
func TestWrongSecretJWT(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
// Sign with a different secret
claims := jwt.MapClaims{
"sub": uuid.New().String(),
"exp": time.Now().Add(1 * time.Hour).Unix(),
}
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
signed, _ := token.SignedString([]byte("wrong-secret-key"))
w := doRequest(t, handler, "GET", "/api/cases", signed, nil)
if w.Code != http.StatusUnauthorized {
t.Errorf("expected 401 for wrong-secret token, got %d", w.Code)
}
}
// ── Tenant CRUD ─────────────────────────────────────────────────────────────
func TestTenantCRUD(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
// List tenants — should have the one from setup
t.Run("ListTenants", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/tenants", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var tenants []map[string]any
decodeJSON(t, w, &tenants)
if len(tenants) < 1 {
t.Fatalf("expected at least 1 tenant, got %d", len(tenants))
}
})
// Create a new tenant
var newTenantID string
t.Run("CreateTenant", func(t *testing.T) {
body := map[string]string{"name": "Test Kanzlei Neu", "slug": "test-neu-" + uuid.New().String()[:8]}
w := doRequest(t, handler, "POST", "/api/tenants", token, body)
if w.Code != http.StatusCreated {
t.Fatalf("expected 201, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
newTenantID, _ = resp["id"].(string)
if newTenantID == "" {
t.Fatal("created tenant missing ID")
}
// Cleanup the extra tenant
t.Cleanup(func() {
dbURL := os.Getenv("DATABASE_URL")
cleanupDB, _ := db.Connect(dbURL)
if cleanupDB != nil {
cleanupDB.Exec(`DELETE FROM user_tenants WHERE tenant_id = $1`, newTenantID)
cleanupDB.Exec(`DELETE FROM tenants WHERE id = $1`, newTenantID)
cleanupDB.Close()
}
})
})
// Get tenant by ID
t.Run("GetTenant", func(t *testing.T) {
if newTenantID == "" {
t.Skip("no tenant ID from create test")
}
w := doRequest(t, handler, "GET", "/api/tenants/"+newTenantID, token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
})
// Get tenant with invalid ID
t.Run("GetTenant_InvalidID", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/tenants/not-a-uuid", token, nil)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d", w.Code)
}
})
// Create tenant missing fields
t.Run("CreateTenant_MissingFields", func(t *testing.T) {
body := map[string]string{"name": "", "slug": ""}
w := doRequest(t, handler, "POST", "/api/tenants", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d: %s", w.Code, w.Body.String())
}
})
}
// ── Case CRUD ───────────────────────────────────────────────────────────────
func TestCaseCRUD(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
var caseID string
// Create case
t.Run("Create", func(t *testing.T) {
body := map[string]string{
"case_number": "TEST/CRUD/001",
"title": "CRUD Test — Patentverletzung",
"case_type": "patent",
"court": "UPC München",
}
w := doRequest(t, handler, "POST", "/api/cases", token, body)
if w.Code != http.StatusCreated {
t.Fatalf("expected 201, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
caseID, _ = resp["id"].(string)
if caseID == "" {
t.Fatal("created case missing ID")
}
if resp["status"] != "active" {
t.Errorf("expected default status active, got %v", resp["status"])
}
})
// Create case - missing fields
t.Run("Create_MissingFields", func(t *testing.T) {
body := map[string]string{"title": ""}
w := doRequest(t, handler, "POST", "/api/cases", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d: %s", w.Code, w.Body.String())
}
})
// List cases
t.Run("List", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/cases", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
total := resp["total"].(float64)
if total < 1 {
t.Fatalf("expected at least 1 case, got %.0f", total)
}
})
// List with search filter
t.Run("List_SearchFilter", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/cases?search=CRUD", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d", w.Code)
}
var resp map[string]any
decodeJSON(t, w, &resp)
total := resp["total"].(float64)
if total < 1 {
t.Error("search filter should find our test case")
}
})
// List with status filter
t.Run("List_StatusFilter", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/cases?status=active", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d", w.Code)
}
})
// Get case by ID
t.Run("Get", func(t *testing.T) {
if caseID == "" {
t.Skip("no case ID")
}
w := doRequest(t, handler, "GET", "/api/cases/"+caseID, token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
if resp["title"] != "CRUD Test — Patentverletzung" {
t.Errorf("unexpected title: %v", resp["title"])
}
// CaseDetail should include parties and recent_events
if _, ok := resp["parties"]; !ok {
t.Error("missing parties in CaseDetail response")
}
if _, ok := resp["recent_events"]; !ok {
t.Error("missing recent_events in CaseDetail response")
}
})
// Get case - invalid ID
t.Run("Get_InvalidID", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/cases/not-a-uuid", token, nil)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d", w.Code)
}
})
// Get case - not found
t.Run("Get_NotFound", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/cases/"+uuid.New().String(), token, nil)
if w.Code != http.StatusNotFound {
t.Errorf("expected 404, got %d", w.Code)
}
})
// Update case
t.Run("Update", func(t *testing.T) {
if caseID == "" {
t.Skip("no case ID")
}
body := map[string]string{"title": "Updated Title", "court": "UPC Paris"}
w := doRequest(t, handler, "PUT", "/api/cases/"+caseID, token, body)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
if resp["title"] != "Updated Title" {
t.Errorf("title not updated: %v", resp["title"])
}
})
// Delete (archive) case
t.Run("Delete", func(t *testing.T) {
if caseID == "" {
t.Skip("no case ID")
}
w := doRequest(t, handler, "DELETE", "/api/cases/"+caseID, token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]string
decodeJSON(t, w, &resp)
if resp["status"] != "archived" {
t.Errorf("expected archived status, got %s", resp["status"])
}
})
}
// ── Deadline CRUD ───────────────────────────────────────────────────────────
func TestDeadlineCRUD(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
// First create a case to attach deadlines to
caseBody := map[string]string{
"case_number": "TEST/DL/001",
"title": "Deadline Test Case",
}
w := doRequest(t, handler, "POST", "/api/cases", token, caseBody)
if w.Code != http.StatusCreated {
t.Fatalf("create case: expected 201, got %d: %s", w.Code, w.Body.String())
}
var caseResp map[string]any
decodeJSON(t, w, &caseResp)
caseID := caseResp["id"].(string)
var deadlineID string
dueDate := time.Now().AddDate(0, 0, 14).Format("2006-01-02")
warnDate := time.Now().AddDate(0, 0, 10).Format("2006-01-02")
// Create deadline
t.Run("Create", func(t *testing.T) {
body := map[string]string{
"title": "Klageerwiderung einreichen",
"due_date": dueDate,
"warning_date": warnDate,
"source": "manual",
}
w := doRequest(t, handler, "POST", "/api/cases/"+caseID+"/deadlines", token, body)
if w.Code != http.StatusCreated {
t.Fatalf("expected 201, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
deadlineID, _ = resp["id"].(string)
if deadlineID == "" {
t.Fatal("created deadline missing ID")
}
if resp["status"] != "pending" {
t.Errorf("expected status pending, got %v", resp["status"])
}
})
// Create deadline - missing fields
t.Run("Create_MissingFields", func(t *testing.T) {
body := map[string]string{"title": ""}
w := doRequest(t, handler, "POST", "/api/cases/"+caseID+"/deadlines", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d: %s", w.Code, w.Body.String())
}
})
// List all deadlines
t.Run("ListAll", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/deadlines", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
})
// List deadlines for case
t.Run("ListForCase", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/cases/"+caseID+"/deadlines", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var deadlines []any
decodeJSON(t, w, &deadlines)
if len(deadlines) < 1 {
t.Fatal("expected at least 1 deadline")
}
})
// Update deadline
t.Run("Update", func(t *testing.T) {
if deadlineID == "" {
t.Skip("no deadline ID")
}
newTitle := "Aktualisierte Frist"
body := map[string]*string{"title": &newTitle}
w := doRequest(t, handler, "PUT", "/api/deadlines/"+deadlineID, token, body)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
if resp["title"] != newTitle {
t.Errorf("expected title %q, got %v", newTitle, resp["title"])
}
})
// Complete deadline
t.Run("Complete", func(t *testing.T) {
if deadlineID == "" {
t.Skip("no deadline ID")
}
w := doRequest(t, handler, "PATCH", "/api/deadlines/"+deadlineID+"/complete", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
if resp["status"] != "completed" {
t.Errorf("expected status completed, got %v", resp["status"])
}
if resp["completed_at"] == nil {
t.Error("expected completed_at to be set")
}
})
// Delete deadline
t.Run("Delete", func(t *testing.T) {
if deadlineID == "" {
t.Skip("no deadline ID")
}
w := doRequest(t, handler, "DELETE", "/api/deadlines/"+deadlineID, token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
})
// Delete non-existent deadline
t.Run("Delete_NotFound", func(t *testing.T) {
w := doRequest(t, handler, "DELETE", "/api/deadlines/"+uuid.New().String(), token, nil)
if w.Code != http.StatusNotFound {
t.Errorf("expected 404, got %d", w.Code)
}
})
}
// ── Appointment CRUD ────────────────────────────────────────────────────────
func TestAppointmentCRUD(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
startAt := time.Now().Add(48 * time.Hour).UTC().Truncate(time.Second)
endAt := startAt.Add(2 * time.Hour)
var appointmentID string
// Create appointment
t.Run("Create", func(t *testing.T) {
body := map[string]any{
"title": "Mündliche Verhandlung",
"start_at": startAt.Format(time.RFC3339),
"end_at": endAt.Format(time.RFC3339),
"location": "UPC München, Saal 3",
"appointment_type": "hearing",
}
w := doRequest(t, handler, "POST", "/api/appointments", token, body)
if w.Code != http.StatusCreated {
t.Fatalf("expected 201, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
appointmentID, _ = resp["id"].(string)
if appointmentID == "" {
t.Fatal("created appointment missing ID")
}
})
// Create appointment - missing title
t.Run("Create_MissingTitle", func(t *testing.T) {
body := map[string]any{
"start_at": startAt.Format(time.RFC3339),
}
w := doRequest(t, handler, "POST", "/api/appointments", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d", w.Code)
}
})
// Create appointment - missing start_at
t.Run("Create_MissingStartAt", func(t *testing.T) {
body := map[string]any{"title": "Test"}
w := doRequest(t, handler, "POST", "/api/appointments", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d", w.Code)
}
})
// List appointments
t.Run("List", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/appointments", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var appointments []any
decodeJSON(t, w, &appointments)
if len(appointments) < 1 {
t.Fatal("expected at least 1 appointment")
}
})
// Update appointment
t.Run("Update", func(t *testing.T) {
if appointmentID == "" {
t.Skip("no appointment ID")
}
newStart := startAt.Add(24 * time.Hour)
body := map[string]any{
"title": "Verlegter Termin",
"start_at": newStart.Format(time.RFC3339),
"location": "UPC Paris, Saal 1",
}
w := doRequest(t, handler, "PUT", "/api/appointments/"+appointmentID, token, body)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
if resp["title"] != "Verlegter Termin" {
t.Errorf("title not updated: %v", resp["title"])
}
})
// Delete appointment
t.Run("Delete", func(t *testing.T) {
if appointmentID == "" {
t.Skip("no appointment ID")
}
w := doRequest(t, handler, "DELETE", "/api/appointments/"+appointmentID, token, nil)
if w.Code != http.StatusNoContent {
t.Errorf("expected 204, got %d: %s", w.Code, w.Body.String())
}
})
// Delete non-existent appointment
t.Run("Delete_NotFound", func(t *testing.T) {
w := doRequest(t, handler, "DELETE", "/api/appointments/"+uuid.New().String(), token, nil)
if w.Code != http.StatusNotFound {
t.Errorf("expected 404, got %d", w.Code)
}
})
}
// ── Dashboard ───────────────────────────────────────────────────────────────
func TestDashboard(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
// Create a case + deadline so dashboard has data
caseBody := map[string]string{
"case_number": "TEST/DASH/001",
"title": "Dashboard Test Case",
}
w := doRequest(t, handler, "POST", "/api/cases", token, caseBody)
if w.Code != http.StatusCreated {
t.Fatalf("create case: %d: %s", w.Code, w.Body.String())
}
var caseResp map[string]any
decodeJSON(t, w, &caseResp)
caseID := caseResp["id"].(string)
dueDate := time.Now().AddDate(0, 0, 3).Format("2006-01-02")
dlBody := map[string]string{
"title": "Dashboard Test Deadline",
"due_date": dueDate,
}
w = doRequest(t, handler, "POST", "/api/cases/"+caseID+"/deadlines", token, dlBody)
if w.Code != http.StatusCreated {
t.Fatalf("create deadline: %d: %s", w.Code, w.Body.String())
}
t.Run("Get", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/dashboard", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var dashboard map[string]any
decodeJSON(t, w, &dashboard)
// Verify all expected sections exist
requiredKeys := []string{"deadline_summary", "case_summary", "upcoming_deadlines", "upcoming_appointments", "recent_activity"}
for _, key := range requiredKeys {
if _, exists := dashboard[key]; !exists {
t.Errorf("missing key %q in dashboard", key)
}
}
// Verify case_summary has at least 1 active case
if cs, ok := dashboard["case_summary"].(map[string]any); ok {
if active, ok := cs["active_count"].(float64); ok && active < 1 {
t.Errorf("expected at least 1 active case, got %.0f", active)
}
}
// Verify deadline_summary fields
if ds, ok := dashboard["deadline_summary"].(map[string]any); ok {
for _, key := range []string{"overdue_count", "due_this_week", "due_next_week", "ok_count"} {
if _, exists := ds[key]; !exists {
t.Errorf("missing deadline_summary.%s", key)
}
}
}
})
}
// ── Deadline Calculator ─────────────────────────────────────────────────────
func TestDeadlineCalculator(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
t.Run("Calculate_ValidRequest", func(t *testing.T) {
body := map[string]any{
"proceeding_type": "INF",
"trigger_event_date": "2026-06-01",
}
w := doRequest(t, handler, "POST", "/api/deadlines/calculate", token, body)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
if resp["proceeding_type"] != "INF" {
t.Errorf("expected INF, got %v", resp["proceeding_type"])
}
deadlines, ok := resp["deadlines"].([]any)
if !ok {
t.Fatal("deadlines not an array")
}
if len(deadlines) == 0 {
t.Error("expected at least 1 calculated deadline")
}
// Verify each deadline has expected fields
for i, dl := range deadlines {
m, ok := dl.(map[string]any)
if !ok {
continue
}
for _, key := range []string{"rule_code", "title", "due_date"} {
if _, exists := m[key]; !exists {
t.Errorf("deadline[%d] missing field %q", i, key)
}
}
}
})
t.Run("Calculate_MissingFields", func(t *testing.T) {
body := map[string]string{}
w := doRequest(t, handler, "POST", "/api/deadlines/calculate", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d", w.Code)
}
})
t.Run("Calculate_InvalidDateFormat", func(t *testing.T) {
body := map[string]string{
"proceeding_type": "INF",
"trigger_event_date": "01/06/2026",
}
w := doRequest(t, handler, "POST", "/api/deadlines/calculate", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400 for bad date format, got %d", w.Code)
}
})
t.Run("Calculate_UnknownProceedingType", func(t *testing.T) {
body := map[string]string{
"proceeding_type": "NONEXISTENT",
"trigger_event_date": "2026-06-01",
}
w := doRequest(t, handler, "POST", "/api/deadlines/calculate", token, body)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400 for unknown type, got %d", w.Code)
}
})
}
// ── Proceeding Types & Deadline Rules ───────────────────────────────────────
func TestProceedingTypesAndRules(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
t.Run("ListProceedingTypes", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/proceeding-types", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var types []any
decodeJSON(t, w, &types)
if len(types) == 0 {
t.Error("expected at least 1 proceeding type")
}
})
t.Run("ListDeadlineRules", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/deadline-rules", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
})
t.Run("GetRuleTree_INF", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/deadline-rules/INF", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var tree []any
decodeJSON(t, w, &tree)
if len(tree) == 0 {
t.Error("expected non-empty rule tree for INF")
}
})
}
// ── Document Upload ─────────────────────────────────────────────────────────
func TestDocumentUpload(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
// Create a case first
caseBody := map[string]string{
"case_number": "TEST/DOC/001",
"title": "Document Test Case",
}
w := doRequest(t, handler, "POST", "/api/cases", token, caseBody)
if w.Code != http.StatusCreated {
t.Fatalf("create case: %d: %s", w.Code, w.Body.String())
}
var caseResp map[string]any
decodeJSON(t, w, &caseResp)
caseID := caseResp["id"].(string)
t.Run("ListDocuments_Empty", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/cases/"+caseID+"/documents", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
}
var resp map[string]any
decodeJSON(t, w, &resp)
total := resp["total"].(float64)
if total != 0 {
t.Errorf("expected 0 documents, got %.0f", total)
}
})
t.Run("GetMeta_NotFound", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/documents/"+uuid.New().String()+"/meta", token, nil)
if w.Code != http.StatusNotFound {
t.Errorf("expected 404, got %d", w.Code)
}
})
t.Run("GetMeta_InvalidID", func(t *testing.T) {
w := doRequest(t, handler, "GET", "/api/documents/not-a-uuid/meta", token, nil)
if w.Code != http.StatusBadRequest {
t.Errorf("expected 400, got %d", w.Code)
}
})
}
// ── AI Endpoints ────────────────────────────────────────────────────────────
func TestAIExtractDeadlines_NoAPIKey(t *testing.T) {
// AI endpoints are only registered when ANTHROPIC_API_KEY is set.
// Without it, the route should 404.
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
body := map[string]string{"text": "Die Frist beträgt 3 Monate ab Zustellung."}
w := doRequest(t, handler, "POST", "/api/ai/extract-deadlines", token, body)
// Should be 404 (route not registered) since we don't set ANTHROPIC_API_KEY
// or 200 if the key happens to be set in the env
if w.Code == http.StatusNotFound {
t.Log("AI endpoint correctly not available without API key")
} else if w.Code == http.StatusOK {
t.Log("AI endpoint available (API key configured in env)")
} else {
t.Logf("AI endpoint returned %d (may need API key)", w.Code)
}
}
// ── Critical Path E2E ───────────────────────────────────────────────────────
func TestCriticalPath_CreateCase_AddDeadline_Dashboard(t *testing.T) {
handler, cleanup := testServer(t)
defer cleanup()
_, userID := setupTestTenant(t, handler)
token := createTestJWT(t, userID)
// Step 1: Create a case
caseBody := `{"case_number":"TEST/001","title":"Integration Test — Patentverletzung","case_type":"patent","court":"UPC München"}`
req := httptest.NewRequest("POST", "/api/cases", bytes.NewBufferString(caseBody))
req.Header.Set("Content-Type", "application/json")
req.Header.Set("Authorization", "Bearer "+token)
w := httptest.NewRecorder()
handler.ServeHTTP(w, req)
if w.Code != http.StatusCreated {
t.Fatalf("create case: expected 201, got %d: %s", w.Code, w.Body.String())
}
var createdCase map[string]any
json.Unmarshal(w.Body.Bytes(), &createdCase)
caseID, ok := createdCase["id"].(string)
if !ok || caseID == "" {
t.Fatalf("create case: missing ID in response: %v", createdCase)
}
t.Logf("Created case: %s", caseID)
// Step 2: List cases — verify our case is there
req = httptest.NewRequest("GET", "/api/cases", nil)
req.Header.Set("Authorization", "Bearer "+token)
w = httptest.NewRecorder()
handler.ServeHTTP(w, req)
if w.Code != http.StatusOK {
t.Fatalf("list cases: expected 200, got %d: %s", w.Code, w.Body.String())
}
var caseList map[string]any
json.Unmarshal(w.Body.Bytes(), &caseList)
total := caseList["total"].(float64)
if total < 1 {
t.Fatalf("list cases: expected at least 1 case, got %.0f", total)
}
// Step 3: Add a deadline to the case
dueDate := time.Now().AddDate(0, 0, 14).Format("2006-01-02")
warnDate := time.Now().AddDate(0, 0, 10).Format("2006-01-02")
deadlineBody := fmt.Sprintf(`{"title":"Klageerwiderung einreichen","due_date":"%s","warning_date":"%s","source":"manual"}`, dueDate, warnDate)
req = httptest.NewRequest("POST", "/api/cases/"+caseID+"/deadlines", bytes.NewBufferString(deadlineBody))
req.Header.Set("Content-Type", "application/json")
req.Header.Set("Authorization", "Bearer "+token)
w = httptest.NewRecorder()
handler.ServeHTTP(w, req)
if w.Code != http.StatusCreated {
t.Fatalf("create deadline: expected 201, got %d: %s", w.Code, w.Body.String())
}
var createdDeadline map[string]any
json.Unmarshal(w.Body.Bytes(), &createdDeadline)
deadlineID, ok := createdDeadline["id"].(string)
if !ok || deadlineID == "" {
t.Fatalf("create deadline: missing ID in response: %v", createdDeadline)
}
t.Logf("Created deadline: %s", deadlineID)
// Step 4: Create an appointment linked to the case
startAt := time.Now().Add(72 * time.Hour).UTC().Truncate(time.Second)
apptBody := map[string]any{
"title": "Mündliche Verhandlung",
"start_at": startAt.Format(time.RFC3339),
"location": "UPC München",
"appointment_type": "hearing",
"case_id": caseID,
}
w = doRequest(t, handler, "POST", "/api/appointments", token, apptBody)
if w.Code != http.StatusCreated {
t.Fatalf("create appointment: expected 201, got %d: %s", w.Code, w.Body.String())
}
t.Log("Created appointment linked to case")
// Step 5: Verify deadline appears in case deadlines
req = httptest.NewRequest("GET", "/api/cases/"+caseID+"/deadlines", nil)
req.Header.Set("Authorization", "Bearer "+token)
w = httptest.NewRecorder()
handler.ServeHTTP(w, req)
if w.Code != http.StatusOK {
t.Fatalf("list deadlines: expected 200, got %d: %s", w.Code, w.Body.String())
}
var deadlines []any
json.Unmarshal(w.Body.Bytes(), &deadlines)
if len(deadlines) < 1 {
t.Fatalf("list deadlines: expected at least 1, got %d", len(deadlines))
}
// Step 6: Fetch dashboard — should include our case and deadline
req = httptest.NewRequest("GET", "/api/dashboard", nil)
req.Header.Set("Authorization", "Bearer "+token)
w = httptest.NewRecorder()
handler.ServeHTTP(w, req)
if w.Code != http.StatusOK {
t.Fatalf("dashboard: expected 200, got %d: %s", w.Code, w.Body.String())
}
var dashboard map[string]any
json.Unmarshal(w.Body.Bytes(), &dashboard)
// Verify dashboard has expected sections
for _, key := range []string{"deadline_summary", "case_summary", "upcoming_deadlines"} {
if _, exists := dashboard[key]; !exists {
t.Errorf("dashboard: missing key %q in response", key)
}
}
// Verify case_summary shows at least 1 active case
if cs, ok := dashboard["case_summary"].(map[string]any); ok {
if active, ok := cs["active_count"].(float64); ok && active < 1 {
t.Errorf("dashboard: expected at least 1 active case, got %.0f", active)
}
}
// Step 7: Complete the deadline and verify
w = doRequest(t, handler, "PATCH", "/api/deadlines/"+deadlineID+"/complete", token, nil)
if w.Code != http.StatusOK {
t.Fatalf("complete deadline: expected 200, got %d: %s", w.Code, w.Body.String())
}
var completedDL map[string]any
decodeJSON(t, w, &completedDL)
if completedDL["status"] != "completed" {
t.Errorf("expected completed, got %v", completedDL["status"])
}
t.Logf("Full critical path passed: auth -> create case -> add deadline -> create appointment -> dashboard -> complete deadline")
}