UserContextBuilderTest.php

<?php

/*
 * This file is part of the Silverback API Components Bundle Project
 *
 * (c) Daniel West <daniel@silverback.is>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Silverback\ApiComponentsBundle\Tests\Serializer;

use ApiPlatform\State\SerializerContextBuilderInterface;
use PHPUnit\Framework\MockObject\MockObject;
use PHPUnit\Framework\TestCase;
use Silverback\ApiComponentsBundle\Serializer\ContextBuilder\UserContextBuilder;
use Silverback\ApiComponentsBundle\Tests\Functional\TestBundle\Entity\User;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;

class UserContextBuilderTest extends TestCase
{
    private MockObject $serializerContextBuilderMock;
    private AuthorizationCheckerInterface $authorizationCheckerMock;
    private UserContextBuilder $userContextBuilder;

    protected function setUp(): void
    {
        $this->serializerContextBuilderMock = $this->createMock(SerializerContextBuilderInterface::class);
        $this->authorizationCheckerMock = $this->createMock(AuthorizationCheckerInterface::class);
        $this->userContextBuilder = new UserContextBuilder($this->serializerContextBuilderMock, $this->authorizationCheckerMock);
    }

    public function test_request_output_no_resource_class(): void
    {
        $request = new Request();
        $normalization = true;
        $extractedAttributes = ['attr' => 'value'];

        $this->serializerContextBuilderMock
            ->expects(self::once())
            ->method('createFromRequest')
            ->with($request, $normalization, $extractedAttributes)
            ->willReturn(['context_key' => 'context_value']);

        $this->authorizationCheckerMock
            ->expects($this->never())
            ->method('isGranted');

        $this->assertEquals(['context_key' => 'context_value'], $this->userContextBuilder->createFromRequest($request, $normalization, $extractedAttributes));
    }

    public function test_request_output_not_supported_resource_class(): void
    {
        $request = new Request();
        $normalization = true;
        $extractedAttributes = ['attr' => 'value'];

        $this->serializerContextBuilderMock
            ->expects(self::once())
            ->method('createFromRequest')
            ->with($request, $normalization, $extractedAttributes)
            ->willReturn(['context_key' => 'context_value', 'resource_class' => __CLASS__]);

        $this->authorizationCheckerMock
            ->expects($this->never())
            ->method('isGranted');

        $this->assertEquals(['context_key' => 'context_value', 'resource_class' => __CLASS__], $this->userContextBuilder->createFromRequest($request, $normalization, $extractedAttributes));
    }

    public function test_request_output_no_serialization_groups_configured(): void
    {
        $request = new Request();
        $normalization = true;

        $this->serializerContextBuilderMock
            ->expects(self::once())
            ->method('createFromRequest')
            ->with($request, $normalization, null)
            ->willReturn(['resource_class' => User::class]);

        $this->authorizationCheckerMock
            ->expects(self::once())
            ->method('isGranted')
            ->with('ROLE_SUPER_ADMIN')
            ->willReturn(false);

        $this->assertEquals(['groups' => ['User:output'], 'resource_class' => User::class], $this->userContextBuilder->createFromRequest($request, $normalization, null));
    }

    public function test_request_input_merge_with_existing_serialization_groups(): void
    {
        $request = new Request();
        $normalization = false;

        $this->serializerContextBuilderMock
            ->expects(self::once())
            ->method('createFromRequest')
            ->with($request, $normalization, null)
            ->willReturn(['groups' => ['a_group'], 'resource_class' => User::class]);

        $this->authorizationCheckerMock
            ->expects(self::once())
            ->method('isGranted')
            ->with('ROLE_SUPER_ADMIN')
            ->willReturn(false);

        $this->assertEquals(['groups' => ['a_group', 'User:input'], 'resource_class' => User::class], $this->userContextBuilder->createFromRequest($request, $normalization, null));
    }

    public function test_request_input_with_non_array_groups_resets_to_empty(): void
    {
        $request = new Request();
        $normalization = false;

        $this->serializerContextBuilderMock
            ->expects(self::once())
            ->method('createFromRequest')
            ->with($request, $normalization, null)
            ->willReturn(['groups' => 'not_an_array', 'resource_class' => User::class]);

        $this->authorizationCheckerMock
            ->expects(self::once())
            ->method('isGranted')
            ->with('ROLE_SUPER_ADMIN')
            ->willReturn(false);

        $this->assertEquals(['groups' => ['User:input'], 'resource_class' => User::class], $this->userContextBuilder->createFromRequest($request, $normalization, null));
    }

    public function test_request_input_with_super_admin_groups(): void
    {
        $request = new Request();
        $normalization = false;

        $this->serializerContextBuilderMock
            ->expects(self::once())
            ->method('createFromRequest')
            ->with($request, $normalization, null)
            ->willReturn(['resource_class' => User::class]);

        $this->authorizationCheckerMock
            ->expects(self::once())
            ->method('isGranted')
            ->with('ROLE_SUPER_ADMIN')
            ->willReturn(true);

        $this->assertEquals(['groups' => ['User:input', 'User:superAdmin'], 'resource_class' => User::class], $this->userContextBuilder->createFromRequest($request, $normalization, null));
    }

    public function test_existing_array_groups_are_preserved_not_reset(): void
    {
        // Kills LogicalAndAllSubExprNegation (line 39): when `groups` IS a configured array, the
        // negated mutant would treat it as unconfigured and reset it to [], dropping 'existing_group'.
        // The exact-array assertion is the killer (no mock expectations).
        $this->serializerContextBuilderMock
            ->method('createFromRequest')
            ->willReturn(['groups' => ['existing_group'], 'resource_class' => User::class]);

        $this->authorizationCheckerMock
            ->method('isGranted')
            ->willReturn(false);

        $result = $this->userContextBuilder->createFromRequest(new Request(), true, null);

        self::assertSame(['existing_group', 'User:output'], $result['groups']);
    }

    public function test_non_array_groups_are_reset_to_empty_before_appending(): void
    {
        // Kills LogicalAnd (line 39, && → ||): when `groups` is set but NOT an array, the correct code
        // treats it as unconfigured and resets to []. The `||` mutant would instead keep it configured
        // and attempt to append to a string. The exact-array assertion is the killer.
        $this->serializerContextBuilderMock
            ->method('createFromRequest')
            ->willReturn(['groups' => 'not_an_array', 'resource_class' => User::class]);

        $this->authorizationCheckerMock
            ->method('isGranted')
            ->willReturn(false);

        $result = $this->userContextBuilder->createFromRequest(new Request(), true, null);

        self::assertSame(['User:output'], $result['groups']);
    }
}