commit fed6fc71b15bced3a5451cd088bedf9d40e1c907 · bretton.dev/coves

+115

internal/api/handlers/vote/create_vote.go

···

       1
       +
       package vote

     

       2
       +
       

     

       3
       +
       import (

     

       4
       +
       	"Coves/internal/api/middleware"

     

       5
       +
       	"Coves/internal/core/votes"

     

       6
       +
       	"encoding/json"

     

       7
       +
       	"log"

     

       8
       +
       	"net/http"

     

       9
       +
       )

     

       10
       +
       

     

       11
       +
       // CreateVoteHandler handles vote creation

     

       12
       +
       type CreateVoteHandler struct {

     

       13
       +
       	service votes.Service

     

       14
       +
       }

     

       15
       +
       

     

       16
       +
       // NewCreateVoteHandler creates a new create vote handler

     

       17
       +
       func NewCreateVoteHandler(service votes.Service) *CreateVoteHandler {

     

       18
       +
       	return &CreateVoteHandler{

     

       19
       +
       		service: service,

     

       20
       +
       	}

     

       21
       +
       }

     

       22
       +
       

     

       23
       +
       // CreateVoteInput represents the request body for creating a vote

     

       24
       +
       type CreateVoteInput struct {

     

       25
       +
       	Subject struct {

     

       26
       +
       		URI string `json:"uri"`

     

       27
       +
       		CID string `json:"cid"`

     

       28
       +
       	} `json:"subject"`

     

       29
       +
       	Direction string `json:"direction"`

     

       30
       +
       }

     

       31
       +
       

     

       32
       +
       // CreateVoteOutput represents the response body for creating a vote

     

       33
       +
       type CreateVoteOutput struct {

     

       34
       +
       	URI string `json:"uri"`

     

       35
       +
       	CID string `json:"cid"`

     

       36
       +
       }

     

       37
       +
       

     

       38
       +
       // HandleCreateVote creates a vote on a post or comment

     

       39
       +
       // POST /xrpc/social.coves.vote.create

     

       40
       +
       //

     

       41
       +
       // Request body: { "subject": { "uri": "at://...", "cid": "..." }, "direction": "up" }

     

       42
       +
       // Response: { "uri": "at://...", "cid": "..." }

     

       43
       +
       //

     

       44
       +
       // Behavior:

     

       45
       +
       // - If no vote exists: creates new vote with given direction

     

       46
       +
       // - If vote exists with same direction: deletes vote (toggle off)

     

       47
       +
       // - If vote exists with different direction: updates to new direction

     

       48
       +
       func (h *CreateVoteHandler) HandleCreateVote(w http.ResponseWriter, r *http.Request) {

     

       49
       +
       	if r.Method != http.MethodPost {

     

       50
       +
       		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)

     

       51
       +
       		return

     

       52
       +
       	}

     

       53
       +
       

     

       54
       +
       	// Parse request body

     

       55
       +
       	var input CreateVoteInput

     

       56
       +
       	if err := json.NewDecoder(r.Body).Decode(&input); err != nil {

     

       57
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "Invalid request body")

     

       58
       +
       		return

     

       59
       +
       	}

     

       60
       +
       

     

       61
       +
       	// Validate required fields

     

       62
       +
       	if input.Subject.URI == "" {

     

       63
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "subject.uri is required")

     

       64
       +
       		return

     

       65
       +
       	}

     

       66
       +
       	if input.Subject.CID == "" {

     

       67
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "subject.cid is required")

     

       68
       +
       		return

     

       69
       +
       	}

     

       70
       +
       	if input.Direction == "" {

     

       71
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "direction is required")

     

       72
       +
       		return

     

       73
       +
       	}

     

       74
       +
       

     

       75
       +
       	// Validate direction

     

       76
       +
       	if input.Direction != "up" && input.Direction != "down" {

     

       77
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "direction must be 'up' or 'down'")

     

       78
       +
       		return

     

       79
       +
       	}

     

       80
       +
       

     

       81
       +
       	// Get OAuth session from context (injected by auth middleware)

     

       82
       +
       	session := middleware.GetOAuthSession(r)

     

       83
       +
       	if session == nil {

     

       84
       +
       		writeError(w, http.StatusUnauthorized, "AuthRequired", "Authentication required")

     

       85
       +
       		return

     

       86
       +
       	}

     

       87
       +
       

     

       88
       +
       	// Create vote request

     

       89
       +
       	req := votes.CreateVoteRequest{

     

       90
       +
       		Subject: votes.StrongRef{

     

       91
       +
       			URI: input.Subject.URI,

     

       92
       +
       			CID: input.Subject.CID,

     

       93
       +
       		},

     

       94
       +
       		Direction: input.Direction,

     

       95
       +
       	}

     

       96
       +
       

     

       97
       +
       	// Call service to create vote

     

       98
       +
       	response, err := h.service.CreateVote(r.Context(), session, req)

     

       99
       +
       	if err != nil {

     

       100
       +
       		handleServiceError(w, err)

     

       101
       +
       		return

     

       102
       +
       	}

     

       103
       +
       

     

       104
       +
       	// Return success response

     

       105
       +
       	output := CreateVoteOutput{

     

       106
       +
       		URI: response.URI,

     

       107
       +
       		CID: response.CID,

     

       108
       +
       	}

     

       109
       +
       

     

       110
       +
       	w.Header().Set("Content-Type", "application/json")

     

       111
       +
       	w.WriteHeader(http.StatusOK)

     

       112
       +
       	if err := json.NewEncoder(w).Encode(output); err != nil {

     

       113
       +
       		log.Printf("Failed to encode response: %v", err)

     

       114
       +
       	}

     

       115
       +
       }

+490

internal/api/handlers/vote/create_vote_test.go

···

       1
       +
       package vote

     

       2
       +
       

     

       3
       +
       import (

     

       4
       +
       	"Coves/internal/api/middleware"

     

       5
       +
       	"Coves/internal/core/votes"

     

       6
       +
       	"bytes"

     

       7
       +
       	"context"

     

       8
       +
       	"encoding/json"

     

       9
       +
       	"net/http"

     

       10
       +
       	"net/http/httptest"

     

       11
       +
       	"testing"

     

       12
       +
       

     

       13
       +
       	oauthlib "github.com/bluesky-social/indigo/atproto/auth/oauth"

     

       14
       +
       	"github.com/bluesky-social/indigo/atproto/syntax"

     

       15
       +
       )

     

       16
       +
       

     

       17
       +
       // mockVoteService implements votes.Service for testing

     

       18
       +
       type mockVoteService struct {

     

       19
       +
       	createFunc func(ctx context.Context, session *oauthlib.ClientSessionData, req votes.CreateVoteRequest) (*votes.CreateVoteResponse, error)

     

       20
       +
       	deleteFunc func(ctx context.Context, session *oauthlib.ClientSessionData, req votes.DeleteVoteRequest) error

     

       21
       +
       }

     

       22
       +
       

     

       23
       +
       func (m *mockVoteService) CreateVote(ctx context.Context, session *oauthlib.ClientSessionData, req votes.CreateVoteRequest) (*votes.CreateVoteResponse, error) {

     

       24
       +
       	if m.createFunc != nil {

     

       25
       +
       		return m.createFunc(ctx, session, req)

     

       26
       +
       	}

     

       27
       +
       	return &votes.CreateVoteResponse{

     

       28
       +
       		URI: "at://did:plc:test123/social.coves.vote/abc123",

     

       29
       +
       		CID: "bafyvote123",

     

       30
       +
       	}, nil

     

       31
       +
       }

     

       32
       +
       

     

       33
       +
       func (m *mockVoteService) DeleteVote(ctx context.Context, session *oauthlib.ClientSessionData, req votes.DeleteVoteRequest) error {

     

       34
       +
       	if m.deleteFunc != nil {

     

       35
       +
       		return m.deleteFunc(ctx, session, req)

     

       36
       +
       	}

     

       37
       +
       	return nil

     

       38
       +
       }

     

       39
       +
       

     

       40
       +
       func TestCreateVoteHandler_Success(t *testing.T) {

     

       41
       +
       	mockService := &mockVoteService{}

     

       42
       +
       	handler := NewCreateVoteHandler(mockService)

     

       43
       +
       

     

       44
       +
       	// Create request body

     

       45
       +
       	reqBody := CreateVoteInput{

     

       46
       +
       		Subject: struct {

     

       47
       +
       			URI string `json:"uri"`

     

       48
       +
       			CID string `json:"cid"`

     

       49
       +
       		}{

     

       50
       +
       			URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       51
       +
       			CID: "bafypost123",

     

       52
       +
       		},

     

       53
       +
       		Direction: "up",

     

       54
       +
       	}

     

       55
       +
       	bodyBytes, err := json.Marshal(reqBody)

     

       56
       +
       	if err != nil {

     

       57
       +
       		t.Fatalf("Failed to marshal request: %v", err)

     

       58
       +
       	}

     

       59
       +
       

     

       60
       +
       	// Create HTTP request

     

       61
       +
       	req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.create", bytes.NewBuffer(bodyBytes))

     

       62
       +
       	req.Header.Set("Content-Type", "application/json")

     

       63
       +
       

     

       64
       +
       	// Inject OAuth session into context (simulates auth middleware)

     

       65
       +
       	did, _ := syntax.ParseDID("did:plc:test123")

     

       66
       +
       	session := &oauthlib.ClientSessionData{

     

       67
       +
       		AccountDID:  did,

     

       68
       +
       		AccessToken: "test_token",

     

       69
       +
       	}

     

       70
       +
       	ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       71
       +
       	req = req.WithContext(ctx)

     

       72
       +
       

     

       73
       +
       	// Execute handler

     

       74
       +
       	w := httptest.NewRecorder()

     

       75
       +
       	handler.HandleCreateVote(w, req)

     

       76
       +
       

     

       77
       +
       	// Check status code

     

       78
       +
       	if w.Code != http.StatusOK {

     

       79
       +
       		t.Errorf("Expected status 200, got %d. Body: %s", w.Code, w.Body.String())

     

       80
       +
       	}

     

       81
       +
       

     

       82
       +
       	// Check response

     

       83
       +
       	var response CreateVoteOutput

     

       84
       +
       	if err := json.NewDecoder(w.Body).Decode(&response); err != nil {

     

       85
       +
       		t.Fatalf("Failed to decode response: %v", err)

     

       86
       +
       	}

     

       87
       +
       

     

       88
       +
       	if response.URI != "at://did:plc:test123/social.coves.vote/abc123" {

     

       89
       +
       		t.Errorf("Expected URI at://did:plc:test123/social.coves.vote/abc123, got %s", response.URI)

     

       90
       +
       	}

     

       91
       +
       	if response.CID != "bafyvote123" {

     

       92
       +
       		t.Errorf("Expected CID bafyvote123, got %s", response.CID)

     

       93
       +
       	}

     

       94
       +
       }

     

       95
       +
       

     

       96
       +
       func TestCreateVoteHandler_RequiresAuth(t *testing.T) {

     

       97
       +
       	mockService := &mockVoteService{}

     

       98
       +
       	handler := NewCreateVoteHandler(mockService)

     

       99
       +
       

     

       100
       +
       	// Create request body

     

       101
       +
       	reqBody := CreateVoteInput{

     

       102
       +
       		Subject: struct {

     

       103
       +
       			URI string `json:"uri"`

     

       104
       +
       			CID string `json:"cid"`

     

       105
       +
       		}{

     

       106
       +
       			URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       107
       +
       			CID: "bafypost123",

     

       108
       +
       		},

     

       109
       +
       		Direction: "up",

     

       110
       +
       	}

     

       111
       +
       	bodyBytes, err := json.Marshal(reqBody)

     

       112
       +
       	if err != nil {

     

       113
       +
       		t.Fatalf("Failed to marshal request: %v", err)

     

       114
       +
       	}

     

       115
       +
       

     

       116
       +
       	// Create HTTP request without auth context

     

       117
       +
       	req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.create", bytes.NewBuffer(bodyBytes))

     

       118
       +
       	req.Header.Set("Content-Type", "application/json")

     

       119
       +
       	// No OAuth session in context

     

       120
       +
       

     

       121
       +
       	// Execute handler

     

       122
       +
       	w := httptest.NewRecorder()

     

       123
       +
       	handler.HandleCreateVote(w, req)

     

       124
       +
       

     

       125
       +
       	// Check status code

     

       126
       +
       	if w.Code != http.StatusUnauthorized {

     

       127
       +
       		t.Errorf("Expected status 401, got %d. Body: %s", w.Code, w.Body.String())

     

       128
       +
       	}

     

       129
       +
       

     

       130
       +
       	// Check error response

     

       131
       +
       	var errResp XRPCError

     

       132
       +
       	if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       133
       +
       		t.Fatalf("Failed to decode error response: %v", err)

     

       134
       +
       	}

     

       135
       +
       	if errResp.Error != "AuthRequired" {

     

       136
       +
       		t.Errorf("Expected error AuthRequired, got %s", errResp.Error)

     

       137
       +
       	}

     

       138
       +
       }

     

       139
       +
       

     

       140
       +
       func TestCreateVoteHandler_InvalidDirection(t *testing.T) {

     

       141
       +
       	mockService := &mockVoteService{}

     

       142
       +
       	handler := NewCreateVoteHandler(mockService)

     

       143
       +
       

     

       144
       +
       	tests := []struct {

     

       145
       +
       		name      string

     

       146
       +
       		direction string

     

       147
       +
       	}{

     

       148
       +
       		{"empty direction", ""},

     

       149
       +
       		{"invalid direction", "sideways"},

     

       150
       +
       		{"wrong case", "UP"},

     

       151
       +
       		{"typo", "upp"},

     

       152
       +
       	}

     

       153
       +
       

     

       154
       +
       	for _, tc := range tests {

     

       155
       +
       		t.Run(tc.name, func(t *testing.T) {

     

       156
       +
       			// Create request body

     

       157
       +
       			reqBody := CreateVoteInput{

     

       158
       +
       				Subject: struct {

     

       159
       +
       					URI string `json:"uri"`

     

       160
       +
       					CID string `json:"cid"`

     

       161
       +
       				}{

     

       162
       +
       					URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       163
       +
       					CID: "bafypost123",

     

       164
       +
       				},

     

       165
       +
       				Direction: tc.direction,

     

       166
       +
       			}

     

       167
       +
       			bodyBytes, err := json.Marshal(reqBody)

     

       168
       +
       			if err != nil {

     

       169
       +
       				t.Fatalf("Failed to marshal request: %v", err)

     

       170
       +
       			}

     

       171
       +
       

     

       172
       +
       			// Create HTTP request

     

       173
       +
       			req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.create", bytes.NewBuffer(bodyBytes))

     

       174
       +
       			req.Header.Set("Content-Type", "application/json")

     

       175
       +
       

     

       176
       +
       			// Inject OAuth session

     

       177
       +
       			did, _ := syntax.ParseDID("did:plc:test123")

     

       178
       +
       			session := &oauthlib.ClientSessionData{

     

       179
       +
       				AccountDID:  did,

     

       180
       +
       				AccessToken: "test_token",

     

       181
       +
       			}

     

       182
       +
       			ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       183
       +
       			req = req.WithContext(ctx)

     

       184
       +
       

     

       185
       +
       			// Execute handler

     

       186
       +
       			w := httptest.NewRecorder()

     

       187
       +
       			handler.HandleCreateVote(w, req)

     

       188
       +
       

     

       189
       +
       			// Check status code

     

       190
       +
       			if w.Code != http.StatusBadRequest {

     

       191
       +
       				t.Errorf("Expected status 400, got %d. Body: %s", w.Code, w.Body.String())

     

       192
       +
       			}

     

       193
       +
       

     

       194
       +
       			// Check error response

     

       195
       +
       			var errResp XRPCError

     

       196
       +
       			if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       197
       +
       				t.Fatalf("Failed to decode error response: %v", err)

     

       198
       +
       			}

     

       199
       +
       			if errResp.Error != "InvalidRequest" {

     

       200
       +
       				t.Errorf("Expected error InvalidRequest, got %s", errResp.Error)

     

       201
       +
       			}

     

       202
       +
       		})

     

       203
       +
       	}

     

       204
       +
       }

     

       205
       +
       

     

       206
       +
       func TestCreateVoteHandler_MissingFields(t *testing.T) {

     

       207
       +
       	mockService := &mockVoteService{}

     

       208
       +
       	handler := NewCreateVoteHandler(mockService)

     

       209
       +
       

     

       210
       +
       	tests := []struct {

     

       211
       +
       		name          string

     

       212
       +
       		subjectURI    string

     

       213
       +
       		subjectCID    string

     

       214
       +
       		direction     string

     

       215
       +
       		expectedError string

     

       216
       +
       	}{

     

       217
       +
       		{

     

       218
       +
       			name:          "missing subject URI",

     

       219
       +
       			subjectURI:    "",

     

       220
       +
       			subjectCID:    "bafypost123",

     

       221
       +
       			direction:     "up",

     

       222
       +
       			expectedError: "subject.uri is required",

     

       223
       +
       		},

     

       224
       +
       		{

     

       225
       +
       			name:          "missing subject CID",

     

       226
       +
       			subjectURI:    "at://did:plc:author123/social.coves.post/xyz789",

     

       227
       +
       			subjectCID:    "",

     

       228
       +
       			direction:     "up",

     

       229
       +
       			expectedError: "subject.cid is required",

     

       230
       +
       		},

     

       231
       +
       		{

     

       232
       +
       			name:          "missing direction",

     

       233
       +
       			subjectURI:    "at://did:plc:author123/social.coves.post/xyz789",

     

       234
       +
       			subjectCID:    "bafypost123",

     

       235
       +
       			direction:     "",

     

       236
       +
       			expectedError: "direction is required",

     

       237
       +
       		},

     

       238
       +
       	}

     

       239
       +
       

     

       240
       +
       	for _, tc := range tests {

     

       241
       +
       		t.Run(tc.name, func(t *testing.T) {

     

       242
       +
       			// Create request body

     

       243
       +
       			reqBody := CreateVoteInput{

     

       244
       +
       				Subject: struct {

     

       245
       +
       					URI string `json:"uri"`

     

       246
       +
       					CID string `json:"cid"`

     

       247
       +
       				}{

     

       248
       +
       					URI: tc.subjectURI,

     

       249
       +
       					CID: tc.subjectCID,

     

       250
       +
       				},

     

       251
       +
       				Direction: tc.direction,

     

       252
       +
       			}

     

       253
       +
       			bodyBytes, err := json.Marshal(reqBody)

     

       254
       +
       			if err != nil {

     

       255
       +
       				t.Fatalf("Failed to marshal request: %v", err)

     

       256
       +
       			}

     

       257
       +
       

     

       258
       +
       			// Create HTTP request

     

       259
       +
       			req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.create", bytes.NewBuffer(bodyBytes))

     

       260
       +
       			req.Header.Set("Content-Type", "application/json")

     

       261
       +
       

     

       262
       +
       			// Inject OAuth session

     

       263
       +
       			did, _ := syntax.ParseDID("did:plc:test123")

     

       264
       +
       			session := &oauthlib.ClientSessionData{

     

       265
       +
       				AccountDID:  did,

     

       266
       +
       				AccessToken: "test_token",

     

       267
       +
       			}

     

       268
       +
       			ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       269
       +
       			req = req.WithContext(ctx)

     

       270
       +
       

     

       271
       +
       			// Execute handler

     

       272
       +
       			w := httptest.NewRecorder()

     

       273
       +
       			handler.HandleCreateVote(w, req)

     

       274
       +
       

     

       275
       +
       			// Check status code

     

       276
       +
       			if w.Code != http.StatusBadRequest {

     

       277
       +
       				t.Errorf("Expected status 400, got %d. Body: %s", w.Code, w.Body.String())

     

       278
       +
       			}

     

       279
       +
       

     

       280
       +
       			// Check error response

     

       281
       +
       			var errResp XRPCError

     

       282
       +
       			if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       283
       +
       				t.Fatalf("Failed to decode error response: %v", err)

     

       284
       +
       			}

     

       285
       +
       			if errResp.Message != tc.expectedError {

     

       286
       +
       				t.Errorf("Expected message '%s', got '%s'", tc.expectedError, errResp.Message)

     

       287
       +
       			}

     

       288
       +
       		})

     

       289
       +
       	}

     

       290
       +
       }

     

       291
       +
       

     

       292
       +
       func TestCreateVoteHandler_InvalidJSON(t *testing.T) {

     

       293
       +
       	mockService := &mockVoteService{}

     

       294
       +
       	handler := NewCreateVoteHandler(mockService)

     

       295
       +
       

     

       296
       +
       	// Create invalid JSON

     

       297
       +
       	req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.create", bytes.NewBufferString("{invalid json"))

     

       298
       +
       	req.Header.Set("Content-Type", "application/json")

     

       299
       +
       

     

       300
       +
       	// Inject OAuth session

     

       301
       +
       	did, _ := syntax.ParseDID("did:plc:test123")

     

       302
       +
       	session := &oauthlib.ClientSessionData{

     

       303
       +
       		AccountDID:  did,

     

       304
       +
       		AccessToken: "test_token",

     

       305
       +
       	}

     

       306
       +
       	ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       307
       +
       	req = req.WithContext(ctx)

     

       308
       +
       

     

       309
       +
       	// Execute handler

     

       310
       +
       	w := httptest.NewRecorder()

     

       311
       +
       	handler.HandleCreateVote(w, req)

     

       312
       +
       

     

       313
       +
       	// Check status code

     

       314
       +
       	if w.Code != http.StatusBadRequest {

     

       315
       +
       		t.Errorf("Expected status 400, got %d. Body: %s", w.Code, w.Body.String())

     

       316
       +
       	}

     

       317
       +
       

     

       318
       +
       	// Check error response

     

       319
       +
       	var errResp XRPCError

     

       320
       +
       	if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       321
       +
       		t.Fatalf("Failed to decode error response: %v", err)

     

       322
       +
       	}

     

       323
       +
       	if errResp.Error != "InvalidRequest" {

     

       324
       +
       		t.Errorf("Expected error InvalidRequest, got %s", errResp.Error)

     

       325
       +
       	}

     

       326
       +
       }

     

       327
       +
       

     

       328
       +
       func TestCreateVoteHandler_MethodNotAllowed(t *testing.T) {

     

       329
       +
       	mockService := &mockVoteService{}

     

       330
       +
       	handler := NewCreateVoteHandler(mockService)

     

       331
       +
       

     

       332
       +
       	// Create GET request (should only accept POST)

     

       333
       +
       	req := httptest.NewRequest(http.MethodGet, "/xrpc/social.coves.vote.create", nil)

     

       334
       +
       

     

       335
       +
       	// Execute handler

     

       336
       +
       	w := httptest.NewRecorder()

     

       337
       +
       	handler.HandleCreateVote(w, req)

     

       338
       +
       

     

       339
       +
       	// Check status code

     

       340
       +
       	if w.Code != http.StatusMethodNotAllowed {

     

       341
       +
       		t.Errorf("Expected status 405, got %d", w.Code)

     

       342
       +
       	}

     

       343
       +
       }

     

       344
       +
       

     

       345
       +
       func TestCreateVoteHandler_ServiceError(t *testing.T) {

     

       346
       +
       	tests := []struct {

     

       347
       +
       		name           string

     

       348
       +
       		serviceError   error

     

       349
       +
       		expectedStatus int

     

       350
       +
       		expectedError  string

     

       351
       +
       	}{

     

       352
       +
       		{

     

       353
       +
       			name:           "subject not found",

     

       354
       +
       			serviceError:   votes.ErrSubjectNotFound,

     

       355
       +
       			expectedStatus: http.StatusNotFound,

     

       356
       +
       			expectedError:  "SubjectNotFound", // Per lexicon: social.coves.feed.vote.create#SubjectNotFound

     

       357
       +
       		},

     

       358
       +
       		{

     

       359
       +
       			name:           "invalid direction",

     

       360
       +
       			serviceError:   votes.ErrInvalidDirection,

     

       361
       +
       			expectedStatus: http.StatusBadRequest,

     

       362
       +
       			expectedError:  "InvalidRequest",

     

       363
       +
       		},

     

       364
       +
       		{

     

       365
       +
       			name:           "invalid subject",

     

       366
       +
       			serviceError:   votes.ErrInvalidSubject,

     

       367
       +
       			expectedStatus: http.StatusBadRequest,

     

       368
       +
       			expectedError:  "InvalidSubject", // Per lexicon: social.coves.feed.vote.create#InvalidSubject

     

       369
       +
       		},

     

       370
       +
       		{

     

       371
       +
       			name:           "not authorized",

     

       372
       +
       			serviceError:   votes.ErrNotAuthorized,

     

       373
       +
       			expectedStatus: http.StatusForbidden,

     

       374
       +
       			expectedError:  "NotAuthorized", // Per lexicon: social.coves.feed.vote.create#NotAuthorized

     

       375
       +
       		},

     

       376
       +
       		{

     

       377
       +
       			name:           "banned",

     

       378
       +
       			serviceError:   votes.ErrBanned,

     

       379
       +
       			expectedStatus: http.StatusForbidden,

     

       380
       +
       			expectedError:  "NotAuthorized", // Banned maps to NotAuthorized per lexicon

     

       381
       +
       		},

     

       382
       +
       	}

     

       383
       +
       

     

       384
       +
       	for _, tc := range tests {

     

       385
       +
       		t.Run(tc.name, func(t *testing.T) {

     

       386
       +
       			mockService := &mockVoteService{

     

       387
       +
       				createFunc: func(ctx context.Context, session *oauthlib.ClientSessionData, req votes.CreateVoteRequest) (*votes.CreateVoteResponse, error) {

     

       388
       +
       					return nil, tc.serviceError

     

       389
       +
       				},

     

       390
       +
       			}

     

       391
       +
       			handler := NewCreateVoteHandler(mockService)

     

       392
       +
       

     

       393
       +
       			// Create request body

     

       394
       +
       			reqBody := CreateVoteInput{

     

       395
       +
       				Subject: struct {

     

       396
       +
       					URI string `json:"uri"`

     

       397
       +
       					CID string `json:"cid"`

     

       398
       +
       				}{

     

       399
       +
       					URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       400
       +
       					CID: "bafypost123",

     

       401
       +
       				},

     

       402
       +
       				Direction: "up",

     

       403
       +
       			}

     

       404
       +
       			bodyBytes, err := json.Marshal(reqBody)

     

       405
       +
       			if err != nil {

     

       406
       +
       				t.Fatalf("Failed to marshal request: %v", err)

     

       407
       +
       			}

     

       408
       +
       

     

       409
       +
       			// Create HTTP request

     

       410
       +
       			req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.create", bytes.NewBuffer(bodyBytes))

     

       411
       +
       			req.Header.Set("Content-Type", "application/json")

     

       412
       +
       

     

       413
       +
       			// Inject OAuth session

     

       414
       +
       			did, _ := syntax.ParseDID("did:plc:test123")

     

       415
       +
       			session := &oauthlib.ClientSessionData{

     

       416
       +
       				AccountDID:  did,

     

       417
       +
       				AccessToken: "test_token",

     

       418
       +
       			}

     

       419
       +
       			ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       420
       +
       			req = req.WithContext(ctx)

     

       421
       +
       

     

       422
       +
       			// Execute handler

     

       423
       +
       			w := httptest.NewRecorder()

     

       424
       +
       			handler.HandleCreateVote(w, req)

     

       425
       +
       

     

       426
       +
       			// Check status code

     

       427
       +
       			if w.Code != tc.expectedStatus {

     

       428
       +
       				t.Errorf("Expected status %d, got %d. Body: %s", tc.expectedStatus, w.Code, w.Body.String())

     

       429
       +
       			}

     

       430
       +
       

     

       431
       +
       			// Check error response

     

       432
       +
       			var errResp XRPCError

     

       433
       +
       			if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       434
       +
       				t.Fatalf("Failed to decode error response: %v", err)

     

       435
       +
       			}

     

       436
       +
       			if errResp.Error != tc.expectedError {

     

       437
       +
       				t.Errorf("Expected error %s, got %s", tc.expectedError, errResp.Error)

     

       438
       +
       			}

     

       439
       +
       		})

     

       440
       +
       	}

     

       441
       +
       }

     

       442
       +
       

     

       443
       +
       func TestCreateVoteHandler_ValidDirections(t *testing.T) {

     

       444
       +
       	mockService := &mockVoteService{}

     

       445
       +
       	handler := NewCreateVoteHandler(mockService)

     

       446
       +
       

     

       447
       +
       	directions := []string{"up", "down"}

     

       448
       +
       

     

       449
       +
       	for _, direction := range directions {

     

       450
       +
       		t.Run("direction_"+direction, func(t *testing.T) {

     

       451
       +
       			// Create request body

     

       452
       +
       			reqBody := CreateVoteInput{

     

       453
       +
       				Subject: struct {

     

       454
       +
       					URI string `json:"uri"`

     

       455
       +
       					CID string `json:"cid"`

     

       456
       +
       				}{

     

       457
       +
       					URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       458
       +
       					CID: "bafypost123",

     

       459
       +
       				},

     

       460
       +
       				Direction: direction,

     

       461
       +
       			}

     

       462
       +
       			bodyBytes, err := json.Marshal(reqBody)

     

       463
       +
       			if err != nil {

     

       464
       +
       				t.Fatalf("Failed to marshal request: %v", err)

     

       465
       +
       			}

     

       466
       +
       

     

       467
       +
       			// Create HTTP request

     

       468
       +
       			req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.create", bytes.NewBuffer(bodyBytes))

     

       469
       +
       			req.Header.Set("Content-Type", "application/json")

     

       470
       +
       

     

       471
       +
       			// Inject OAuth session

     

       472
       +
       			did, _ := syntax.ParseDID("did:plc:test123")

     

       473
       +
       			session := &oauthlib.ClientSessionData{

     

       474
       +
       				AccountDID:  did,

     

       475
       +
       				AccessToken: "test_token",

     

       476
       +
       			}

     

       477
       +
       			ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       478
       +
       			req = req.WithContext(ctx)

     

       479
       +
       

     

       480
       +
       			// Execute handler

     

       481
       +
       			w := httptest.NewRecorder()

     

       482
       +
       			handler.HandleCreateVote(w, req)

     

       483
       +
       

     

       484
       +
       			// Check status code

     

       485
       +
       			if w.Code != http.StatusOK {

     

       486
       +
       				t.Errorf("Expected status 200 for direction '%s', got %d. Body: %s", direction, w.Code, w.Body.String())

     

       487
       +
       			}

     

       488
       +
       		})

     

       489
       +
       	}

     

       490
       +
       }

+93

internal/api/handlers/vote/delete_vote.go

···

       1
       +
       package vote

     

       2
       +
       

     

       3
       +
       import (

     

       4
       +
       	"Coves/internal/api/middleware"

     

       5
       +
       	"Coves/internal/core/votes"

     

       6
       +
       	"encoding/json"

     

       7
       +
       	"log"

     

       8
       +
       	"net/http"

     

       9
       +
       )

     

       10
       +
       

     

       11
       +
       // DeleteVoteHandler handles vote deletion

     

       12
       +
       type DeleteVoteHandler struct {

     

       13
       +
       	service votes.Service

     

       14
       +
       }

     

       15
       +
       

     

       16
       +
       // NewDeleteVoteHandler creates a new delete vote handler

     

       17
       +
       func NewDeleteVoteHandler(service votes.Service) *DeleteVoteHandler {

     

       18
       +
       	return &DeleteVoteHandler{

     

       19
       +
       		service: service,

     

       20
       +
       	}

     

       21
       +
       }

     

       22
       +
       

     

       23
       +
       // DeleteVoteInput represents the request body for deleting a vote

     

       24
       +
       type DeleteVoteInput struct {

     

       25
       +
       	Subject struct {

     

       26
       +
       		URI string `json:"uri"`

     

       27
       +
       		CID string `json:"cid"`

     

       28
       +
       	} `json:"subject"`

     

       29
       +
       }

     

       30
       +
       

     

       31
       +
       // DeleteVoteOutput represents the response body for deleting a vote

     

       32
       +
       // Per lexicon: output is an empty object

     

       33
       +
       type DeleteVoteOutput struct{}

     

       34
       +
       

     

       35
       +
       // HandleDeleteVote removes a vote from a post or comment

     

       36
       +
       // POST /xrpc/social.coves.vote.delete

     

       37
       +
       //

     

       38
       +
       // Request body: { "subject": { "uri": "at://...", "cid": "..." } }

     

       39
       +
       // Response: { "success": true }

     

       40
       +
       func (h *DeleteVoteHandler) HandleDeleteVote(w http.ResponseWriter, r *http.Request) {

     

       41
       +
       	if r.Method != http.MethodPost {

     

       42
       +
       		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)

     

       43
       +
       		return

     

       44
       +
       	}

     

       45
       +
       

     

       46
       +
       	// Parse request body

     

       47
       +
       	var input DeleteVoteInput

     

       48
       +
       	if err := json.NewDecoder(r.Body).Decode(&input); err != nil {

     

       49
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "Invalid request body")

     

       50
       +
       		return

     

       51
       +
       	}

     

       52
       +
       

     

       53
       +
       	// Validate required fields

     

       54
       +
       	if input.Subject.URI == "" {

     

       55
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "subject.uri is required")

     

       56
       +
       		return

     

       57
       +
       	}

     

       58
       +
       	if input.Subject.CID == "" {

     

       59
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "subject.cid is required")

     

       60
       +
       		return

     

       61
       +
       	}

     

       62
       +
       

     

       63
       +
       	// Get OAuth session from context (injected by auth middleware)

     

       64
       +
       	session := middleware.GetOAuthSession(r)

     

       65
       +
       	if session == nil {

     

       66
       +
       		writeError(w, http.StatusUnauthorized, "AuthRequired", "Authentication required")

     

       67
       +
       		return

     

       68
       +
       	}

     

       69
       +
       

     

       70
       +
       	// Create delete vote request

     

       71
       +
       	req := votes.DeleteVoteRequest{

     

       72
       +
       		Subject: votes.StrongRef{

     

       73
       +
       			URI: input.Subject.URI,

     

       74
       +
       			CID: input.Subject.CID,

     

       75
       +
       		},

     

       76
       +
       	}

     

       77
       +
       

     

       78
       +
       	// Call service to delete vote

     

       79
       +
       	err := h.service.DeleteVote(r.Context(), session, req)

     

       80
       +
       	if err != nil {

     

       81
       +
       		handleServiceError(w, err)

     

       82
       +
       		return

     

       83
       +
       	}

     

       84
       +
       

     

       85
       +
       	// Return success response (empty object per lexicon)

     

       86
       +
       	output := DeleteVoteOutput{}

     

       87
       +
       

     

       88
       +
       	w.Header().Set("Content-Type", "application/json")

     

       89
       +
       	w.WriteHeader(http.StatusOK)

     

       90
       +
       	if err := json.NewEncoder(w).Encode(output); err != nil {

     

       91
       +
       		log.Printf("Failed to encode response: %v", err)

     

       92
       +
       	}

     

       93
       +
       }

+400

internal/api/handlers/vote/delete_vote_test.go

···

       1
       +
       package vote

     

       2
       +
       

     

       3
       +
       import (

     

       4
       +
       	"Coves/internal/api/middleware"

     

       5
       +
       	"Coves/internal/core/votes"

     

       6
       +
       	"bytes"

     

       7
       +
       	"context"

     

       8
       +
       	"encoding/json"

     

       9
       +
       	"net/http"

     

       10
       +
       	"net/http/httptest"

     

       11
       +
       	"testing"

     

       12
       +
       

     

       13
       +
       	oauthlib "github.com/bluesky-social/indigo/atproto/auth/oauth"

     

       14
       +
       	"github.com/bluesky-social/indigo/atproto/syntax"

     

       15
       +
       )

     

       16
       +
       

     

       17
       +
       func TestDeleteVoteHandler_Success(t *testing.T) {

     

       18
       +
       	mockService := &mockVoteService{}

     

       19
       +
       	handler := NewDeleteVoteHandler(mockService)

     

       20
       +
       

     

       21
       +
       	// Create request body

     

       22
       +
       	reqBody := DeleteVoteInput{

     

       23
       +
       		Subject: struct {

     

       24
       +
       			URI string `json:"uri"`

     

       25
       +
       			CID string `json:"cid"`

     

       26
       +
       		}{

     

       27
       +
       			URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       28
       +
       			CID: "bafypost123",

     

       29
       +
       		},

     

       30
       +
       	}

     

       31
       +
       	bodyBytes, err := json.Marshal(reqBody)

     

       32
       +
       	if err != nil {

     

       33
       +
       		t.Fatalf("Failed to marshal request: %v", err)

     

       34
       +
       	}

     

       35
       +
       

     

       36
       +
       	// Create HTTP request

     

       37
       +
       	req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.delete", bytes.NewBuffer(bodyBytes))

     

       38
       +
       	req.Header.Set("Content-Type", "application/json")

     

       39
       +
       

     

       40
       +
       	// Inject OAuth session into context (simulates auth middleware)

     

       41
       +
       	did, _ := syntax.ParseDID("did:plc:test123")

     

       42
       +
       	session := &oauthlib.ClientSessionData{

     

       43
       +
       		AccountDID:  did,

     

       44
       +
       		AccessToken: "test_token",

     

       45
       +
       	}

     

       46
       +
       	ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       47
       +
       	req = req.WithContext(ctx)

     

       48
       +
       

     

       49
       +
       	// Execute handler

     

       50
       +
       	w := httptest.NewRecorder()

     

       51
       +
       	handler.HandleDeleteVote(w, req)

     

       52
       +
       

     

       53
       +
       	// Check status code

     

       54
       +
       	if w.Code != http.StatusOK {

     

       55
       +
       		t.Errorf("Expected status 200, got %d. Body: %s", w.Code, w.Body.String())

     

       56
       +
       	}

     

       57
       +
       

     

       58
       +
       	// Check response is empty object per lexicon

     

       59
       +
       	var response map[string]interface{}

     

       60
       +
       	if err := json.NewDecoder(w.Body).Decode(&response); err != nil {

     

       61
       +
       		t.Fatalf("Failed to decode response: %v", err)

     

       62
       +
       	}

     

       63
       +
       

     

       64
       +
       	if len(response) != 0 {

     

       65
       +
       		t.Errorf("Expected empty object per lexicon, got %v", response)

     

       66
       +
       	}

     

       67
       +
       }

     

       68
       +
       

     

       69
       +
       func TestDeleteVoteHandler_RequiresAuth(t *testing.T) {

     

       70
       +
       	mockService := &mockVoteService{}

     

       71
       +
       	handler := NewDeleteVoteHandler(mockService)

     

       72
       +
       

     

       73
       +
       	// Create request body

     

       74
       +
       	reqBody := DeleteVoteInput{

     

       75
       +
       		Subject: struct {

     

       76
       +
       			URI string `json:"uri"`

     

       77
       +
       			CID string `json:"cid"`

     

       78
       +
       		}{

     

       79
       +
       			URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       80
       +
       			CID: "bafypost123",

     

       81
       +
       		},

     

       82
       +
       	}

     

       83
       +
       	bodyBytes, err := json.Marshal(reqBody)

     

       84
       +
       	if err != nil {

     

       85
       +
       		t.Fatalf("Failed to marshal request: %v", err)

     

       86
       +
       	}

     

       87
       +
       

     

       88
       +
       	// Create HTTP request without auth context

     

       89
       +
       	req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.delete", bytes.NewBuffer(bodyBytes))

     

       90
       +
       	req.Header.Set("Content-Type", "application/json")

     

       91
       +
       	// No OAuth session in context

     

       92
       +
       

     

       93
       +
       	// Execute handler

     

       94
       +
       	w := httptest.NewRecorder()

     

       95
       +
       	handler.HandleDeleteVote(w, req)

     

       96
       +
       

     

       97
       +
       	// Check status code

     

       98
       +
       	if w.Code != http.StatusUnauthorized {

     

       99
       +
       		t.Errorf("Expected status 401, got %d. Body: %s", w.Code, w.Body.String())

     

       100
       +
       	}

     

       101
       +
       

     

       102
       +
       	// Check error response

     

       103
       +
       	var errResp XRPCError

     

       104
       +
       	if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       105
       +
       		t.Fatalf("Failed to decode error response: %v", err)

     

       106
       +
       	}

     

       107
       +
       	if errResp.Error != "AuthRequired" {

     

       108
       +
       		t.Errorf("Expected error AuthRequired, got %s", errResp.Error)

     

       109
       +
       	}

     

       110
       +
       }

     

       111
       +
       

     

       112
       +
       func TestDeleteVoteHandler_MissingFields(t *testing.T) {

     

       113
       +
       	mockService := &mockVoteService{}

     

       114
       +
       	handler := NewDeleteVoteHandler(mockService)

     

       115
       +
       

     

       116
       +
       	tests := []struct {

     

       117
       +
       		name          string

     

       118
       +
       		subjectURI    string

     

       119
       +
       		subjectCID    string

     

       120
       +
       		expectedError string

     

       121
       +
       	}{

     

       122
       +
       		{

     

       123
       +
       			name:          "missing subject URI",

     

       124
       +
       			subjectURI:    "",

     

       125
       +
       			subjectCID:    "bafypost123",

     

       126
       +
       			expectedError: "subject.uri is required",

     

       127
       +
       		},

     

       128
       +
       		{

     

       129
       +
       			name:          "missing subject CID",

     

       130
       +
       			subjectURI:    "at://did:plc:author123/social.coves.post/xyz789",

     

       131
       +
       			subjectCID:    "",

     

       132
       +
       			expectedError: "subject.cid is required",

     

       133
       +
       		},

     

       134
       +
       	}

     

       135
       +
       

     

       136
       +
       	for _, tc := range tests {

     

       137
       +
       		t.Run(tc.name, func(t *testing.T) {

     

       138
       +
       			// Create request body

     

       139
       +
       			reqBody := DeleteVoteInput{

     

       140
       +
       				Subject: struct {

     

       141
       +
       					URI string `json:"uri"`

     

       142
       +
       					CID string `json:"cid"`

     

       143
       +
       				}{

     

       144
       +
       					URI: tc.subjectURI,

     

       145
       +
       					CID: tc.subjectCID,

     

       146
       +
       				},

     

       147
       +
       			}

     

       148
       +
       			bodyBytes, err := json.Marshal(reqBody)

     

       149
       +
       			if err != nil {

     

       150
       +
       				t.Fatalf("Failed to marshal request: %v", err)

     

       151
       +
       			}

     

       152
       +
       

     

       153
       +
       			// Create HTTP request

     

       154
       +
       			req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.delete", bytes.NewBuffer(bodyBytes))

     

       155
       +
       			req.Header.Set("Content-Type", "application/json")

     

       156
       +
       

     

       157
       +
       			// Inject OAuth session

     

       158
       +
       			did, _ := syntax.ParseDID("did:plc:test123")

     

       159
       +
       			session := &oauthlib.ClientSessionData{

     

       160
       +
       				AccountDID:  did,

     

       161
       +
       				AccessToken: "test_token",

     

       162
       +
       			}

     

       163
       +
       			ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       164
       +
       			req = req.WithContext(ctx)

     

       165
       +
       

     

       166
       +
       			// Execute handler

     

       167
       +
       			w := httptest.NewRecorder()

     

       168
       +
       			handler.HandleDeleteVote(w, req)

     

       169
       +
       

     

       170
       +
       			// Check status code

     

       171
       +
       			if w.Code != http.StatusBadRequest {

     

       172
       +
       				t.Errorf("Expected status 400, got %d. Body: %s", w.Code, w.Body.String())

     

       173
       +
       			}

     

       174
       +
       

     

       175
       +
       			// Check error response

     

       176
       +
       			var errResp XRPCError

     

       177
       +
       			if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       178
       +
       				t.Fatalf("Failed to decode error response: %v", err)

     

       179
       +
       			}

     

       180
       +
       			if errResp.Message != tc.expectedError {

     

       181
       +
       				t.Errorf("Expected message '%s', got '%s'", tc.expectedError, errResp.Message)

     

       182
       +
       			}

     

       183
       +
       		})

     

       184
       +
       	}

     

       185
       +
       }

     

       186
       +
       

     

       187
       +
       func TestDeleteVoteHandler_InvalidJSON(t *testing.T) {

     

       188
       +
       	mockService := &mockVoteService{}

     

       189
       +
       	handler := NewDeleteVoteHandler(mockService)

     

       190
       +
       

     

       191
       +
       	// Create invalid JSON

     

       192
       +
       	req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.delete", bytes.NewBufferString("{invalid json"))

     

       193
       +
       	req.Header.Set("Content-Type", "application/json")

     

       194
       +
       

     

       195
       +
       	// Inject OAuth session

     

       196
       +
       	did, _ := syntax.ParseDID("did:plc:test123")

     

       197
       +
       	session := &oauthlib.ClientSessionData{

     

       198
       +
       		AccountDID:  did,

     

       199
       +
       		AccessToken: "test_token",

     

       200
       +
       	}

     

       201
       +
       	ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       202
       +
       	req = req.WithContext(ctx)

     

       203
       +
       

     

       204
       +
       	// Execute handler

     

       205
       +
       	w := httptest.NewRecorder()

     

       206
       +
       	handler.HandleDeleteVote(w, req)

     

       207
       +
       

     

       208
       +
       	// Check status code

     

       209
       +
       	if w.Code != http.StatusBadRequest {

     

       210
       +
       		t.Errorf("Expected status 400, got %d. Body: %s", w.Code, w.Body.String())

     

       211
       +
       	}

     

       212
       +
       

     

       213
       +
       	// Check error response

     

       214
       +
       	var errResp XRPCError

     

       215
       +
       	if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       216
       +
       		t.Fatalf("Failed to decode error response: %v", err)

     

       217
       +
       	}

     

       218
       +
       	if errResp.Error != "InvalidRequest" {

     

       219
       +
       		t.Errorf("Expected error InvalidRequest, got %s", errResp.Error)

     

       220
       +
       	}

     

       221
       +
       }

     

       222
       +
       

     

       223
       +
       func TestDeleteVoteHandler_MethodNotAllowed(t *testing.T) {

     

       224
       +
       	mockService := &mockVoteService{}

     

       225
       +
       	handler := NewDeleteVoteHandler(mockService)

     

       226
       +
       

     

       227
       +
       	// Create GET request (should only accept POST)

     

       228
       +
       	req := httptest.NewRequest(http.MethodGet, "/xrpc/social.coves.vote.delete", nil)

     

       229
       +
       

     

       230
       +
       	// Execute handler

     

       231
       +
       	w := httptest.NewRecorder()

     

       232
       +
       	handler.HandleDeleteVote(w, req)

     

       233
       +
       

     

       234
       +
       	// Check status code

     

       235
       +
       	if w.Code != http.StatusMethodNotAllowed {

     

       236
       +
       		t.Errorf("Expected status 405, got %d", w.Code)

     

       237
       +
       	}

     

       238
       +
       }

     

       239
       +
       

     

       240
       +
       func TestDeleteVoteHandler_ServiceError(t *testing.T) {

     

       241
       +
       	tests := []struct {

     

       242
       +
       		name           string

     

       243
       +
       		serviceError   error

     

       244
       +
       		expectedStatus int

     

       245
       +
       		expectedError  string

     

       246
       +
       	}{

     

       247
       +
       		{

     

       248
       +
       			name:           "vote not found",

     

       249
       +
       			serviceError:   votes.ErrVoteNotFound,

     

       250
       +
       			expectedStatus: http.StatusNotFound,

     

       251
       +
       			expectedError:  "VoteNotFound", // Per lexicon: social.coves.feed.vote.delete#VoteNotFound

     

       252
       +
       		},

     

       253
       +
       		{

     

       254
       +
       			name:           "subject not found",

     

       255
       +
       			serviceError:   votes.ErrSubjectNotFound,

     

       256
       +
       			expectedStatus: http.StatusNotFound,

     

       257
       +
       			expectedError:  "SubjectNotFound", // Per lexicon: social.coves.feed.vote.create#SubjectNotFound

     

       258
       +
       		},

     

       259
       +
       		{

     

       260
       +
       			name:           "invalid subject",

     

       261
       +
       			serviceError:   votes.ErrInvalidSubject,

     

       262
       +
       			expectedStatus: http.StatusBadRequest,

     

       263
       +
       			expectedError:  "InvalidSubject", // Per lexicon: social.coves.feed.vote.create#InvalidSubject

     

       264
       +
       		},

     

       265
       +
       		{

     

       266
       +
       			name:           "not authorized",

     

       267
       +
       			serviceError:   votes.ErrNotAuthorized,

     

       268
       +
       			expectedStatus: http.StatusForbidden,

     

       269
       +
       			expectedError:  "NotAuthorized", // Per lexicon: social.coves.feed.vote.delete#NotAuthorized

     

       270
       +
       		},

     

       271
       +
       		{

     

       272
       +
       			name:           "banned",

     

       273
       +
       			serviceError:   votes.ErrBanned,

     

       274
       +
       			expectedStatus: http.StatusForbidden,

     

       275
       +
       			expectedError:  "NotAuthorized", // Banned maps to NotAuthorized per lexicon

     

       276
       +
       		},

     

       277
       +
       	}

     

       278
       +
       

     

       279
       +
       	for _, tc := range tests {

     

       280
       +
       		t.Run(tc.name, func(t *testing.T) {

     

       281
       +
       			mockService := &mockVoteService{

     

       282
       +
       				deleteFunc: func(ctx context.Context, session *oauthlib.ClientSessionData, req votes.DeleteVoteRequest) error {

     

       283
       +
       					return tc.serviceError

     

       284
       +
       				},

     

       285
       +
       			}

     

       286
       +
       			handler := NewDeleteVoteHandler(mockService)

     

       287
       +
       

     

       288
       +
       			// Create request body

     

       289
       +
       			reqBody := DeleteVoteInput{

     

       290
       +
       				Subject: struct {

     

       291
       +
       					URI string `json:"uri"`

     

       292
       +
       					CID string `json:"cid"`

     

       293
       +
       				}{

     

       294
       +
       					URI: "at://did:plc:author123/social.coves.post/xyz789",

     

       295
       +
       					CID: "bafypost123",

     

       296
       +
       				},

     

       297
       +
       			}

     

       298
       +
       			bodyBytes, err := json.Marshal(reqBody)

     

       299
       +
       			if err != nil {

     

       300
       +
       				t.Fatalf("Failed to marshal request: %v", err)

     

       301
       +
       			}

     

       302
       +
       

     

       303
       +
       			// Create HTTP request

     

       304
       +
       			req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.delete", bytes.NewBuffer(bodyBytes))

     

       305
       +
       			req.Header.Set("Content-Type", "application/json")

     

       306
       +
       

     

       307
       +
       			// Inject OAuth session

     

       308
       +
       			did, _ := syntax.ParseDID("did:plc:test123")

     

       309
       +
       			session := &oauthlib.ClientSessionData{

     

       310
       +
       				AccountDID:  did,

     

       311
       +
       				AccessToken: "test_token",

     

       312
       +
       			}

     

       313
       +
       			ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       314
       +
       			req = req.WithContext(ctx)

     

       315
       +
       

     

       316
       +
       			// Execute handler

     

       317
       +
       			w := httptest.NewRecorder()

     

       318
       +
       			handler.HandleDeleteVote(w, req)

     

       319
       +
       

     

       320
       +
       			// Check status code

     

       321
       +
       			if w.Code != tc.expectedStatus {

     

       322
       +
       				t.Errorf("Expected status %d, got %d. Body: %s", tc.expectedStatus, w.Code, w.Body.String())

     

       323
       +
       			}

     

       324
       +
       

     

       325
       +
       			// Check error response

     

       326
       +
       			var errResp XRPCError

     

       327
       +
       			if err := json.NewDecoder(w.Body).Decode(&errResp); err != nil {

     

       328
       +
       				t.Fatalf("Failed to decode error response: %v", err)

     

       329
       +
       			}

     

       330
       +
       			if errResp.Error != tc.expectedError {

     

       331
       +
       				t.Errorf("Expected error %s, got %s", tc.expectedError, errResp.Error)

     

       332
       +
       			}

     

       333
       +
       		})

     

       334
       +
       	}

     

       335
       +
       }

     

       336
       +
       

     

       337
       +
       func TestDeleteVoteHandler_MultipleSubjects(t *testing.T) {

     

       338
       +
       	mockService := &mockVoteService{}

     

       339
       +
       	handler := NewDeleteVoteHandler(mockService)

     

       340
       +
       

     

       341
       +
       	subjects := []struct {

     

       342
       +
       		uri string

     

       343
       +
       		cid string

     

       344
       +
       	}{

     

       345
       +
       		{"at://did:plc:author1/social.coves.post/post1", "bafypost1"},

     

       346
       +
       		{"at://did:plc:author2/social.coves.post/post2", "bafypost2"},

     

       347
       +
       		{"at://did:plc:author3/social.coves.comment/comment1", "bafycomment1"},

     

       348
       +
       	}

     

       349
       +
       

     

       350
       +
       	for _, subject := range subjects {

     

       351
       +
       		t.Run("subject_"+subject.uri, func(t *testing.T) {

     

       352
       +
       			// Create request body

     

       353
       +
       			reqBody := DeleteVoteInput{

     

       354
       +
       				Subject: struct {

     

       355
       +
       					URI string `json:"uri"`

     

       356
       +
       					CID string `json:"cid"`

     

       357
       +
       				}{

     

       358
       +
       					URI: subject.uri,

     

       359
       +
       					CID: subject.cid,

     

       360
       +
       				},

     

       361
       +
       			}

     

       362
       +
       			bodyBytes, err := json.Marshal(reqBody)

     

       363
       +
       			if err != nil {

     

       364
       +
       				t.Fatalf("Failed to marshal request: %v", err)

     

       365
       +
       			}

     

       366
       +
       

     

       367
       +
       			// Create HTTP request

     

       368
       +
       			req := httptest.NewRequest(http.MethodPost, "/xrpc/social.coves.vote.delete", bytes.NewBuffer(bodyBytes))

     

       369
       +
       			req.Header.Set("Content-Type", "application/json")

     

       370
       +
       

     

       371
       +
       			// Inject OAuth session

     

       372
       +
       			did, _ := syntax.ParseDID("did:plc:test123")

     

       373
       +
       			session := &oauthlib.ClientSessionData{

     

       374
       +
       				AccountDID:  did,

     

       375
       +
       				AccessToken: "test_token",

     

       376
       +
       			}

     

       377
       +
       			ctx := context.WithValue(req.Context(), middleware.OAuthSessionKey, session)

     

       378
       +
       			req = req.WithContext(ctx)

     

       379
       +
       

     

       380
       +
       			// Execute handler

     

       381
       +
       			w := httptest.NewRecorder()

     

       382
       +
       			handler.HandleDeleteVote(w, req)

     

       383
       +
       

     

       384
       +
       			// Check status code

     

       385
       +
       			if w.Code != http.StatusOK {

     

       386
       +
       				t.Errorf("Expected status 200 for subject '%s', got %d. Body: %s", subject.uri, w.Code, w.Body.String())

     

       387
       +
       			}

     

       388
       +
       

     

       389
       +
       			// Check response is empty object per lexicon

     

       390
       +
       			var response map[string]interface{}

     

       391
       +
       			if err := json.NewDecoder(w.Body).Decode(&response); err != nil {

     

       392
       +
       				t.Fatalf("Failed to decode response: %v", err)

     

       393
       +
       			}

     

       394
       +
       

     

       395
       +
       			if len(response) != 0 {

     

       396
       +
       				t.Errorf("Expected empty object per lexicon, got %v", response)

     

       397
       +
       			}

     

       398
       +
       		})

     

       399
       +
       	}

     

       400
       +
       }

+55

internal/api/handlers/vote/errors.go

···

       1
       +
       package vote

     

       2
       +
       

     

       3
       +
       import (

     

       4
       +
       	"Coves/internal/core/votes"

     

       5
       +
       	"encoding/json"

     

       6
       +
       	"log"

     

       7
       +
       	"net/http"

     

       8
       +
       )

     

       9
       +
       

     

       10
       +
       // XRPCError represents an XRPC error response

     

       11
       +
       type XRPCError struct {

     

       12
       +
       	Error   string `json:"error"`

     

       13
       +
       	Message string `json:"message"`

     

       14
       +
       }

     

       15
       +
       

     

       16
       +
       // writeError writes an XRPC error response

     

       17
       +
       func writeError(w http.ResponseWriter, status int, error, message string) {

     

       18
       +
       	w.Header().Set("Content-Type", "application/json")

     

       19
       +
       	w.WriteHeader(status)

     

       20
       +
       	if err := json.NewEncoder(w).Encode(XRPCError{

     

       21
       +
       		Error:   error,

     

       22
       +
       		Message: message,

     

       23
       +
       	}); err != nil {

     

       24
       +
       		log.Printf("Failed to encode error response: %v", err)

     

       25
       +
       	}

     

       26
       +
       }

     

       27
       +
       

     

       28
       +
       // handleServiceError converts service errors to appropriate HTTP responses

     

       29
       +
       // Error names MUST match lexicon definitions exactly (UpperCamelCase)

     

       30
       +
       func handleServiceError(w http.ResponseWriter, err error) {

     

       31
       +
       	switch err {

     

       32
       +
       	case votes.ErrVoteNotFound:

     

       33
       +
       		// Matches: social.coves.feed.vote.delete#VoteNotFound

     

       34
       +
       		writeError(w, http.StatusNotFound, "VoteNotFound", "No vote found for this subject")

     

       35
       +
       	case votes.ErrSubjectNotFound:

     

       36
       +
       		// Matches: social.coves.feed.vote.create#SubjectNotFound

     

       37
       +
       		writeError(w, http.StatusNotFound, "SubjectNotFound", "The subject post or comment was not found")

     

       38
       +
       	case votes.ErrInvalidDirection:

     

       39
       +
       		writeError(w, http.StatusBadRequest, "InvalidRequest", "Vote direction must be 'up' or 'down'")

     

       40
       +
       	case votes.ErrInvalidSubject:

     

       41
       +
       		// Matches: social.coves.feed.vote.create#InvalidSubject

     

       42
       +
       		writeError(w, http.StatusBadRequest, "InvalidSubject", "The subject reference is invalid or malformed")

     

       43
       +
       	case votes.ErrVoteAlreadyExists:

     

       44
       +
       		writeError(w, http.StatusConflict, "AlreadyExists", "Vote already exists")

     

       45
       +
       	case votes.ErrNotAuthorized:

     

       46
       +
       		// Matches: social.coves.feed.vote.create#NotAuthorized, social.coves.feed.vote.delete#NotAuthorized

     

       47
       +
       		writeError(w, http.StatusForbidden, "NotAuthorized", "User is not authorized to vote on this content")

     

       48
       +
       	case votes.ErrBanned:

     

       49
       +
       		writeError(w, http.StatusForbidden, "NotAuthorized", "User is not authorized to vote on this content")

     

       50
       +
       	default:

     

       51
       +
       		// Internal server error - log the actual error for debugging

     

       52
       +
       		log.Printf("XRPC handler error: %v", err)

     

       53
       +
       		writeError(w, http.StatusInternalServerError, "InternalServerError", "An internal error occurred")

     

       54
       +
       	}

     

       55
       +
       }