# Copyright (C) 2012-2024 Zammad Foundation, https://zammad-foundation.org/
require 'rails_helper'
RSpec.describe 'Ticket', type: :request do
let!(:ticket_group) do
create(:group, email_address: create(:email_address))
end
let!(:ticket_group_without_create) do
create(:group, email_address: create(:email_address))
end
let(:admin) do
create(:admin, groups: Group.all, firstname: 'Tickets', lastname: 'Admin')
end
let!(:agent) do
create(:agent, groups: Group.all, firstname: 'Tickets', lastname: 'Agent')
end
let!(:agent_change_only) do
user = create(:agent, groups: Group.all, firstname: 'Tickets', lastname: 'Agent')
user.group_names_access_map = {
ticket_group_without_create.name => %w[read change],
}
user
end
let!(:customer) do
create(
:customer,
login: 'tickets-customer1@example.com',
firstname: 'Tickets',
lastname: 'Customer1',
email: 'tickets-customer1@example.com',
)
end
describe 'request handling' do
it 'does ticket create with agent - missing group (01.01)' do
params = {
title: 'a new ticket #1',
article: {
content_type: 'text/plain', # or text/html
body: 'some body',
sender: 'Customer',
type: 'note',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error_human']).to eq("The required value 'group_id' is missing.")
end
it 'does ticket create with agent - wrong group (01.02)' do
params = {
title: 'a new ticket #2',
group: 'not_existing',
article: {
content_type: 'text/plain', # or text/html
body: 'some body',
sender: 'Customer',
type: 'note',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('No lookup value found for \'group\': "not_existing"')
end
it 'does ticket create with agent - valid group but no create permissions (01.02a)' do
params = {
title: 'a new ticket #1',
group: ticket_group_without_create.name,
priority: '2 normal',
state: 'new',
customer_id: customer.id,
article: {
content_type: 'text/plain', # or text/html
body: 'some body',
sender: 'Customer',
type: 'note',
},
}
authenticated_as(agent_change_only)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
end
it 'does ticket create with agent - missing article.body (01.03)' do
params = {
title: 'a new ticket #3',
group: ticket_group.name,
priority: '2 normal',
state: 'new',
customer_id: customer.id,
article: {},
}
authenticated_as(agent)
expect { post '/api/v1/tickets', params: params, as: :json }.not_to change(Ticket, :count)
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq("Need at least an 'article body' field.")
end
it 'does ticket create with agent - article.body set to empty string (01.03)' do
params = {
title: 'a new ticket #3',
group: ticket_group.name,
priority: '2 normal',
state: 'new',
customer_id: customer.id,
article: { body: " \n " },
}
authenticated_as(agent)
expect { post '/api/v1/tickets', params: params, as: :json }.not_to change(Ticket, :count)
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq("Need at least an 'article body' field.")
end
it 'does ticket create with agent - missing article (01.03)' do
params = {
title: 'a new ticket #3',
group: ticket_group.name,
priority: '2 normal',
state: 'new',
customer_id: customer.id
}
authenticated_as(agent)
expect { post '/api/v1/tickets', params: params, as: :json }.to change(Ticket, :count).by(1)
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(ticket.articles).to be_empty
end
it 'does ticket create with agent - minimal article (01.03)' do
params = {
title: 'a new ticket #3',
group: ticket_group.name,
priority: '2 normal',
state: 'new',
customer_id: customer.id,
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #3')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket create with agent - minimal article and customer.email (01.04)' do
params = {
title: 'a new ticket #3',
group: ticket_group.name,
priority: '2 normal',
state: 'new',
customer: customer.email,
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #3')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket create with agent - wrong owner_id - 0 (01.05)' do
params = {
title: 'a new ticket #4',
group: ticket_group.name,
priority: '2 normal',
owner_id: 0,
state: 'new',
customer_id: customer.id,
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Invalid value for param \'owner_id\': 0')
end
it 'does ticket create with agent - wrong owner_id - "" (01.06)' do
params = {
title: 'a new ticket #5',
group: ticket_group.name,
priority: '2 normal',
owner_id: '',
state: 'new',
customer_id: customer.id,
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #5')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket create with agent - wrong owner_id - 99999 (01.07)' do
params = {
title: 'a new ticket #6',
group: ticket_group.name,
priority: '2 normal',
owner_id: 99_999,
state: 'new',
customer_id: customer.id,
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Invalid value for param \'owner_id\': 99999')
end
it 'does ticket create with agent - wrong owner_id - nil (01.08)' do
params = {
title: 'a new ticket #7',
group: ticket_group.name,
priority: '2 normal',
owner_id: nil,
state: 'new',
customer_id: customer.id,
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #7')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket create with agent - minimal article with guess customer (01.09)' do
params = {
title: 'a new ticket #9',
group: ticket_group.name,
priority: '2 normal',
state: 'new',
customer_id: 'guess:some_new_customer@example.com',
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #9')
expect(json_response['customer_id']).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket create with agent - minimal article with guess customer (01.10)' do
params = {
title: 'a new ticket #10',
group: ticket_group.name,
customer_id: 'guess:some_new_customer@example.com',
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #10')
expect(json_response['customer_id']).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket create with agent - minimal article with customer hash (01.11)' do
params = {
title: 'a new ticket #11',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #11')
expect(json_response['customer_id']).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket create with agent - minimal article with customer hash with article.origin_by (01.11)' do
params = {
title: 'a new ticket #11.1',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
body: 'some test 123',
origin_by: 'some_new_customer@example.com',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #11.1')
expect(json_response['customer_id']).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
article = ticket.articles.first
expect(article.updated_by_id).to eq(agent.id)
expect(article.created_by_id).to eq(agent.id)
expect(article.origin_by_id).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(article.sender.name).to eq('Customer')
expect(article.type.name).to eq('note')
expect(article.from).to eq('some firstname some lastname')
end
it 'does ticket create with agent - minimal article with customer hash with article.origin_by (01.11) - second test' do
params = {
title: 'a new ticket #11.2',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
sender: 'Customer',
body: 'some test 123',
origin_by: 'some_new_customer@example.com',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #11.2')
expect(json_response['customer_id']).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
article = ticket.articles.first
expect(article.updated_by_id).to eq(agent.id)
expect(article.created_by_id).to eq(agent.id)
expect(article.origin_by_id).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(article.sender.name).to eq('Customer')
expect(article.type.name).to eq('note')
expect(article.from).to eq('some firstname some lastname')
end
it 'does ticket create with agent - minimal article with customer hash with article.origin_by (01.11) - third test' do
params = {
title: 'a new ticket #11.3',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
sender: 'Agent',
from: 'somebody',
body: 'some test 123',
origin_by: 'some_new_customer@example.com',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #11.3')
expect(json_response['customer_id']).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
article = ticket.articles.first
expect(article.updated_by_id).to eq(agent.id)
expect(article.created_by_id).to eq(agent.id)
expect(article.origin_by_id).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(article.sender.name).to eq('Customer')
expect(article.type.name).to eq('note')
expect(article.from).to eq('some firstname some lastname')
end
it 'does ticket create with agent - minimal article with customer hash with article.origin_by (01.11) - fourth test' do
params = {
title: 'a new ticket #11.4',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
sender: 'Customer',
body: 'some test 123',
origin_by: customer.login,
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #11.4')
expect(json_response['customer_id']).to eq(User.lookup(email: 'some_new_customer@example.com').id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
article = ticket.articles.first
expect(article.updated_by_id).to eq(agent.id)
expect(article.created_by_id).to eq(agent.id)
expect(article.origin_by_id).to eq(customer.id)
expect(article.sender.name).to eq('Customer')
expect(article.type.name).to eq('note')
expect(article.from).to eq('Tickets Customer1')
end
it 'does ticket create with agent - minimal article with missing body - with customer.id (01.12)' do
params = {
title: 'a new ticket #12',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq("Need at least an 'article body' field.")
end
it 'does ticket create with agent - minimal article and attachment with customer (01.13)' do
params = {
title: 'a new ticket #13',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
body: 'some test 123',
attachments: [
{ 'filename' => 'some_file.txt',
'data' => 'dGVzdCAxMjM=',
'mime-type' => 'text/plain' },
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #13')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
expect(ticket.articles.count).to eq(1)
expect(ticket.articles.first.attachments.count).to eq(1)
file = ticket.articles.first.attachments.first
expect(file.content).to eq('test 123')
expect(file.filename).to eq('some_file.txt')
expect(file.preferences['Mime-Type']).to eq('text/plain')
expect(file.preferences['Content-ID']).to be_falsey
end
it 'does ticket create with agent - minimal article and attachment with customer (01.14)' do
params = {
title: 'a new ticket #14',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
body: 'some test 123',
attachments: [
{
'filename' => 'some_file1.txt',
'data' => 'dGVzdCAxMjM=',
'mime-type' => 'text/plain',
},
{
'filename' => 'some_file2.txt',
'data' => 'w6TDtsO8w58=',
'mime-type' => 'text/plain',
},
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #14')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
expect(ticket.articles.count).to eq(1)
expect(ticket.articles.first.attachments.count).to eq(2)
file = ticket.articles.first.attachments.first
expect(file.content).to eq('test 123')
expect(file.filename).to eq('some_file1.txt')
expect(file.preferences['Mime-Type']).to eq('text/plain')
expect(file.preferences['Content-ID']).to be_falsey
end
it 'does ticket create with agent - minimal article and simple invalid base64 attachment with customer (01.15)' do
params = {
title: 'a new ticket #15',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
body: 'some test 123',
attachments: [
{ 'filename' => 'some_file.txt',
'data' => 'ABC_INVALID_BASE64',
'mime-type' => 'text/plain' },
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Invalid base64 for attachment with index \'0\'')
end
it 'does ticket create with agent - minimal article and large invalid base64 attachment with customer (01.15a)' do
params = {
title: 'a new ticket #15a',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
body: 'some test 123',
attachments: [
{ 'filename' => 'some_file.txt',
'data' => "LARGE_INVALID_BASE64_#{'#' * 20_000_000}",
'mime-type' => 'text/plain' },
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Invalid base64 for attachment with index \'0\'')
end
it 'does ticket create with agent - minimal article and valid multiline base64 with linebreaks attachment with customer (01.15b)' do
params = {
title: 'a new ticket #15b',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
body: 'some test 123',
attachments: [
{ 'filename' => 'some_file.txt',
'data' => Base64.encode64('a' * 1_000),
'mime-type' => 'text/plain' },
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response['title']).to eq('a new ticket #15b')
ticket = Ticket.find(json_response['id'])
expect(ticket.articles.count).to eq(1)
expect(ticket.articles.first.attachments.count).to eq(1)
file = ticket.articles.first.attachments.first
expect(file.content).to eq('a' * 1_000)
end
it 'does ticket create with agent - minimal article and valid multiline base64 without linebreaks attachment with customer (01.15c)' do
params = {
title: 'a new ticket #15c',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
body: 'some test 123',
attachments: [
{ 'filename' => 'some_file.txt',
'data' => Base64.strict_encode64('a' * 1_000),
'mime-type' => 'text/plain' },
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response['title']).to eq('a new ticket #15c')
ticket = Ticket.find(json_response['id'])
expect(ticket.articles.count).to eq(1)
expect(ticket.articles.first.attachments.count).to eq(1)
file = ticket.articles.first.attachments.first
expect(file.content).to eq('a' * 1_000)
end
it 'does ticket create with agent - minimal article and attachment invalid base64 with customer (01.16)' do
params = {
title: 'a new ticket #16',
group: ticket_group.name,
customer_id: customer.id,
article: {
subject: 'some test 123',
body: 'some test 123',
attachments: [
{ 'filename' => 'some_file.txt',
'data' => 'dGVzdCAxMjM=' },
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Attachment needs \'mime-type\' param for attachment with index \'0\'')
end
it 'does ticket create with agent - minimal article and inline attachments with customer (01.17)' do
params = {
title: 'a new ticket #17',
group: ticket_group.name,
customer_id: customer.id,
article: {
content_type: 'text/html',
subject: 'some test 123',
body: 'some test 123 
',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #17')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
expect(ticket.articles.count).to eq(1)
expect(ticket.articles.first.attachments.count).to eq(2)
file = ticket.articles.first.attachments[0]
expect(Digest::MD5.hexdigest(file.content)).to eq('d3c1e09bdefb92b6a06b791a24ca9599')
expect(file.filename).to eq('image1.png')
expect(file.preferences['Mime-Type']).to eq('image/png')
expect(file.preferences['Content-ID']).to match(%r{#{ticket.id}\..+?@zammad.example.com})
expect(file.preferences['Content-ID']).to be_truthy
file = ticket.articles.first.attachments[1]
expect(Digest::MD5.hexdigest(file.content)).to eq('006a2ca3793b550c8fe444acdeb39252')
expect(file.filename).to eq('image2.jpeg')
expect(file.preferences['Mime-Type']).to eq('image/jpeg')
expect(file.preferences['Content-ID']).to match(%r{#{ticket.id}\..+?@zammad.example.com})
expect(file.preferences['Content-ID']).to be_truthy
end
it 'does ticket create with agent - minimal article and inline attachments with customer (01.18)' do
params = {
title: 'a new ticket #18',
group: ticket_group.name,
customer_id: customer.id,
article: {
content_type: 'text/html',
subject: 'some test 123',
body: 'some test 123 ',
attachments: [
{ 'filename' => 'some_file.txt',
'data' => 'dGVzdCAxMjM=',
'mime-type' => 'text/plain' },
],
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #18')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
ticket = Ticket.find(json_response['id'])
expect(ticket.articles.count).to eq(1)
expect(ticket.articles.first.attachments.count).to eq(2)
file = ticket.articles.first.attachments[0]
expect(Digest::MD5.hexdigest(file.content)).to eq('006a2ca3793b550c8fe444acdeb39252')
expect(file.filename).to eq('image1.jpeg')
expect(file.preferences['Mime-Type']).to eq('image/jpeg')
expect(file.preferences['Content-ID']).to be_truthy
expect(file.preferences['Content-ID']).to match(%r{#{ticket.id}\..+?@zammad.example.com})
file = ticket.articles.first.attachments[1]
expect(Digest::MD5.hexdigest(file.content)).to eq('39d0d586a701e199389d954f2d592720')
expect(file.filename).to eq('some_file.txt')
expect(file.preferences['Mime-Type']).to eq('text/plain')
expect(file.preferences['Content-ID']).to be_falsey
end
it 'does ticket create with agent (02.02)' do
params = {
title: 'a new ticket #1',
state: 'new',
priority: '2 normal',
group: ticket_group.name,
customer: 'tickets-customer1@example.com',
article: {
content_type: 'text/plain', # or text/html
body: 'some body',
},
links: {
Ticket: {
parent: [1],
}
}
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #1')
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
links = Link.list(
link_object: 'Ticket',
link_object_value: json_response['id'],
)
expect(links[0]['link_type']).to eq('child')
expect(links[0]['link_object']).to eq('Ticket')
expect(links[0]['link_object_value']).to eq(1)
end
it 'does ticket with wrong ticket id (02.03)' do
group = create(:group)
ticket = create(
:ticket,
title: 'ticket with wrong ticket id',
group_id: group.id,
customer_id: customer.id,
)
authenticated_as(agent)
get "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
params = {
title: 'ticket with wrong ticket id - 2',
}
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
delete "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
end
it 'does ticket with correct ticket id (02.04)', performs_jobs: true do
title = "ticket with corret ticket id testagent#{SecureRandom.uuid}"
ticket = create(
:ticket,
title: title,
group: ticket_group,
customer_id: customer.id,
preferences: {
some_key1: 123,
},
)
authenticated_as(agent)
get "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq(title)
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['updated_by_id']).to eq(1)
expect(json_response['created_by_id']).to eq(1)
expect(json_response['preferences']['some_key1']).to eq(123)
params = {
title: "#{title} - 2",
customer_id: agent.id,
preferences: {
some_key2: 'abc',
},
}
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq("#{title} - 2")
expect(json_response['customer_id']).to eq(agent.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(1)
expect(json_response['preferences']['some_key1']).to eq(123)
expect(json_response['preferences']['some_key2']).to eq('abc')
params = {
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
article_json_response = json_response
expect(article_json_response).to be_a(Hash)
expect(article_json_response['ticket_id']).to eq(ticket.id)
expect(article_json_response['from']).to eq('Tickets Agent')
expect(article_json_response['subject']).to eq('some subject')
expect(article_json_response['body']).to eq('some body')
expect(article_json_response['content_type']).to eq('text/plain')
expect(article_json_response['internal']).to be(false)
expect(article_json_response['created_by_id']).to eq(agent.id)
expect(article_json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Agent').id)
expect(article_json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'note').id)
perform_enqueued_jobs
get "/api/v1/tickets/search?query=#{CGI.escape(title)}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(ticket.id)
expect(json_response['tickets_count']).to eq(1)
params = {
condition: {
'ticket.title' => {
operator: 'contains',
value: title,
},
},
}
post '/api/v1/tickets/search', params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(ticket.id)
expect(json_response['tickets_count']).to eq(1)
delete "/api/v1/ticket_articles/#{article_json_response['id']}", params: {}, as: :json
expect(response).to have_http_status(:ok)
params = {
from: 'something which should not be changed on server side',
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
type: 'email',
internal: true,
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['ticket_id']).to eq(ticket.id)
expect(json_response['from']).to eq(%(Tickets Agent via #{ticket_group.email_address.name} <#{ticket_group.email_address.email}>))
expect(json_response['subject']).to eq('some subject')
expect(json_response['body']).to eq('some body')
expect(json_response['content_type']).to eq('text/plain')
expect(json_response['internal']).to be(true)
expect(json_response['created_by_id']).to eq(agent.id)
expect(json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Agent').id)
expect(json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'email').id)
params = {
subject: 'new subject',
}
put "/api/v1/ticket_articles/#{json_response['id']}", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['ticket_id']).to eq(ticket.id)
expect(json_response['from']).to eq(%(Tickets Agent via #{ticket_group.email_address.name} <#{ticket_group.email_address.email}>))
expect(json_response['subject']).not_to eq('new subject')
expect(json_response['body']).to eq('some body')
expect(json_response['content_type']).to eq('text/plain')
expect(json_response['internal']).to be(true)
expect(json_response['created_by_id']).to eq(agent.id)
expect(json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Agent').id)
expect(json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'email').id)
params = {
from: 'something which should not be changed on server side',
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
type: 'email',
internal: false,
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response['internal']).to be(false)
delete "/api/v1/ticket_articles/#{json_response['id']}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized (communication articles cannot be deleted)!')
delete "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized (admin permission required)!')
end
it 'does ticket with correct ticket id (02.05)' do
ticket = create(
:ticket,
title: 'ticket with corret ticket id',
group: ticket_group,
customer_id: customer.id,
)
authenticated_as(admin)
get "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq('ticket with corret ticket id')
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['updated_by_id']).to eq(1)
expect(json_response['created_by_id']).to eq(1)
params = {
title: 'ticket with corret ticket id - 2',
customer_id: agent.id,
}
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq('ticket with corret ticket id - 2')
expect(json_response['customer_id']).to eq(agent.id)
expect(json_response['updated_by_id']).to eq(admin.id)
expect(json_response['created_by_id']).to eq(1)
params = {
from: 'something which should not be changed on server side',
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['ticket_id']).to eq(ticket.id)
expect(json_response['from']).to eq('Tickets Admin')
expect(json_response['subject']).to eq('some subject')
expect(json_response['body']).to eq('some body')
expect(json_response['content_type']).to eq('text/plain')
expect(json_response['internal']).to be(false)
expect(json_response['created_by_id']).to eq(admin.id)
expect(json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Agent').id)
expect(json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'note').id)
params = {
subject: 'new subject',
internal: true,
}
put "/api/v1/ticket_articles/#{json_response['id']}", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['ticket_id']).to eq(ticket.id)
expect(json_response['from']).to eq('Tickets Admin')
expect(json_response['subject']).not_to eq('new subject')
expect(json_response['body']).to eq('some body')
expect(json_response['content_type']).to eq('text/plain')
expect(json_response['internal']).to be(true)
expect(json_response['created_by_id']).to eq(admin.id)
expect(json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Agent').id)
expect(json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'note').id)
delete "/api/v1/ticket_articles/#{json_response['id']}", params: {}, as: :json
expect(response).to have_http_status(:ok)
params = {
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
type: 'email',
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['ticket_id']).to eq(ticket.id)
expect(json_response['from']).to eq(%(Tickets Admin via #{ticket_group.email_address.name} <#{ticket_group.email_address.email}>))
expect(json_response['subject']).to eq('some subject')
expect(json_response['body']).to eq('some body')
expect(json_response['content_type']).to eq('text/plain')
expect(json_response['internal']).to be(false)
expect(json_response['created_by_id']).to eq(admin.id)
expect(json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Agent').id)
expect(json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'email').id)
delete "/api/v1/ticket_articles/#{json_response['id']}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
delete "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
end
it 'does ticket pagination (02.05)' do
title = "ticket pagination #{SecureRandom.uuid}"
tickets = []
(1..20).each do |count|
ticket = create(
:ticket,
title: "#{title} - #{count}",
group: ticket_group,
customer_id: customer.id,
)
create(
:ticket_article,
type: Ticket::Article::Type.lookup(name: 'note'),
sender: Ticket::Article::Sender.lookup(name: 'Customer'),
ticket_id: ticket.id,
)
tickets.push ticket
travel 2.seconds
end
authenticated_as(admin)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(tickets[19].id)
expect(json_response['tickets'][19]).to eq(tickets[0].id)
expect(json_response['tickets_count']).to eq(20)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=10", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(tickets[19].id)
expect(json_response['tickets'][9]).to eq(tickets[10].id)
expect(json_response['tickets_count']).to eq(10)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40&page=1&per_page=5", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(tickets[19].id)
expect(json_response['tickets'][4]).to eq(tickets[15].id)
expect(json_response['tickets_count']).to eq(5)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40&page=2&per_page=5", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(tickets[14].id)
expect(json_response['tickets'][4]).to eq(tickets[10].id)
expect(json_response['tickets_count']).to eq(5)
get '/api/v1/tickets?limit=40&page=1&per_page=5', params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Array)
tickets = Ticket.reorder(:id).limit(5)
expect(json_response[0]['id']).to eq(tickets[0].id)
expect(json_response[4]['id']).to eq(tickets[4].id)
expect(json_response.count).to eq(5)
get '/api/v1/tickets?limit=40&page=2&per_page=5', params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Array)
tickets = Ticket.reorder(:id).limit(10)
expect(json_response[0]['id']).to eq(tickets[5].id)
expect(json_response[4]['id']).to eq(tickets[9].id)
expect(json_response.count).to eq(5)
end
it 'does ticket create with customer minimal (03.01)' do
params = {
title: 'a new ticket #c1',
state: 'new',
priority: '2 normal',
group: ticket_group.name,
article: {
body: 'some body',
},
}
authenticated_as(customer)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #c1')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(customer.id)
expect(json_response['created_by_id']).to eq(customer.id)
end
it 'does ticket create with customer with wrong customer (03.02)' do
params = {
title: 'a new ticket #c2',
state: 'new',
priority: '2 normal',
group: ticket_group.name,
customer_id: agent.id,
article: {
content_type: 'text/plain', # or text/html
body: 'some body',
sender: 'System',
},
}
authenticated_as(customer)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #c2')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(customer.id)
expect(json_response['created_by_id']).to eq(customer.id)
end
it 'does ticket create with customer with wrong customer hash (03.03)' do
params = {
title: 'a new ticket #c2',
state: 'new',
priority: '2 normal',
group: ticket_group.name,
customer: {
firstname: agent.firstname,
lastname: agent.lastname,
email: agent.email,
},
article: {
content_type: 'text/plain', # or text/html
body: 'some body',
sender: 'System',
},
}
authenticated_as(customer)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #c2')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(customer.id)
expect(json_response['created_by_id']).to eq(customer.id)
end
it 'does ticket with wrong ticket id (03.04)' do
ticket = create(
:ticket,
title: 'ticket with wrong ticket id',
group: ticket_group,
customer_id: agent.id,
)
authenticated_as(customer)
get "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
params = {
title: 'ticket with wrong ticket id - 2',
}
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
delete "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
end
it 'does ticket with correct ticket id (03.05)', performs_jobs: true do
title = "ticket with corret ticket id testme#{SecureRandom.uuid}"
ticket = create(
:ticket,
title: title,
group: ticket_group,
customer_id: customer.id,
)
authenticated_as(customer)
get "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq(title)
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['updated_by_id']).to eq(1)
expect(json_response['created_by_id']).to eq(1)
params = {
title: "#{title} - 2",
customer_id: agent.id,
}
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq("#{title} - 2")
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['updated_by_id']).to eq(customer.id)
expect(json_response['created_by_id']).to eq(1)
params = {
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
article_json_response = json_response
expect(article_json_response).to be_a(Hash)
expect(article_json_response['ticket_id']).to eq(ticket.id)
expect(article_json_response['from']).to eq('Tickets Customer1')
expect(article_json_response['subject']).to eq('some subject')
expect(article_json_response['body']).to eq('some body')
expect(article_json_response['content_type']).to eq('text/plain')
expect(article_json_response['created_by_id']).to eq(customer.id)
expect(article_json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Customer').id)
expect(article_json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'note').id)
perform_enqueued_jobs
get "/api/v1/tickets/search?query=#{CGI.escape(title)}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(ticket.id)
expect(json_response['tickets_count']).to eq(1)
params = {
condition: {
'ticket.title' => {
operator: 'contains',
value: title,
},
},
}
post '/api/v1/tickets/search', params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets'][0]).to eq(ticket.id)
expect(json_response['tickets_count']).to eq(1)
delete "/api/v1/ticket_articles/#{article_json_response['id']}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized (agent permission required)!')
params = {
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
type: 'email',
sender: 'Agent',
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['ticket_id']).to eq(ticket.id)
expect(json_response['from']).to eq('Tickets Customer1')
expect(json_response['subject']).to eq('some subject')
expect(json_response['body']).to eq('some body')
expect(json_response['content_type']).to eq('text/plain')
expect(json_response['created_by_id']).to eq(customer.id)
expect(json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Customer').id)
expect(json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'note').id)
delete "/api/v1/ticket_articles/#{json_response['id']}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized (agent permission required)!')
params = {
from: 'something which should not be changed on server side',
ticket_id: ticket.id,
subject: 'some subject',
body: 'some body',
type: 'web',
sender: 'Agent',
internal: true,
}
post '/api/v1/ticket_articles', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['ticket_id']).to eq(ticket.id)
expect(json_response['from']).to eq('Tickets Customer1 ')
expect(json_response['subject']).to eq('some subject')
expect(json_response['body']).to eq('some body')
expect(json_response['content_type']).to eq('text/plain')
expect(json_response['internal']).to be(false)
expect(json_response['created_by_id']).to eq(customer.id)
expect(json_response['sender_id']).to eq(Ticket::Article::Sender.lookup(name: 'Customer').id)
expect(json_response['type_id']).to eq(Ticket::Article::Type.lookup(name: 'web').id)
params = {
subject: 'new subject',
}
put "/api/v1/ticket_articles/#{json_response['id']}", params: params, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
delete "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized (admin permission required)!')
end
it 'does ticket create with agent - minimal article with customer hash with article.origin_by (03.6)' do
authenticated_as(customer)
params = {
title: 'a new ticket #3.6',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
body: 'some test 123',
origin_by: agent.login,
},
}
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #3.6')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(customer.id)
expect(json_response['created_by_id']).to eq(customer.id)
ticket = Ticket.find(json_response['id'])
article = ticket.articles.first
expect(article.updated_by_id).to eq(customer.id)
expect(article.created_by_id).to eq(customer.id)
expect(article.origin_by_id).to eq(customer.id)
expect(article.sender.name).to eq('Customer')
expect(article.type.name).to eq('note')
expect(article.from).to eq('Tickets Customer1')
end
it 'does ticket create with agent - minimal article with customer hash with article.origin_by (03.6) - second test' do
authenticated_as(customer)
params = {
title: 'a new ticket #3.6.1',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
sender: 'Agent',
body: 'some test 123',
origin_by_id: agent.id,
},
}
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq('a new ticket #3.6.1')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(customer.id)
expect(json_response['created_by_id']).to eq(customer.id)
ticket = Ticket.find(json_response['id'])
article = ticket.articles.first
expect(article.updated_by_id).to eq(customer.id)
expect(article.created_by_id).to eq(customer.id)
expect(article.origin_by_id).to eq(customer.id)
expect(article.sender.name).to eq('Customer')
expect(article.type.name).to eq('note')
expect(article.from).to eq('Tickets Customer1')
end
it 'does ticket show and response format (04.01)' do
title = "ticket testagent#{SecureRandom.uuid}"
ticket = create(
:ticket,
title: title,
group: ticket_group,
customer_id: customer.id,
updated_by_id: agent.id,
created_by_id: agent.id,
)
authenticated_as(agent)
get "/api/v1/tickets/#{ticket.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq(ticket.title)
expect(json_response['group']).to be_falsey
expect(json_response['priority']).to be_falsey
expect(json_response['owner']).to be_falsey
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
get "/api/v1/tickets/#{ticket.id}?expand=true", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq(ticket.title)
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['group']).to eq(ticket.group.name)
expect(json_response['priority']).to eq(ticket.priority.name)
expect(json_response['owner']).to eq(ticket.owner.login)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
get "/api/v1/tickets/#{ticket.id}?expand=false", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq(ticket.title)
expect(json_response['group']).to be_falsey
expect(json_response['priority']).to be_falsey
expect(json_response['owner']).to be_falsey
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
get "/api/v1/tickets/#{ticket.id}?full=true", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]['id']).to eq(ticket.id)
expect(json_response['assets']['Ticket'][ticket.id.to_s]['title']).to eq(ticket.title)
expect(json_response['assets']['Ticket'][ticket.id.to_s]['customer_id']).to eq(ticket.customer_id)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]['id']).to eq(agent.id)
expect(json_response['assets']['User'][agent.id.to_s]['firstname']).to eq(agent.firstname)
expect(json_response['assets']['User'][agent.id.to_s]['lastname']).to eq(agent.lastname)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]['id']).to eq(customer.id)
expect(json_response['assets']['User'][customer.id.to_s]['firstname']).to eq(customer.firstname)
expect(json_response['assets']['User'][customer.id.to_s]['lastname']).to eq(customer.lastname)
get "/api/v1/tickets/#{ticket.id}?full=false", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['id']).to eq(ticket.id)
expect(json_response['title']).to eq(ticket.title)
expect(json_response['group']).to be_falsey
expect(json_response['priority']).to be_falsey
expect(json_response['owner']).to be_falsey
expect(json_response['customer_id']).to eq(ticket.customer_id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
end
it 'does ticket index and response format (04.02)' do
title = "ticket testagent#{SecureRandom.uuid}"
ticket = create(
:ticket,
title: title,
group: ticket_group,
customer_id: customer.id,
updated_by_id: agent.id,
created_by_id: agent.id,
)
authenticated_as(agent)
get '/api/v1/tickets', params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Array)
expect(json_response[0]).to be_a(Hash)
expect(json_response[0]['id']).to eq(1)
expect(json_response[1]['id']).to eq(ticket.id)
expect(json_response[1]['title']).to eq(ticket.title)
expect(json_response[1]['group']).to be_falsey
expect(json_response[1]['priority']).to be_falsey
expect(json_response[1]['owner']).to be_falsey
expect(json_response[1]['customer_id']).to eq(ticket.customer_id)
expect(json_response[1]['updated_by_id']).to eq(agent.id)
expect(json_response[1]['created_by_id']).to eq(agent.id)
get '/api/v1/tickets?expand=true', params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Array)
expect(json_response[0]).to be_a(Hash)
expect(json_response[0]['id']).to eq(1)
expect(json_response[1]['id']).to eq(ticket.id)
expect(json_response[1]['title']).to eq(ticket.title)
expect(json_response[1]['customer_id']).to eq(ticket.customer_id)
expect(json_response[1]['group']).to eq(ticket.group.name)
expect(json_response[1]['priority']).to eq(ticket.priority.name)
expect(json_response[1]['owner']).to eq(ticket.owner.login)
expect(json_response[1]['updated_by_id']).to eq(agent.id)
expect(json_response[1]['created_by_id']).to eq(agent.id)
get '/api/v1/tickets?expand=false', params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Array)
expect(json_response[0]).to be_a(Hash)
expect(json_response[0]['id']).to eq(1)
expect(json_response[1]['id']).to eq(ticket.id)
expect(json_response[1]['title']).to eq(ticket.title)
expect(json_response[1]['group']).to be_falsey
expect(json_response[1]['priority']).to be_falsey
expect(json_response[1]['owner']).to be_falsey
expect(json_response[1]['customer_id']).to eq(ticket.customer_id)
expect(json_response[1]['updated_by_id']).to eq(agent.id)
expect(json_response[1]['created_by_id']).to eq(agent.id)
get '/api/v1/tickets?full=true', params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['record_ids'].class).to eq(Array)
expect(json_response['record_ids'][0]).to eq(1)
expect(json_response['record_ids'][1]).to eq(ticket.id)
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]['id']).to eq(ticket.id)
expect(json_response['assets']['Ticket'][ticket.id.to_s]['title']).to eq(ticket.title)
expect(json_response['assets']['Ticket'][ticket.id.to_s]['customer_id']).to eq(ticket.customer_id)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]['id']).to eq(agent.id)
expect(json_response['assets']['User'][agent.id.to_s]['firstname']).to eq(agent.firstname)
expect(json_response['assets']['User'][agent.id.to_s]['lastname']).to eq(agent.lastname)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]['id']).to eq(customer.id)
expect(json_response['assets']['User'][customer.id.to_s]['firstname']).to eq(customer.firstname)
expect(json_response['assets']['User'][customer.id.to_s]['lastname']).to eq(customer.lastname)
get '/api/v1/tickets?full=false', params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Array)
expect(json_response[0]).to be_a(Hash)
expect(json_response[0]['id']).to eq(1)
expect(json_response[1]['id']).to eq(ticket.id)
expect(json_response[1]['title']).to eq(ticket.title)
expect(json_response[1]['group']).to be_falsey
expect(json_response[1]['priority']).to be_falsey
expect(json_response[1]['owner']).to be_falsey
expect(json_response[1]['customer_id']).to eq(ticket.customer_id)
expect(json_response[1]['updated_by_id']).to eq(agent.id)
expect(json_response[1]['created_by_id']).to eq(agent.id)
end
it 'does ticket create and response format (04.03)' do
title = "ticket testagent#{SecureRandom.uuid}"
params = {
title: title,
group: ticket_group.name,
customer_id: customer.id,
state: 'new',
priority: '2 normal',
article: {
body: 'some test 123',
},
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(json_response['state_id']).to eq(ticket.state_id)
expect(json_response['state']).to be_falsey
expect(json_response['priority_id']).to eq(ticket.priority_id)
expect(json_response['priority']).to be_falsey
expect(json_response['group_id']).to eq(ticket.group_id)
expect(json_response['group']).to be_falsey
expect(json_response['title']).to eq(title)
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
post '/api/v1/tickets?expand=true', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(json_response['state_id']).to eq(ticket.state_id)
expect(json_response['state']).to eq(ticket.state.name)
expect(json_response['priority_id']).to eq(ticket.priority_id)
expect(json_response['priority']).to eq(ticket.priority.name)
expect(json_response['group_id']).to eq(ticket.group_id)
expect(json_response['group']).to eq(ticket.group.name)
expect(json_response['title']).to eq(title)
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
post '/api/v1/tickets?full=true', params: params, as: :json
expect(response).to have_http_status(:created)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]['id']).to eq(ticket.id)
expect(json_response['assets']['Ticket'][ticket.id.to_s]['title']).to eq(title)
expect(json_response['assets']['Ticket'][ticket.id.to_s]['customer_id']).to eq(ticket.customer_id)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]['id']).to eq(agent.id)
expect(json_response['assets']['User'][agent.id.to_s]['firstname']).to eq(agent.firstname)
expect(json_response['assets']['User'][agent.id.to_s]['lastname']).to eq(agent.lastname)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]['id']).to eq(customer.id)
expect(json_response['assets']['User'][customer.id.to_s]['firstname']).to eq(customer.firstname)
expect(json_response['assets']['User'][customer.id.to_s]['lastname']).to eq(customer.lastname)
end
it 'does ticket update and response formats (04.04)' do
title = "ticket testagent#{SecureRandom.uuid}"
ticket = create(
:ticket,
title: title,
group: ticket_group,
customer_id: customer.id,
updated_by_id: agent.id,
created_by_id: agent.id,
)
params = {
title: 'a update ticket #1',
}
authenticated_as(agent)
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(json_response['state_id']).to eq(ticket.state_id)
expect(json_response['state']).to be_falsey
expect(json_response['priority_id']).to eq(ticket.priority_id)
expect(json_response['priority']).to be_falsey
expect(json_response['group_id']).to eq(ticket.group_id)
expect(json_response['group']).to be_falsey
expect(json_response['title']).to eq('a update ticket #1')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
params = {
title: 'a update ticket #2',
}
put "/api/v1/tickets/#{ticket.id}?expand=true", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(json_response['state_id']).to eq(ticket.state_id)
expect(json_response['state']).to eq(ticket.state.name)
expect(json_response['priority_id']).to eq(ticket.priority_id)
expect(json_response['priority']).to eq(ticket.priority.name)
expect(json_response['group_id']).to eq(ticket.group_id)
expect(json_response['group']).to eq(ticket.group.name)
expect(json_response['title']).to eq('a update ticket #2')
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
params = {
title: 'a update ticket #3',
}
put "/api/v1/tickets/#{ticket.id}?full=true", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]['id']).to eq(ticket.id)
expect(json_response['assets']['Ticket'][ticket.id.to_s]['title']).to eq('a update ticket #3')
expect(json_response['assets']['Ticket'][ticket.id.to_s]['customer_id']).to eq(ticket.customer_id)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]).to be_truthy
expect(json_response['assets']['User'][agent.id.to_s]['id']).to eq(agent.id)
expect(json_response['assets']['User'][agent.id.to_s]['firstname']).to eq(agent.firstname)
expect(json_response['assets']['User'][agent.id.to_s]['lastname']).to eq(agent.lastname)
expect(json_response['assets']['User']).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]).to be_truthy
expect(json_response['assets']['User'][customer.id.to_s]['id']).to eq(customer.id)
expect(json_response['assets']['User'][customer.id.to_s]['firstname']).to eq(customer.firstname)
expect(json_response['assets']['User'][customer.id.to_s]['lastname']).to eq(customer.lastname)
# it should be not possible to modify the ticket number
expected_ticket_number = ticket.number
params = {
title: 'a update ticket #4',
number: '77777',
}
put "/api/v1/tickets/#{ticket.id}?full=true", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
ticket = Ticket.find(json_response['id'])
expect(json_response['assets']['Ticket'][ticket.id.to_s]['title']).to eq('a update ticket #4')
expect(json_response['assets']['Ticket'][ticket.id.to_s]['number']).to eq(expected_ticket_number)
end
it 'does ticket update with empty article param' do
title = 'a new ticket'
ticket = create(
:ticket,
title: title,
group: ticket_group,
customer_id: customer.id,
updated_by_id: agent.id,
created_by_id: agent.id,
)
params = {
state: Ticket::State.lookup(name: 'close'),
article: {}
}
authenticated_as(agent)
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['state_id']).to eq(ticket.state_id)
expect(json_response['state']).to be_falsey
expect(json_response['priority_id']).to eq(ticket.priority_id)
expect(json_response['priority']).to be_falsey
expect(json_response['group_id']).to eq(ticket.group_id)
expect(json_response['group']).to be_falsey
expect(json_response['customer_id']).to eq(customer.id)
expect(json_response['updated_by_id']).to eq(agent.id)
expect(json_response['created_by_id']).to eq(agent.id)
expect(json_response['state_id']).to eq(Ticket::State.lookup(name: 'new').id)
expect(json_response['title']).to eq(ticket.title)
expect(ticket.articles.count).to eq(0)
end
it 'does ticket split with html - check attachments (05.01)' do
ticket = create(
:ticket,
title: 'some title',
group: ticket_group,
customer_id: customer.id,
updated_by_id: agent.id,
created_by_id: agent.id,
)
article = create(
:ticket_article,
type: Ticket::Article::Type.lookup(name: 'note'),
sender: Ticket::Article::Sender.lookup(name: 'Customer'),
body: 'test 
test 
',
content_type: 'text/html',
ticket_id: ticket.id,
)
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file1_normally_should_be_an_image',
filename: 'some_file1.jpg',
preferences: {
'Content-Type' => 'image/jpeg',
'Mime-Type' => 'image/jpeg',
'Content-ID' => '15.274327094.140938@zammad.example.com',
'Content-Disposition' => 'inline',
})
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file2_normally_should_be_an_image',
filename: 'some_file2.jpg',
preferences: {
'Content-Type' => 'image/jpeg',
'Mime-Type' => 'image/jpeg',
'Content-ID' => '15.274327094.140938.2@zammad.example.com',
'Content-Disposition' => 'inline',
})
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file3_normally_should_be_an_image',
filename: 'some_file3.jpg',
preferences: {
'Content-Type' => 'image/jpeg',
'Mime-Type' => 'image/jpeg',
'Content-ID' => '15.274327094.140938.3@zammad.example.com',
})
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file4_normally_should_be_an_image',
filename: 'some_file4.jpg',
preferences: {
'Content-Type' => 'image/jpeg',
'Mime-Type' => 'image/jpeg',
'Content-ID' => '15.274327094.140938.4@zammad.example.com',
})
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file1_normally_should_be_an_pdf',
filename: 'Rechnung_RE-2018-200.pdf',
preferences: {
'Content-Type' => 'application/octet-stream; name="Rechnung_RE-2018-200.pdf"',
'Mime-Type' => 'application/octet-stream',
'Content-ID' => '8AB0BEC88984EE4EBEF643C79C8E0346@zammad.example.com',
'Content-Description' => 'Rechnung_RE-2018-200.pdf',
'Content-Disposition' => 'attachment',
})
authenticated_as(customer)
get "/api/v1/ticket_split?ticket_id=#{ticket.id}&article_id=#{article.id}&form_id=a464a40c-e84e-42d7-ab6e-5daea2bc1502", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
authenticated_as(agent)
get "/api/v1/ticket_split?ticket_id=#{ticket.id}&article_id=#{article.id}&form_id=a464a40c-e84e-42d7-ab6e-5daea2bc1502", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['TicketArticle'][article.id.to_s]).to be_truthy
expect(json_response['attachments']).to be_truthy
expect(json_response['attachments'].count).to eq(3)
get "/api/v1/ticket_split?ticket_id=#{ticket.id}&article_id=#{article.id}&form_id=a464a40c-e84e-42d7-ab6e-5daea2bc1502", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['TicketArticle'][article.id.to_s]).to be_truthy
expect(json_response['attachments']).to be_truthy
expect(json_response['attachments'].count).to eq(0)
end
it 'does ticket split with plain - check attachments (05.02)' do
ticket = create(
:ticket,
title: 'some title',
group: ticket_group,
customer_id: customer.id,
updated_by_id: agent.id,
created_by_id: agent.id,
)
article = create(
:ticket_article,
type: Ticket::Article::Type.lookup(name: 'note'),
sender: Ticket::Article::Sender.lookup(name: 'Customer'),
body: 'test 
',
content_type: 'text/plain',
ticket_id: ticket.id,
)
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file1_normally_should_be_an_image',
filename: 'some_file1.jpg',
preferences: {
'Content-Type' => 'image/jpeg',
'Mime-Type' => 'image/jpeg',
'Content-ID' => '15.274327094.140938@zammad.example.com',
'Content-Disposition' => 'inline',
})
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file1_normally_should_be_an_image',
filename: 'some_file2.jpg',
preferences: {
'Content-Type' => 'image/jpeg',
'Mime-Type' => 'image/jpeg',
'Content-ID' => '15.274327094.140938.2@zammad.example.com',
'Content-Disposition' => 'inline',
})
create(:store,
object: 'Ticket::Article',
o_id: article.id,
data: 'content_file1_normally_should_be_an_pdf',
filename: 'Rechnung_RE-2018-200.pdf',
preferences: {
'Content-Type' => 'application/octet-stream; name="Rechnung_RE-2018-200.pdf"',
'Mime-Type' => 'application/octet-stream',
'Content-ID' => '8AB0BEC88984EE4EBEF643C79C8E0346@zammad.example.com',
'Content-Description' => 'Rechnung_RE-2018-200.pdf',
'Content-Disposition' => 'attachment',
})
authenticated_as(agent)
get "/api/v1/ticket_split?ticket_id=#{ticket.id}&article_id=#{article.id}&form_id=a464a40c-e84e-42d7-ab6e-5daea2bc1502", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['TicketArticle'][article.id.to_s]).to be_truthy
expect(json_response['attachments']).to be_truthy
expect(json_response['attachments'].count).to eq(3)
get "/api/v1/ticket_split?ticket_id=#{ticket.id}&article_id=#{article.id}&form_id=a464a40c-e84e-42d7-ab6e-5daea2bc1502", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['assets']).to be_truthy
expect(json_response['assets']['Ticket']).to be_truthy
expect(json_response['assets']['Ticket'][ticket.id.to_s]).to be_truthy
expect(json_response['assets']['TicketArticle'][article.id.to_s]).to be_truthy
expect(json_response['attachments']).to be_truthy
expect(json_response['attachments'].count).to eq(0)
end
it 'does ticket merge (07.01)' do
group_no_permission = create(:group)
ticket1 = create(
:ticket,
title: 'ticket merge1',
group: ticket_group,
customer_id: customer.id,
)
ticket2 = create(
:ticket,
title: 'ticket merge2',
group: ticket_group,
customer_id: customer.id,
)
ticket3 = create(
:ticket,
title: 'ticket merge2',
group: group_no_permission,
customer_id: customer.id,
)
authenticated_as(customer)
put "/api/v1/ticket_merge/#{ticket2.id}/#{ticket1.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
authenticated_as(agent)
put "/api/v1/ticket_merge/#{ticket2.id}/#{ticket1.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['result']).to eq('failed')
expect(json_response['message']).to eq('The target ticket number could not be found.')
put "/api/v1/ticket_merge/#{ticket3.id}/#{ticket1.number}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
expect(json_response['error_human']).to eq('Not authorized')
put "/api/v1/ticket_merge/#{ticket1.id}/#{ticket3.number}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
expect(json_response).to be_a(Hash)
expect(json_response['error']).to eq('Not authorized')
expect(json_response['error_human']).to eq('Not authorized')
put "/api/v1/ticket_merge/#{ticket1.id}/#{ticket2.number}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['result']).to eq('success')
expect(json_response['target_ticket']['id']).to eq(ticket2.id)
end
it 'does ticket merge - change permission (07.02)' do
group_change_permission = Group.create!(
name: 'GroupWithChangePermission',
active: true,
updated_by_id: 1,
created_by_id: 1,
)
ticket1 = create(
:ticket,
title: 'ticket merge1',
group: group_change_permission,
customer_id: customer.id,
)
ticket2 = create(
:ticket,
title: 'ticket merge2',
group: group_change_permission,
customer_id: customer.id,
)
agent.group_names_access_map = { group_change_permission.name => %w[read change] }
authenticated_as(agent)
put "/api/v1/ticket_merge/#{ticket1.id}/#{ticket2.number}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['result']).to eq('success')
expect(json_response['target_ticket']['id']).to eq(ticket2.id)
end
it 'does ticket search sorted (08.01)' do
title = "ticket pagination #{SecureRandom.uuid}"
ticket1 = create(
:ticket,
title: "#{title} A",
group: ticket_group,
customer_id: customer.id,
created_at: '2018-02-05 17:42:00',
updated_at: '2018-02-05 20:42:00',
)
create(
:ticket_article,
type: Ticket::Article::Type.lookup(name: 'note'),
sender: Ticket::Article::Sender.lookup(name: 'Customer'),
ticket_id: ticket1.id,
)
ticket2 = create(
:ticket,
title: "#{title} B",
group: ticket_group,
customer_id: customer.id,
state: Ticket::State.lookup(name: 'new'),
priority: Ticket::Priority.lookup(name: '3 hoch'),
created_at: '2018-02-05 19:42:00',
updated_at: '2018-02-05 19:42:00',
)
create(
:ticket_article,
type: Ticket::Article::Type.lookup(name: 'note'),
sender: Ticket::Article::Sender.lookup(name: 'Customer'),
ticket_id: ticket2.id,
)
authenticated_as(admin)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets']).to eq([ticket2.id, ticket1.id])
authenticated_as(admin)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40", params: { sort_by: 'created_at', order_by: 'asc' }, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets']).to eq([ticket1.id, ticket2.id])
authenticated_as(admin)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40", params: { sort_by: 'title', order_by: 'asc' }, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets']).to eq([ticket1.id, ticket2.id])
authenticated_as(admin)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40", params: { sort_by: 'title', order_by: 'desc' }, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets']).to eq([ticket2.id, ticket1.id])
authenticated_as(admin)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40", params: { sort_by: %w[created_at updated_at], order_by: %w[asc asc] }, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets']).to eq([ticket1.id, ticket2.id])
authenticated_as(admin)
get "/api/v1/tickets/search?query=#{CGI.escape(title)}&limit=40", params: { sort_by: %w[created_at updated_at], order_by: %w[desc asc] }, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['tickets']).to eq([ticket2.id, ticket1.id])
end
it 'does ticket history' do
ticket1 = create(
:ticket,
title: 'some title',
group: ticket_group,
customer_id: customer.id,
)
create(
:ticket_article,
type: Ticket::Article::Type.lookup(name: 'note'),
sender: Ticket::Article::Sender.lookup(name: 'Customer'),
ticket_id: ticket1.id,
)
authenticated_as(agent)
get "/api/v1/ticket_history/#{ticket1.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to be_a(Hash)
expect(json_response['history'].class).to eq(Array)
expect(json_response['assets'].class).to eq(Hash)
expect(json_response['assets']['User'][customer.id.to_s]).not_to be_nil
expect(json_response['assets']['Ticket'][ticket1.id.to_s]).not_to be_nil
authenticated_as(customer)
get "/api/v1/ticket_history/#{ticket1.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
end
it 'does ticket related' do
ticket1 = create(
:ticket,
title: 'some title',
group: ticket_group,
customer_id: customer.id,
)
authenticated_as(agent)
get "/api/v1/ticket_related/#{ticket1.id}", params: {}, as: :json
expect(response).to have_http_status(:ok)
authenticated_as(customer)
get "/api/v1/ticket_related/#{ticket1.id}", params: {}, as: :json
expect(response).to have_http_status(:forbidden)
end
it 'does ticket recent' do
authenticated_as(agent)
get '/api/v1/ticket_recent', params: {}, as: :json
expect(response).to have_http_status(:ok)
authenticated_as(customer)
get '/api/v1/ticket_recent', params: {}, as: :json
expect(response).to have_http_status(:forbidden)
end
end
describe 'mentions' do
let(:user1) { create(:agent, groups: [ticket_group]) }
let(:user2) { create(:agent, groups: [ticket_group]) }
let(:user3) { create(:agent, groups: [ticket_group]) }
def new_ticket_with_mentions(*user_ids)
params = {
title: 'a new ticket #11',
group: ticket_group.name,
customer: {
firstname: 'some firstname',
lastname: 'some lastname',
email: 'some_new_customer@example.com',
},
article: {
body: 'some test 123',
},
mentions: user_ids
}
authenticated_as(agent)
post '/api/v1/tickets', params: params, as: :json
json_response
end
it 'create ticket with mentions' do
new_ticket_with_mentions(user1.id, user2.id, user3.id)
expect(response).to have_http_status(:created)
expect(Mention.count).to eq(3)
end
it 'create ticket with one of mentions being invalid' do
new_ticket_with_mentions(user1.id, user2.id, create(:customer).id)
expect(response).to have_http_status(:unprocessable_entity)
expect(Mention.count).to eq(0)
end
it 'check ticket get' do
ticket = new_ticket_with_mentions(user1.id, user2.id, user3.id)
get "/api/v1/tickets/#{ticket['id']}?all=true", params: {}, as: :json
expect(response).to have_http_status(:ok)
expect(json_response['mentions'].count).to eq(3)
expect(json_response['assets']['Mention'].count).to eq(3)
end
end
describe 'stats' do
let(:ticket1) { create(:ticket, customer: customer, organization: organization, group: ticket_group) }
let(:ticket2) { create(:ticket, customer: customer, organization: organization, group: ticket_group) }
let(:ticket3) { create(:ticket, customer: customer, organization: organization, group: ticket_group) }
let(:customer) { create(:customer, organization: organization) }
let(:organization) { create(:organization, shared: false) }
before do
authenticated_as(admin)
ticket1
travel 2.minutes
ticket2
travel 2.minutes
ticket3
travel 2.minutes
ticket2.touch
end
# https://github.com/zammad/zammad/issues/2296
it 'orders tickets by created_at desc (#2296)' do
get '/api/v1/ticket_stats', params: { organization_id: organization.id, user_id: customer.id }, as: :json
expect(response).to have_http_status(:ok)
expect(json_response)
.to be_a(Hash)
.and include('user' => hash_including('open_ids' => [ticket3.id, ticket2.id, ticket1.id]))
.and include('organization' => hash_including('open_ids' => [ticket3.id, ticket2.id, ticket1.id]))
end
end
describe '/api/v1/tickets' do
subject(:ticket) { create(:ticket, state_name: 'closed') }
let(:admin) { create(:admin, groups: [ticket.group]) }
let(:agent) { create(:agent, groups: [ticket.group]) }
let(:customer) { ticket.customer }
describe 'reopening a ticket' do
shared_examples 'successfully reopen a ticket' do
it 'succeeds' do
put "/api/v1/tickets/#{ticket.id}",
params: { state_id: Ticket::State.find_by(name: 'open').id },
as: :json
expect(response).to have_http_status(:ok)
expect(json_response).to include('state_id' => Ticket::State.find_by(name: 'open').id)
end
end
shared_examples 'fail to reopen a ticket' do
it 'fails' do
put "/api/v1/tickets/#{ticket.id}",
params: { state_id: Ticket::State.find_by(name: 'open').id },
as: :json
expect(response).to have_http_status(:unprocessable_entity)
expect(json_response).to include('error' => 'Cannot follow-up on a closed ticket. Please create a new ticket.')
end
end
context 'when ticket.group.follow_up_possible = "yes"' do
before { ticket.group.update(follow_up_possible: 'yes') }
context 'as admin', authenticated_as: -> { admin } do
include_examples 'successfully reopen a ticket'
end
context 'as agent', authenticated_as: -> { agent } do
include_examples 'successfully reopen a ticket'
end
context 'as customer', authenticated_as: -> { customer } do
include_examples 'successfully reopen a ticket'
end
end
context 'when ticket.group.follow_up_possible = "new_ticket"' do
before { ticket.group.update(follow_up_possible: 'new_ticket') }
context 'as admin', authenticated_as: -> { admin } do
include_examples 'successfully reopen a ticket'
end
context 'as agent', authenticated_as: -> { agent } do
include_examples 'successfully reopen a ticket'
end
context 'as customer', authenticated_as: -> { customer } do
include_examples 'fail to reopen a ticket'
end
end
end
end
describe 'GET /api/v1/tickets/:id' do
subject!(:ticket) { create(:ticket) }
let(:agent) { create(:agent, groups: [ticket.group]) }
context 'links present', authenticated_as: -> { agent } do
before do
create(:link, from: ticket, to: linked)
get "/api/v1/tickets/#{ticket.id}", params: { all: 'true' }, as: :json
end
let(:linked) { create(:ticket, group: ticket.group) }
it 'is present in response' do
expect(response).to have_http_status(:ok)
expect(json_response['links']).to eq([
{
'link_type' => 'normal',
'link_object' => 'Ticket',
'link_object_value' => linked.id
}
])
end
context 'no permission to linked Ticket Group' do
let(:linked) { create(:ticket) }
it 'is not present in response' do
expect(response).to have_http_status(:ok)
expect(json_response['links']).to be_blank
end
end
end
end
describe 'GET /api/v1/ticket_customer' do
subject(:ticket) { create(:ticket, customer: customer_authorized) }
let(:organization_authorized) { create(:organization) }
let(:customer_authorized) { create(:customer, organization: organization_authorized) }
let(:organization_unauthorized) { create(:organization) }
let(:customer_unauthorized) { create(:customer, organization: organization_unauthorized) }
let(:agent) { create(:agent, groups: [ticket.group]) }
describe 'listing information' do
before do
ticket
end
shared_examples 'has access' do
it 'succeeds' do
get '/api/v1/ticket_customer',
params: { customer_id: customer_authorized.id },
as: :json
expect(json_response['ticket_ids_open']).to include(ticket.id)
expect(json_response['ticket_ids_closed']).to be_blank
end
end
shared_examples 'has no access' do
it 'fails' do
get '/api/v1/ticket_customer',
params: { customer_id: customer_authorized.id },
as: :json
expect(json_response['ticket_ids_open']).to be_blank
expect(json_response['ticket_ids_closed']).to be_blank
expect(json_response['assets']).to be_blank
end
end
context 'as agent', authenticated_as: -> { agent } do
include_examples 'has access'
end
context 'as authorized customer', authenticated_as: -> { customer_authorized } do
include_examples 'has no access'
end
context 'as unauthorized customer', authenticated_as: -> { customer_unauthorized } do
include_examples 'has no access'
end
end
end
describe 'Assign user to multiple organizations #1573' do
let(:organizations) { create_list(:organization, 3) }
let(:customer) { create(:customer, organization: organizations[0], organizations: organizations[1..]) }
let(:ticket1) { create(:ticket, customer: customer, organization: organizations[0], group: Group.first) }
let(:ticket2) { create(:ticket, customer: customer, organization: organizations[1], group: Group.first) }
before do
ticket1 && ticket2
end
it 'does return multi organization tickets' do
authenticated_as(agent)
post '/api/v1/ticket_stats', params: { organization_id: customer.all_organization_ids, user_id: customer.id }, as: :json
expect(response).to have_http_status(:ok)
expect(json_response)
.to be_a(Hash)
.and include('user' => hash_including('open_ids' => [ticket2.id, ticket1.id]))
.and include('organization' => hash_including('open_ids' => [ticket2.id, ticket1.id]))
end
end
describe 'Articles are not indexed properly #4596', performs_jobs: true, searchindex: true do
let(:ticket) { create(:ticket, group: Group.first) }
def new_article_body
params = {
article: {
body: SecureRandom.uuid,
content_type: 'text/plain',
internal: false,
},
}
authenticated_as(agent)
put "/api/v1/tickets/#{ticket.id}", params: params, as: :json
expect(response).to have_http_status(:ok)
perform_enqueued_jobs
SearchIndexBackend.refresh
params[:article][:body]
end
def delete_article_body
article = ticket.articles.last
delete "/api/v1/ticket_articles/#{article.id}"
expect(response).to have_http_status(:ok)
perform_enqueued_jobs
SearchIndexBackend.refresh
article.body
end
before do
ticket
searchindex_model_reload([Ticket])
end
it 'does find articles after creations', :aggregate_failures do
expect(SearchIndexBackend.search(new_article_body, 'Ticket', limit: 1)).to be_present
expect(SearchIndexBackend.search(new_article_body, 'Ticket', limit: 1)).to be_present
expect(SearchIndexBackend.search(delete_article_body, 'Ticket', limit: 1)).to be_blank
end
end
describe 'Agent with being "ticket.agent" and "ticket.customer" is creating + updating a ticket', :aggregate_failures, authenticated_as: :user do
let(:group_only_create) { create(:group) }
let(:user) { create(:agent_and_customer) }
before do
skip 'This test requires some changes to the metadata concerns for the Ticket::Article model which are not done yet.'
user.group_names_access_map = {
group_only_create.name => %w[create],
}
end
it 'contains correct information for sender if agent sets himself as customer and responds' do
params = {
title: 'Test title for issue #4647',
group_id: group_only_create.id,
customer_id: user.id,
article: {
type: 'web',
internal: false,
sender: 'Customer',
subject: 'Test subject',
body: SecureRandom.uuid,
},
}
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
ticket = Ticket.last
expect(ticket.customer_id).to eq(user.id)
expect(ticket.articles.reload.first).to have_attributes(
sender: Ticket::Article::Sender.lookup(name: 'Customer'),
from: "#{user.fullname} <#{user.email}>",
)
response_params = {
article: {
body: SecureRandom.uuid,
},
}
put "/api/v1/tickets/#{ticket.id}", params: response_params, as: :json
expect(response).to have_http_status(:ok)
expect(ticket.reload.articles.last.sender.name).to eq('Customer')
end
end
describe 'Article contains wrong "origin_by" + "from" information', :aggregate_failures, authenticated_as: :user do
let(:api_role) do
role = create(:role, name: 'API', permission_names: ['ticket.agent'])
role.group_names_access_map = {
Group.first.name => %w[create change],
}
role
end
let(:user) { create(:user, roles: [api_role]) }
it 'contains correct "origin_by" + "from" information' do
params = {
title: 'Test title for issue #4647',
group_id: Group.first.id,
customer_id: 'guess:dummy@example.com',
article: {
type: 'web',
internal: false,
sender: 'Customer',
subject: 'Test subject',
body: SecureRandom.uuid,
},
}
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(Ticket.last.articles.first).to have_attributes(
origin_by_id: User.find_by(email: 'dummy@example.com').id,
from: 'dummy@example.com',
)
end
end
describe 'Agents can create new tags even if prohibited by the settings #3501', authenticated_as: :agent do
let(:tag) { SecureRandom.hex(4) }
before do
Setting.set('tag_new', false)
end
it 'does create the ticket without tags' do
params = {
title: 'a new ticket #3',
group: Group.first.name,
priority: '2 normal',
state: 'new',
customer_id: customer.id,
tags: tag,
}
post '/api/v1/tickets', params: params, as: :json
expect(response).to have_http_status(:created)
expect(Ticket.last.tag_list).to eq([])
end
end
end