zammad/spec/graphql/gql/subscriptions/user/current/avatar_updates_spec.rb

# Copyright (C) 2012-2024 Zammad Foundation, https://zammad-foundation.org/

require 'rails_helper'

RSpec.describe Gql::Subscriptions::User::Current::AvatarUpdates, type: :graphql do

  let(:subscription) do
    <<~QUERY
      subscription userCurrentAvatarUpdates($userId: ID!) {
        userCurrentAvatarUpdates(userId: $userId) {
          avatars {
            id
            default
            deletable
            initial
            imageHash
            createdAt
            updatedAt
          }
        }
      }
    QUERY
  end
  let(:mock_channel) { build_mock_channel }
  let(:target)       { create(:user) }
  let(:avatar)       { create(:avatar, o_id: target.id, default: false, initial: true) }
  let(:variables)    { { userId: gql.id(target) } }

  context 'when user is authenticated, but has no permission', authenticated_as: :agent do
    let(:agent) { create(:agent, roles: []) }

    before do
      gql.execute(subscription, variables: variables, context: { channel: mock_channel })
    end

    it_behaves_like 'graphql responds with error if unauthenticated'
  end

  context 'with authenticated user', authenticated_as: :target do
    it 'subscribes' do
      gql.execute(subscription, variables: variables, context: { channel: mock_channel })
      expect(gql.result.data).to eq({ 'avatars' => nil })
    end

    it 'receives avatar updates for target user' do
      gql.execute(subscription, variables: variables, context: { channel: mock_channel })
      avatar.update!(default: true)
      expect(mock_channel.mock_broadcasted_messages.first[:result]['data']['userCurrentAvatarUpdates']['avatars'].count).to eq(1)
    end

    it 'does not receive avatar updates for other users' do
      gql.execute(subscription, variables: variables, context: { channel: mock_channel })
      another_user = create(:user)
      another_avatar = create(:avatar, o_id: another_user.id, default: false)
      another_avatar.update!(default: true)
      expect(mock_channel.mock_broadcasted_messages).to be_empty
    end

    context 'when subscribing for other users' do
      let(:variables) { { userId: gql.id(create(:user)) } }

      it 'does not subscribe but returns an authorization error' do
        gql.execute(subscription, variables: variables, context: { channel: mock_channel })
        expect(gql.result.error_type).to eq(Exceptions::Forbidden)
      end
    end
  end
end