/* * This file is part of ETL-Processor * * Copyright (c) 2023 Comprehensive Cancer Center Mainfranken * Copyright (c) 2024-2026 Paul-Christian Volkmer, Datenintegrationszentrum Philipps-Universität Marburg and Contributors * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU Affero General Public License as published * by the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Affero General Public License for more details. * * You should have received a copy of the GNU Affero General Public License * along with this program. If not, see . */ package dev.dnpm.etl.processor.web import dev.dnpm.etl.processor.* import dev.dnpm.etl.processor.config.AppConfiguration import dev.dnpm.etl.processor.config.AppSecurityConfiguration import dev.dnpm.etl.processor.monitoring.Report import dev.dnpm.etl.processor.monitoring.Request import dev.dnpm.etl.processor.monitoring.RequestStatus import dev.dnpm.etl.processor.monitoring.RequestType import dev.dnpm.etl.processor.monitoring.SubmissionType import dev.dnpm.etl.processor.services.RequestService import java.io.IOException import java.time.Instant import java.util.* import org.assertj.core.api.Assertions.assertThat import org.htmlunit.WebClient import org.htmlunit.html.HtmlPage import org.junit.jupiter.api.BeforeEach import org.junit.jupiter.api.Nested import org.junit.jupiter.api.Test import org.junit.jupiter.api.assertThrows import org.junit.jupiter.api.extension.ExtendWith import org.mockito.junit.jupiter.MockitoExtension import org.mockito.kotlin.any import org.mockito.kotlin.anyValueClass import org.mockito.kotlin.times import org.mockito.kotlin.verify import org.mockito.kotlin.whenever import org.springframework.beans.factory.annotation.Autowired import org.springframework.boot.webmvc.test.autoconfigure.WebMvcTest import org.springframework.data.domain.Page import org.springframework.data.domain.PageImpl import org.springframework.data.domain.Pageable import org.springframework.security.test.context.support.WithMockUser import org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors.anonymous import org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors.user import org.springframework.test.context.ContextConfiguration import org.springframework.test.context.TestPropertySource import org.springframework.test.context.bean.override.mockito.MockitoBean import org.springframework.test.context.junit.jupiter.SpringExtension import org.springframework.test.web.servlet.MockMvc import org.springframework.test.web.servlet.get import org.springframework.test.web.servlet.htmlunit.MockMvcWebClientBuilder import org.springframework.web.context.WebApplicationContext @WebMvcTest(controllers = [HomeController::class]) @ExtendWith(value = [MockitoExtension::class, SpringExtension::class]) @ContextConfiguration( classes = [HomeController::class, AppConfiguration::class, AppSecurityConfiguration::class] ) @TestPropertySource( properties = [ "app.pseudonymize.generator=BUILDIN", "app.security.admin-user=admin", "app.security.admin-password={noop}very-secret", ] ) @MockitoBean(types = [RequestService::class]) class HomeControllerTest { private lateinit var mockMvc: MockMvc private lateinit var webClient: WebClient @BeforeEach fun setup( @Autowired mockMvc: MockMvc, @Autowired requestService: RequestService, @Autowired webApplicationContext: WebApplicationContext, ) { this.mockMvc = mockMvc this.webClient = MockMvcWebClientBuilder.webAppContextSetup(webApplicationContext).build() this.webClient.options.isJavaScriptEnabled = false whenever(requestService.findAll(any())).thenReturn(Page.empty()) } @Test fun testShouldRequestHomePage() { mockMvc.get("/").andExpect { status { isOk() } view { name("index") } } } @Nested inner class WithRequests { private lateinit var requestService: RequestService @BeforeEach fun setup(@Autowired requestService: RequestService) { this.requestService = requestService } @Test fun testShouldShowHomePage() { whenever(requestService.findAll(any())) .thenReturn( PageImpl( listOf( Request( 2L, randomRequestId(), PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("ashdkasdh"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.SUCCESS, ), Request( 1L, randomRequestId(), PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("asdasdasd"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.ERROR, ), ) ) ) val page = webClient.getPage("http://localhost/") assertThat(page.querySelectorAll("div.card")).hasSize(2) assertThat(page.querySelectorAll("div.notification.info")).isEmpty() } @Test @WithMockUser(username = "admin", roles = ["ADMIN"]) fun testShouldShowRequestDetails() { val requestId = randomRequestId() whenever(requestService.findByUuid(anyValueClass())) .thenReturn( Optional.of( Request( 2L, requestId, PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("ashdkasdh"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.SUCCESS, Tan.empty(), Instant.now(), report = Report("Test"), ) ) ) val page = webClient.getPage("http://localhost/report/${requestId.value}") assertThat(page.querySelectorAll("div.card")).hasSize(1) assertThat(page.querySelectorAll("div.notification.info")).isEmpty() } @Test @WithMockUser(username = "admin", roles = ["ADMIN"]) fun testShouldShowPatientDetails() { whenever(requestService.findRequestByPatientId(anyValueClass(), any())) .thenReturn( PageImpl( listOf( Request( 2L, randomRequestId(), PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("ashdkasdh"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.SUCCESS, ), Request( 1L, randomRequestId(), PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("asdasdasd"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.ERROR, ), ) ) ) val page = webClient.getPage("http://localhost/patient/PSEUDO1") assertThat(page.querySelectorAll("div.card")).hasSize(2) assertThat(page.querySelectorAll("div.notification.info")).isEmpty() } @Test @WithMockUser(username = "admin", roles = ["ADMIN"]) fun testShouldShowPatientPseudonym() { whenever(requestService.findRequestByPatientId(anyValueClass(), any())) .thenReturn( PageImpl( listOf( Request( 2L, randomRequestId(), PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("ashdkasdh"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.SUCCESS, ), Request( 1L, randomRequestId(), PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("asdasdasd"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.ERROR, ), ) ) ) val page = webClient.getPage("http://localhost/patient/PSEUDO1") assertThat(page.querySelectorAll("h2 > span")).hasSize(1) assertThat(page.querySelectorAll("h2 > span").first().textContent).isEqualTo("PSEUDO1") } } @Nested inner class WithoutRequests { private lateinit var requestService: RequestService @BeforeEach fun setup(@Autowired requestService: RequestService) { this.requestService = requestService whenever(requestService.findAll(any())).thenReturn(Page.empty()) } @Test fun testShouldShowHomePage() { val page = webClient.getPage("http://localhost/") assertThat(page.querySelectorAll("div.card")).isEmpty() assertThat(page.querySelectorAll("div.notification.info")).hasSize(1) } @Test @WithMockUser(username = "admin", roles = ["ADMIN"]) fun testShouldThrowNotFoundExceptionForUnknownReport() { val requestId = randomRequestId() whenever(requestService.findByUuid(anyValueClass())).thenReturn(Optional.empty()) assertThrows { webClient.getPage("http://localhost/report/${requestId.value}") } .also { assertThat(it).hasRootCauseInstanceOf(NotFoundException::class.java) } } @Test @WithMockUser(username = "admin", roles = ["ADMIN"]) fun testShouldShowEmptyPatientDetails() { whenever(requestService.findRequestByPatientId(anyValueClass(), any())) .thenReturn(Page.empty()) val page = webClient.getPage("http://localhost/patient/PSEUDO1") assertThat(page.querySelectorAll("div.card")).isEmpty() assertThat(page.querySelectorAll("div.notification.info")).hasSize(1) } @Test @WithMockUser(username = "admin", roles = ["ADMIN"]) fun testShouldShowNoConsentStatusBadge() { whenever(requestService.findRequestByPatientId(anyValueClass(), any())) .thenReturn( PageImpl( listOf( Request( 1L, randomRequestId(), PatientPseudonym("PSEUDO1"), PatientId("PATIENT1"), Fingerprint("ashdkasdh"), RequestType.MTB_FILE, SubmissionType.TEST, RequestStatus.NO_CONSENT, ) ) ) ) val page = webClient.getPage("http://localhost/patient/PSEUDO1") assertThat(page.querySelectorAll("div.card")).hasSize(1) assertThat(page.querySelectorAll("div.card div").first().textContent) .isEqualTo("Gestoppt: Kein Consent") } @Test fun testSearchAsLoggedInAdmin() { whenever(requestService.searchRequestLike(anyValueClass(), anyValueClass(), any())) .thenReturn(Page.empty()) mockMvc.get("/") { queryParam("q", "test") with(user("admin").roles("ADMIN")) }.andExpect { status { isOk() } view { name("index") } } verify(requestService, times(1)) .searchRequestLike( anyValueClass(), anyValueClass(), any() ) verify(requestService, times(0)) .findAll(any()) } @Test fun testSearchAsLoggedInUser() { whenever(requestService.searchRequestLike(anyValueClass(), anyValueClass(), any())) .thenReturn(Page.empty()) mockMvc.get("/") { queryParam("q", "test") with(user("user").roles("USER")) }.andExpect { status { isOk() } view { name("index") } } verify(requestService, times(1)) .searchRequestLike( anyValueClass(), anyValueClass(), any() ) verify(requestService, times(0)) .findAll(any()) } @Test fun testNotSearchAsAnonymousUser() { whenever(requestService.searchRequestLike(anyValueClass(), anyValueClass(), any())) .thenReturn(Page.empty()) mockMvc.get("/") { queryParam("q", "test") with(anonymous()) }.andExpect { status { isOk() } view { name("index") } } verify(requestService, times(0)) .searchRequestLike( anyValueClass(), anyValueClass(), any() ) verify(requestService, times(1)) .findAll(any()) } } }