Epicnabbo-Catalogus-Updated-Daily/src/lib/services/audit.test.ts

import { beforeEach, describe, expect, it, vi } from "vitest";

const create = vi.hoisted(() => vi.fn());
const findMany = vi.hoisted(() => vi.fn());
const count = vi.hoisted(() => vi.fn());
const userFindMany = vi.hoisted(() => vi.fn());

vi.mock("@/lib/prisma", () => ({
	prisma: {
		adminAuditLog: { create, findMany, count },
		user: { findMany: userFindMany },
	},
}));

vi.mock("@/env", () => ({ env: {} }));

import { getAuditLogs, logAudit } from "./audit";

beforeEach(() => {
	vi.clearAllMocks();
});

describe("logAudit", () => {
	it("creates an audit entry", async () => {
		create.mockResolvedValue({ id: 1 });
		await logAudit({
			userId: 1,
			action: "test_action",
			target: "user",
			targetId: 42,
		});
		const data = create.mock.calls[0][0].data;
		expect(data.userId).toBe(1);
		expect(data.action).toBe("test_action");
		expect(data.target).toBe("user");
		expect(data.targetId).toBe(42);
	});

	it("redacts sensitive keys in payload", async () => {
		create.mockResolvedValue({ id: 1 });
		await logAudit({
			userId: 1,
			action: "update",
			target: "user",
			targetId: 1,
			before: { username: "foo", password: "secret123" },
			after: { username: "bar", password: "newsecret" },
		});
		const data = create.mock.calls[0][0].data;
		expect(JSON.parse(data.before).password).toBe("[Redacted]");
		expect(JSON.parse(data.after).password).toBe("[Redacted]");
		expect(JSON.parse(data.diff).username).toEqual({ from: "foo", to: "bar" });
	});

	it("omits diff when only before or after is missing", async () => {
		create.mockResolvedValue({ id: 1 });
		await logAudit({
			userId: 1,
			action: "delete",
			target: "user",
			before: { username: "foo" },
		});
		const data = create.mock.calls[0][0].data;
		expect(data.diff).toBeNull();
	});

	it("handles empty payloads", async () => {
		create.mockResolvedValue({ id: 1 });
		await logAudit({ userId: 1, action: "view", target: "page" });
		expect(create).toHaveBeenCalledOnce();
	});

	it("flattens nested objects", async () => {
		create.mockResolvedValue({ id: 1 });
		await logAudit({
			userId: 1,
			action: "update_settings",
			target: "user",
			before: { nested: { key: "val" } },
			after: {},
		});
		const data = create.mock.calls[0][0].data;
		expect(JSON.parse(data.before)).toEqual({ nested: { key: "val" } });
	});
});

describe("getAuditLogs", () => {
	it("returns paginated logs with usernames", async () => {
		findMany.mockResolvedValue([
			{
				id: 1,
				userId: 1,
				action: "test",
				target: "user",
				targetId: null,
				before: null,
				after: null,
				diff: null,
				createdAt: "2024-01-01",
			},
			{
				id: 2,
				userId: 2,
				action: "test2",
				target: "room",
				targetId: null,
				before: null,
				after: null,
				diff: null,
				createdAt: "2024-01-02",
			},
		]);
		count.mockResolvedValue(2);
		userFindMany.mockResolvedValue([
			{ id: 1, username: "alice" },
			{ id: 2, username: "bob" },
		]);

		const result = await getAuditLogs({ page: 1, perPage: 20 });
		expect(result.rows).toHaveLength(2);
		expect(result.rows[0].username).toBe("alice");
		expect(result.rows[1].username).toBe("bob");
		expect(result.total).toBe(2);
		expect(result.lastPage).toBe(1);
	});

	it("filters by search term", async () => {
		findMany.mockResolvedValue([]);
		count.mockResolvedValue(0);
		await getAuditLogs({ search: "test" });
		expect(findMany).toHaveBeenCalledWith(
			expect.objectContaining({
				where: {
					OR: [
						{ action: { contains: "test" } },
						{ target: { contains: "test" } },
					],
				},
			}),
		);
	});

	it("falls back to User #id for unknown users", async () => {
		findMany.mockResolvedValue([
			{
				id: 1,
				userId: 99,
				action: "x",
				target: "y",
				targetId: null,
				before: null,
				after: null,
				diff: null,
				createdAt: "2024-01-01",
			},
		]);
		count.mockResolvedValue(1);
		userFindMany.mockResolvedValue([]);
		const result = await getAuditLogs();
		expect(result.rows[0].username).toBe("User #99");
	});
});