rowt/src/tera/admin/planned_event.rs

use rocket::{
    form::Form,
    get, post, put,
    response::{Flash, Redirect},
    routes, FromForm, Route, State,
};
use serde::Serialize;
use sqlx::SqlitePool;

use crate::model::{
    event::{self, Event},
    tripdetails::{TripDetails, TripDetailsToAdd},
    user::EventUser,
};

//TODO: add constraints (e.g. planned_amount_cox > 0)
#[derive(FromForm, Serialize)]
struct AddEventForm<'r> {
    name: &'r str,
    planned_amount_cox: i32,
    tripdetails: TripDetailsToAdd<'r>,
}

#[post("/planned-event", data = "<data>")]
async fn create(
    db: &State<SqlitePool>,
    data: Form<AddEventForm<'_>>,
    _admin: EventUser,
) -> Flash<Redirect> {
    let data = data.into_inner();

    let trip_details_id = TripDetails::create(db, data.tripdetails).await;
    let trip_details = TripDetails::find_by_id(db, trip_details_id).await.unwrap(); //Okay, bc. we
                                                                                    //just created
                                                                                    //the object

    Event::create(db, data.name, data.planned_amount_cox, trip_details).await;

    Flash::success(Redirect::to("/planned"), "Event hinzugefügt")
}

//TODO: add constraints (e.g. planned_amount_cox > 0)
#[derive(FromForm)]
struct UpdateEventForm<'r> {
    id: i64,
    name: &'r str,
    planned_amount_cox: i32,
    max_people: i32,
    notes: Option<&'r str>,
    always_show: bool,
    is_locked: bool,
}

#[put("/planned-event", data = "<data>")]
async fn update(
    db: &State<SqlitePool>,
    data: Form<UpdateEventForm<'_>>,
    _admin: EventUser,
) -> Flash<Redirect> {
    let update = event::EventUpdate {
        name: data.name,
        planned_amount_cox: data.planned_amount_cox,
        max_people: data.max_people,
        notes: data.notes,
        always_show: data.always_show,
        is_locked: data.is_locked,
    };
    match Event::find_by_id(db, data.id).await {
        Some(planned_event) => {
            planned_event.update(db, &update).await;
            Flash::success(Redirect::to("/planned"), "Event erfolgreich bearbeitet")
        }
        None => Flash::error(Redirect::to("/planned"), "Planned event id not found"),
    }
}

#[get("/planned-event/<id>/delete")]
async fn delete(db: &State<SqlitePool>, id: i64, _admin: EventUser) -> Flash<Redirect> {
    let Some(event) = Event::find_by_id(db, id).await else {
        return Flash::error(Redirect::to("/planned"), "Event does not exist");
    };

    match event.delete(db).await {
        Ok(()) => Flash::success(Redirect::to("/planned"), "Event gelöscht"),
        Err(e) => Flash::error(Redirect::to("/planned"), e),
    }
}

pub fn routes() -> Vec<Route> {
    routes![create, delete, update]
}

#[cfg(test)]
mod test {
    use rocket::{
        http::{ContentType, Status},
        local::asynchronous::Client,
    };
    use sqlx::SqlitePool;

    use super::*;
    use crate::testdb;

    #[sqlx::test]
    fn test_delete() {
        let db = testdb!();

        let _ = Event::find_by_id(&db, 1).await.unwrap();

        let rocket = rocket::build().manage(db.clone());
        let rocket = crate::tera::config(rocket);

        let client = Client::tracked(rocket).await.unwrap();
        let login = client
            .post("/auth")
            .header(ContentType::Form) // Set the content type to form
            .body("name=admin&password=admin"); // Add the form data to the request body;
        login.dispatch().await;

        let req = client.get("/admin/planned-event/1/delete");
        let response = req.dispatch().await;

        assert_eq!(response.status(), Status::SeeOther);
        assert_eq!(response.headers().get("Location").next(), Some("/planned"));

        let flash_cookie = response
            .cookies()
            .get("_flash")
            .expect("Expected flash cookie");

        assert_eq!(flash_cookie.value(), "7:successEvent gelöscht");

        let event = Event::find_by_id(&db, 1).await;
        assert_eq!(event, None);
    }

    #[sqlx::test]
    fn test_delete_invalid_id() {
        let db = testdb!();

        let rocket = rocket::build().manage(db.clone());
        let rocket = crate::tera::config(rocket);

        let client = Client::tracked(rocket).await.unwrap();
        let login = client
            .post("/auth")
            .header(ContentType::Form) // Set the content type to form
            .body("name=admin&password=admin"); // Add the form data to the request body;
        login.dispatch().await;

        let req = client.get("/admin/planned-event/1337/delete");
        let response = req.dispatch().await;

        assert_eq!(response.status(), Status::SeeOther);
        assert_eq!(response.headers().get("Location").next(), Some("/planned"));

        let flash_cookie = response
            .cookies()
            .get("_flash")
            .expect("Expected flash cookie");

        assert_eq!(flash_cookie.value(), "5:errorEvent does not exist");

        let _ = Event::find_by_id(&db, 1).await.unwrap();
    }

    #[sqlx::test]
    fn test_update() {
        let db = testdb!();

        let event = Event::find_by_id(&db, 1).await.unwrap();
        assert_eq!(event.notes, Some("trip_details for a planned event".into()));

        let rocket = rocket::build().manage(db.clone());
        let rocket = crate::tera::config(rocket);

        let client = Client::tracked(rocket).await.unwrap();
        let login = client
            .post("/auth")
            .header(ContentType::Form) // Set the content type to form
            .body("name=admin&password=admin"); // Add the form data to the request body;
        login.dispatch().await;

        let req = client
            .put("/admin/planned-event")
            .header(ContentType::Form) // Set the content type to form
            .body("id=1&planned_amount_cox=2&max_people=3&notes=new-planned-event-text&name=test"); // Add the form data to the request body;
        let response = req.dispatch().await;

        assert_eq!(response.status(), Status::SeeOther);
        assert_eq!(response.headers().get("Location").next(), Some("/planned"));

        let flash_cookie = response
            .cookies()
            .get("_flash")
            .expect("Expected flash cookie");

        assert_eq!(
            flash_cookie.value(),
            "7:successEvent erfolgreich bearbeitet"
        );

        let event = Event::find_by_id(&db, 1).await.unwrap();
        assert_eq!(event.notes, Some("new-planned-event-text".into()));
    }

    #[sqlx::test]
    fn test_update_invalid_id() {
        let db = testdb!();

        let rocket = rocket::build().manage(db.clone());
        let rocket = crate::tera::config(rocket);

        let client = Client::tracked(rocket).await.unwrap();
        let login = client
            .post("/auth")
            .header(ContentType::Form) // Set the content type to form
            .body("name=admin&password=admin"); // Add the form data to the request body;
        login.dispatch().await;

        let req = client
            .put("/admin/planned-event")
            .header(ContentType::Form) // Set the content type to form
            .body(
                "id=1337&planned_amount_cox=2&max_people=3&notes=new-planned-event-text&name=test",
            ); // Add the form data to the request body;
        let response = req.dispatch().await;

        assert_eq!(response.status(), Status::SeeOther);
        assert_eq!(response.headers().get("Location").next(), Some("/planned"));

        let flash_cookie = response
            .cookies()
            .get("_flash")
            .expect("Expected flash cookie");

        assert_eq!(flash_cookie.value(), "5:errorPlanned event id not found");
    }

    #[sqlx::test]
    fn test_create() {
        let db = testdb!();

        let rocket = rocket::build().manage(db.clone());
        let rocket = crate::tera::config(rocket);

        let client = Client::tracked(rocket).await.unwrap();
        let login = client
            .post("/auth")
            .header(ContentType::Form) // Set the content type to form
            .body("name=admin&password=admin"); // Add the form data to the request body;
        login.dispatch().await;

        let req = client
            .post("/admin/planned-event")
            .header(ContentType::Form) // Set the content type to form
            .body("name=my-cool-new-event&planned_amount_cox=42&tripdetails.planned_starting_time=10:01&tripdetails.max_people=3&tripdetails.day=2345-12-20"); // Add the form data to the request body;
        let response = req.dispatch().await;

        assert_eq!(response.status(), Status::SeeOther);
        assert_eq!(response.headers().get("Location").next(), Some("/planned"));

        let flash_cookie = response
            .cookies()
            .get("_flash")
            .expect("Expected flash cookie");

        assert_eq!(flash_cookie.value(), "7:successEvent hinzugefügt");

        let event = Event::find_by_id(&db, 2).await.unwrap();
        assert_eq!(event.name, "my-cool-new-event");
    }
}