Clicking on message marks it as read

Authorization added at the controller level.

Author: andrzejkrzywda

ecommerce/communication/lib/communication.rb

@@ -5,6 +5,7 @@ class Configuration
 
     def call(event_store, command_bus)
       command_bus.register(SendMessage, OnSendMessage.new(event_store))
+      command_bus.register(ReadMessage, OnReadMessage.new(event_store))
     end
   end
 
@@ -20,6 +21,14 @@ class MessageSent < Infra::Event
     attribute :message, Infra::Types::String
   end
 
+  class ReadMessage < Infra::Command
+    attribute :message_id, Infra::Types::UUID
+  end
+
+  class MessageRead < Infra::Event
+    attribute :message_id, Infra::Types::UUID
+  end
+
   class OnSendMessage
     def initialize(event_store)
       @repository = Infra::AggregateRootRepository.new(event_store)
@@ -32,6 +41,18 @@ def call(command)
     end
   end
 
+  class OnReadMessage
+    def initialize(event_store)
+      @repository = Infra::AggregateRootRepository.new(event_store)
+    end
+
+    def call(command)
+      @repository.with_aggregate(Message, command.message_id) do |message|
+        message.read(command.message_id)
+      end
+    end
+  end
+
   class Message
     include AggregateRoot
 
@@ -49,7 +70,14 @@ def _send(receiver_id, message)
       )
     end
 
+    def read(message_id)
+      apply MessageRead.new(data: { message_id: message_id })
+    end
+
     def apply_message_sent(_)
     end
+
+    def apply_message_read(_)
+    end
   end
 end

ecommerce/communication/test/sending_message_test.rb

@@ -5,11 +5,37 @@ class SendingMessageTest < Test
     cover "Communication*"
 
     def test_happy_path
-      expected_event = MessageSent.new(data: {message_id: message_id, receiver_id: receiver_id, message: message_content})
-      assert_events("Communication::Message$#{message_id}", expected_event) do
+      assert_events(message_stream,
+                    message_sent_event,
+                    message_read_event) do
         send_message
+        read_message
       end
     end
+
+    private
+
+    def message_stream
+      "Communication::Message$#{message_id}"
+    end
+
+    def message_sent_event
+      MessageSent.new(
+        data: {
+          message_id: message_id,
+          receiver_id: receiver_id,
+          message: message_content
+        }
+      )
+    end
+
+    def message_read_event
+      MessageRead.new(
+        data: {
+          message_id: message_id
+        }
+      )
+    end
   end
 end
 

ecommerce/communication/test/test_helper.rb

@@ -16,6 +16,10 @@ def send_message
       run_command(SendMessage.new(message_id: message_id, receiver_id: receiver_id, message: message_content))
     end
 
+    def read_message
+      run_command(ReadMessage.new(message_id: message_id))
+    end
+
     def message_content
       "Hello, this is a test message."
     end

rails_application/app/controllers/client/inbox_controller.rb

@@ -4,5 +4,13 @@ class InboxController < BaseController
     def index
       render html: ClientInbox::Rendering::InboxList.build(view_context, cookies[:client_id]), layout: true
     end
+
+    def mark_as_read
+      ClientInbox.authorize(cookies[:client_id], params[:message_id])
+      command_bus.call(Communication::ReadMessage.new(message_id: params[:message_id]))
+      redirect_to client_inbox_path
+    rescue ClientInbox::NotAuthorized
+      head :not_found
+    end
   end
 end

rails_application/app/read_models/client_inbox/configuration.rb

@@ -1,12 +1,18 @@
 module ClientInbox
+  class NotAuthorized < StandardError; end
 
   class Message < ApplicationRecord
     self.table_name = 'client_inbox_messages'
   end
 
+  def self.authorize(client_id, message_id)
+    raise NotAuthorized unless Message.exists?(client_uid: client_id, id: message_id)
+  end
+
   class Configuration
     def call(event_store)
       event_store.subscribe(CreateMessage.new, to: [Communication::MessageSent])
+      event_store.subscribe(ReadMessage.new, to: [Communication::MessageRead])
     end
   end
 
@@ -18,4 +24,12 @@ def call(event)
       )
     end
   end
+
+  class ReadMessage
+    def call(event)
+      message = Message.find_by(id: event.data.fetch(:message_id))
+      message.update(read: true)
+      message.save
+    end
+  end
 end

rails_application/app/read_models/client_inbox/rendering/inbox_list.rb

@@ -45,23 +45,53 @@ def messages_list(messages)
       end
 
       def message_item(message)
+        if message.read?
+          read_message_item(message)
+        else
+          unread_message_item(message)
+        end
+      end
+
+      def unread_message_item(message)
+        div class: "flex items-start justify-between" do
+          div class: "flex-1" do
+            form action: client_inbox_mark_as_read_path, method: :post, class: "block", data: { turbo: false } do
+              input type: "hidden", name: "authenticity_token", value: form_authenticity_token
+              input type: "hidden", name: "message_id", value: message.id
+              h3 class: message_title_classes(message), onclick: "this.closest('form').submit();" do
+                message.title
+              end
+            end
+
+            timestamp(message.created_at)
+          end
+
+          unread_indicator
+        end
+      end
+
+      def read_message_item(message)
         div class: "flex items-start justify-between" do
           div class: "flex-1" do
+            input type: "hidden", name: "authenticity_token", value: form_authenticity_token
+            input type: "hidden", name: "message_id", value: message.id
             h3 class: message_title_classes(message) do
               message.title
             end
-            
-            span class: "text-sm text-gray-500" do
-              time_ago_in_words(message.created_at) + " ago"
-            end
+
+            timestamp(message.created_at)
           end
-          
-          unread_indicator if !message.read
+        end
+      end
+
+      def timestamp(created_at)
+        span class: "text-sm text-gray-500" do
+          time_ago_in_words(created_at) + " ago"
         end
       end
 
       def message_title_classes(message)
-        message.read ? "text-gray-700 text-lg" : "font-bold text-gray-900 text-lg"
+        message.read ? "text-gray-700 text-lg" : "font-bold text-gray-900 text-lg cursor-pointer"
       end
 
       def unread_indicator

rails_application/config/routes.rb

@@ -60,6 +60,7 @@
   get "clients", to: "client/clients#index"
   get "client/products", to: "client/products#index"
   get "client/inbox", to: "client/inbox#index"
+  post "client/inbox/mark_as_read", to: "client/inbox#mark_as_read"
 
   mount RailsEventStore::Browser => "/res"
 end

rails_application/test/integration/client_inbox_test.rb

@@ -1,24 +1,52 @@
 require_relative "../test_helper"
 
 class ClientInboxTest < InMemoryRESIntegrationTestCase
+
   def test_customer_sees_inbox_messages
-    customer_id = register_customer("Test Customer")
+    customer_id = register_customer
     login(customer_id)
     get "/client/inbox"
-    
     assert_response :success
     assert_select "h1", "Your Inbox"
-    assert_message("Welcome to our platform!", /minute ago/)
+    assert_message_unread("Welcome to our platform!", /minute ago/)
+    message_id = ClientInbox::Message.last.id
+    post "/client/inbox/mark_as_read", params: { message_id: message_id }
+    follow_redirect!
+    assert_message_read("Welcome to our platform!", /minute ago/)
+  end
+
+  def test_another_customer_cant_mark_my_message_as_read_even_when_know_the_id
+    another_customer_id = register_customer("Another Customer")
+    customer_id = register_customer
+    login(another_customer_id)
+    get "/client/inbox"
+
+    assert_response :success
+    assert_select "h1", "Your Inbox"
+    assert_message_unread("Welcome to our platform!", /minute ago/)
+    other_client_message_id = ClientInbox::Message.find_by(client_uid: customer_id)
+
+    post "/client/inbox/mark_as_read",
+         params: { message_id: other_client_message_id }
+    assert_response :missing
   end
 
   private
 
-  def assert_message(title, timestamp)
-    assert_select "h3.font-bold.text-gray-900.text-lg", 1
+  def assert_message_unread(title, timestamp)
+    assert_select "h3.font-bold.text-gray-900.text-lg.cursor-pointer", 1
     assert_select "h3.font-bold.text-gray-900.text-lg", title
     assert_select "span.text-sm.text-gray-500", timestamp
     assert_select "span.inline-block.h-2.w-2.rounded-full.bg-blue-600"
   end
 
+  def assert_message_read(title, timestamp)
+    assert_select "h3.font-bold", false
+    assert_select "h3.text-gray-700.text-lg", 1
+    assert_select "h3.text-gray-700.text-lg", title
+    assert_select "span.text-sm.text-gray-500", timestamp
+    assert_select "span.inline-block.h-2.w-2.rounded-full.bg-blue-600", 0
+  end
+
 end
 

rails_application/test/test_helper.rb

@@ -149,7 +149,7 @@ def before_teardown
     result
   end
 
-  def register_customer(name)
+  def register_customer(name="Test Customer")
     customer_id = SecureRandom.uuid
     post "/customers", params: { customer_id: customer_id, name: name }
     customer_id