msw: Implement PUT /api/v1/me/crate_owner_invitations/:crate_id request handler

Author: Turbo87

packages/crates-io-msw/handlers/invites.js

@@ -1,4 +1,5 @@
 import legacyListInvites from './invites/legacy-list.js';
 import listInvites from './invites/list.js';
+import redeemByCrateId from './invites/redeem-by-crate-id.js';
 
-export default [listInvites, legacyListInvites];
+export default [listInvites, legacyListInvites, redeemByCrateId];

packages/crates-io-msw/handlers/invites/redeem-by-crate-id.js

@@ -0,0 +1,33 @@
+import { http, HttpResponse } from 'msw';
+
+import { db } from '../../index.js';
+import { serializeInvite } from '../../serializers/invite.js';
+import { serializeUser } from '../../serializers/user.js';
+import { notFound } from '../../utils/handlers.js';
+import { getSession } from '../../utils/session.js';
+
+export default http.put('/api/v1/me/crate_owner_invitations/:crate_id', async ({ request }) => {
+  let { user } = getSession();
+  if (!user) {
+    return HttpResponse.json({ errors: [{ detail: 'must be logged in to perform that action' }] }, { status: 403 });
+  }
+
+  let body = await request.json();
+  let { accepted, crate_id: crateId } = body.crate_owner_invite;
+
+  let invite = db.crateOwnerInvitation.findFirst({
+    where: {
+      crate: { id: { equals: parseInt(crateId) } },
+      invitee: { id: { equals: user.id } },
+    },
+  });
+  if (!invite) return notFound();
+
+  if (accepted) {
+    db.crateOwnership.create({ crate: invite.crate, user });
+  }
+
+  db.crateOwnerInvitation.delete({ where: { id: invite.id } });
+
+  return HttpResponse.json({ crate_owner_invitation: { crate_id: crateId, accepted } });
+});

packages/crates-io-msw/handlers/invites/redeem-by-crate-id.test.js

@@ -0,0 +1,88 @@
+import { test as _test, assert } from 'vitest';
+
+import { db } from '../../index.js';
+
+let test = _test.extend({
+  // eslint-disable-next-line no-empty-pattern
+  serde: async ({}, use) => {
+    let serde = db.crate.create({ name: 'serde' });
+    db.version.create({ crate: serde });
+    await use(serde);
+  },
+});
+
+test('can accept an invitation', async function ({ serde }) {
+  let inviter = db.user.create();
+  let invitee = db.user.create();
+  db.mswSession.create({ user: invitee });
+
+  db.crateOwnerInvitation.create({ crate: serde, invitee, inviter });
+
+  let body = JSON.stringify({ crate_owner_invite: { crate_id: serde.id, accepted: true } });
+  let response = await fetch('/api/v1/me/crate_owner_invitations/serde', { method: 'PUT', body });
+  assert.strictEqual(response.status, 200);
+  assert.deepEqual(await response.json(), {
+    crate_owner_invitation: {
+      accepted: true,
+      crate_id: serde.id,
+    },
+  });
+
+  let invites = db.crateOwnerInvitation.findMany({ where: { crate: { id: serde.id }, invitee: { id: invitee.id } } });
+  assert.strictEqual(invites.length, 0);
+  let owners = db.crateOwnership.findMany({ where: { crate: { id: serde.id }, user: { id: invitee.id } } });
+  assert.strictEqual(owners.length, 1);
+});
+
+test('can decline an invitation', async function ({ serde }) {
+  let inviter = db.user.create();
+  let invitee = db.user.create();
+  db.mswSession.create({ user: invitee });
+
+  db.crateOwnerInvitation.create({ crate: serde, invitee, inviter });
+
+  let body = JSON.stringify({ crate_owner_invite: { crate_id: serde.id, accepted: false } });
+  let response = await fetch('/api/v1/me/crate_owner_invitations/serde', { method: 'PUT', body });
+  assert.strictEqual(response.status, 200);
+  assert.deepEqual(await response.json(), {
+    crate_owner_invitation: {
+      accepted: false,
+      crate_id: serde.id,
+    },
+  });
+
+  let invites = db.crateOwnerInvitation.findMany({ where: { crate: { id: serde.id }, invitee: { id: invitee.id } } });
+  assert.strictEqual(invites.length, 0);
+  let owners = db.crateOwnership.findMany({ where: { crate: { id: serde.id }, user: { id: invitee.id } } });
+  assert.strictEqual(owners.length, 0);
+});
+
+test('returns 404 if invite does not exist', async function ({ serde }) {
+  let user = db.user.create();
+  db.mswSession.create({ user });
+
+  let body = JSON.stringify({ crate_owner_invite: { crate_id: serde.id, accepted: true } });
+  let response = await fetch('/api/v1/me/crate_owner_invitations/serde', { method: 'PUT', body });
+  assert.strictEqual(response.status, 404);
+});
+
+test('returns 404 if invite is for another user', async function ({ serde }) {
+  let inviter = db.user.create();
+  let invitee = db.user.create();
+  db.mswSession.create({ user: inviter });
+
+  db.crateOwnerInvitation.create({ crate: serde, invitee, inviter });
+
+  let body = JSON.stringify({ crate_owner_invite: { crate_id: serde.id, accepted: true } });
+  let response = await fetch('/api/v1/me/crate_owner_invitations/serde', { method: 'PUT', body });
+  assert.strictEqual(response.status, 404);
+});
+
+test('returns an error if unauthenticated', async function ({ serde }) {
+  let body = JSON.stringify({ crate_owner_invite: { crate_id: serde.id, accepted: true } });
+  let response = await fetch('/api/v1/me/crate_owner_invitations/serde', { method: 'PUT', body });
+  assert.strictEqual(response.status, 403);
+  assert.deepEqual(await response.json(), {
+    errors: [{ detail: 'must be logged in to perform that action' }],
+  });
+});