veza/veza-backend-api/internal/services/dmca_service_test.go

package services

import (
	"encoding/json"
	"testing"
	"time"

	"github.com/google/uuid"

	"veza-backend-api/internal/models"
)

// Tests focus on the pure helpers — the DB transactions are exercised
// in the integration test (test_dmca_workflow.go later) ; here we lock
// the audit-log append + the JSON shape of the audit entries since
// they're part of our compliance trail.

func TestAppendAudit_EmptyStart(t *testing.T) {
	now := time.Now().UTC()
	actorID := uuid.New()
	out, err := appendAudit(json.RawMessage(`[]`), models.DmcaAuditEntry{
		Timestamp: now,
		ActorID:   &actorID,
		Action:    "takedown",
		Note:      "verified — match found",
	})
	if err != nil {
		t.Fatalf("appendAudit: %v", err)
	}

	var entries []models.DmcaAuditEntry
	if err := json.Unmarshal(out, &entries); err != nil {
		t.Fatalf("unmarshal: %v", err)
	}
	if len(entries) != 1 {
		t.Fatalf("expected 1 entry, got %d", len(entries))
	}
	got := entries[0]
	if got.Action != "takedown" {
		t.Errorf("action = %q, want takedown", got.Action)
	}
	if got.ActorID == nil || *got.ActorID != actorID {
		t.Errorf("actor_user_id mismatch")
	}
	if got.Note != "verified — match found" {
		t.Errorf("note mismatch: %q", got.Note)
	}
}

func TestAppendAudit_PreservesExisting(t *testing.T) {
	existing := []models.DmcaAuditEntry{
		{Timestamp: time.Now().Add(-time.Hour).UTC(), Action: "submitted", Note: "from 1.2.3.4"},
	}
	encoded, err := json.Marshal(existing)
	if err != nil {
		t.Fatalf("marshal existing: %v", err)
	}

	out, err := appendAudit(encoded, models.DmcaAuditEntry{
		Timestamp: time.Now().UTC(),
		Action:    "dismissed",
		Note:      "fraudulent claim",
	})
	if err != nil {
		t.Fatalf("appendAudit: %v", err)
	}

	var entries []models.DmcaAuditEntry
	if err := json.Unmarshal(out, &entries); err != nil {
		t.Fatalf("unmarshal: %v", err)
	}
	if len(entries) != 2 {
		t.Fatalf("expected 2 entries (1 existing + 1 new), got %d", len(entries))
	}
	if entries[0].Action != "submitted" {
		t.Errorf("first entry action = %q, want submitted (preserved order)", entries[0].Action)
	}
	if entries[1].Action != "dismissed" {
		t.Errorf("second entry action = %q, want dismissed", entries[1].Action)
	}
}

func TestAppendAudit_RejectsCorruptedJSON(t *testing.T) {
	_, err := appendAudit(json.RawMessage(`not-json`), models.DmcaAuditEntry{
		Timestamp: time.Now(),
		Action:    "takedown",
	})
	if err == nil {
		t.Fatal("expected error for malformed audit_log JSON, got nil")
	}
}