link_checker_api_controller_test.rb

require "test_helper"
require "gds_api/test_helpers/link_checker_api"

class Admin::LinkCheckerApiControllerTest < ActionController::TestCase
  include GdsApi::TestHelpers::LinkCheckerApi

  def generate_signature(body, key)
    OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new("sha1"), key, body)
  end

  setup do
    @link = "http://www.example.com"
    publication = create(:publication, body: "[link](#{@link})")

    report = link_checker_api_batch_report_hash(
      id: 5,
      links: [{ uri: @link }],
    ).with_indifferent_access

    LinkCheckerApiReport.create_in_progress_report(report, publication)
  end

  test "POST :callback updates LinkCheckerApiReport" do
    body = link_checker_api_batch_report_hash(
      id: 5,
      links: [
        { uri: @link, status: "ok" },
      ],
    )
    headers = {
      "Content-Type": "application/json",
      "X-LinkCheckerApi-Signature": generate_signature(body.to_json, Rails.application.credentials.link_checker_api_secret_token),
    }

    request.headers.merge! headers
    post :callback, params: body

    assert_response :success
  end

  test "POST :callback returns 503 when the webhook secret is not configured" do
    Rails.application.credentials.stubs(:link_checker_api_secret_token).returns(nil)
    LinkCheckerApiReport.any_instance.expects(:mark_report_as_completed).never

    body = link_checker_api_batch_report_hash(id: 5, links: [{ uri: @link, status: "ok" }])
    post :callback, params: body

    assert_response :service_unavailable
  end

  test "POST :callback returns 400 when the signature header is missing" do
    LinkCheckerApiReport.any_instance.expects(:mark_report_as_completed).never

    body = link_checker_api_batch_report_hash(id: 5, links: [{ uri: @link, status: "ok" }])
    post :callback, params: body

    assert_response :bad_request
  end
end