Merge pull request #12 from fga-eps-mds/feat/turmas

Feat/turmas

Author: pkbceira03

README.md

@@ -6,7 +6,7 @@
 
 - Validar o JWT (assinatura/expiração) antes de repassar.
 - Injetar `X-Internal-Token` (segredo compartilhado) e cabeçalhos auxiliares (`X-User-Id`, `X-User-Papel`, `X-User-Status`) nas chamadas downstream.
-- Rotear por path: `/api/v1/autenticacao/*`, `/api/v1/admin/*`, `/api/v1/exemplos/*` → Backend/Auth; `/api/v1/questoes/*` → Quiz-Service; `/api/v1/ia/*` → AI (placeholder enquanto AI estiver vazio).
+- Rotear por path: `/api/v1/autenticacao/*`, `/api/v1/admin/*`, `/api/v1/usuarios/*`, `/api/v1/exemplos/*` → Backend/Auth; `/api/v1/questoes/*`, `/api/v1/turmas/*` → Quiz-Service; `/api/v1/ia/*` → AI (placeholder enquanto AI estiver vazio).
 - Padronizar respostas de erro vindas do downstream.
 
 ## Stack
@@ -106,8 +106,10 @@ make clean       # apaga dist/ e coverage/
 | `GET /health` | próprio BFF |
 | `/api/v1/autenticacao/*` | Backend/Auth `/api/v1/autenticacao/*` |
 | `/api/v1/admin/usuarios*` | Backend/Auth `/api/v1/admin/usuarios*` (autenticado) |
+| `/api/v1/usuarios/*` | Backend/Auth `/api/v1/usuarios/*` (autenticado) |
 | `/api/v1/exemplos/*` | Backend/Auth `/api/v1/exemplos/*` (autenticado) |
 | `/api/v1/questoes/*` | Quiz-Service `/api/v1/questoes/*` (autenticado) |
+| `/api/v1/turmas/*` | Quiz-Service `/api/v1/turmas/*` (autenticado) |
 | `/api/v1/ia/*` | AI `/api/v1/*` — atualmente **503 `IA_INDISPONIVEL`** enquanto `AI_URL` estiver vazio |
 
 ### Rotas públicas de autenticação (sem JWT)
@@ -145,6 +147,8 @@ Qualquer outro path de autenticação exige `Authorization: Bearer <accessToken>
 │   │   ├── exemplos.routes.ts       # exige JWT, repassa Backend
 │   │   ├── ia.routes.ts             # exige JWT, repassa AI (ou 503 placeholder)
 │   │   ├── questoes.routes.ts       # exige JWT, repassa Quiz-Service
+│   │   ├── turmas.routes.ts         # exige JWT, repassa Quiz-Service
+│   │   ├── usuarios.routes.ts       # exige JWT, repassa Backend
 │   │   └── index.ts                 # monta o apiRouter
 │   ├── shared/
 │   │   ├── clients/

src/routes/index.ts

@@ -5,6 +5,8 @@ import { authRouter } from "@/routes/auth.routes";
 import { exemplosRouter } from "@/routes/exemplos.routes";
 import { iaRouter } from "@/routes/ia.routes";
 import { questoesRouter } from "@/routes/questoes.routes";
+import { turmasRouter } from "@/routes/turmas.routes";
+import { usuariosRouter } from "@/routes/usuarios.routes";
 
 const apiRouter = Router();
 
@@ -13,6 +15,7 @@ apiRouter.use("/admin", adminRouter);
 apiRouter.use("/exemplos", exemplosRouter);
 apiRouter.use("/questoes", questoesRouter);
 apiRouter.use("/ia", iaRouter);
-apiRouter.use("/questoes", questoesRouter);
+apiRouter.use("/turmas", turmasRouter);
+apiRouter.use("/usuarios", usuariosRouter);
 
 export { apiRouter };

src/routes/turmas.routes.ts

@@ -0,0 +1,12 @@
+import { Router } from "express";
+import { quizClient } from "@/shared/clients/quiz.client";
+import { middlewareAutenticacao } from "@/shared/middlewares/autenticacao.middleware";
+import { criarProxyHandler } from "@/shared/middlewares/proxy.middleware";
+
+const router = Router();
+
+router.use(middlewareAutenticacao);
+
+router.all(/.*/, criarProxyHandler(quizClient));
+
+export { router as turmasRouter };

src/routes/usuarios.routes.ts

@@ -0,0 +1,12 @@
+import { Router } from "express";
+
+import { backendClient } from "@/shared/clients/backend.client";
+import { middlewareAutenticacao } from "@/shared/middlewares/autenticacao.middleware";
+import { criarProxyHandler } from "@/shared/middlewares/proxy.middleware";
+
+const router = Router();
+
+router.use(middlewareAutenticacao);
+router.all(/.*/, criarProxyHandler(backendClient));
+
+export { router as usuariosRouter };

tests/integration/app.spec.ts

@@ -177,6 +177,35 @@ describe("/api/v1/admin", () => {
   });
 });
 
+describe("/api/v1/usuarios", () => {
+  it("rejeita sem token", async () => {
+    const resposta = await request(aplicacao).get("/api/v1/usuarios/alunos");
+
+    expect(resposta.status).toBe(401);
+    expect(backendMock.request).not.toHaveBeenCalled();
+  });
+
+  it("repassa chamadas autenticadas para o Backend", async () => {
+    backendMock.request.mockResolvedValue({
+      status: 200,
+      data: { mensagem: "ok", dados: [] },
+      headers: {},
+    });
+
+    const resposta = await request(aplicacao)
+      .get("/api/v1/usuarios/alunos?busca=joao")
+      .set("Authorization", `Bearer ${tokenValido()}`);
+
+    expect(resposta.status).toBe(200);
+    expect(quizMock.request).not.toHaveBeenCalled();
+    const args = backendMock.request.mock.calls[0][0];
+    expect(args.method).toBe("GET");
+    expect(args.url).toBe("/api/v1/usuarios/alunos?busca=joao");
+    expect(args.headers["x-internal-token"]).toBeDefined();
+    expect(args.headers["x-user-id"]).toBe("u1");
+  });
+});
+
 describe("/api/v1/exemplos", () => {
   it("repassa POST autenticado", async () => {
     backendMock.request.mockResolvedValue({
@@ -245,4 +274,4 @@ describe("erro do downstream", () => {
       .send({ email: "a@b.com" });
     expect(resposta.status).toBe(502);
   });
-});
+});

src/routes/auth.routes.test.ts tests/unit/auth.routes.test.tssrc/routes/auth.routes.test.ts renamed to tests/unit/auth.routes.test.ts

@@ -0,0 +1,63 @@
+import request from 'supertest';
+import express from 'express';
+import type { Request, Response, NextFunction } from 'express';
+
+jest.mock('@/shared/middlewares/autenticacao.middleware', () => ({
+  middlewareAutenticacao: jest.fn((req: Request, res: Response, next: NextFunction) => {
+    next();
+  }),
+}));
+
+jest.mock('@/shared/middlewares/proxy.middleware', () => ({
+  criarProxyHandler: jest.fn(() => (req: Request, res: Response) => {
+    res.status(200).json({ mensagem: 'Passou pelo proxy!' });
+  }),
+}));
+
+jest.mock('@/shared/clients/quiz.client', () => ({
+  quizClient: { dummy: 'mock-client' }, 
+}));
+
+import { turmasRouter } from '@/routes/turmas.routes'; 
+import { middlewareAutenticacao } from '@/shared/middlewares/autenticacao.middleware';
+
+describe('Turmas Router (BFF)', () => {
+  let app: express.Express;
+
+  beforeEach(() => {
+    jest.clearAllMocks();
+    
+    app = express();
+    app.use('/api/v1/turmas', turmasRouter);
+  });
+
+
+  it('deve passar pelo middleware de autenticação e chegar no proxy ao fazer um GET', async () => {
+    const response = await request(app).get('/api/v1/turmas');
+
+    expect(middlewareAutenticacao).toHaveBeenCalled();
+    expect(response.status).toBe(200);
+    expect(response.body).toEqual({ mensagem: 'Passou pelo proxy!' });
+  });
+
+  it('deve barrar a requisição se o middleware de autenticação falhar', async () => {
+    (middlewareAutenticacao as jest.Mock).mockImplementationOnce((req: Request, res: Response) => {
+      res.status(401).json({ erro: 'Não autorizado' });
+    });
+
+    const response = await request(app).get('/api/v1/turmas');
+
+    expect(middlewareAutenticacao).toHaveBeenCalled();
+    expect(response.status).toBe(401);
+    expect(response.body).toEqual({ erro: 'Não autorizado' });
+  });
+
+  it('deve rotear qualquer método HTTP (POST, PUT, DELETE) e sub-rotas para o proxy', async () => {
+    
+    const responsePost = await request(app).post('/api/v1/turmas/123/alunos');
+    expect(responsePost.status).toBe(200);
+
+    const responseDelete = await request(app).delete('/api/v1/turmas/999');
+    expect(responseDelete.status).toBe(200);
+  });
+});

src/routes/questoes.routes.test.ts tests/unit/questoes.routes.test.tssrc/routes/questoes.routes.test.ts renamed to tests/unit/questoes.routes.test.ts

@@ -0,0 +1,63 @@
+import express from "express";
+import type { NextFunction, Request, Response } from "express";
+import request from "supertest";
+
+jest.mock("@/shared/middlewares/autenticacao.middleware", () => ({
+  middlewareAutenticacao: jest.fn((_req: Request, _res: Response, next: NextFunction) => {
+    next();
+  }),
+}));
+
+jest.mock("@/shared/middlewares/proxy.middleware", () => ({
+  criarProxyHandler: jest.fn(() => (_req: Request, res: Response) => {
+    res.status(200).json({ mensagem: "Passou pelo proxy de usuarios!" });
+  }),
+}));
+
+jest.mock("@/shared/clients/backend.client", () => ({
+  backendClient: { dummy: "mock-client" },
+}));
+
+import { usuariosRouter } from "@/routes/usuarios.routes";
+import { middlewareAutenticacao } from "@/shared/middlewares/autenticacao.middleware";
+
+describe("Usuarios Router (BFF)", () => {
+  let app: express.Express;
+
+  beforeEach(() => {
+    jest.clearAllMocks();
+
+    app = express();
+    app.use("/api/v1/usuarios", usuariosRouter);
+  });
+
+  it("deve passar pelo middleware de autenticacao e chegar no proxy ao fazer um GET", async () => {
+    const response = await request(app).get("/api/v1/usuarios/alunos?busca=joao");
+
+    expect(middlewareAutenticacao).toHaveBeenCalled();
+    expect(response.status).toBe(200);
+    expect(response.body).toEqual({ mensagem: "Passou pelo proxy de usuarios!" });
+  });
+
+  it("deve barrar a requisicao se o middleware de autenticacao falhar", async () => {
+    (middlewareAutenticacao as jest.Mock).mockImplementationOnce(
+      (_req: Request, res: Response) => {
+        res.status(401).json({ erro: "Nao autorizado" });
+      },
+    );
+
+    const response = await request(app).get("/api/v1/usuarios/alunos");
+
+    expect(middlewareAutenticacao).toHaveBeenCalled();
+    expect(response.status).toBe(401);
+    expect(response.body).toEqual({ erro: "Nao autorizado" });
+  });
+
+  it("deve rotear sub-rotas e query strings para o proxy", async () => {
+    const responseIds = await request(app).get("/api/v1/usuarios?ids=aluno-1,aluno-2");
+    const responseAlunos = await request(app).get("/api/v1/usuarios/alunos?busca=maria");
+
+    expect(responseIds.status).toBe(200);
+    expect(responseAlunos.status).toBe(200);
+  });
+});