using Dapper; using Microsoft.Data.SqlClient; using SIGCM2.Domain.Entities; using SIGCM2.Infrastructure.Persistence; namespace SIGCM2.Application.Tests.Infrastructure; /// /// Integration tests for RefreshTokenRepository against SIGCM2_Test. /// Each test resets to a clean state using a transaction rollback pattern. /// [Collection("SqlIntegration")] public class RefreshTokenRepositoryTests : IAsyncLifetime { private const string ConnectionString = "Server=TECNICA3;Database=SIGCM2_Test;User Id=desarrollo;Password=desarrollo2026;TrustServerCertificate=True;"; private SqlConnection _connection = null!; private SqlTransaction _transaction = null!; private RefreshTokenRepository _repository = null!; public async Task InitializeAsync() { _connection = new SqlConnection(ConnectionString); await _connection.OpenAsync(); _transaction = (SqlTransaction)await _connection.BeginTransactionAsync(); // Seed a test user for FK requirements await _connection.ExecuteAsync(""" IF NOT EXISTS (SELECT 1 FROM dbo.Usuario WHERE Username = 'test_rt_user') INSERT INTO dbo.Usuario (Username, PasswordHash, Nombre, Apellido, Rol, PermisosJson, Activo) VALUES ('test_rt_user', '$2a$12$testhash', 'Test', 'User', 'admin', '["*"]', 1); """, transaction: _transaction); var factory = new SqlConnectionFactory(ConnectionString); _repository = new RefreshTokenRepository(factory); } public async Task DisposeAsync() { // Rollback transaction to clean up all test data await _transaction.RollbackAsync(); await _connection.DisposeAsync(); } private static int GetTestUserId(SqlConnection conn, SqlTransaction tx) { return conn.QuerySingle( "SELECT Id FROM dbo.Usuario WHERE Username = 'test_rt_user'", transaction: tx); } private static RefreshToken BuildToken(int usuarioId, string hash = "test_hash_abc123xyz", bool expired = false) { var now = DateTime.UtcNow; var ttl = expired ? TimeSpan.FromSeconds(1) : TimeSpan.FromDays(7); return RefreshToken.IssueForNewFamily(usuarioId, hash, now.AddHours(-1), ttl, "10.0.0.1", "TestAgent"); } [Fact] public async Task AddAsync_PersistsAndReturnsId() { var userId = GetTestUserId(_connection, _transaction); var token = BuildToken(userId, "unique_hash_persist_" + Guid.NewGuid().ToString("N")[..8]); var id = await _repository.AddAsync(token); Assert.True(id > 0); } [Fact] public async Task AddAsync_DuplicateHash_Throws() { var userId = GetTestUserId(_connection, _transaction); var hash = "duplicate_hash_" + Guid.NewGuid().ToString("N")[..8]; var token1 = BuildToken(userId, hash); var token2 = BuildToken(userId, hash); await _repository.AddAsync(token1); // Duplicate hash must violate UQ_RefreshToken_TokenHash await Assert.ThrowsAnyAsync(() => _repository.AddAsync(token2)); } [Fact] public async Task GetByHashAsync_RoundTripsAllFields() { var userId = GetTestUserId(_connection, _transaction); var hash = "roundtrip_hash_" + Guid.NewGuid().ToString("N")[..8]; var token = BuildToken(userId, hash); await _repository.AddAsync(token); var retrieved = await _repository.GetByHashAsync(hash); Assert.NotNull(retrieved); Assert.Equal(userId, retrieved.UsuarioId); Assert.Equal(hash, retrieved.TokenHash); Assert.Equal(token.FamilyId, retrieved.FamilyId); Assert.Null(retrieved.RevokedAt); Assert.Null(retrieved.ReplacedById); } [Fact] public async Task GetByHashAsync_NonExistentHash_ReturnsNull() { var result = await _repository.GetByHashAsync("does_not_exist_hash_abc"); Assert.Null(result); } [Fact] public async Task RevokeAsync_SetsRevokedAtAndReplacedById() { var userId = GetTestUserId(_connection, _transaction); var hash = "revoke_test_" + Guid.NewGuid().ToString("N")[..8]; var token = BuildToken(userId, hash); var id = await _repository.AddAsync(token); var revokedAt = DateTime.UtcNow; await _repository.RevokeAsync(id, replacedById: null, revokedAt: revokedAt); var retrieved = await _repository.GetByHashAsync(hash); Assert.NotNull(retrieved?.RevokedAt); Assert.Null(retrieved.ReplacedById); } [Fact] public async Task RevokeFamilyAsync_OnlyAffectsMatchingFamily() { var userId = GetTestUserId(_connection, _transaction); var hash1 = "family_a_" + Guid.NewGuid().ToString("N")[..8]; var hash2 = "family_b_" + Guid.NewGuid().ToString("N")[..8]; var tokenA = BuildToken(userId, hash1); var tokenB = BuildToken(userId, hash2); await _repository.AddAsync(tokenA); await _repository.AddAsync(tokenB); // Revoke only family A var count = await _repository.RevokeFamilyAsync(tokenA.FamilyId, DateTime.UtcNow); Assert.Equal(1, count); var retrievedA = await _repository.GetByHashAsync(hash1); var retrievedB = await _repository.GetByHashAsync(hash2); Assert.NotNull(retrievedA?.RevokedAt); // A is revoked Assert.Null(retrievedB?.RevokedAt); // B is untouched } [Fact] public async Task RevokeAllActiveForUserAsync_DoesNotTouchAlreadyRevoked() { var userId = GetTestUserId(_connection, _transaction); var hash1 = "user_active_" + Guid.NewGuid().ToString("N")[..8]; var hash2 = "user_revoked_" + Guid.NewGuid().ToString("N")[..8]; var tokenActive = BuildToken(userId, hash1); var tokenAlreadyRevoked = BuildToken(userId, hash2); var idActive = await _repository.AddAsync(tokenActive); var idRevoked = await _repository.AddAsync(tokenAlreadyRevoked); await _repository.RevokeAsync(idRevoked, null, DateTime.UtcNow.AddMinutes(-5)); var count = await _repository.RevokeAllActiveForUserAsync(userId, DateTime.UtcNow); Assert.Equal(1, count); // only the active one was revoked var retrievedActive = await _repository.GetByHashAsync(hash1); Assert.NotNull(retrievedActive?.RevokedAt); } } [CollectionDefinition("SqlIntegration")] public class SqlIntegrationCollection : ICollectionFixture { }