petitspas/backend/src/routes/user/user.service.spec.ts

import { BadRequestException, ForbiddenException } from '@nestjs/common';
import { UserService } from './user.service';
import { RoleType, StatutUtilisateurType } from 'src/entities/users.entity';

describe('UserService.createAdmin (#161)', () => {
  const usersRepository = {
    findOneBy: jest.fn(),
    create: jest.fn(),
    save: jest.fn(),
  };

  let service: UserService;

  const dto = {
    email: 'nouveau.admin@ptits-pas.fr',
    password: 'Password1!',
    prenom: 'Nina',
    nom: 'Admin',
    telephone: '0601020304',
  };

  beforeEach(() => {
    jest.clearAllMocks();
    service = new UserService(
      usersRepository as never,
      {} as never,
      {} as never,
      {} as never,
      {} as never,
      {} as never,
    );
  });

  it('autorise un administrateur à créer un admin', async () => {
    usersRepository.findOneBy.mockResolvedValue(null);
    usersRepository.create.mockImplementation((data) => data);
    usersRepository.save.mockImplementation(async (entity) => ({
      id: 'new-admin',
      ...entity,
    }));

    const result = await service.createAdmin(dto as never, {
      id: 'admin-1',
      role: RoleType.ADMINISTRATEUR,
    } as never);

    expect(result.role).toBe(RoleType.ADMINISTRATEUR);
    expect(result.statut).toBe(StatutUtilisateurType.ACTIF);
    expect(usersRepository.save).toHaveBeenCalled();
  });

  it('autorise un super_admin à créer un admin', async () => {
    usersRepository.findOneBy.mockResolvedValue(null);
    usersRepository.create.mockImplementation((data) => data);
    usersRepository.save.mockImplementation(async (entity) => ({
      id: 'new-admin',
      ...entity,
    }));

    await expect(
      service.createAdmin(dto as never, {
        id: 'sa-1',
        role: RoleType.SUPER_ADMIN,
      } as never),
    ).resolves.toMatchObject({ role: RoleType.ADMINISTRATEUR });
  });

  it('refuse un gestionnaire (403 métier)', async () => {
    await expect(
      service.createAdmin(dto as never, {
        id: 'gest-1',
        role: RoleType.GESTIONNAIRE,
      } as never),
    ).rejects.toBeInstanceOf(ForbiddenException);
    expect(usersRepository.save).not.toHaveBeenCalled();
  });

  it('refuse un email déjà utilisé', async () => {
    usersRepository.findOneBy.mockResolvedValue({ id: 'exists' });
    await expect(
      service.createAdmin(dto as never, {
        id: 'admin-1',
        role: RoleType.ADMINISTRATEUR,
      } as never),
    ).rejects.toBeInstanceOf(BadRequestException);
  });
});