require 'rails_helper' RSpec.describe 'Teams API', type: :request do let(:account) { create(:account) } let!(:team) { create(:team, account: account) } describe 'GET /api/v1/accounts/{account.id}/teams' do context 'when it is an unauthenticated user' do it 'returns unauthorized' do get "/api/v1/accounts/#{account.id}/teams" expect(response).to have_http_status(:unauthorized) end end context 'when it is an authenticated user' do let(:agent) { create(:user, account: account, role: :agent) } it 'returns all the teams' do get "/api/v1/accounts/#{account.id}/teams", headers: agent.create_new_auth_token, as: :json expect(response).to have_http_status(:success) expect(JSON.parse(response.body).first['id']).to eq(account.teams.first.id) end end end describe 'GET /api/v1/accounts/{account.id}/teams/{team_id}' do context 'when it is an unauthenticated user' do it 'returns unauthorized' do get "/api/v1/accounts/#{account.id}/teams/#{team.id}" expect(response).to have_http_status(:unauthorized) end end context 'when it is an authenticated user' do let(:agent) { create(:user, account: account, role: :agent) } it 'returns all the teams' do get "/api/v1/accounts/#{account.id}/teams/#{team.id}", headers: agent.create_new_auth_token, as: :json expect(response).to have_http_status(:success) expect(JSON.parse(response.body)['id']).to eq(team.id) end end end describe 'POST /api/v1/accounts/{account.id}/teams' do context 'when it is an unauthenticated user' do it 'returns unauthorized' do post "/api/v1/accounts/#{account.id}/teams" expect(response).to have_http_status(:unauthorized) end end context 'when it is an authenticated user' do let(:agent) { create(:user, account: account, role: :agent) } let(:administrator) { create(:user, account: account, role: :administrator) } it 'returns unathorized for agent' do params = { name: 'Test Team' } post "/api/v1/accounts/#{account.id}/teams", params: params, headers: agent.create_new_auth_token, as: :json expect(response).to have_http_status(:unauthorized) end it 'creates a new team when its administrator' do params = { name: 'test-team' } post "/api/v1/accounts/#{account.id}/teams", params: params, headers: administrator.create_new_auth_token, as: :json expect(response).to have_http_status(:success) expect(Team.count).to eq(2) end end end describe 'PUT /api/v1/accounts/{account.id}/teams/:id' do context 'when it is an unauthenticated user' do it 'returns unauthorized' do put "/api/v1/accounts/#{account.id}/teams/#{team.id}" expect(response).to have_http_status(:unauthorized) end end context 'when it is an authenticated user' do let(:agent) { create(:user, account: account, role: :agent) } let(:administrator) { create(:user, account: account, role: :administrator) } it 'returns unauthorized for agent' do params = { name: 'new-team' } put "/api/v1/accounts/#{account.id}/teams/#{team.id}", params: params, headers: agent.create_new_auth_token, as: :json expect(response).to have_http_status(:unauthorized) end it 'updates an existing team when its an administrator' do params = { name: 'new-team' } put "/api/v1/accounts/#{account.id}/teams/#{team.id}", params: params, headers: administrator.create_new_auth_token, as: :json expect(response).to have_http_status(:success) expect(team.reload.name).to eq('new-team') end end end describe 'DELETE /api/v1/accounts/{account.id}/teams/:id' do context 'when it is an unauthenticated user' do it 'returns unauthorized' do delete "/api/v1/accounts/#{account.id}/teams/#{team.id}" expect(response).to have_http_status(:unauthorized) end end context 'when it is an authenticated user' do let(:agent) { create(:user, account: account, role: :agent) } let(:administrator) { create(:user, account: account, role: :administrator) } it 'return unauthorized for agent' do delete "/api/v1/accounts/#{account.id}/teams/#{team.id}", headers: agent.create_new_auth_token, as: :json expect(response).to have_http_status(:unauthorized) end it 'destroys the team when its administrator' do delete "/api/v1/accounts/#{account.id}/teams/#{team.id}", headers: administrator.create_new_auth_token, as: :json expect(response).to have_http_status(:success) expect(Team.count).to eq(0) end end end end