Fixed extensions bugs

2026-02-24 16:06:36 +01:00
parent 0764bc11a6
commit e0b66fe397
26 changed files with 3394 additions and 167 deletions
@@ -0,0 +1,220 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { createQueuedMockSupabase, createMockRequest, parseJsonResponse } from '@/tests/helpers'
+
+// Mock Supabase
+vi.mock('@/lib/supabase/server', () => ({
+  createClient: vi.fn(),
+}))
+
+// Mock VIES client
+const mockValidateVatNumber = vi.fn()
+vi.mock('@/lib/vat/vies-client', () => ({
+  validateVatNumber: (...args: unknown[]) => mockValidateVatNumber(...args),
+}))
+
+import { createClient } from '@/lib/supabase/server'
+import { POST } from '../route'
+
+const mockCreateClient = vi.mocked(createClient)
+
+describe('POST /api/vat/validate', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('returns 401 when not authenticated', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: null },
+      error: { message: 'Not authenticated' },
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: { vat_number: 'DE123456789' },
+    })
+
+    const res = await POST(req)
+    const { status, body } = await parseJsonResponse(res)
+
+    expect(status).toBe(401)
+    expect(body).toEqual({ error: 'Unauthorized' })
+  })
+
+  it('returns 400 when vat_number is missing', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: { id: 'user-1' } },
+      error: null,
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: {},
+    })
+
+    const res = await POST(req)
+    const { status } = await parseJsonResponse(res)
+
+    expect(status).toBe(400)
+  })
+
+  it('returns 400 when vat_number is too short', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: { id: 'user-1' } },
+      error: null,
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: { vat_number: 'DE' },
+    })
+
+    const res = await POST(req)
+    const { status } = await parseJsonResponse(res)
+
+    expect(status).toBe(400)
+  })
+
+  it('returns valid result from VIES', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: { id: 'user-1' } },
+      error: null,
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+    mockValidateVatNumber.mockResolvedValueOnce({
+      valid: true,
+      name: 'Test GmbH',
+      address: 'Berlin',
+      country_code: 'DE',
+      vat_number: 'DE123456789',
+    })
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: { vat_number: 'DE123456789' },
+    })
+
+    const res = await POST(req)
+    const { status, body } = await parseJsonResponse(res)
+
+    expect(status).toBe(200)
+    expect(body).toEqual({
+      valid: true,
+      name: 'Test GmbH',
+      address: 'Berlin',
+      country_code: 'DE',
+      vat_number: 'DE123456789',
+    })
+  })
+
+  it('returns invalid result from VIES', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: { id: 'user-1' } },
+      error: null,
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+    mockValidateVatNumber.mockResolvedValueOnce({
+      valid: false,
+      country_code: 'DE',
+      vat_number: 'DE000000000',
+    })
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: { vat_number: 'DE000000000' },
+    })
+
+    const res = await POST(req)
+    const { status, body } = await parseJsonResponse(res)
+
+    expect(status).toBe(200)
+    expect(body).toMatchObject({ valid: false })
+  })
+
+  it('updates customer when customer_id provided and valid', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: { id: 'user-1' } },
+      error: null,
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+    mockValidateVatNumber.mockResolvedValueOnce({
+      valid: true,
+      name: 'Test GmbH',
+      country_code: 'DE',
+      vat_number: 'DE123456789',
+    })
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: {
+        vat_number: 'DE123456789',
+        customer_id: '550e8400-e29b-41d4-a716-446655440000',
+      },
+    })
+
+    const res = await POST(req)
+    const { status, body } = await parseJsonResponse(res)
+
+    expect(status).toBe(200)
+    expect(body).toMatchObject({ valid: true })
+  })
+
+  it('does not update customer when validation fails', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: { id: 'user-1' } },
+      error: null,
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+    mockValidateVatNumber.mockResolvedValueOnce({
+      valid: false,
+      error: 'Invalid VAT number format',
+    })
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: {
+        vat_number: 'DE12345',
+        customer_id: '550e8400-e29b-41d4-a716-446655440000',
+      },
+    })
+
+    const res = await POST(req)
+    const { status, body } = await parseJsonResponse(res)
+
+    expect(status).toBe(200)
+    expect(body).toMatchObject({ valid: false })
+  })
+
+  it('handles VIES service error gracefully', async () => {
+    const { supabase } = createQueuedMockSupabase()
+    supabase.auth.getUser.mockResolvedValue({
+      data: { user: { id: 'user-1' } },
+      error: null,
+    })
+    mockCreateClient.mockResolvedValue(supabase as never)
+    mockValidateVatNumber.mockResolvedValueOnce({
+      valid: false,
+      error: 'Could not verify VAT number. Service temporarily unavailable.',
+    })
+
+    const req = createMockRequest('/api/vat/validate', {
+      method: 'POST',
+      body: { vat_number: 'DE123456789' },
+    })
+
+    const res = await POST(req)
+    const { status, body } = await parseJsonResponse(res)
+
+    expect(status).toBe(200)
+    expect(body).toMatchObject({ valid: false, error: expect.stringContaining('unavailable') })
+  })
+})