OneAuth/tests/search_users_test.go

package tests

import (
	"testing"
)

// PublicUserInfo 公开用户信息响应
type PublicUserInfo struct {
	ID       string `json:"id"`
	Username string `json:"username"`
	Nickname string `json:"nickname"`
	Avatar   string `json:"avatar"`
}

// SearchUsersResp 搜索用户响应
type SearchUsersResp struct {
	Items []PublicUserInfo `json:"items"`
	Total int64           `json:"total"`
}

func TestSearchUsers(t *testing.T) {
	// Ensure base users are created (Admin, User1, User2)
	ensureUsers(t)

	// Test 1: Search users without auth (should fail)
	t.Run("Search Users Without Auth", func(t *testing.T) {
		resp := doRequest(t, "GET", "/api/auth/users", nil, "")
		// Should return 401 unauthorized
		assertStatus(t, resp, 401)
	})

	// Test 2: Search users with auth
	t.Run("Search Users With Auth", func(t *testing.T) {
		resp := doRequest(t, "GET", "/api/auth/users", nil, User1Token)
		assertStatus(t, resp, 200)

		var data SearchUsersResp
		decodeResponse(t, resp, &data)
		t.Logf("Search users response: total=%d, items=%d", data.Total, len(data.Items))

		// Should return users
		if data.Total <= 0 {
			t.Errorf("Expected some users, got total=%d", data.Total)
		}
	})

	// Test 3: Search users with keyword
	t.Run("Search Users With Keyword", func(t *testing.T) {
		resp := doRequest(t, "GET", "/api/auth/users?keyword=user1", nil, User1Token)
		assertStatus(t, resp, 200)

		var data SearchUsersResp
		decodeResponse(t, resp, &data)
		t.Logf("Search users with keyword: total=%d, items=%d", data.Total, len(data.Items))
	})

	// Test 4: Verify public info is returned (only id, username, nickname, avatar)
	t.Run("Verify Public Info Only", func(t *testing.T) {
		resp := doRequest(t, "GET", "/api/auth/users?limit=1", nil, User1Token)
		assertStatus(t, resp, 200)

		var data SearchUsersResp
		decodeResponse(t, resp, &data)

		if len(data.Items) > 0 {
			user := data.Items[0]
			// Should have these fields
			if user.ID == "" {
				t.Error("Expected id to be present")
			}
			if user.Username == "" {
				t.Error("Expected username to be present")
			}
			// Nickname and avatar can be empty but field should exist
			t.Logf("User public info: id=%s, username=%s, nickname=%s, avatar=%s",
				user.ID, user.Username, user.Nickname, user.Avatar)
		}
	})

	// Test 5: Admin can search users too
	t.Run("Admin Can Search Users", func(t *testing.T) {
		resp := doRequest(t, "GET", "/api/auth/users", nil, AdminToken)
		assertStatus(t, resp, 200)

		var data SearchUsersResp
		decodeResponse(t, resp, &data)
		t.Logf("Admin search users: total=%d", data.Total)
	})
}