WP-02: contracts and failing tests for settings, mail, jobs and scheduler

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

backend/crates/api/tests/jobs.rs

@@ -0,0 +1,104 @@
+//! WP-02: /api/jobs (run history, manual run).
+mod common;
+
+use axum::http::StatusCode;
+use common::{get, post, test_app_with_admin};
+use serde_json::json;
+
+const ADMIN: &str = "admin@example.com";
+const PW: &str = "admin-password-123";
+
+#[tokio::test]
+async fn admin_runs_a_job_and_sees_it_in_the_list_with_log() {
+    let app = test_app_with_admin().await;
+    let token = common::login(&app, ADMIN, PW).await.access;
+
+    let res = post(
+        &app,
+        "/api/jobs/run",
+        json!({"kind": "package_refresh"}),
+        Some(&token),
+    )
+    .await;
+    assert_eq!(res.status, StatusCode::ACCEPTED, "{}", res.json);
+    let id = res.json["id"].as_str().unwrap().to_string();
+    assert_eq!(res.json["kind"], "package_refresh");
+    assert_eq!(res.json["triggered_by"], ADMIN);
+
+    // the test handler finishes quickly
+    let mut status = String::new();
+    for _ in 0..50 {
+        let run = get(&app, &format!("/api/jobs/{id}"), Some(&token)).await;
+        status = run.json["status"].as_str().unwrap().to_string();
+        if status != "running" {
+            assert!(run.json["log"]
+                .as_str()
+                .unwrap()
+                .contains("test handler ran"));
+            break;
+        }
+        tokio::time::sleep(std::time::Duration::from_millis(20)).await;
+    }
+    assert_eq!(status, "success");
+
+    let list = get(&app, "/api/jobs?limit=10", Some(&token)).await;
+    assert_eq!(list.json.as_array().unwrap().len(), 1);
+    let kinds = get(&app, "/api/jobs/kinds", Some(&token)).await;
+    assert!(kinds
+        .json
+        .as_array()
+        .unwrap()
+        .contains(&json!("package_refresh")));
+}
+
+#[tokio::test]
+async fn unknown_kind_is_404_and_run_is_admin_only() {
+    let app = test_app_with_admin().await;
+    let admin = common::login(&app, ADMIN, PW).await.access;
+    assert_eq!(
+        post(&app, "/api/jobs/run", json!({"kind": "nope"}), Some(&admin))
+            .await
+            .status,
+        StatusCode::UNPROCESSABLE_ENTITY
+    );
+    assert_eq!(
+        post(
+            &app,
+            "/api/jobs/run",
+            json!({"kind": "backup"}),
+            Some(&admin)
+        )
+        .await
+        .status,
+        StatusCode::NOT_FOUND
+    );
+    post(&app, "/api/users", json!({"email": "u@x.de", "display_name": "U", "password": "user-password-123", "role": "user"}), Some(&admin)).await;
+    let user = common::login(&app, "u@x.de", "user-password-123")
+        .await
+        .access;
+    assert_eq!(
+        post(
+            &app,
+            "/api/jobs/run",
+            json!({"kind": "package_refresh"}),
+            Some(&user)
+        )
+        .await
+        .status,
+        StatusCode::FORBIDDEN
+    );
+    assert_eq!(
+        get(&app, "/api/jobs", Some(&user)).await.status,
+        StatusCode::OK
+    );
+    assert_eq!(
+        get(
+            &app,
+            "/api/jobs/00000000-0000-0000-0000-000000000000",
+            Some(&user)
+        )
+        .await
+        .status,
+        StatusCode::NOT_FOUND
+    );
+}