chore: stage all in-progress work before repo split

Web app: new entities (Image, RenderedAsset, SharedImage, Token, DeviceImageHistory), enums, repositories, controllers, message handlers, migrations, tests, frontend upload/library/sticker UI, Vue components. Firmware: EPD background screen binaries + gen scripts, setup_bg header. Infra: ddev config, test bundle, gitignore coverage dir. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-06 12:11:31 -04:00
parent 062c52eec7
commit 12245759ac
149 changed files with 14846 additions and 92 deletions
@@ -0,0 +1,118 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Tests\Functional\Controller;
+
+use App\Tests\Functional\AppWebTestCase;
+
+class UserApiControllerTest extends AppWebTestCase
+{
+    // US-01: search q < 2 chars → []
+    public function test_search_short_query_returns_empty(): void
+    {
+        $user   = $this->createUser('us01@example.com');
+        $client = $this->loginAs($user);
+
+        $client->request('GET', '/api/user/search?q=a');
+
+        $this->assertResponseIsSuccessful();
+        $data = json_decode($client->getResponse()->getContent(), true);
+        $this->assertSame([], $data);
+    }
+
+    // US-02: search valid q → results containing matching users
+    public function test_search_valid_query_returns_results(): void
+    {
+        $user    = $this->createUser('us02_me@example.com');
+        $other   = $this->createUser('us02_other@example.com');
+        $client  = $this->loginAs($user);
+
+        $client->request('GET', '/api/user/search?q=us02_other');
+
+        $this->assertResponseIsSuccessful();
+        $data = json_decode($client->getResponse()->getContent(), true);
+        $this->assertNotEmpty($data);
+        $emails = array_column($data, 'email');
+        $this->assertContains('us02_other@example.com', $emails);
+        // Own email should not appear
+        $this->assertNotContains('us02_me@example.com', $emails);
+    }
+
+    // US-03: updateTheme valid → 200, returns {theme}
+    public function test_update_theme_valid_returns_200(): void
+    {
+        $user   = $this->createUser('us03@example.com');
+        $client = $this->loginAs($user);
+
+        $client->request('PATCH', '/api/user/theme', [], [], [
+            'CONTENT_TYPE' => 'application/json',
+        ], json_encode(['theme' => 'warm-craft']));
+
+        $this->assertResponseIsSuccessful();
+        $data = json_decode($client->getResponse()->getContent(), true);
+        $this->assertSame('warm-craft', $data['theme']);
+    }
+
+    // US-04: updateTheme invalid → 422
+    public function test_update_theme_invalid_returns_422(): void
+    {
+        $user   = $this->createUser('us04@example.com');
+        $client = $this->loginAs($user);
+
+        $client->request('PATCH', '/api/user/theme', [], [], [
+            'CONTENT_TYPE' => 'application/json',
+        ], json_encode(['theme' => 'not-a-valid-theme']));
+
+        $this->assertResponseStatusCodeSame(422);
+    }
+
+    // US-05: updateTimezone valid → 200, returns {timezone}
+    public function test_update_timezone_valid_returns_200(): void
+    {
+        $user   = $this->createUser('us05@example.com');
+        $client = $this->loginAs($user);
+
+        $client->request('PATCH', '/api/user/timezone', [], [], [
+            'CONTENT_TYPE' => 'application/json',
+        ], json_encode(['timezone' => 'America/New_York']));
+
+        $this->assertResponseIsSuccessful();
+        $data = json_decode($client->getResponse()->getContent(), true);
+        $this->assertSame('America/New_York', $data['timezone']);
+    }
+
+    // US-06: updateTimezone missing/null body → 422
+    public function test_update_timezone_missing_returns_422(): void
+    {
+        $user   = $this->createUser('us06@example.com');
+        $client = $this->loginAs($user);
+
+        $client->request('PATCH', '/api/user/timezone', [], [], [
+            'CONTENT_TYPE' => 'application/json',
+        ], json_encode(['other' => 'value']));
+
+        $this->assertResponseStatusCodeSame(422);
+    }
+
+    // US-07: updateTimezone invalid string → 422
+    public function test_update_timezone_invalid_string_returns_422(): void
+    {
+        $user   = $this->createUser('us07@example.com');
+        $client = $this->loginAs($user);
+
+        $client->request('PATCH', '/api/user/timezone', [], [], [
+            'CONTENT_TYPE' => 'application/json',
+        ], json_encode(['timezone' => 'Not/A/Valid/Timezone']));
+
+        $this->assertResponseStatusCodeSame(422);
+    }
+
+    // US-08: unauthenticated → redirects to /login
+    public function test_unauthenticated_redirects_to_login(): void
+    {
+        $this->client->request('GET', '/api/user/search?q=test');
+
+        $this->assertResponseRedirects('/login');
+    }
+}