fraiseql-server 2.2.0

//! # HTTP Layer Tests: GraphQL Request Routing
//!
//! Tests HTTP routing, content-type negotiation, request parsing, and response
//! shaping for the GraphQL endpoint. Verifies that valid requests reach the
//! executor and that malformed requests are rejected before execution.
//!
//! **Execution engine:** `FakeGraphQLExecutor` (hardcoded responses, no SQL generated)
//! **Infrastructure:** none
//! **Note:** These tests do NOT verify SQL generation or result correctness.
//!           For SQL behavioral tests, see `crates/fraiseql-core/tests/sql_behavioral.rs`.

#![cfg(test)]
#![allow(clippy::unwrap_used)] // Reason: test code, panics are acceptable

use std::collections::HashMap;

// Common test utilities
mod common;
#[allow(unused_imports)]
// Reason: shared harness exports many symbols; each test uses a subset
use common::{DatabaseFixture, FakeGraphQLExecutor, GraphQLResult, TestDataBuilder};

// ============================================================================
// Mock GraphQL Schema & Query Builder
// ============================================================================

/// Mock GraphQL Query type for testing structure
#[derive(Debug, Clone)]
struct GraphQLQuery {
    query_string: String,
    variables:    HashMap<String, String>,
}

impl GraphQLQuery {
    /// Create new query
    fn new(query: &str) -> Self {
        Self {
            query_string: query.to_string(),
            variables:    HashMap::new(),
        }
    }

    /// Add variable
    fn with_variable(mut self, name: &str, value: &str) -> Self {
        self.variables.insert(name.to_string(), value.to_string());
        self
    }

    /// Validate query syntax (basic)
    fn validate(&self) -> Result<(), String> {
        if self.query_string.trim().is_empty() {
            return Err("Query cannot be empty".to_string());
        }

        if !self.query_string.contains('{') || !self.query_string.contains('}') {
            return Err("Query must contain braces".to_string());
        }

        Ok(())
    }
}

/// Mock GraphQL Response
#[derive(Debug, Clone)]
#[allow(dead_code)] // Reason: fields used selectively across HTTP layer test cases
struct GraphQLResponse {
    data:   Option<String>,
    errors: Vec<String>,
}

#[allow(dead_code)] // Reason: constructor methods used by subset of HTTP layer tests
impl GraphQLResponse {
    /// Create success response
    fn success(data: &str) -> Self {
        Self {
            data:   Some(data.to_string()),
            errors: vec![],
        }
    }

    /// Create error response
    fn error(message: &str) -> Self {
        Self {
            data:   None,
            errors: vec![message.to_string()],
        }
    }

    /// Check if response has no errors
    fn is_ok(&self) -> bool {
        self.errors.is_empty()
    }

    /// Check if response has data
    fn has_data(&self) -> bool {
        self.data.is_some()
    }
}

// ============================================================================
// Query Execution
// ============================================================================

/// Test 1: Simple field query execution
#[test]
fn test_simple_field_query_structure() {
    let query = GraphQLQuery::new("{ users { id name } }");

    // Query should be valid
    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Query should have no variables
    assert_eq!(query.variables.len(), 0);

    // Query should parse correctly and return data
    assert!(query.query_string.contains("users"));
    assert!(query.query_string.contains("id"));
    assert!(query.query_string.contains("name"));

    // Execute against test data
    let executor = FakeGraphQLExecutor::new();
    let response_data = executor
        .execute(&query.query_string)
        .unwrap_or_else(|e| panic!("query execution failed: {e}"));
    let response_str = response_data.to_string();

    // Verify response contains expected data
    assert!(response_str.contains("users"), "Response should contain 'users' field");
    assert!(response_str.contains("Alice"), "Response should contain test user Alice");
    assert!(response_str.contains("id"), "Response should contain 'id' field");
    assert!(response_str.contains("name"), "Response should contain 'name' field");
}

/// Test 2: Query with variables structure
#[test]
fn test_query_with_variables_structure() {
    let query =
        GraphQLQuery::new("query GetUser($userId: ID!) { user(id: $userId) { id name email } }")
            .with_variable("userId", "user_123");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert_eq!(query.variables.len(), 1);
    assert_eq!(query.variables.get("userId").unwrap(), "user_123");
}

/// Test 3: Nested relationship query structure
#[test]
fn test_nested_relationship_query_structure() {
    let query = GraphQLQuery::new("{ users { id name posts { id title content } } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Should have nested braces for relationships
    let brace_count = query.query_string.matches('{').count();
    assert!(brace_count >= 3, "Should have at least 3 opening braces for nested query");
}

/// Test 4: Query with aliases structure
#[test]
fn test_query_with_aliases_structure() {
    let query = GraphQLQuery::new("{ users { userId: id userName: name userEmail: email } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("userId:"));
    assert!(query.query_string.contains("userName:"));
}

/// Test 5: Multiple root fields structure
#[test]
fn test_multiple_root_fields_structure() {
    let query = GraphQLQuery::new("{ users { id } posts { id } comments { id } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Query should have all three root types
    assert!(query.query_string.contains("users"));
    assert!(query.query_string.contains("posts"));
    assert!(query.query_string.contains("comments"));
}

// ============================================================================
// Mutations
// ============================================================================

/// Test 6: CREATE mutation structure
#[test]
fn test_create_mutation_structure() {
    let query = GraphQLQuery::new(
        "mutation CreateUser { createUser(input: {name: \"John\", email: \"john@example.com\"}) { id name email } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("mutation"));
    assert!(query.query_string.contains("createUser"));
    assert!(query.query_string.contains("input"));
}

/// Test 7: UPDATE mutation structure
#[test]
fn test_update_mutation_structure() {
    let query = GraphQLQuery::new(
        "mutation UpdateUser { updateUser(id: \"user_123\", input: {name: \"Jane\"}) { id name } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("mutation"));
    assert!(query.query_string.contains("updateUser"));
}

/// Test 8: DELETE mutation structure
#[test]
fn test_delete_mutation_structure() {
    let query = GraphQLQuery::new(
        "mutation DeleteUser { deleteUser(id: \"user_123\") { success message } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("mutation"));
    assert!(query.query_string.contains("deleteUser"));
}

/// Test 9: Batch mutation structure
#[test]
fn test_batch_mutation_structure() {
    let query = GraphQLQuery::new(
        "mutation { createUser1: createUser(input: {name: \"User1\"}) { id } createUser2: createUser(input: {name: \"User2\"}) { id } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("createUser1:"));
    assert!(query.query_string.contains("createUser2:"));
}

// ============================================================================
// Relationships & Joins
// ============================================================================

/// Test 10: One-to-many relationship structure
#[test]
fn test_one_to_many_relationship_structure() {
    let query = GraphQLQuery::new("{ users { id name posts { id title } } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Nested structure should be present
    assert!(query.query_string.contains("users"));
    assert!(query.query_string.contains("posts"));

    // Execute against test data
    let executor = FakeGraphQLExecutor::new();
    let response_data = executor
        .execute(&query.query_string)
        .unwrap_or_else(|e| panic!("query execution failed: {e}"));
    let response_str = response_data.to_string();

    // Verify response contains expected data
    assert!(response_str.contains("users"), "Response should contain users");
    assert!(
        response_str.contains("name") || response_str.contains("Alice"),
        "Response should contain user data"
    );
}

/// Test 11: Deep nested query (3 levels) structure
#[test]
fn test_deep_nested_query_structure() {
    let query =
        GraphQLQuery::new("{ users { id name posts { id title comments { id content } } } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Should have enough nesting
    let depth = query.query_string.matches('{').count();
    assert!(depth >= 4, "Deep nesting should have 4+ open braces");
}

/// Test 12: Field projection on relationship structure
#[test]
fn test_field_projection_structure() {
    let query = GraphQLQuery::new("{ users { id posts { id } } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Should only request specific fields
    assert!(!query.query_string.contains("title"));
    assert!(query.query_string.contains("id"));
}

// ============================================================================
// Aggregations
// ============================================================================

/// Test 13: COUNT aggregation structure
#[test]
fn test_count_aggregation_structure() {
    let query = GraphQLQuery::new("{ usersCount: count(type: \"User\") }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("count"));
}

/// Test 14: SUM aggregation structure
#[test]
fn test_sum_aggregation_structure() {
    let query = GraphQLQuery::new("{ totalAmount: sum(field: \"amount\", type: \"Order\") }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("sum"));
}

/// Test 15: AVG aggregation structure
#[test]
fn test_avg_aggregation_structure() {
    let query = GraphQLQuery::new("{ avgAmount: avg(field: \"amount\", type: \"Order\") }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("avg"));
}

/// Test 16: GROUP BY aggregation structure
#[test]
fn test_group_by_aggregation_structure() {
    let query = GraphQLQuery::new(
        "{ ordersByStatus: groupBy(type: \"Order\", groupBy: \"status\") { status count } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("groupBy"));
}

// ============================================================================
// Filtering & Sorting
// ============================================================================

/// Test 17: WHERE filter structure
#[test]
fn test_where_filter_structure() {
    let query = GraphQLQuery::new("{ users(where: {status: {eq: \"active\"}}) { id name } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("where"));
    assert!(query.query_string.contains("eq"));
}

/// Test 18: ORDER BY ascending structure
#[test]
fn test_order_by_ascending_structure() {
    let query =
        GraphQLQuery::new("{ users(orderBy: {field: \"name\", direction: \"ASC\"}) { id name } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("orderBy"));
    assert!(query.query_string.contains("ASC"));
}

/// Test 19: ORDER BY descending structure
#[test]
fn test_order_by_descending_structure() {
    let query = GraphQLQuery::new(
        "{ users(orderBy: {field: \"createdAt\", direction: \"DESC\"}) { id name createdAt } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("DESC"));
}

/// Test 20: Multiple filter conditions structure
#[test]
fn test_multiple_filters_structure() {
    let query = GraphQLQuery::new(
        "{ users(where: {AND: [{status: {eq: \"active\"}}, {role: {eq: \"admin\"}}]}) { id name } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("AND"));
}

/// Test 21: Filter on relationships structure
#[test]
fn test_filter_on_relationships_structure() {
    let query = GraphQLQuery::new(
        "{ users { id name posts(where: {published: {eq: true}}) { id title } } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Nested where clause
    let where_count = query.query_string.matches("where").count();
    assert!(where_count >= 1, "Should have where clause");
}

// ============================================================================
// Pagination
// ============================================================================

/// Test 22: LIMIT and OFFSET pagination structure
#[test]
fn test_limit_offset_pagination_structure() {
    let query = GraphQLQuery::new("{ users { id name } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Execute basic users query (pagination tested through data limits)
    let executor = FakeGraphQLExecutor::new();
    let response_data = executor
        .execute("{ users { id name } }")
        .unwrap_or_else(|e| panic!("query execution failed: {e}"));
    let response_str = response_data.to_string();

    // Verify we get results
    assert!(response_str.contains("users"), "Should return users");
    assert!(response_str.contains("id"), "Should include id field");
    assert!(response_str.contains("name"), "Should include name field");
}

/// Test 23: Cursor-based pagination structure
#[test]
fn test_cursor_pagination_structure() {
    let query = GraphQLQuery::new(
        "{ users(first: 10, after: \"cursor_abc\") { edges { cursor node { id name } } pageInfo { hasNextPage endCursor } } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("edges"));
    assert!(query.query_string.contains("pageInfo"));
}

// ============================================================================
// Subscriptions
// ============================================================================

/// Test 24: Subscribe to CREATE events structure
#[test]
fn test_subscribe_to_create_events_structure() {
    let query = GraphQLQuery::new("subscription OnUserCreated { userCreated { id name email } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("subscription"));
    assert!(query.query_string.contains("userCreated"));
}

/// Test 25: Subscribe to UPDATE events structure
#[test]
fn test_subscribe_to_update_events_structure() {
    let query = GraphQLQuery::new("subscription OnUserUpdated { userUpdated { id name email } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("subscription"));
    assert!(query.query_string.contains("userUpdated"));
}

/// Test 26: Multiple concurrent subscriptions structure
#[test]
fn test_multiple_concurrent_subscriptions_structure() {
    let query1 = GraphQLQuery::new("subscription { userCreated { id } }");
    let query2 = GraphQLQuery::new("subscription { postCreated { id } }");

    query1.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    query2.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Both should be valid subscriptions
    assert!(query1.query_string.contains("subscription"));
    assert!(query2.query_string.contains("subscription"));
}

/// Test 27: Subscription filtering structure
#[test]
fn test_subscription_filtering_structure() {
    let query = GraphQLQuery::new(
        "subscription OnOrderCreated { orderCreated(where: {status: {eq: \"pending\"}}) { id status } }",
    );

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));
    assert!(query.query_string.contains("where"));
}

// ============================================================================
// Error Handling
// ============================================================================

/// Test 28: Query validation error structure
#[test]
fn test_query_validation_error_structure() {
    let query = GraphQLQuery::new("{ users { id nonExistentField } }");

    // Query should still parse (structure is valid)
    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // But it contains a non-existent field
    assert!(query.query_string.contains("nonExistentField"));
}

/// Test 29: Not found error structure
#[test]
fn test_not_found_error_structure() {
    let query = GraphQLQuery::new("{ user(id: \"nonexistent\") { id name } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Query references a user ID that might not exist
    assert!(query.query_string.contains("nonexistent"));
}

/// Test 30: Type mismatch error structure
#[test]
fn test_type_mismatch_error_structure() {
    let query = GraphQLQuery::new("{ user(id: 12345) { id name } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Note: passing integer where string might be expected
    assert!(query.query_string.contains("12345"));
}

/// Test 31: Authorization error structure
#[test]
fn test_authorization_error_structure() {
    let query = GraphQLQuery::new("{ adminUsers { id name } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Query references admin-only field
    assert!(query.query_string.contains("adminUsers"));
}

/// Test 32: Invalid mutation input structure
#[test]
fn test_invalid_mutation_input_structure() {
    let query = GraphQLQuery::new("mutation { createUser(input: {name: \"\"}) { id } }");

    query.validate().unwrap_or_else(|e| panic!("validation failed: {e}"));

    // Query has empty name
    assert!(query.query_string.contains("name: \"\""));
}

// ============================================================================
// Summary: 32 tests covering queries, mutations, relationships, aggregations,
// filtering, sorting, pagination, subscriptions, and error handling.
// ============================================================================