coder/coderd/httpmw/chatparam_test.go

package httpmw_test

import (
	"context"
	"database/sql"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/go-chi/chi/v5"
	"github.com/google/uuid"
	"github.com/stretchr/testify/require"

	"github.com/coder/coder/v2/coderd/database"
	"github.com/coder/coder/v2/coderd/database/dbgen"
	"github.com/coder/coder/v2/coderd/database/dbtestutil"
	"github.com/coder/coder/v2/coderd/httpmw"
	"github.com/coder/coder/v2/codersdk"
)

func TestChatParam(t *testing.T) {
	t.Parallel()

	setupAuthentication := func(db database.Store) (*http.Request, database.User) {
		user := dbgen.User(t, db, database.User{})
		_, token := dbgen.APIKey(t, db, database.APIKey{
			UserID: user.ID,
		})

		r := httptest.NewRequest("GET", "/", nil)
		r.Header.Set(codersdk.SessionTokenHeader, token)

		ctx := chi.NewRouteContext()
		r = r.WithContext(context.WithValue(r.Context(), chi.RouteCtxKey, ctx))
		return r, user
	}

	insertChat := func(t *testing.T, db database.Store, ownerID uuid.UUID) database.Chat {
		t.Helper()

		_, err := db.InsertChatProvider(context.Background(), database.InsertChatProviderParams{
			Provider:    "openai",
			DisplayName: "OpenAI",
			APIKey:      "test-api-key",
			BaseUrl:     "https://api.openai.com/v1",
			ApiKeyKeyID: sql.NullString{},
			CreatedBy:   uuid.NullUUID{UUID: ownerID, Valid: true},
			Enabled:     true,
		})
		require.NoError(t, err)

		modelConfig, err := db.InsertChatModelConfig(context.Background(), database.InsertChatModelConfigParams{
			Provider:             "openai",
			Model:                "gpt-4o-mini",
			DisplayName:          "Test model",
			Enabled:              true,
			IsDefault:            true,
			ContextLimit:         128000,
			CompressionThreshold: 70,
			Options:              []byte("{}"),
		})
		require.NoError(t, err)

		chat, err := db.InsertChat(context.Background(), database.InsertChatParams{
			Status:            database.ChatStatusWaiting,
			OwnerID:           ownerID,
			WorkspaceID:       uuid.NullUUID{},
			ParentChatID:      uuid.NullUUID{},
			RootChatID:        uuid.NullUUID{},
			LastModelConfigID: modelConfig.ID,
			Title:             "Test chat",
		})
		require.NoError(t, err)

		return chat
	}

	t.Run("None", func(t *testing.T) {
		t.Parallel()
		db, _ := dbtestutil.NewDB(t)

		rtr := chi.NewRouter()
		rtr.Use(httpmw.ExtractChatParam(db))
		rtr.Get("/", nil)

		r, _ := setupAuthentication(db)
		rw := httptest.NewRecorder()
		rtr.ServeHTTP(rw, r)

		res := rw.Result()
		defer res.Body.Close()
		require.Equal(t, http.StatusBadRequest, res.StatusCode)
	})

	t.Run("NotFound", func(t *testing.T) {
		t.Parallel()
		db, _ := dbtestutil.NewDB(t)

		rtr := chi.NewRouter()
		rtr.Use(httpmw.ExtractChatParam(db))
		rtr.Get("/", nil)

		r, _ := setupAuthentication(db)
		chi.RouteContext(r.Context()).URLParams.Add("chat", uuid.NewString())
		rw := httptest.NewRecorder()
		rtr.ServeHTTP(rw, r)

		res := rw.Result()
		defer res.Body.Close()
		require.Equal(t, http.StatusNotFound, res.StatusCode)
	})

	t.Run("BadUUID", func(t *testing.T) {
		t.Parallel()
		db, _ := dbtestutil.NewDB(t)

		rtr := chi.NewRouter()
		rtr.Use(httpmw.ExtractChatParam(db))
		rtr.Get("/", nil)

		r, _ := setupAuthentication(db)
		chi.RouteContext(r.Context()).URLParams.Add("chat", "not-a-uuid")
		rw := httptest.NewRecorder()
		rtr.ServeHTTP(rw, r)

		res := rw.Result()
		defer res.Body.Close()
		require.Equal(t, http.StatusBadRequest, res.StatusCode)
	})

	t.Run("Found", func(t *testing.T) {
		t.Parallel()
		db, _ := dbtestutil.NewDB(t)

		rtr := chi.NewRouter()
		rtr.Use(
			httpmw.ExtractAPIKeyMW(httpmw.ExtractAPIKeyConfig{
				DB:              db,
				RedirectToLogin: false,
			}),
			httpmw.ExtractChatParam(db),
		)
		rtr.Get("/", func(rw http.ResponseWriter, r *http.Request) {
			_ = httpmw.ChatParam(r)
			rw.WriteHeader(http.StatusOK)
		})

		r, user := setupAuthentication(db)
		chat := insertChat(t, db, user.ID)

		chi.RouteContext(r.Context()).URLParams.Add("chat", chat.ID.String())
		rw := httptest.NewRecorder()
		rtr.ServeHTTP(rw, r)

		res := rw.Result()
		defer res.Body.Close()
		require.Equal(t, http.StatusOK, res.StatusCode)
	})
}