v2: /v2/test/api — CRUD эндпоинт + внешние тесты curl

v2/src/test/index.js

@@ -0,0 +1,86 @@
+// ═══════════════════════════════════════════════════════════════════════════════
+// V2 — тестовый эндпоинт для CRUD
+// Принимает ?action=...&user=... → JSON-ответ
+// ═══════════════════════════════════════════════════════════════════════════════
+
+const express = require('express');
+const q = require('../db/queries');
+const { pool } = require('../db');
+
+// Мок-юзеры
+const USERS = {
+  u1: { email:'u1@t.ru', clientId:'WZ10001', activeClientId:'WZ10001', allClientIds:['WZ10001'], companyName:'Одна', isAdmin:false, profiles:[{client_id:'WZ10001',company_name:'Одна'}] },
+  u2: { email:'u2@t.ru', clientId:'WZ20001', activeClientId:'WZ20002', allClientIds:['WZ20001','WZ20002'], companyName:'Вторая', isAdmin:false, profiles:[{client_id:'WZ20001',company_name:'Первая'},{client_id:'WZ20002',company_name:'Вторая'}] },
+  imp:{ email:'admin@t.ru', clientId:'WZ01112', activeClientId:'WZ01112', allClientIds:['WZ01112','WZ03709'], companyName:'Nubes', isAdmin:true, isImpersonated:true, originalUserEmail:'real@t.ru', impersonatedCompanyId:'WZ03709', profiles:[] },
+};
+
+function createTestRouter() {
+  const router = express.Router();
+
+  router.get('/', async (req, res) => {
+    try {
+      const action = req.query.action;
+      const user   = USERS[req.query.user || 'u1'];
+      if (!user) return res.json({ ok: false, error: 'unknown user' });
+
+      const email       = user.isImpersonated ? user.originalUserEmail : user.email;
+      const clientId    = user.isImpersonated ? user.impersonatedCompanyId : user.activeClientId;
+      const company     = await q.getOrCreateCompany(clientId, user.companyName || clientId);
+      const impBy       = user.isImpersonated ? user.email : null;
+
+      switch (action) {
+        // ── LIST ──
+        case 'list':
+          const entries = await q.listEntries(company.id, req.query.deleted === '1');
+          return res.json({ ok: true, entries, count: entries.length, company: { id: company.id, client_id: company.client_id } });
+
+        // ── ADD ──
+        case 'add': {
+          const r = await q.createEntry(company.id, req.query.cidr || '', req.query.comment || '', email, impBy);
+          return res.json({ ok: true, entry: r.entry, wasNormalized: r.wasNormalized });
+        }
+
+        // ── EDIT ──
+        case 'edit': {
+          const r = await q.updateEntry(parseInt(req.query.id), company.id, req.query.cidr || '', req.query.comment || '', email, impBy);
+          return res.json({ ok: true, entry: r.entry, wasNormalized: r.wasNormalized });
+        }
+
+        // ── DELETE ──
+        case 'delete':
+          await q.deleteEntry(parseInt(req.query.id), company.id, email, impBy);
+          return res.json({ ok: true });
+
+        // ── AUDIT ──
+        case 'audit': {
+          const audit = await q.getAudit(company.id);
+          return res.json({ ok: true, audit, count: audit.length });
+        }
+
+        // ── LIMIT ──
+        case 'limit':
+          return res.json({ ok: true, limit: await q.getLimit(company) });
+
+        // ── CLEANUP ──
+        case 'cleanup': {
+          const cids = (req.query.cids || '').split(',');
+          for (const c of cids) {
+            await pool.query('DELETE FROM v2_entries WHERE company_id IN (SELECT id FROM v2_companies WHERE client_id=$1)',[c]).catch(()=>{});
+            await pool.query('DELETE FROM v2_audit WHERE company_id IN (SELECT id FROM v2_companies WHERE client_id=$1)',[c]).catch(()=>{});
+            await pool.query('DELETE FROM v2_companies WHERE client_id=$1',[c]).catch(()=>{});
+          }
+          return res.json({ ok: true });
+        }
+
+        default:
+          return res.json({ ok: false, error: 'unknown action: ' + action });
+      }
+    } catch (e) {
+      return res.json({ ok: false, error: e.message });
+    }
+  });
+
+  return router;
+}
+
+module.exports = { createTestRouter };