discourse/spec/services/user/silence_spec.rb
Loïc Guitaut 41584ab40c DEV: Provide user input to services using params key
Currently in services, we don’t make a distinction between input
parameters, options and dependencies.

This can lead to user input modifying the service behavior, whereas it
was not the developer intention.

This patch addresses the issue by changing how data is provided to
services:
- `params` is now used to hold all data coming from outside (typically
  user input from a controller) and a contract will take its values from
  `params`.
- `options` is a new key to provide options to a service. This typically
  allows changing a service behavior at runtime. It is, of course,
  totally optional.
- `dependencies` is actually anything else provided to the service (like
  `guardian`) and available directly from the context object.

The `service_params` helper in controllers has been updated to reflect
those changes, so most of the existing services didn’t need specific
changes.

The options block has the same DSL as contracts, as it’s also based on
`ActiveModel`. There aren’t any validations, though. Here’s an example:
```ruby
options do
  attribute :allow_changing_hidden, :boolean, default: false
end
```
And here’s an example of how to call a service with the new keys:
```ruby
MyService.call(params: { key1: value1, … }, options: { my_option: true }, guardian:, …)
```
2024-10-25 09:57:59 +02:00

88 lines
2.5 KiB
Ruby

# frozen_string_literal: true
RSpec.describe User::Silence do
describe described_class::Contract, type: :model do
it { is_expected.to validate_presence_of(:user_id) }
it { is_expected.to validate_presence_of(:reason) }
it { is_expected.to validate_presence_of(:silenced_till) }
it { is_expected.to validate_length_of(:reason).is_at_most(300) }
it do
is_expected.to validate_length_of(:other_user_ids).as_array.is_at_most(
User::MAX_SIMILAR_USERS,
)
end
it do
is_expected.to validate_inclusion_of(:post_action).in_array(
%w[delete delete_replies edit],
).allow_blank
end
end
describe ".call" do
subject(:result) { described_class.call(params:, **dependencies) }
fab!(:admin)
fab!(:user)
fab!(:other_user) { Fabricate(:user) }
let(:params) { { user_id:, reason:, silenced_till:, other_user_ids:, message: } }
let(:dependencies) { { guardian: } }
let(:guardian) { admin.guardian }
let(:user_id) { user.id }
let(:other_user_ids) { other_user.id }
let(:reason) { "spam" }
let(:message) { "it was spam" }
let(:silenced_till) { 3.hours.from_now.to_s }
context "when invalid data is provided" do
let(:user_id) { nil }
it { is_expected.to fail_a_contract }
end
context "when provided user does not exist" do
let(:user_id) { 0 }
it { is_expected.to fail_to_find_a_model(:user) }
end
context "when user is already silenced" do
before { UserSilencer.silence(user, admin) }
it { is_expected.to fail_a_policy(:not_silenced_already) }
end
context "when all users cannot be silenced" do
let(:other_user_ids) { [other_user.id, Fabricate(:admin).id].join(",") }
it { is_expected.to fail_a_policy(:can_silence_all_users) }
end
context "when everything's ok" do
before { allow(User::Action::TriggerPostAction).to receive(:call) }
it "silences all provided users" do
result
expect([user, other_user].map(&:reload)).to all be_silenced
end
it "enqueues jobs to send an email" do
expect { result }.to change { Jobs::CriticalUserEmail.jobs.size }.by(2)
end
it "exposes the full reason in the result object" do
expect(result[:full_reason]).to eq("spam\n\nit was spam")
end
it "triggers a post action" do
result
expect(User::Action::TriggerPostAction).to have_received(:call).with(
guardian:,
post: nil,
contract: result[:contract],
)
end
end
end
end