homeio

1import type { NextRequest } from "next/server";
2import { describe, expect, it, vi, beforeEach } from "vitest";
3
4const { scheduleSystemUpdateMock, requireApiSessionMock, emitPowerActionMock } = vi.hoisted(() => ({
5  scheduleSystemUpdateMock: vi.fn(),
6  requireApiSessionMock: vi.fn(),
7  emitPowerActionMock: vi.fn(),
8}));
9
10vi.mock("@/lib/server/modules/system/power-action-events", () => ({
11  emitPowerAction: emitPowerActionMock,
12}));
13
14vi.mock("@/lib/server/modules/system/update-service", () => ({
15  scheduleSystemUpdate: scheduleSystemUpdateMock,
16}));
17
18vi.mock("@/lib/server/modules/auth/api", () => ({
19  requireApiSession: requireApiSessionMock,
20}));
21
22import { POST } from "@/app/api/v1/system/updates/apply/route";
23import { NextResponse } from "next/server";
24
25describe("POST /api/v1/system/updates/apply", () => {
26  beforeEach(() => {
27    vi.restoreAllMocks();
28    scheduleSystemUpdateMock.mockReset();
29    requireApiSessionMock.mockReset();
30    emitPowerActionMock.mockReset();
31  });
32
33  it("returns 401 when unauthenticated", async () => {
34    requireApiSessionMock.mockResolvedValueOnce({
35      session: null,
36      response: NextResponse.json({ error: "Unauthorized" }, { status: 401 }),
37    });
38
39    const request = new Request("http://localhost/api/v1/system/updates/apply", {
40      method: "POST",
41    });
42
43    const response = await POST(request as unknown as NextRequest);
44    expect(response.status).toBe(401);
45  });
46
47  it("returns 400 with helpful message when running in Docker container", async () => {
48    requireApiSessionMock.mockResolvedValueOnce({
49      session: { userId: "user-1", username: "admin" },
50      response: null,
51    });
52    scheduleSystemUpdateMock.mockRejectedValueOnce(
53      new Error(
54        "Homeio is running in a Docker container. In-app self-update via systemd is disabled. Please update your container using: docker compose pull && docker compose up -d"
55      )
56    );
57
58    const request = new Request("http://localhost/api/v1/system/updates/apply", {
59      method: "POST",
60    });
61
62    const response = await POST(request as unknown as NextRequest);
63    expect(response.status).toBe(400);
64    const json = await response.json();
65    expect(json.error).toContain("Docker container");
66    expect(emitPowerActionMock).not.toHaveBeenCalled();
67  });
68
69  it("returns 202 when update is accepted", async () => {
70    requireApiSessionMock.mockResolvedValueOnce({
71      session: { userId: "user-1", username: "admin" },
72      response: null,
73    });
74    scheduleSystemUpdateMock.mockResolvedValueOnce({ accepted: true, action: "update" });
75
76    const request = new Request("http://localhost/api/v1/system/updates/apply", {
77      method: "POST",
78    });
79
80    const response = await POST(request as unknown as NextRequest);
81    expect(response.status).toBe(202);
82    const json = await response.json();
83    expect(json.data.accepted).toBe(true);
84    // Other open sessions switch to the update screen too.
85    expect(emitPowerActionMock).toHaveBeenCalledWith("update");
86  });
87});
88