appwrite/tests/e2e/Services/Account/AccountCustomServerTest.php

<?php

namespace Tests\E2E\Services\Account;

use Tests\E2E\Client;
use Tests\E2E\Scopes\ProjectCustom;
use Tests\E2E\Scopes\Scope;
use Tests\E2E\Scopes\SideServer;
use Utopia\Database\Helpers\ID;
use Utopia\Database\Validator\Datetime as DatetimeValidator;

class AccountCustomServerTest extends Scope
{
    use AccountBase;
    use ProjectCustom;
    use SideServer;

    /**
     * Static cache for account data
     */
    private static array $accountData = [];
    private static array $sessionData = [];
    private static array $magicUrlData = [];

    /**
     * Helper to set up a basic account
     */
    protected function setupAccount(): array
    {
        $projectId = $this->getProject()['$id'];
        $cacheKey = $projectId;

        if (!empty(self::$accountData[$cacheKey])) {
            return self::$accountData[$cacheKey];
        }

        $email = uniqid() . 'user@localhost.test';
        $password = 'password';
        $name = 'User Name';

        $response = $this->client->call(Client::METHOD_POST, '/account', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $projectId,
        ], $this->getHeaders()), [
            'userId' => ID::unique(),
            'email' => $email,
            'password' => $password,
            'name' => $name,
        ]);

        $id = $response['body']['$id'];

        self::$accountData[$cacheKey] = [
            'id' => $id,
            'email' => $email,
            'password' => $password,
            'name' => $name,
        ];

        return self::$accountData[$cacheKey];
    }

    /**
     * Helper to set up an account with session
     */
    protected function setupAccountWithSession(): array
    {
        $projectId = $this->getProject()['$id'];
        $cacheKey = $projectId;

        if (!empty(self::$sessionData[$cacheKey])) {
            return self::$sessionData[$cacheKey];
        }

        $accountData = $this->setupAccount();
        $email = $accountData['email'];
        $password = $accountData['password'];

        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/email', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $projectId,
        ], $this->getHeaders()), [
            'email' => $email,
            'password' => $password,
        ]);

        $sessionId = $response['body']['$id'];
        $session = $response['body']['secret'];

        self::$sessionData[$cacheKey] = array_merge($accountData, [
            'sessionId' => $sessionId,
            'session' => $session,
        ]);

        return self::$sessionData[$cacheKey];
    }

    /**
     * Helper to set up magic URL
     */
    protected function setupMagicUrl(): array
    {
        $projectId = $this->getProject()['$id'];
        $cacheKey = $projectId;

        if (!empty(self::$magicUrlData[$cacheKey])) {
            return self::$magicUrlData[$cacheKey];
        }

        $email = \time() . 'user@appwrite.io';

        $response = $this->client->call(Client::METHOD_POST, '/account/tokens/magic-url', array_merge(
            [
                'content-type' => 'application/json',
                'x-appwrite-project' => $projectId
            ],
            $this->getHeaders()
        ), [
            'userId' => ID::unique(),
            'email' => $email,
        ]);

        $userId = $response['body']['userId'];

        $lastEmail = $this->getLastEmailByAddress($email);
        $token = substr($lastEmail['text'], strpos($lastEmail['text'], '&secret=', 0) + 8, 64);

        self::$magicUrlData[$cacheKey] = [
            'token' => $token,
            'id' => $userId,
            'email' => $email,
        ];

        return self::$magicUrlData[$cacheKey];
    }

    public function testCreateAccountSession(): void
    {
        $data = $this->setupAccount();
        $email = $data['email'];
        $password = $data['password'];

        /**
         * Test for SUCCESS
         */
        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/email', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
        ], $this->getHeaders()), [
            'email' => $email,
            'password' => $password,
        ]);

        $this->assertEquals(201, $response['headers']['status-code']);
        $this->assertNotFalse(\DateTime::createFromFormat('Y-m-d\TH:i:s.uP', $response['body']['expire']));

        $session = $response['body']['secret'];
        $userId = $response['body']['userId'];

        $response = $this->client->call(Client::METHOD_GET, '/users/' . $userId, array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
        ], $this->getHeaders()));

        $this->assertEquals(200, $response['headers']['status-code']);
        $this->assertArrayHasKey('accessedAt', $response['body']);
        $this->assertNotEmpty($response['body']['accessedAt']);

        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/email', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
        ], $this->getHeaders()), [
            'email' => $email,
            'password' => $password,
        ]);

        $this->assertEquals(201, $response['headers']['status-code']);
        $this->assertNotEmpty($response['body']['secret']);
        $this->assertNotFalse(\DateTime::createFromFormat('Y-m-d\TH:i:s.uP', $response['body']['expire']));

        /**
         * Test for FAILURE
         */
        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/email', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
            'x-appwrite-session' => $session,
        ]), [
            'email' => $email,
            'password' => $password,
        ]);

        $this->assertEquals(401, $response['headers']['status-code']);

        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/email', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
        ], $this->getHeaders()), [
            'email' => $email . 'x',
            'password' => $password,
        ]);

        $this->assertEquals(401, $response['headers']['status-code']);

        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/email', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
        ], $this->getHeaders()), [
            'email' => $email,
            'password' => $password . 'x',
        ]);

        $this->assertEquals(401, $response['headers']['status-code']);

        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/email', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
        ], $this->getHeaders()), [
            'email' => '',
            'password' => '',
        ]);

        $this->assertEquals(400, $response['headers']['status-code']);
    }

    public function testGetAccount(): void
    {
        $data = $this->setupAccountWithSession();
        $email = $data['email'];
        $name = $data['name'];
        $session = $data['session'];

        /**
         * Test for SUCCESS
         */
        $response = $this->client->call(Client::METHOD_GET, '/account', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
            'x-appwrite-session' => $session,
        ]));

        $this->assertEquals(200, $response['headers']['status-code']);
        $this->assertNotEmpty($response['body']);
        $this->assertNotEmpty($response['body']['$id']);
        $this->assertEquals(true, (new DatetimeValidator())->isValid($response['body']['registration']));
        $this->assertEquals($response['body']['email'], $email);
        $this->assertEquals($response['body']['name'], $name);
        $this->assertArrayHasKey('accessedAt', $response['body']);
        $this->assertNotEmpty($response['body']['accessedAt']);

        /**
         * Test for FAILURE
         */
        $response = $this->client->call(Client::METHOD_GET, '/account', array_merge([
            'content-type' => 'application/json',
            'x-appwrite-project' => $this->getProject()['$id'],
        ]));

        $this->assertEquals(401, $response['headers']['status-code']);
    }

    public function testCreateAnonymousAccount(): void
    {
        /**
         * Test for SUCCESS
         */
        $response = $this->client->call(Client::METHOD_POST, '/account/sessions/anonymous', array_merge(
            [
                'content-type' => 'application/json',
                'x-appwrite-project' => $this->getProject()['$id']
            ],
            $this->getHeaders()
        ));

        $this->assertEquals(201, $response['headers']['status-code']);
        $this->assertIsArray($response['body']);
        $this->assertNotEmpty($response['body']);
        $this->assertNotEmpty($response['body']['$id']);
        $this->assertNotEmpty($response['body']['secret']);

        \usleep(1000 * 30); // wait for 30ms to let the shutdown update accessedAt

        $userId = $response['body']['userId'];
        $response = $this->client->call(Client::METHOD_GET, '/users/' . $userId, array_merge(
            [
                'content-type' => 'application/json',
                'x-appwrite-project' => $this->getProject()['$id'],
            ],
            $this->getHeaders(),
        ));

        $this->assertEquals($response['headers']['status-code'], 200);
        $this->assertArrayHasKey('accessedAt', $response['body']);

        $this->assertNotEmpty($response['body']['accessedAt']);
    }

    public function testCreateMagicUrl(): void
    {
        // Use uniqid for uniqueness in parallel test execution
        $email = 'magic-' . uniqid() . '-' . \time() . '@appwrite.io';

        /**
         * Test for SUCCESS
         */
        $response = $this->client->call(Client::METHOD_POST, '/account/tokens/magic-url', array_merge(
            [
                'content-type' => 'application/json',
                'x-appwrite-project' => $this->getProject()['$id']
            ],
            $this->getHeaders()
        ), [
            'userId' => ID::unique(),
            'email' => $email,
            // 'url' => 'http://localhost/magiclogin',
        ]);

        $this->assertEquals(201, $response['headers']['status-code']);
        $this->assertNotEmpty($response['body']['$id']);
        $this->assertNotEmpty($response['body']['secret']);
        $this->assertEquals(true, (new DatetimeValidator())->isValid($response['body']['expire']));

        $lastEmail = $this->getLastEmailByAddress($email);
        $this->assertNotEmpty($lastEmail, 'Email not found for address: ' . $email);
        $this->assertEquals($this->getProject()['name'] . ' Login', $lastEmail['subject']);

        $expireTime = strpos($lastEmail['text'], 'expire=' . urlencode($response['body']['expire']), 0);

        $this->assertNotFalse($expireTime);

        $secretTest = strpos($lastEmail['text'], 'secret=' . $response['body']['secret'], 0);

        $this->assertNotFalse($secretTest);

        $userIDTest = strpos($lastEmail['text'], 'userId=' . $response['body']['userId'], 0);

        $this->assertNotFalse($userIDTest);
    }

    public function testCreateSessionWithMagicUrl(): void
    {
        $data = $this->setupMagicUrl();
        $id = $data['id'];
        $token = $data['token'];
        $email = $data['email'];

        /**
         * Test for SUCCESS
         */
        $response = $this->client->call(Client::METHOD_PUT, '/account/sessions/magic-url', array_merge(
            [
                'content-type' => 'application/json',
                'x-appwrite-project' => $this->getProject()['$id']
            ],
            $this->getHeaders()
        ), [
            'userId' => $id,
            'secret' => $token,
        ]);

        $this->assertEquals(201, $response['headers']['status-code']);
        $this->assertIsArray($response['body']);
        $this->assertNotEmpty($response['body']);
        $this->assertNotEmpty($response['body']['$id']);
        $this->assertNotEmpty($response['body']['userId']);
        $this->assertNotEmpty($response['body']['secret']);

        $session = $response['body']['secret'];

        $response = $this->client->call(Client::METHOD_GET, '/account', array_merge(
            [
                'content-type' => 'application/json',
                'x-appwrite-project' => $this->getProject()['$id'],
                'x-appwrite-session' => $session
            ]
        ));

        $this->assertEquals($response['headers']['status-code'], 200);
        $this->assertNotEmpty($response['body']);
        $this->assertNotEmpty($response['body']['$id']);
        $this->assertEquals(true, (new DatetimeValidator())->isValid($response['body']['registration']));
        $this->assertEquals($response['body']['email'], $email);
        $this->assertTrue($response['body']['emailVerification']);
    }
}