test: implement tenant_update_apns_valid_token unit test

.github/workflows/ci.yml

@@ -91,6 +91,7 @@ jobs:
       DATABASE_URL: postgres://postgres:root@localhost:5432/postgres
       TENANT_DATABASE_URL: postgres://postgres:root@localhost:5433/postgres
       RELAY_PUBLIC_KEY: ${{ secrets.RELAY_PUBLIC_KEY }}
+      JWT_SECRET: ${{ secrets.JWT_SECRET }}
     steps:
       # Checkout code
       - name: "Git checkout"
@@ -155,6 +156,9 @@ jobs:
           args: ${{ matrix.cargo.args }}
         env:
           ECHO_TEST_FCM_KEY: ${{ secrets.ECHO_TEST_FCM_KEY }}
+          ECHO_TEST_APNS_P8_KEY_ID: ${{ secrets.ECHO_TEST_APNS_P8_KEY_ID }}
+          ECHO_TEST_APNS_P8_TEAM_ID: ${{ secrets.ECHO_TEST_APNS_P8_TEAM_ID }}
+          ECHO_TEST_APNS_P8_PEM: ${{ secrets.ECHO_TEST_APNS_P8_PEM }}
 
       - name: "Print sccache stats"
         run: sccache --show-stats

tests/context/mod.rs

@@ -19,6 +19,7 @@ pub struct ConfigContext {
 
 pub struct EchoServerContext {
     pub server: EchoServer,
+    pub config: Config,
 }
 
 pub struct StoreContext {
@@ -41,8 +42,10 @@ impl TestContext for ConfigContext {
             disable_header: true,
             validate_signatures: false,
             relay_public_key: env::var("RELAY_PUBLIC_KEY").unwrap_or("none".to_string()),
-            database_url: env::var("DATABASE_URL").unwrap(),
-            tenant_database_url: env::var("TENANT_DATABASE_URL").unwrap(),
+            database_url: env::var("DATABASE_URL")
+                .expect("DATABASE_URL environment variable is not set"),
+            tenant_database_url: env::var("TENANT_DATABASE_URL")
+                .expect("TENANT_DATABASE_URL environment variable is not set"),
             #[cfg(feature = "multitenant")]
             jwt_secret: "n/a".to_string(),
             otel_exporter_otlp_endpoint: None,
@@ -87,8 +90,9 @@ impl TestContext for ConfigContext {
 #[async_trait]
 impl AsyncTestContext for EchoServerContext {
     async fn setup() -> Self {
+        let config = ConfigContext::setup().config;
         let server = EchoServer::start(ConfigContext::setup().config).await;
-        Self { server }
+        Self { server, config }
     }
 }
 

tests/functional/multitenant/apns.rs

@@ -1,10 +1,23 @@
 use {
     crate::context::EchoServerContext,
-    echo_server::handlers::create_tenant::TenantRegisterBody,
+    echo_server::handlers::{create_tenant::TenantRegisterBody, get_tenant::GetTenantResponse},
+    jsonwebtoken::{encode, EncodingKey, Header},
     random_string::generate,
+    serde::Serialize,
+    std::time::SystemTime,
     test_context::test_context,
+    uuid::Uuid,
 };
 
+/// Struct to hold claims for JWT validation
+#[derive(Serialize)]
+struct ClaimsForValidation {
+    sub: String,
+    aud: String,
+    role: String,
+    exp: usize,
+}
+
 // #[test_context(EchoServerContext)]
 // #[tokio::test]
 // async fn tenant_update_apns(ctx: &mut EchoServerContext) {
@@ -44,6 +57,66 @@ use {
 //     );
 // }
 
+#[test_context(EchoServerContext)]
+#[tokio::test]
+async fn tenant_update_apns_valid_token(ctx: &mut EchoServerContext) {
+    let tenant_id = Uuid::new_v4().to_string();
+    let payload = TenantRegisterBody {
+        id: tenant_id.clone(),
+    };
+    let unix_timestamp = SystemTime::now()
+        .duration_since(SystemTime::UNIX_EPOCH)
+        .unwrap()
+        .as_secs() as usize;
+    let token_claims = ClaimsForValidation {
+        sub: tenant_id.clone(),
+        aud: "authenticated".to_string(),
+        role: "authenticated".to_string(),
+        exp: unix_timestamp + 60 * 60, // Add an hour for expiration
+    };
+    let jwt_token = encode(
+        &Header::default(),
+        &token_claims,
+        &EncodingKey::from_secret(ctx.config.jwt_secret.as_bytes()),
+    )
+    .expect("Failed to encode jwt token");
+
+    // Register new tenant
+    let client = reqwest::Client::new();
+    let create_tenant_result = client
+        .post(format!("http://{}/tenants", ctx.server.public_addr))
+        .header("AUTHORIZATION", jwt_token.clone())
+        .json(&payload)
+        .send()
+        .await
+        .expect("Failed to create a new tenant");
+    assert_eq!(create_tenant_result.status(), reqwest::StatusCode::OK);
+
+    // Send valid APNS p8 Key
+    let form = reqwest::multipart::Form::new()
+        .text("apns_type", "token")
+        .text("apns_topic", "app.test")
+        .text("apns_key_id", env!("ECHO_TEST_APNS_P8_KEY_ID"))
+        .text("apns_team_id", env!("ECHO_TEST_APNS_P8_TEAM_ID"))
+        .part(
+            "apns_pkcs8_pem",
+            reqwest::multipart::Part::text(env!("ECHO_TEST_APNS_P8_PEM"))
+                .file_name("apns.p8")
+                .mime_str("text/plain")
+                .expect("Error on passing multipart stream to the form request"),
+        );
+    let apns_update_result = client
+        .post(format!(
+            "http://{}/tenants/{}/apns",
+            ctx.server.public_addr, &tenant_id
+        ))
+        .multipart(form)
+        .send()
+        .await
+        .expect("Failed to call update tenant endpoint");
+    assert_eq!(apns_update_result.status(), reqwest::StatusCode::OK);
+}
+
 #[test_context(EchoServerContext)]
 #[tokio::test]
 async fn tenant_update_apns_bad_token(ctx: &mut EchoServerContext) {