3 # This file is part of Koha.
5 # Koha is free software; you can redistribute it and/or modify it under the
6 # terms of the GNU General Public License as published by the Free Software
7 # Foundation; either version 3 of the License, or (at your option) any later
10 # Koha is distributed in the hope that it will be useful, but WITHOUT ANY
11 # WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
12 # A PARTICULAR PURPOSE. See the GNU General Public License for more details.
14 # You should have received a copy of the GNU General Public License along
15 # with Koha; if not, write to the Free Software Foundation, Inc.,
16 # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
20 use Test::More tests => 54;
24 use t::lib::TestBuilder;
38 my $schema = Koha::Database->schema;
39 my $builder = t::lib::TestBuilder->new;
41 $schema->storage->txn_begin;
43 t::lib::Mocks::mock_preference( 'SessionStorage', 'tmp' );
45 $ENV{REMOTE_ADDR} = '127.0.0.1';
46 my $t = Test::Mojo->new('Koha::REST::V1');
49 my $dbh = C4::Context->dbh;
51 $dbh->do('DELETE FROM issues');
52 $dbh->do('DELETE FROM items');
53 $dbh->do('DELETE FROM issuingrules');
54 my $loggedinuser = $builder->build({ source => 'Borrower' });
57 INSERT INTO user_permissions (borrowernumber, module_bit, code)
58 VALUES (?, 1, 'circulate_remaining_permissions')
59 }, undef, $loggedinuser->{borrowernumber});
61 my $session = C4::Auth::get_session('');
62 $session->param('number', $loggedinuser->{ borrowernumber });
63 $session->param('id', $loggedinuser->{ userid });
64 $session->param('ip', '127.0.0.1');
65 $session->param('lasttime', time());
68 my $patron = $builder->build({ source => 'Borrower', value => { flags => 0 } });
69 my $borrowernumber = $patron->{borrowernumber};
70 my $patron_session = C4::Auth::get_session('');
71 $patron_session->param('number', $borrowernumber);
72 $patron_session->param('id', $patron->{ userid });
73 $patron_session->param('ip', '127.0.0.1');
74 $patron_session->param('lasttime', time());
75 $patron_session->flush;
77 my $branchcode = $builder->build({ source => 'Branch' })->{ branchcode };
78 my $module = new Test::MockModule('C4::Context');
79 $module->mock('userenv', sub { { branch => $branchcode } });
81 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts?patron_id=$borrowernumber");
82 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
87 my $notexisting_borrowernumber = $borrowernumber + 1;
88 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts?patron_id=$notexisting_borrowernumber");
89 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
94 my $biblionumber = create_biblio('RESTful Web APIs');
95 my $itemnumber1 = create_item($biblionumber, 'TEST000001');
96 my $itemnumber2 = create_item($biblionumber, 'TEST000002');
97 my $itemnumber3 = create_item($biblionumber, 'TEST000003');
99 my $date_due = DateTime->now->add(weeks => 2);
100 my $issue1 = C4::Circulation::AddIssue($patron, 'TEST000001', $date_due);
101 my $date_due1 = Koha::DateUtils::dt_from_string( $issue1->date_due );
102 my $issue2 = C4::Circulation::AddIssue($patron, 'TEST000002', $date_due);
103 my $date_due2 = Koha::DateUtils::dt_from_string( $issue2->date_due );
104 my $issue3 = C4::Circulation::AddIssue($loggedinuser, 'TEST000003', $date_due);
105 my $date_due3 = Koha::DateUtils::dt_from_string( $issue3->date_due );
107 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts?patron_id=$borrowernumber");
108 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
111 ->json_is('/0/patron_id' => $borrowernumber)
112 ->json_is('/0/item_id' => $itemnumber1)
113 ->json_is('/0/due_date' => output_pref({ dateformat => "rfc3339", dt => $date_due1 }) )
114 ->json_is('/1/patron_id' => $borrowernumber)
115 ->json_is('/1/item_id' => $itemnumber2)
116 ->json_is('/1/due_date' => output_pref({ dateformat => "rfc3339", dt => $date_due2 }) )
119 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts/".$issue3->issue_id);
120 $tx->req->cookies({name => 'CGISESSID', value => $patron_session->id});
123 ->json_is({ error => "Authorization failure. Missing required permission(s).",
124 required_permissions => { circulate => "circulate_remaining_permissions" }
127 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts?patron_id=".$loggedinuser->{borrowernumber});
128 $tx->req->cookies({name => 'CGISESSID', value => $patron_session->id});
131 ->json_is({ error => "Authorization failure. Missing required permission(s).",
132 required_permissions => { circulate => "circulate_remaining_permissions" }
135 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts?patron_id=$borrowernumber");
136 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
139 ->json_is('/0/patron_id' => $borrowernumber)
140 ->json_is('/0/item_id' => $itemnumber1)
141 ->json_is('/0/due_date' => output_pref({ dateformat => "rfc3339", dt => $date_due1 }) )
142 ->json_is('/1/patron_id' => $borrowernumber)
143 ->json_is('/1/item_id' => $itemnumber2)
144 ->json_is('/1/due_date' => output_pref({ dateformat => "rfc3339", dt => $date_due2 }) )
147 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts/" . $issue1->issue_id);
148 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
151 ->json_is('/patron_id' => $borrowernumber)
152 ->json_is('/item_id' => $itemnumber1)
153 ->json_is('/due_date' => output_pref({ dateformat => "rfc3339", dt => $date_due1 }) )
156 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts/" . $issue1->issue_id);
157 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
160 ->json_is('/due_date' => output_pref({ dateformat => "rfc3339", dt => $date_due1 }) );
162 $tx = $t->ua->build_tx(GET => "/api/v1/checkouts/" . $issue2->issue_id);
163 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
166 ->json_is('/due_date' => output_pref( { dateformat => "rfc3339", dt => $date_due2 }) );
169 $dbh->do('DELETE FROM issuingrules');
171 INSERT INTO issuingrules (categorycode, branchcode, itemtype, renewalperiod, renewalsallowed)
172 VALUES (?, ?, ?, ?, ?)
173 }, {}, '*', '*', '*', 7, 1);
175 my $expected_datedue = DateTime->now->add(days => 14)->set(hour => 23, minute => 59, second => 0);
176 $tx = $t->ua->build_tx(PUT => "/api/v1/checkouts/" . $issue1->issue_id);
177 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
180 ->json_is('/due_date' => output_pref( { dateformat => "rfc3339", dt => $expected_datedue }) );
182 $tx = $t->ua->build_tx(PUT => "/api/v1/checkouts/" . $issue3->issue_id);
183 $tx->req->cookies({name => 'CGISESSID', value => $patron_session->id});
186 ->json_is({ error => "Authorization failure. Missing required permission(s).",
187 required_permissions => { circulate => "circulate_remaining_permissions" }
190 $tx = $t->ua->build_tx(PUT => "/api/v1/checkouts/" . $issue2->issue_id);
191 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
194 ->json_is('/due_date' => output_pref({ dateformat => "rfc3339", dt => $expected_datedue}) );
196 $tx = $t->ua->build_tx(PUT => "/api/v1/checkouts/" . $issue1->issue_id);
197 $tx->req->cookies({name => 'CGISESSID', value => $session->id});
200 ->json_is({ error => 'Renewal not authorized (too_many)' });
205 my $record = new MARC::Record;
206 $record->append_fields(
207 new MARC::Field('200', ' ', ' ', a => $title),
210 my ($biblionumber) = C4::Biblio::AddBiblio($record, '');
212 return $biblionumber;
216 my ($biblionumber, $barcode) = @_;
222 my $itemnumber = C4::Items::AddItem($item, $biblionumber);