test_read_document_reference_consumer.py

import json
from unittest.mock import patch

from moto import mock_aws

from api.consumer.readDocumentReference.read_document_reference import handler
from nrlf.core.constants import CLIENT_RP_DETAILS, ConsumerApiInteractions, V2Headers
from nrlf.core.dynamodb.repository import DocumentPointer, DocumentPointerRepository
from nrlf.tests.data import load_document_reference
from nrlf.tests.dynamodb import mock_repository
from nrlf.tests.events import (
    create_headers,
    create_mock_context,
    create_test_api_gateway_event,
    default_response_headers,
)

create_mock_context_default_args = {
    "function_name": "nhsd-nrlf--qa-sandbox-2--api--producer--readDocumentReference"
}


@mock_aws
@mock_repository
def test_read_document_reference_happy_path(
    repository: DocumentPointerRepository,
):
    # Create the document pointer
    doc_ref = load_document_reference("Y05868-736253002-Valid")
    doc_pointer = DocumentPointer.from_document_reference(doc_ref)
    repository.create(doc_pointer)

    event = create_test_api_gateway_event(
        headers=create_headers(), path_parameters={"id": "Y05868-99999-99999-999999"}
    )

    result = handler(event, create_mock_context())
    body = result.pop("body")

    assert result == {
        "statusCode": "200",
        "headers": default_response_headers(),
        "isBase64Encoded": False,
    }

    parsed_body = json.loads(body)
    assert parsed_body == doc_ref.model_dump(exclude_none=True)


@mock_aws
@mock_repository
@patch("nrlf.core.decorators.get_pointer_permissions_v2")
def test_read_document_reference_happy_path_v2(
    get_pointer_permissions_mock, repository: DocumentPointerRepository
):
    doc_ref = load_document_reference("Y05868-736253002-Valid")
    doc_pointer = DocumentPointer.from_document_reference(doc_ref)
    repository.create(doc_pointer)

    v2_headers = create_headers(
        additional_headers={
            V2Headers.NHSD_END_USER_ORGANISATION_ODS: "Y05868",
            V2Headers.NHSD_NRL_APP_ID: "Y05868-TestApp-12345678",
        }
    )
    v2_headers.pop(CLIENT_RP_DETAILS)

    get_pointer_permissions_mock.return_value = {
        "access_controls": [],
        "interactions": [ConsumerApiInteractions.READ_DOCUMENT_REFERENCE.value],
        "types": ["http://snomed.info/sct|736253002"],
    }

    event = create_test_api_gateway_event(
        headers=v2_headers,
        path_parameters={"id": doc_pointer.id},
    )

    result = handler(event, create_mock_context(**create_mock_context_default_args))
    body = result.pop("body")

    assert result == {
        "statusCode": "200",
        "headers": default_response_headers(),
        "isBase64Encoded": False,
    }

    parsed_body = json.loads(body)
    assert parsed_body == doc_ref.model_dump(exclude_none=True)


@mock_aws
@mock_repository
def test_read_document_reference_not_found(repository: DocumentPointerRepository):
    event = create_test_api_gateway_event(
        headers=create_headers(), path_parameters={"id": "Y05868-99999-99999-999999"}
    )

    result = handler(event, create_mock_context())
    body = result.pop("body")

    assert result == {
        "statusCode": "404",
        "headers": default_response_headers(),
        "isBase64Encoded": False,
    }

    parsed_body = json.loads(body)
    assert parsed_body == {
        "resourceType": "OperationOutcome",
        "issue": [
            {
                "severity": "error",
                "code": "not-found",
                "details": {
                    "coding": [
                        {
                            "code": "NO_RECORD_FOUND",
                            "display": "No record found",
                            "system": "https://fhir.nhs.uk/CodeSystem/Spine-ErrorOrWarningCode",
                        }
                    ]
                },
                "diagnostics": "The requested DocumentReference could not be found",
            }
        ],
    }


def test_read_document_reference_missing_id():
    event = create_test_api_gateway_event(headers=create_headers(), path_parameters={})

    result = handler(event, create_mock_context())
    body = result.pop("body")

    assert result == {
        "statusCode": "400",
        "headers": default_response_headers(),
        "isBase64Encoded": False,
    }

    parsed_body = json.loads(body)
    assert parsed_body == {
        "resourceType": "OperationOutcome",
        "issue": [
            {
                "severity": "error",
                "code": "invalid",
                "details": {
                    "coding": [
                        {
                            "code": "INVALID_PARAMETER",
                            "display": "Invalid parameter",
                            "system": "https://fhir.nhs.uk/CodeSystem/Spine-ErrorOrWarningCode",
                        }
                    ]
                },
                "diagnostics": "Invalid path parameter (id: Field required)",
                "expression": ["id"],
            }
        ],
    }


@mock_aws
@mock_repository
def test_read_document_reference_unauthorised_for_type(
    repository: DocumentPointerRepository,
):
    doc_ref = load_document_reference("RQI-736253002-Valid")
    doc_pointer = DocumentPointer.from_document_reference(doc_ref)
    repository.create(doc_pointer)

    event = create_test_api_gateway_event(
        headers=create_headers(app_id="12356", ods_code="RQI"),
        path_parameters={"id": doc_pointer.id},
    )

    result = handler(event, create_mock_context())
    body = result.pop("body")

    assert result == {
        "statusCode": "403",
        "headers": default_response_headers(),
        "isBase64Encoded": False,
    }

    parsed_body = json.loads(body)
    assert parsed_body == {
        "resourceType": "OperationOutcome",
        "issue": [
            {
                "severity": "error",
                "code": "forbidden",
                "details": {
                    "coding": [
                        {
                            "code": "ACCESS DENIED",
                            "display": "Access has been denied to process this request",
                            "system": "https://fhir.nhs.uk/CodeSystem/Spine-ErrorOrWarningCode",
                        }
                    ]
                },
                "diagnostics": "The requested DocumentReference is not of a type that this organisation is allowed to access",
            }
        ],
    }


@mock_aws
@mock_repository
@patch("nrlf.core.decorators.get_pointer_permissions_v2")
def test_read_document_reference_unauthorised_for_type_v2(
    get_pointer_permissions_mock, repository: DocumentPointerRepository
):
    doc_ref = load_document_reference("Y05868-736253002-Valid")
    doc_pointer = DocumentPointer.from_document_reference(doc_ref)
    repository.create(doc_pointer)

    headers = create_headers(
        additional_headers={
            V2Headers.NHSD_END_USER_ORGANISATION_ODS: "Y05868",
            V2Headers.NHSD_NRL_APP_ID: "Y05868-TestApp-12345678",
        }
    )
    headers.pop("nhsd-client-rp-details")

    get_pointer_permissions_mock.return_value = {
        "access_controls": [],
        "interactions": [ConsumerApiInteractions.READ_DOCUMENT_REFERENCE.value],
        "types": ["http://snomed.info/sct|736373009"],
    }

    event = create_test_api_gateway_event(
        headers=headers,
        path_parameters={"id": doc_pointer.id},
    )

    result = handler(event, create_mock_context(**create_mock_context_default_args))
    body = result.pop("body")

    assert result == {
        "statusCode": "403",
        "headers": default_response_headers(),
        "isBase64Encoded": False,
    }

    parsed_body = json.loads(body)
    assert parsed_body == {
        "resourceType": "OperationOutcome",
        "issue": [
            {
                "severity": "error",
                "code": "forbidden",
                "details": {
                    "coding": [
                        {
                            "code": "ACCESS DENIED",
                            "display": "Access has been denied to process this request",
                            "system": "https://fhir.nhs.uk/CodeSystem/Spine-ErrorOrWarningCode",
                        }
                    ]
                },
                "diagnostics": "The requested DocumentReference is not of a type that this organisation is allowed to access",
            }
        ],
    }


@mock_aws
@mock_repository
def test_document_reference_invalid_json(repository: DocumentPointerRepository):
    doc_ref = load_document_reference("Y05868-736253002-Valid")
    doc_pointer = DocumentPointer.from_document_reference(doc_ref)
    doc_pointer.document = "invalid json"

    repository.create(doc_pointer)

    event = create_test_api_gateway_event(
        headers=create_headers(),
        path_parameters={"id": doc_pointer.id},
    )

    result = handler(event, create_mock_context())
    body = result.pop("body")

    assert result == {
        "statusCode": "500",
        "headers": default_response_headers(),
        "isBase64Encoded": False,
    }

    parsed_body = json.loads(body)
    assert parsed_body == {
        "resourceType": "OperationOutcome",
        "issue": [
            {
                "severity": "error",
                "code": "exception",
                "details": {
                    "coding": [
                        {
                            "code": "INTERNAL_SERVER_ERROR",
                            "display": "Unexpected internal server error",
                            "system": "https://fhir.nhs.uk/CodeSystem/Spine-ErrorOrWarningCode",
                        }
                    ]
                },
                "diagnostics": "An error occurred while parsing the document reference",
            }
        ],
    }