test: add database test case, router and CSRF tests

tests/CsrfTest.php

@@ -0,0 +1,58 @@
+<?php
+
+namespace Bazaar\Tests;
+
+use Bazaar\Core\Csrf;
+use Bazaar\Core\Session;
+use PHPUnit\Framework\TestCase;
+
+final class CsrfTest extends TestCase
+{
+    private Csrf $csrf;
+
+    protected function setUp(): void
+    {
+        $_SESSION = [];
+        $this->csrf = new Csrf(new Session());
+    }
+
+    public function testTokenIsStableWithinASession(): void
+    {
+        $this->assertSame($this->csrf->token(), $this->csrf->token());
+    }
+
+    public function testVerifyAcceptsTheIssuedToken(): void
+    {
+        $token = $this->csrf->token();
+
+        $this->assertTrue($this->csrf->verify($token));
+    }
+
+    public function testVerifyRejectsAWrongToken(): void
+    {
+        $this->csrf->token();
+
+        $this->assertFalse($this->csrf->verify('forged-token'));
+    }
+
+    public function testVerifyRejectsEmptyAndNull(): void
+    {
+        $this->csrf->token();
+
+        $this->assertFalse($this->csrf->verify(''));
+        $this->assertFalse($this->csrf->verify(null));
+    }
+
+    public function testVerifyFailsWhenNoTokenWasIssued(): void
+    {
+        $this->assertFalse($this->csrf->verify('anything'));
+    }
+
+    public function testFieldEmbedsTheToken(): void
+    {
+        $token = $this->csrf->token();
+
+        $this->assertStringContainsString($token, $this->csrf->field());
+        $this->assertStringContainsString('name="csrfToken"', $this->csrf->field());
+    }
+}

tests/DatabaseTestCase.php

@@ -0,0 +1,48 @@
+<?php
+
+namespace Bazaar\Tests;
+
+use Bazaar\Core\Database;
+use Bazaar\Core\Migrator;
+use Bazaar\Repositories\CategoryRepository;
+use Bazaar\Repositories\ProductRepository;
+use PDO;
+use PHPUnit\Framework\TestCase;
+
+abstract class DatabaseTestCase extends TestCase
+{
+    protected Database $db;
+
+    protected function setUp(): void
+    {
+        $pdo = new PDO('sqlite::memory:', null, null, [
+            PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+            PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+            PDO::ATTR_EMULATE_PREPARES => false,
+        ]);
+        $pdo->exec('PRAGMA foreign_keys = ON');
+
+        $this->db = Database::fromPdo($pdo);
+        Database::swap($this->db);
+        (new Migrator($this->db, dirname(__DIR__) . '/database/migrations'))->run();
+
+        $_SESSION = [];
+    }
+
+    protected function seedProduct(string $name, int $priceCents, int $stock): int
+    {
+        $categories = new CategoryRepository($this->db);
+        $products = new ProductRepository($this->db);
+        $categoryId = $categories->create($name . ' cat', slugify($name . ' cat'), '');
+        return $products->create([
+            'categoryId' => $categoryId,
+            'name' => $name,
+            'slug' => slugify($name),
+            'description' => '',
+            'priceCents' => $priceCents,
+            'stockQuantity' => $stock,
+            'imageUrl' => '',
+            'isActive' => true,
+        ]);
+    }
+}

tests/RouterTest.php

@@ -0,0 +1,94 @@
+<?php
+
+namespace Bazaar\Tests;
+
+use Bazaar\Core\Request;
+use Bazaar\Core\Router;
+use PHPUnit\Framework\TestCase;
+
+final class RouterTest extends TestCase
+{
+    private function request(string $method, string $path): Request
+    {
+        return new Request($method, $path, [], [], []);
+    }
+
+    public function testMatchesStaticRoute(): void
+    {
+        $router = new Router();
+        $router->get('/products', ['CatalogController', 'index']);
+
+        $match = $router->match($this->request('GET', '/products'));
+
+        $this->assertTrue($match->found());
+        $this->assertSame(['CatalogController', 'index'], $match->handler);
+        $this->assertSame([], $match->params);
+    }
+
+    public function testExtractsNamedParameters(): void
+    {
+        $router = new Router();
+        $router->get('/products/{slug}', ['CatalogController', 'show']);
+
+        $match = $router->match($this->request('GET', '/products/walnut-cutting-board'));
+
+        $this->assertTrue($match->found());
+        $this->assertSame(['slug' => 'walnut-cutting-board'], $match->params);
+    }
+
+    public function testDoesNotBleedAcrossSlashes(): void
+    {
+        $router = new Router();
+        $router->get('/products/{slug}', ['CatalogController', 'show']);
+
+        $match = $router->match($this->request('GET', '/products/a/b'));
+
+        $this->assertFalse($match->found());
+        $this->assertSame(404, $match->status);
+    }
+
+    public function testMethodMismatchYields405(): void
+    {
+        $router = new Router();
+        $router->get('/checkout', ['CheckoutController', 'index']);
+
+        $match = $router->match($this->request('POST', '/checkout'));
+
+        $this->assertFalse($match->found());
+        $this->assertSame(405, $match->status);
+    }
+
+    public function testUnknownPathYields404(): void
+    {
+        $router = new Router();
+        $router->get('/', ['HomeController', 'index']);
+
+        $match = $router->match($this->request('GET', '/nope'));
+
+        $this->assertFalse($match->found());
+        $this->assertSame(404, $match->status);
+    }
+
+    public function testCarriesMiddleware(): void
+    {
+        $router = new Router();
+        $router->get('/admin', ['DashboardController', 'index'], ['admin']);
+
+        $match = $router->match($this->request('GET', '/admin'));
+
+        $this->assertSame(['admin'], $match->middleware);
+    }
+
+    public function testMethodSpecificOverlappingPaths(): void
+    {
+        $router = new Router();
+        $router->get('/cart', ['CartController', 'index']);
+        $router->post('/cart/add', ['CartController', 'add']);
+
+        $get = $router->match($this->request('GET', '/cart'));
+        $post = $router->match($this->request('POST', '/cart/add'));
+
+        $this->assertSame(['CartController', 'index'], $get->handler);
+        $this->assertSame(['CartController', 'add'], $post->handler);
+    }
+}