2 files changed, 296 insertions, 0 deletions
diff --git a/src/invite/handlers/accept/mod.rs b/src/invite/handlers/accept/mod.rs
new file mode 100644
index 0000000..0d5f08a
--- /dev/null
+++ b/src/invite/handlers/accept/mod.rs
@@ -0,0 +1,60 @@
+use axum::{
+    extract::{Json, Path, State},
+    http::StatusCode,
+    response::{IntoResponse, Response},
+};
+
+use crate::{
+    app::App,
+    clock::RequestedAt,
+    error::{Internal, NotFound},
+    invite::{app, handlers::PathInfo},
+    name::Name,
+    token::extract::IdentityCookie,
+    user::{Password, User},
+};
+
+#[cfg(test)]
+mod test;
+
+pub async fn handler(
+    State(app): State<App>,
+    RequestedAt(accepted_at): RequestedAt,
+    identity: IdentityCookie,
+    Path(invite): Path<PathInfo>,
+    Json(request): Json<Request>,
+) -> Result<(IdentityCookie, Json<User>), Error> {
+    let (login, secret) = app
+        .invites()
+        .accept(&invite, &request.name, &request.password, &accepted_at)
+        .await
+        .map_err(Error)?;
+    let identity = identity.set(secret);
+    Ok((identity, Json(login)))
+}
+
+#[derive(serde::Deserialize)]
+pub struct Request {
+    pub name: Name,
+    pub password: Password,
+}
+
+#[derive(Debug, thiserror::Error)]
+#[error(transparent)]
+pub struct Error(pub app::AcceptError);
+
+impl IntoResponse for Error {
+    fn into_response(self) -> Response {
+        let Self(error) = self;
+        match error {
+            app::AcceptError::NotFound(_) => NotFound(error).into_response(),
+            app::AcceptError::InvalidName(_) => {
+                (StatusCode::BAD_REQUEST, error.to_string()).into_response()
+            }
+            app::AcceptError::DuplicateLogin(_) => {
+                (StatusCode::CONFLICT, error.to_string()).into_response()
+            }
+            other => Internal::from(other).into_response(),
+        }
+    }
+}
diff --git a/src/invite/handlers/accept/test.rs b/src/invite/handlers/accept/test.rs
new file mode 100644
index 0000000..cb13900
--- /dev/null
+++ b/src/invite/handlers/accept/test.rs
@@ -0,0 +1,236 @@
+use axum::extract::{Json, Path, State};
+
+use crate::{invite::app::AcceptError, name::Name, test::fixtures};
+
+#[tokio::test]
+async fn valid_invite() {
+    // Set up the environment
+
+    let app = fixtures::scratch_app().await;
+    let issuer = fixtures::user::create(&app, &fixtures::now()).await;
+    let invite = fixtures::invite::issue(&app, &issuer, &fixtures::now()).await;
+
+    // Call the endpoint
+
+    let (name, password) = fixtures::user::propose();
+    let identity = fixtures::cookie::not_logged_in();
+    let request = super::Request {
+        name: name.clone(),
+        password: password.clone(),
+    };
+    let (identity, Json(response)) = super::handler(
+        State(app.clone()),
+        fixtures::now(),
+        identity,
+        Path(invite.id),
+        Json(request),
+    )
+    .await
+    .expect("accepting a valid invite succeeds");
+
+    // Verify the response
+
+    assert!(identity.secret().is_some());
+    assert_eq!(name, response.name);
+
+    // Verify that the issued token is valid
+
+    let secret = identity
+        .secret()
+        .expect("newly-issued identity has a token secret");
+    let (_, login) = app
+        .tokens()
+        .validate(&secret, &fixtures::now())
+        .await
+        .expect("newly-issued identity cookie is valid");
+    assert_eq!(response, login);
+
+    // Verify that the given credentials can log in
+
+    let (login, _) = app
+        .tokens()
+        .login(&name, &password, &fixtures::now())
+        .await
+        .expect("credentials given on signup are valid");
+    assert_eq!(response, login);
+}
+
+#[tokio::test]
+async fn nonexistent_invite() {
+    // Set up the environment
+
+    let app = fixtures::scratch_app().await;
+    let invite = fixtures::invite::fictitious();
+
+    // Call the endpoint
+
+    let (name, password) = fixtures::user::propose();
+    let identity = fixtures::cookie::not_logged_in();
+    let request = super::Request {
+        name: name.clone(),
+        password: password.clone(),
+    };
+    let super::Error(error) = super::handler(
+        State(app.clone()),
+        fixtures::now(),
+        identity,
+        Path(invite.clone()),
+        Json(request),
+    )
+    .await
+    .expect_err("accepting a nonexistent invite fails");
+
+    // Verify the response
+
+    assert!(matches!(error, AcceptError::NotFound(error_id) if error_id == invite));
+}
+
+#[tokio::test]
+async fn expired_invite() {
+    // Set up the environment
+
+    let app = fixtures::scratch_app().await;
+    let issuer = fixtures::user::create(&app, &fixtures::ancient()).await;
+    let invite = fixtures::invite::issue(&app, &issuer, &fixtures::ancient()).await;
+
+    app.invites()
+        .expire(&fixtures::now())
+        .await
+        .expect("expiring invites never fails");
+
+    // Call the endpoint
+
+    let (name, password) = fixtures::user::propose();
+    let identity = fixtures::cookie::not_logged_in();
+    let request = super::Request {
+        name: name.clone(),
+        password: password.clone(),
+    };
+    let super::Error(error) = super::handler(
+        State(app.clone()),
+        fixtures::now(),
+        identity,
+        Path(invite.id.clone()),
+        Json(request),
+    )
+    .await
+    .expect_err("accepting a nonexistent invite fails");
+
+    // Verify the response
+
+    assert!(matches!(error, AcceptError::NotFound(error_id) if error_id == invite.id));
+}
+
+#[tokio::test]
+async fn accepted_invite() {
+    // Set up the environment
+
+    let app = fixtures::scratch_app().await;
+    let issuer = fixtures::user::create(&app, &fixtures::ancient()).await;
+    let invite = fixtures::invite::issue(&app, &issuer, &fixtures::ancient()).await;
+
+    let (name, password) = fixtures::user::propose();
+    app.invites()
+        .accept(&invite.id, &name, &password, &fixtures::now())
+        .await
+        .expect("accepting a valid invite succeeds");
+
+    // Call the endpoint
+
+    let (name, password) = fixtures::user::propose();
+    let identity = fixtures::cookie::not_logged_in();
+    let request = super::Request {
+        name: name.clone(),
+        password: password.clone(),
+    };
+    let super::Error(error) = super::handler(
+        State(app.clone()),
+        fixtures::now(),
+        identity,
+        Path(invite.id.clone()),
+        Json(request),
+    )
+    .await
+    .expect_err("accepting a nonexistent invite fails");
+
+    // Verify the response
+
+    assert!(matches!(error, AcceptError::NotFound(error_id) if error_id == invite.id));
+}
+
+#[tokio::test]
+async fn conflicting_name() {
+    // Set up the environment
+
+    let app = fixtures::scratch_app().await;
+    let issuer = fixtures::user::create(&app, &fixtures::ancient()).await;
+    let invite = fixtures::invite::issue(&app, &issuer, &fixtures::ancient()).await;
+
+    let existing_name = Name::from("rijksmuseum");
+    app.users()
+        .create(
+            &existing_name,
+            &fixtures::user::propose_password(),
+            &fixtures::now(),
+        )
+        .await
+        .expect("creating a user in an empty environment succeeds");
+
+    // Call the endpoint
+
+    let conflicting_name = Name::from("r\u{0133}ksmuseum");
+    let password = fixtures::user::propose_password();
+
+    let identity = fixtures::cookie::not_logged_in();
+    let request = super::Request {
+        name: conflicting_name.clone(),
+        password: password.clone(),
+    };
+    let super::Error(error) = super::handler(
+        State(app.clone()),
+        fixtures::now(),
+        identity,
+        Path(invite.id.clone()),
+        Json(request),
+    )
+    .await
+    .expect_err("accepting a nonexistent invite fails");
+
+    // Verify the response
+
+    assert!(
+        matches!(error, AcceptError::DuplicateLogin(error_name) if error_name == conflicting_name)
+    );
+}
+
+#[tokio::test]
+async fn invalid_name() {
+    // Set up the environment
+
+    let app = fixtures::scratch_app().await;
+    let issuer = fixtures::user::create(&app, &fixtures::now()).await;
+    let invite = fixtures::invite::issue(&app, &issuer, &fixtures::now()).await;
+
+    // Call the endpoint
+
+    let name = fixtures::user::propose_invalid_name();
+    let password = fixtures::user::propose_password();
+    let identity = fixtures::cookie::not_logged_in();
+    let request = super::Request {
+        name: name.clone(),
+        password: password.clone(),
+    };
+    let super::Error(error) = super::handler(
+        State(app.clone()),
+        fixtures::now(),
+        identity,
+        Path(invite.id),
+        Json(request),
+    )
+    .await
+    .expect_err("using an invalid name should fail");
+
+    // Verify the response
+
+    assert!(matches!(error, AcceptError::InvalidName(error_name) if name == error_name));
+}