Academic-Affairs-System/tests/Jiaowu.Api.Tests/GradeAnalyticsCommentsControllerTests.cs

using Jiaowu.Api.Controllers;
using Jiaowu.Api.Domain.Academic;
using Jiaowu.Api.Domain.Identity;
using Jiaowu.Api.Infrastructure.Auth;
using Jiaowu.Api.Infrastructure.Branding;
using Jiaowu.Api.Infrastructure.OfficialDocuments;
using Jiaowu.Api.Infrastructure.Persistence;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Data.Sqlite;
using Microsoft.EntityFrameworkCore;

namespace Jiaowu.Api.Tests;

public sealed class GradeAnalyticsCommentsControllerTests
{
    [Fact]
    public async Task AnonymousComment_HidesAuthorButKeepsOwnerForModeration()
    {
        await using var connection = new SqliteConnection("Data Source=:memory:");
        await connection.OpenAsync();
        await using var db = new AppDbContext(new DbContextOptionsBuilder<AppDbContext>()
            .UseSqlite(connection).Options);
        await db.Database.EnsureCreatedAsync();

        var author = new ApplicationUser { UserName = "teacher", DisplayName = "王老师" };
        var otherUser = new ApplicationUser { UserName = "other", DisplayName = "李老师" };
        var college = new College { Code = "CS", Name = "计算机学院" };
        var term = new AcademicTerm
        {
            Code = "2026-1", Name = "2026-2027 学年第一学期", AcademicYear = "2026-2027",
            Season = TermSeason.Autumn, StartDate = new DateOnly(2026, 9, 1),
            EndDate = new DateOnly(2027, 1, 20)
        };
        var course = new Course
        {
            Code = "CS101", Name = "程序设计基础", CollegeId = college.Id, Credits = 4,
            TotalHours = 64, LectureHours = 48, PracticeHours = 16,
            Nature = CourseNature.MajorRequired, AssessmentMethod = AssessmentMethod.Examination
        };
        var task = new TeachingTask
        {
            TaskNumber = "2026-1-CS101-01", Name = "程序设计基础教学班", CourseId = course.Id,
            AcademicTermId = term.Id, Capacity = 60, Status = TeachingTaskStatus.Published
        };
        var sheet = new GradeSheet { TeachingTaskId = task.Id, Status = GradeSheetStatus.Published };
        var statistic = new TeachingTaskGradeStatistic
        {
            GradeSheetId = sheet.Id, TeachingTaskId = task.Id, CourseId = course.Id,
            AcademicTermId = term.Id, StudentCount = 1, PassedCount = 1, ExcellentCount = 0,
            HighestScore = 80, AverageScore = 80, MedianScore = 80, LowestScore = 80,
            StandardDeviation = 0, PassRate = 100, ExcellentRate = 0, CalculatedAt = DateTime.UtcNow
        };
        db.Users.AddRange(author, otherUser);
        db.AddRange(college, term, course, task, sheet, statistic);
        await db.SaveChangesAsync();
        Assert.True(await db.TeachingTaskGradeStatistics.AnyAsync(x => x.CourseId == course.Id));

        var authorController = CreateController(db, author.Id, SystemRoles.AcademicAdmin);
        var create = await authorController.CreateComment(
            course.Id, new CreateGradeAnalyticsCommentRequest("建议关注低分段的变化。", true), default);
        Assert.IsType<CreatedAtActionResult>(create);

        var stored = await db.GradeAnalyticsComments.SingleAsync();
        Assert.Equal(course.Id, stored.CourseId);
        Assert.Equal(author.Id, stored.AuthorUserId);
        Assert.True(stored.IsAnonymous);

        var otherController = CreateController(db, otherUser.Id, SystemRoles.Leader);
        var list = await otherController.GetComments(course.Id, null, null, 30, default);
        using var document = System.Text.Json.JsonDocument.Parse(
            System.Text.Json.JsonSerializer.Serialize(((OkObjectResult)list).Value));
        var item = document.RootElement.GetProperty("Items")[0];
        Assert.Equal("匿名用户", item.GetProperty("AuthorName").GetString());

        stored.CreatedAt = new DateTime(2026, 8, 22, 8, 0, 0, DateTimeKind.Utc);
        await db.SaveChangesAsync();
        await authorController.CreateComment(
            course.Id, new CreateGradeAnalyticsCommentRequest("建议持续跟踪课程改进。", false), default);
        var newer = await db.GradeAnalyticsComments
            .SingleAsync(x => x.Id != stored.Id);
        newer.CreatedAt = stored.CreatedAt;
        await db.SaveChangesAsync();

        var firstPage = await otherController.GetComments(course.Id, null, null, 1, default);
        using var firstPageDocument = System.Text.Json.JsonDocument.Parse(
            System.Text.Json.JsonSerializer.Serialize(((OkObjectResult)firstPage).Value));
        Assert.True(firstPageDocument.RootElement.GetProperty("HasMore").GetBoolean());
        var cursor = firstPageDocument.RootElement.GetProperty("NextCursor");
        var secondPage = await otherController.GetComments(
            course.Id,
            cursor.GetProperty("CreatedAt").GetDateTime(),
            cursor.GetProperty("Id").GetGuid(),
            1,
            default);
        using var secondPageDocument = System.Text.Json.JsonDocument.Parse(
            System.Text.Json.JsonSerializer.Serialize(((OkObjectResult)secondPage).Value));
        Assert.Single(secondPageDocument.RootElement.GetProperty("Items").EnumerateArray());

        var forbidden = await otherController.DeleteComment(stored.Id, default);
        Assert.IsType<ForbidResult>(forbidden);

        var adminController = CreateController(db, otherUser.Id, SystemRoles.AcademicAdmin);
        var deleted = await adminController.DeleteComment(stored.Id, default);
        Assert.IsType<NoContentResult>(deleted);
        await adminController.DeleteComment(newer.Id, default);
        Assert.Empty(await db.GradeAnalyticsComments.ToListAsync());
    }

    private static GradeAnalyticsController CreateController(
        AppDbContext db, Guid userId, params string[] roles) =>
        new(
            db,
            new TestDataScope(userId, roles),
            new OfficialDocumentOptions(),
            new BrandingOptions { ProductName = "测试校园综合服务平台" });

    private sealed class TestDataScope(Guid userId, params string[] roles)
        : ICurrentUserDataScope
    {
        public CurrentUserScope Current { get; } = new(
            userId,
            null,
            null,
            roles.Contains(SystemRoles.AcademicAdmin, StringComparer.OrdinalIgnoreCase) ||
            roles.Contains(SystemRoles.Leader, StringComparer.OrdinalIgnoreCase)
                ? DataScope.All
                : DataScope.Self,
            new HashSet<string>(roles, StringComparer.OrdinalIgnoreCase));
    }
}