3 # This file is part of Koha.
5 # Koha is free software; you can redistribute it and/or modify it
6 # under the terms of the GNU General Public License as published by
7 # the Free Software Foundation; either version 3 of the License, or
8 # (at your option) any later version.
10 # Koha is distributed in the hope that it will be useful, but
11 # WITHOUT ANY WARRANTY; without even the implied warranty of
12 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 # GNU General Public License for more details.
15 # You should have received a copy of the GNU General Public License
16 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 use Test::More tests => 8;
22 use t::lib::TestBuilder;
35 use Koha::Biblioitems;
37 use Koha::CirculationRules;
39 my $schema = Koha::Database->new->schema;
40 my $builder = t::lib::TestBuilder->new();
42 $schema->storage->txn_begin;
44 t::lib::Mocks::mock_preference( 'RESTBasicAuth', 1 );
46 my $t = Test::Mojo->new('Koha::REST::V1');
48 my $categorycode = $builder->build({ source => 'Category' })->{categorycode};
49 my $branchcode = $builder->build({ source => 'Branch' })->{branchcode};
50 my $branchcode2 = $builder->build({ source => 'Branch' })->{branchcode};
51 my $itemtype = $builder->build({ source => 'Itemtype' })->{itemtype};
53 # Generic password for everyone
54 my $password = 'thePassword123';
56 # User without any permissions
57 my $nopermission = $builder->build_object({
58 class => 'Koha::Patrons',
60 branchcode => $branchcode,
61 categorycode => $categorycode,
65 $nopermission->set_password( { password => $password, skip_validation => 1 } );
66 my $nopermission_userid = $nopermission->userid;
68 my $patron_1 = $builder->build_object(
70 class => 'Koha::Patrons',
72 categorycode => $categorycode,
73 branchcode => $branchcode,
74 surname => 'Test Surname',
75 flags => 80, #borrowers and reserveforothers flags
79 $patron_1->set_password( { password => $password, skip_validation => 1 } );
80 my $userid_1 = $patron_1->userid;
82 my $patron_2 = $builder->build_object(
84 class => 'Koha::Patrons',
86 categorycode => $categorycode,
87 branchcode => $branchcode,
88 surname => 'Test Surname 2',
89 flags => 16, # borrowers flag
93 $patron_2->set_password( { password => $password, skip_validation => 1 } );
94 my $userid_2 = $patron_2->userid;
96 my $patron_3 = $builder->build_object(
98 class => 'Koha::Patrons',
100 categorycode => $categorycode,
101 branchcode => $branchcode,
102 surname => 'Test Surname 3',
103 flags => 64, # reserveforothers flag
107 $patron_3->set_password( { password => $password, skip_validation => 1 } );
108 my $userid_3 = $patron_3->userid;
110 my $biblio_1 = $builder->build_sample_biblio;
111 my $item_1 = $builder->build_sample_item({ biblionumber => $biblio_1->biblionumber, itype => $itemtype });
113 my $biblio_2 = $builder->build_sample_biblio;
114 my $item_2 = $builder->build_sample_item({ biblionumber => $biblio_2->biblionumber, itype => $itemtype });
116 my $dbh = C4::Context->dbh;
117 $dbh->do('DELETE FROM reserves');
118 Koha::CirculationRules->search()->delete();
119 Koha::CirculationRules->set_rules(
121 categorycode => undef,
125 reservesallowed => 1,
126 holds_per_record => 99
131 my $reserve_id = C4::Reserves::AddReserve(
133 branchcode => $branchcode,
134 borrowernumber => $patron_1->borrowernumber,
135 biblionumber => $biblio_1->biblionumber,
137 itemnumber => $item_1->itemnumber,
141 # Add another reserve to be able to change first reserve's rank
142 my $reserve_id2 = C4::Reserves::AddReserve(
144 branchcode => $branchcode,
145 borrowernumber => $patron_2->borrowernumber,
146 biblionumber => $biblio_1->biblionumber,
148 itemnumber => $item_1->itemnumber,
152 my $suspended_until = DateTime->now->add(days => 10)->truncate( to => 'day' );
153 my $expiration_date = DateTime->now->add(days => 10)->truncate( to => 'day' );
156 patron_id => int($patron_1->borrowernumber),
157 biblio_id => int($biblio_1->biblionumber),
158 item_id => int($item_1->itemnumber),
159 pickup_library_id => $branchcode,
160 expiration_date => output_pref({ dt => $expiration_date, dateformat => 'rfc3339', dateonly => 1 }),
165 suspended_until => output_pref({ dt => $suspended_until, dateformat => 'rfc3339' }),
168 subtest "Test endpoints without authentication" => sub {
170 $t->get_ok('/api/v1/holds')
172 $t->post_ok('/api/v1/holds')
174 $t->put_ok('/api/v1/holds/0')
176 $t->delete_ok('/api/v1/holds/0')
180 subtest "Test endpoints without permission" => sub {
184 $t->get_ok( "//$nopermission_userid:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) # no permission
187 $t->get_ok( "//$userid_3:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) # no permission
190 $t->post_ok( "//$nopermission_userid:$password@/api/v1/holds" => json => $post_data )
193 $t->put_ok( "//$nopermission_userid:$password@/api/v1/holds/0" => json => $put_data )
196 $t->delete_ok( "//$nopermission_userid:$password@/api/v1/holds/0" )
200 subtest "Test endpoints with permission" => sub {
204 $t->get_ok( "//$userid_1:$password@/api/v1/holds" )
210 $t->get_ok( "//$userid_1:$password@/api/v1/holds?priority=2" )
212 ->json_is('/0/patron_id', $patron_2->borrowernumber)
215 # While suspended_until is date-time, it's always set to midnight.
216 my $expected_suspended_until = $suspended_until->strftime('%FT00:00:00%z');
217 substr($expected_suspended_until, -2, 0, ':');
219 $t->put_ok( "//$userid_1:$password@/api/v1/holds/$reserve_id" => json => $put_data )
221 ->json_is( '/hold_id', $reserve_id )
222 ->json_is( '/suspended_until', $expected_suspended_until )
223 ->json_is( '/priority', 2 )
224 ->json_is( '/pickup_library_id', $branchcode );
226 # Change only pickup library, everything else should remain
227 $t->put_ok( "//$userid_1:$password@/api/v1/holds/$reserve_id" => json => { pickup_library_id => $branchcode2 } )
229 ->json_is( '/hold_id', $reserve_id )
230 ->json_is( '/suspended_until', $expected_suspended_until )
231 ->json_is( '/priority', 2 )
232 ->json_is( '/pickup_library_id', $branchcode2 );
234 # Reset suspended_until, everything else should remain
235 $t->put_ok( "//$userid_1:$password@/api/v1/holds/$reserve_id" => json => { suspended_until => undef } )
237 ->json_is( '/hold_id', $reserve_id )
238 ->json_is( '/suspended_until', undef )
239 ->json_is( '/priority', 2 )
240 ->json_is( '/pickup_library_id', $branchcode2 );
242 $t->delete_ok( "//$userid_3:$password@/api/v1/holds/$reserve_id" )
243 ->status_is(204, 'SWAGGER3.2.4')
244 ->content_is('', 'SWAGGER3.3.4');
246 $t->put_ok( "//$userid_3:$password@/api/v1/holds/$reserve_id" => json => $put_data )
248 ->json_has('/error');
250 $t->delete_ok( "//$userid_3:$password@/api/v1/holds/$reserve_id" )
252 ->json_has('/error');
254 $t->get_ok( "//$userid_2:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber )
258 my $inexisting_borrowernumber = $patron_2->borrowernumber * 2;
259 $t->get_ok( "//$userid_1:$password@/api/v1/holds?patron_id=$inexisting_borrowernumber")
263 $t->delete_ok( "//$userid_3:$password@/api/v1/holds/$reserve_id2" )
264 ->status_is(204, 'SWAGGER3.2.4')
265 ->content_is('', 'SWAGGER3.3.4');
267 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
269 ->json_has('/hold_id');
270 # Get id from response
271 $reserve_id = $t->tx->res->json->{hold_id};
273 $t->get_ok( "//$userid_1:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber )
275 ->json_is('/0/hold_id', $reserve_id)
276 ->json_is('/0/expiration_date', output_pref({ dt => $expiration_date, dateformat => 'rfc3339', dateonly => 1 }))
277 ->json_is('/0/pickup_library_id', $branchcode);
279 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
281 ->json_like('/error', qr/itemAlreadyOnHold/);
283 $post_data->{biblionumber} = int($biblio_2->biblionumber);
284 $post_data->{itemnumber} = int($item_2->itemnumber);
286 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
288 ->json_like('/error', qr/itemAlreadyOnHold/);
291 subtest 'Reserves with itemtype' => sub {
295 patron_id => int($patron_1->borrowernumber),
296 biblio_id => int($biblio_1->biblionumber),
297 pickup_library_id => $branchcode,
298 item_type => $itemtype,
301 $t->delete_ok( "//$userid_3:$password@/api/v1/holds/$reserve_id" )
302 ->status_is(204, 'SWAGGER3.2.4')
303 ->content_is('', 'SWAGGER3.3.4');
305 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
307 ->json_has('/hold_id');
309 $reserve_id = $t->tx->res->json->{hold_id};
311 $t->get_ok( "//$userid_1:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber )
313 ->json_is('/0/hold_id', $reserve_id)
314 ->json_is('/0/item_type', $itemtype);
318 subtest 'test AllowHoldDateInFuture' => sub {
322 $dbh->do('DELETE FROM reserves');
324 my $future_hold_date = DateTime->now->add(days => 10)->truncate( to => 'day' );
327 patron_id => int($patron_1->borrowernumber),
328 biblio_id => int($biblio_1->biblionumber),
329 item_id => int($item_1->itemnumber),
330 pickup_library_id => $branchcode,
331 expiration_date => output_pref({ dt => $expiration_date, dateformat => 'rfc3339', dateonly => 1 }),
332 hold_date => output_pref({ dt => $future_hold_date, dateformat => 'rfc3339', dateonly => 1 }),
336 t::lib::Mocks::mock_preference( 'AllowHoldDateInFuture', 0 );
338 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
340 ->json_has('/error');
342 t::lib::Mocks::mock_preference( 'AllowHoldDateInFuture', 1 );
344 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
346 ->json_is('/hold_date', output_pref({ dt => $future_hold_date, dateformat => 'rfc3339', dateonly => 1 }));
349 subtest 'test AllowHoldPolicyOverride' => sub {
353 $dbh->do('DELETE FROM reserves');
355 Koha::CirculationRules->set_rules(
365 t::lib::Mocks::mock_preference( 'AllowHoldPolicyOverride', 0 );
367 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
369 ->json_has('/error');
371 t::lib::Mocks::mock_preference( 'AllowHoldPolicyOverride', 1 );
373 $t->post_ok( "//$userid_3:$password@/api/v1/holds" => json => $post_data )
377 $schema->storage->txn_rollback;
379 subtest 'suspend and resume tests' => sub {
383 $schema->storage->txn_begin;
385 my $password = 'AbcdEFG123';
387 my $patron = $builder->build_object(
388 { class => 'Koha::Patrons', value => { userid => 'tomasito', flags => 1 } } );
389 $patron->set_password({ password => $password, skip_validation => 1 });
390 my $userid = $patron->userid;
393 t::lib::Mocks::mock_preference( 'HoldsLog', 0 );
394 t::lib::Mocks::mock_preference( 'RESTBasicAuth', 1 );
396 my $hold = $builder->build_object(
397 { class => 'Koha::Holds',
398 value => { suspend => 0, suspend_until => undef, waitingdate => undef, found => undef }
402 ok( !$hold->is_suspended, 'Hold is not suspended' );
403 $t->post_ok( "//$userid:$password@/api/v1/holds/" . $hold->id . "/suspension" )
404 ->status_is( 201, 'Hold suspension created' );
406 $hold->discard_changes; # refresh object
408 ok( $hold->is_suspended, 'Hold is suspended' );
409 $t->json_is('/end_date', undef, 'Hold suspension has no end date');
411 my $end_date = output_pref({
412 dt => dt_from_string( undef ),
413 dateformat => 'rfc3339',
417 $t->post_ok( "//$userid:$password@/api/v1/holds/" . $hold->id . "/suspension" => json => { end_date => $end_date } );
419 $hold->discard_changes; # refresh object
421 ok( $hold->is_suspended, 'Hold is suspended' );
425 dt => dt_from_string( $hold->suspend_until ),
426 dateformat => 'rfc3339',
429 'Hold suspension has correct end date'
432 $t->delete_ok( "//$userid:$password@/api/v1/holds/" . $hold->id . "/suspension" )
433 ->status_is(204, 'SWAGGER3.2.4')
434 ->content_is('', 'SWAGGER3.3.4');
436 # Pass a an expiration date for the suspension
437 my $date = dt_from_string()->add( days => 5 );
439 "//$userid:$password@/api/v1/holds/"
441 . "/suspension" => json => {
443 output_pref( { dt => $date, dateformat => 'rfc3339', dateonly => 1 } )
445 )->status_is( 201, 'Hold suspension created' )
446 ->json_is( '/end_date',
447 output_pref( { dt => $date, dateformat => 'rfc3339', dateonly => 1 } ) )
448 ->header_is( Location => "/api/v1/holds/" . $hold->id . "/suspension", 'The Location header is set' );
450 $t->delete_ok( "//$userid:$password@/api/v1/holds/" . $hold->id . "/suspension" )
451 ->status_is(204, 'SWAGGER3.2.4')
452 ->content_is('', 'SWAGGER3.3.4');
454 $hold->set_waiting->discard_changes;
456 $t->post_ok( "//$userid:$password@/api/v1/holds/" . $hold->id . "/suspension" )
457 ->status_is( 400, 'Cannot suspend waiting hold' )
458 ->json_is( '/error', 'Found hold cannot be suspended. Status=W' );
460 $hold->set_waiting(1)->discard_changes;
462 $t->post_ok( "//$userid:$password@/api/v1/holds/" . $hold->id . "/suspension" )
463 ->status_is( 400, 'Cannot suspend waiting hold' )
464 ->json_is( '/error', 'Found hold cannot be suspended. Status=T' );
466 $schema->storage->txn_rollback;
469 subtest 'PUT /holds/{hold_id}/priority tests' => sub {
473 $schema->storage->txn_begin;
475 my $password = 'AbcdEFG123';
477 my $library = $builder->build_object({ class => 'Koha::Libraries' });
478 my $patron_np = $builder->build_object(
479 { class => 'Koha::Patrons', value => { flags => 0 } } );
480 $patron_np->set_password( { password => $password, skip_validation => 1 } );
481 my $userid_np = $patron_np->userid;
483 my $patron = $builder->build_object(
484 { class => 'Koha::Patrons', value => { flags => 0 } } );
485 $patron->set_password( { password => $password, skip_validation => 1 } );
486 my $userid = $patron->userid;
489 source => 'UserPermission',
491 borrowernumber => $patron->borrowernumber,
493 code => 'modify_holds_priority',
499 t::lib::Mocks::mock_preference( 'HoldsLog', 0 );
500 t::lib::Mocks::mock_preference( 'RESTBasicAuth', 1 );
502 my $biblio = $builder->build_sample_biblio;
503 my $patron_1 = $builder->build_object(
505 class => 'Koha::Patrons',
506 value => { branchcode => $library->branchcode }
509 my $patron_2 = $builder->build_object(
511 class => 'Koha::Patrons',
512 value => { branchcode => $library->branchcode }
515 my $patron_3 = $builder->build_object(
517 class => 'Koha::Patrons',
518 value => { branchcode => $library->branchcode }
522 my $hold_1 = Koha::Holds->find(
525 branchcode => $library->branchcode,
526 borrowernumber => $patron_1->borrowernumber,
527 biblionumber => $biblio->biblionumber,
532 my $hold_2 = Koha::Holds->find(
535 branchcode => $library->branchcode,
536 borrowernumber => $patron_2->borrowernumber,
537 biblionumber => $biblio->biblionumber,
542 my $hold_3 = Koha::Holds->find(
545 branchcode => $library->branchcode,
546 borrowernumber => $patron_3->borrowernumber,
547 biblionumber => $biblio->biblionumber,
553 $t->put_ok( "//$userid_np:$password@/api/v1/holds/"
555 . "/priority" => json => 1 )->status_is(403);
557 $t->put_ok( "//$userid:$password@/api/v1/holds/"
559 . "/priority" => json => 1 )->status_is(200)->json_is(1);
561 is( $hold_1->discard_changes->priority, 2, 'Priority adjusted correctly' );
562 is( $hold_2->discard_changes->priority, 3, 'Priority adjusted correctly' );
563 is( $hold_3->discard_changes->priority, 1, 'Priority adjusted correctly' );
565 $t->put_ok( "//$userid:$password@/api/v1/holds/"
567 . "/priority" => json => 3 )->status_is(200)->json_is(3);
569 is( $hold_1->discard_changes->priority, 1, 'Priority adjusted correctly' );
570 is( $hold_2->discard_changes->priority, 2, 'Priority adjusted correctly' );
571 is( $hold_3->discard_changes->priority, 3, 'Priority adjusted correctly' );
573 $schema->storage->txn_rollback;