feat(notifications): support dismissing notifications in PostIt

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

src/test/Yavsc.Api.Tests/DismissClicksApiControllerTests.cs

@@ -0,0 +1,98 @@
+using System.Net;
+using System.Net.Http.Headers;
+using System.Net.Http.Json;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.DependencyInjection;
+using Yavsc.Abstract.Models.Messaging;
+using Yavsc.Api.Test.Fixtures;
+using Yavsc.Models;
+using Yavsc.Tests.Shared;
+
+namespace Yavsc.Api.Test;
+
+[Collection("Yavsc Api")]
+public sealed class DismissClicksApiControllerTests(ApiWebServerFixture fixture) : IClassFixture<ApiWebServerFixture>
+{
+    private HttpClient NewClient(string? subject = "alice")
+    {
+        var http = new HttpClient(new HttpClientHandler
+        {
+            ServerCertificateCustomValidationCallback = (_, _, _, _) => true
+        })
+        {
+            BaseAddress = new Uri(fixture.BaseAddress)
+        };
+        if (subject != null)
+            http.DefaultRequestHeaders.Authorization =
+                new AuthenticationHeaderValue("Bearer", TestTokenIssuer.Issue(subject, "api"));
+        return http;
+    }
+
+    private async Task<long> SeedNotificationAsync()
+    {
+        fixture.ResetAndSeedActivityGraph();
+        using var scope = fixture.Services.CreateScope();
+        var db = scope.ServiceProvider.GetRequiredService<ApplicationDbContext>();
+        var note = new Notification { title = "Info", body = "Corps", click_action = "Fermer" };
+        db.Notification.Add(note);
+        await db.SaveChangesAsync(TestContext.Current.CancellationToken);
+        return note.Id;
+    }
+
+    [Fact]
+    public async Task Click_dismisses_once_and_hides_the_notification_for_the_user()
+    {
+        var id = await SeedNotificationAsync();
+        var ct = TestContext.Current.CancellationToken;
+        using var http = NewClient();
+
+        for (var i = 0; i < 2; i++)
+        {
+            var response = await http.PostAsync($"/api/v1/dismiss/click/{id}", null, ct);
+            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
+            var dto = await response.Content.ReadFromJsonAsync<DismissedNotification>(ct);
+            Assert.Equal(id, dto!.NotificationId);
+        }
+
+        var dismissed = await http.GetFromJsonAsync<List<DismissedNotification>>("/api/v1/dismiss", ct);
+        Assert.Equal(id, Assert.Single(dismissed!).NotificationId);
+
+        var visible = await http.GetFromJsonAsync<List<Notification>>("/api/v1/notifications/me", ct);
+        Assert.DoesNotContain(visible!, n => n.Id == id);
+
+        using (var scope = fixture.Services.CreateScope())
+        {
+            var db = scope.ServiceProvider.GetRequiredService<ApplicationDbContext>();
+            Assert.Equal(1, await db.DismissClicked.CountAsync(d => d.UserId == "alice" && d.NotificationId == id, ct));
+        }
+
+        var restore = await http.DeleteAsync($"/api/v1/dismiss/click/{id}", ct);
+        Assert.Equal(HttpStatusCode.NoContent, restore.StatusCode);
+        visible = await http.GetFromJsonAsync<List<Notification>>("/api/v1/notifications/me", ct);
+        Assert.Contains(visible!, n => n.Id == id);
+    }
+
+    [Fact]
+    public async Task Click_on_an_unknown_notification_returns_not_found()
+    {
+        var id = await SeedNotificationAsync();
+        using var http = NewClient();
+
+        var response = await http.PostAsync($"/api/v1/dismiss/click/{id + 1000}", null,
+            TestContext.Current.CancellationToken);
+
+        Assert.Equal(HttpStatusCode.NotFound, response.StatusCode);
+    }
+
+    [Fact]
+    public async Task Click_requires_authentication()
+    {
+        var id = await SeedNotificationAsync();
+        using var http = NewClient(null);
+
+        var response = await http.PostAsync($"/api/v1/dismiss/click/{id}", null,
+            TestContext.Current.CancellationToken);
+
+        Assert.Equal(HttpStatusCode.Unauthorized, response.StatusCode);
+    }
+}