Janady13/missionmatch / internal/platform/samgov/client_test.go

1package samgov 2 3import ( 4 "context" 5 "errors" 6 "fmt" 7 "net/http" 8 "net/http/httptest" 9 "strconv" 10 "strings" 11 "testing" 12 "time" 13) 14 15func TestSearchRejectsWindowOverOneYear(t *testing.T) { 16 c := New("http://127.0.0.1:0", "k") // must fail BEFORE any network call 17 from := time.Date(2025, 1, 1, 0, 0, 0, 0, time.UTC) 18 _, err := c.Search(context.Background(), SearchParams{ 19 PostedFrom: from, PostedTo: from.AddDate(1, 0, 1), NAICS: "541512", Limit: 10, 20 }) 21 if err == nil { 22 t.Fatal("a >1-year window must be rejected before the request is sent") 23 } 24} 25 26func TestSearchWindowBoundary(t *testing.T) { 27 // SAM accepts 364 civil days but rejects 365. The client must agree (probed live 2026 06 24). 28 srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) { 29 _, _ = w.Write([]byte(`{"totalRecords":0,"limit":1,"offset":0,"opportunitiesData":[]}`)) 30 })) 31 defer srv.Close() 32 c := New(srv.URL, "k") 33 from := time.Date(2025, 6, 25, 0, 0, 0, 0, time.UTC) 34 35 if _, err := c.Search(context.Background(), SearchParams{PostedFrom: from, PostedTo: from.AddDate(0, 0, 364), Limit: 1}); err != nil { 36 t.Fatalf("364-day window must be accepted, got %v", err) 37 } 38 if _, err := c.Search(context.Background(), SearchParams{PostedFrom: from, PostedTo: from.AddDate(0, 0, 365), Limit: 1}); err == nil { 39 t.Fatal("365-day window must be rejected before any call") 40 } 41} 42 43func TestSearchSendsApiKeyAndDates(t *testing.T) { 44 var gotKey, gotFrom, gotNcode string 45 srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { 46 gotKey = r.URL.Query().Get("api_key") 47 gotFrom = r.URL.Query().Get("postedFrom") 48 gotNcode = r.URL.Query().Get("ncode") 49 _, _ = w.Write([]byte(`{"totalRecords":0,"limit":10,"offset":0,"opportunitiesData":[]}`)) 50 })) 51 defer srv.Close() 52 53 c := New(srv.URL, "secret-key") 54 from := time.Date(2026, 5, 1, 0, 0, 0, 0, time.UTC) 55 if _, err := c.Search(context.Background(), SearchParams{ 56 PostedFrom: from, PostedTo: from.AddDate(0, 1, 0), NAICS: "541513", Limit: 10, 57 }); err != nil { 58 t.Fatalf("search: %v", err) 59 } 60 if gotKey != "secret-key" { 61 t.Fatalf("api_key must be sent as a query param, got %q", gotKey) 62 } 63 if gotFrom != "05/01/2026" { 64 t.Fatalf("postedFrom must be MM/dd/yyyy, got %q", gotFrom) 65 } 66 if gotNcode != "541513" { 67 t.Fatalf("ncode wrong: %q", gotNcode) 68 } 69} 70 71func TestSearchErrorNeverLeaksApiKey(t *testing.T) { 72 // A connection failure must not surface the api_key (url.Error embeds the full URL) [review SEC-1]. 73 c := New("http://127.0.0.1:1", "SUPERSECRETKEY") 74 from := time.Date(2026, 5, 1, 0, 0, 0, 0, time.UTC) 75 _, err := c.Search(context.Background(), SearchParams{PostedFrom: from, PostedTo: from.AddDate(0, 0, 7), Limit: 1}) 76 if err == nil { 77 t.Fatal("expected a connection error") 78 } 79 if strings.Contains(err.Error(), "SUPERSECRETKEY") || strings.Contains(err.Error(), "api_key") { 80 t.Fatalf("error must never leak the api_key: %q", err.Error()) 81 } 82} 83 84func TestSearch429MapsToThrottled(t *testing.T) { 85 srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) { 86 w.Header().Set("Retry-After", "Wed, 24 Jun 2026 00:00:00 GMT") 87 w.WriteHeader(http.StatusTooManyRequests) 88 _, _ = w.Write([]byte(`{"error":"API rate limit exceeded"}`)) 89 })) 90 defer srv.Close() 91 92 c := New(srv.URL, "k") 93 from := time.Date(2026, 5, 1, 0, 0, 0, 0, time.UTC) 94 _, err := c.Search(context.Background(), SearchParams{PostedFrom: from, PostedTo: from.AddDate(0, 0, 7), Limit: 1}) 95 if !errors.Is(err, ErrThrottled) { 96 t.Fatalf("429 must map to ErrThrottled, got %v", err) 97 } 98 var te *ThrottleError 99 if !errors.As(err, &te) || te.RetryAfter == "" { 100 t.Fatalf("Retry-After must be captured, got %+v", err) 101 } 102} 103 104// pagedHandler serves total records in pages of `limit`, generating notices on the fly. 105func pagedHandler(total int) http.HandlerFunc { 106 return func(w http.ResponseWriter, r *http.Request) { 107 limit, _ := strconv.Atoi(r.URL.Query().Get("limit")) 108 offset, _ := strconv.Atoi(r.URL.Query().Get("offset")) 109 if limit <= 0 { 110 limit = 1 111 } 112 body := fmt.Sprintf(`{"totalRecords":%d,"limit":%d,"offset":%d,"opportunitiesData":[`, total, limit, offset) 113 first := true 114 for i := offset; i < offset+limit && i < total; i++ { 115 if !first { 116 body += "," 117 } 118 first = false 119 body += fmt.Sprintf(`{"noticeId":"n%d","active":"Yes","naicsCode":"541512"}`, i) 120 } 121 body += "]}" 122 _, _ = w.Write([]byte(body)) 123 } 124} 125 126func TestSearchAllPaginatesToExhaustion(t *testing.T) { 127 srv := httptest.NewServer(pagedHandler(5)) 128 defer srv.Close() 129 130 c := New(srv.URL, "k") 131 from := time.Date(2026, 1, 1, 0, 0, 0, 0, time.UTC) 132 recs, total, capped, err := c.SearchAll(context.Background(), 133 SearchParams{PostedFrom: from, PostedTo: from.AddDate(0, 6, 0), NAICS: "541512", Limit: 2}, 10) 134 if err != nil { 135 t.Fatalf("search all: %v", err) 136 } 137 if total != 5 || len(recs) != 5 { 138 t.Fatalf("expected all 5 records, got total=%d len=%d", total, len(recs)) 139 } 140 if capped { 141 t.Fatal("should have exhausted, not capped") 142 } 143 if recs[0].Op.NoticeID != "n0" || recs[4].Op.NoticeID != "n4" { 144 t.Fatalf("pagination order wrong: %q .. %q", recs[0].Op.NoticeID, recs[4].Op.NoticeID) 145 } 146} 147 148func TestSearchAllRespectsPageCap(t *testing.T) { 149 srv := httptest.NewServer(pagedHandler(100)) 150 defer srv.Close() 151 152 c := New(srv.URL, "k") 153 from := time.Date(2026, 1, 1, 0, 0, 0, 0, time.UTC) 154 recs, total, capped, err := c.SearchAll(context.Background(), 155 SearchParams{PostedFrom: from, PostedTo: from.AddDate(0, 6, 0), Limit: 2}, 2) // 2 pages * 2 = 4 of 100 156 if err != nil { 157 t.Fatalf("search all: %v", err) 158 } 159 if len(recs) != 4 || total != 100 || !capped { 160 t.Fatalf("page cap not honored: len=%d total=%d capped=%v", len(recs), total, capped) 161 } 162} 163 164func TestSearchAllReturnsPartialOnThrottle(t *testing.T) { 165 var calls int 166 srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { 167 calls++ 168 if calls == 1 { 169 _, _ = w.Write([]byte(`{"totalRecords":10,"limit":2,"offset":0,"opportunitiesData":[` + 170 `{"noticeId":"n0","active":"Yes"},{"noticeId":"n1","active":"Yes"}]}`)) 171 return 172 } 173 w.WriteHeader(http.StatusTooManyRequests) 174 _, _ = w.Write([]byte(`{"error":"rate limit"}`)) 175 })) 176 defer srv.Close() 177 178 c := New(srv.URL, "k") 179 from := time.Date(2026, 1, 1, 0, 0, 0, 0, time.UTC) 180 recs, _, _, err := c.SearchAll(context.Background(), 181 SearchParams{PostedFrom: from, PostedTo: from.AddDate(0, 6, 0), Limit: 2}, 10) 182 if !errors.Is(err, ErrThrottled) { 183 t.Fatalf("a 429 mid-run must surface ErrThrottled, got %v", err) 184 } 185 if len(recs) != 2 { 186 t.Fatalf("partial progress must be returned, got %d records", len(recs)) 187 } 188} 189