euchre_camp/e2e/cucumber/step-definitions/auth-steps.ts

/**
 * Authentication step definitions for EuchreCamp E2E tests
 * 
 * These steps interact ONLY with the browser UI - no direct database access.
 * All user creation happens via the registration/login UI.
 */

import { Given, When, Then } from '@cucumber/cucumber';
import { expect } from '@playwright/test';
import { world } from '../support/world';

// Generate unique test credentials
function generateTestCredentials() {
  const timestamp = Date.now();
  return {
    email: `cucumber-test-${timestamp}@example.com`,
    password: 'TestPassword123!',
    name: `Cucumber Test User ${timestamp}`
  };
}

/**
 * Precondition: I am logged in as a player
 * Creates a new user via the registration UI
 */
Given('I am logged in as a player', async function () {
  console.log('🌍 Creating and logging in as a player via UI...');
  
  const credentials = generateTestCredentials();
  world.user = credentials;
  
  // Navigate to registration page
  await world.page.goto(`${world.baseURL}/auth/register`);
  await world.page.waitForLoadState('networkidle');
  
  // Fill registration form
  await world.page.fill('input[name="name"]', credentials.name);
  await world.page.fill('input[name="email"]', credentials.email);
  await world.page.fill('input[name="password"]', credentials.password);
  
  // Submit form
  await world.page.click('button[type="submit"]');
  
  // Wait for redirect to profile page
  try {
    await world.page.waitForURL(/\/players\/\d+\/profile/, { timeout: 10000 });
    console.log(`🌍 Player created and logged in: ${credentials.email}`);
  } catch (e) {
    // If redirect doesn't happen, check if we're still on the page
    console.log('🌍 Registration may have failed or redirected elsewhere');
    console.log('🌍 Current URL:', world.page.url());
  }
});

/**
 * Precondition: I am logged in as a tournament admin
 * Note: In the actual app, admin roles are assigned by club admins or via API.
 * For acceptance tests, we'll use the default player role and test admin features
 * as the dev site would handle them.
 */
Given('I am logged in as a tournament admin', async function () {
  console.log('🌍 Creating and logging in as a player (tournament admin role is assigned via UI/API)...');
  // For now, use the same flow as player
  // In real usage, the admin would either:
  // 1. Be pre-created on the dev site
  // 2. Have role assigned via API
  // 3. Use the admin dashboard to manage users
  
  const credentials = generateTestCredentials();
  world.user = credentials;
  
  await world.page.goto(`${world.baseURL}/auth/register`);
  await world.page.waitForLoadState('networkidle');
  
  await world.page.fill('input[name="name"]', credentials.name);
  await world.page.fill('input[name="email"]', credentials.email);
  await world.page.fill('input[name="password"]', credentials.password);
  
  await world.page.click('button[type="submit"]');
  await world.page.waitForLoadState('networkidle');
  
  console.log(`🌍 User created: ${credentials.email}`);
});

/**
 * Precondition: I am logged in as a club admin
 */
Given('I am logged in as a club admin', async function () {
  console.log('🌍 Creating and logging in as a club admin...');
  
  const credentials = generateTestCredentials();
  world.user = credentials;
  
  await world.page.goto(`${world.baseURL}/auth/register`);
  await world.page.waitForLoadState('networkidle');
  
  await world.page.fill('input[name="name"]', credentials.name);
  await world.page.fill('input[name="email"]', credentials.email);
  await world.page.fill('input[name="password"]', credentials.password);
  
  await world.page.click('button[type="submit"]');
  await world.page.waitForLoadState('networkidle');
  
  console.log(`🌍 User created: ${credentials.email}`);
});

/**
 * Registration steps (UI-only)
 */
When('I register with valid credentials', async function () {
  const credentials = generateTestCredentials();
  world.user = credentials;
  
  await world.page.goto(`${world.baseURL}/auth/register`);
  await world.page.waitForLoadState('networkidle');
  
  await world.page.fill('input[name="name"]', credentials.name);
  await world.page.fill('input[name="email"]', credentials.email);
  await world.page.fill('input[name="password"]', credentials.password);
  
  await world.page.click('button[type="submit"]');
  
  console.log(`🌍 Registered with credentials: ${credentials.email}`);
});

When('I register with duplicate email', async function () {
  if (!world.user) {
    throw new Error('No existing user to duplicate');
  }
  
  await world.page.goto(`${world.baseURL}/auth/register`);
  await world.page.waitForLoadState('networkidle');
  
  await world.page.fill('input[name="name"]', world.user.name);
  await world.page.fill('input[name="email"]', world.user.email);
  await world.page.fill('input[name="password"]', world.user.password);
  
  await world.page.click('button[type="submit"]');
  
  console.log(`🌍 Attempted registration with duplicate: ${world.user.email}`);
});

When('I fill in {string} with the same email', async function (fieldName: string) {
  if (!world.user) {
    throw new Error('No user credentials available');
  }
  
  const selector = `input[name="email"]`;
  console.log(`🌍 Filling ${fieldName} with same email: ${world.user.email}`);
  await world.page.fill(selector, world.user.email);
});

When('I register with weak password', async function () {
  const credentials = generateTestCredentials();
  credentials.password = 'weak'; // Too short
  
  await world.page.goto(`${world.baseURL}/auth/register`);
  await world.page.waitForLoadState('networkidle');
  
  await world.page.fill('input[name="name"]', credentials.name);
  await world.page.fill('input[name="email"]', credentials.email);
  await world.page.fill('input[name="password"]', credentials.password);
  
  await world.page.click('button[type="submit"]');
  
  console.log('🌍 Attempted registration with weak password');
});

/**
 * Login steps (UI-only)
 */
When('I log in with valid credentials', async function () {
  if (!world.user) {
    throw new Error('No user credentials available');
  }
  
  await world.page.goto(`${world.baseURL}/auth/login`);
  await world.page.waitForLoadState('networkidle');
  
  await world.page.fill('input[name="email"]', world.user.email);
  await world.page.fill('input[name="password"]', world.user.password);
  
  await world.page.click('button[type="submit"]');
  
  console.log(`🌍 Logged in as: ${world.user.email}`);
});

When('I log in with invalid credentials', async function () {
  await world.page.goto(`${world.baseURL}/auth/login`);
  await world.page.waitForLoadState('networkidle');
  
  await world.page.fill('input[name="email"]', 'nonexistent@example.com');
  await world.page.fill('input[name="password"]', 'wrongpassword');
  
  await world.page.click('button[type="submit"]');
  
  console.log('🌍 Attempted login with invalid credentials');
});

/**
 * Logout steps (UI-only)
 */
When('I log out', async function () {
  // Click on logout button
  await world.page.click('text=Sign out');
  
  console.log('🌍 Logged out');
});

/**
 * Verification steps (browser-based)
 */
Then('I should be logged in', async function () {
  // Check for logout button or user menu
  await expect(world.page.locator('text=Sign out')).toBeVisible();
  console.log('🌍 Verified user is logged in');
});

Then('I should not be logged in', async function () {
  // Check that we're on login page or don't see logout button
  const currentUrl = world.page.url();
  expect(currentUrl).toContain('/auth/login');
  console.log('🌍 Verified user is not logged in');
});

Then('I should see a registration error', async function () {
  // Check for error message in page content
  const content = await world.page.content();
  expect(content).toContain('error');
  console.log('🌍 Verified registration error is visible');
});

Then('I should see an error message', async function () {
  // Check for any error message on the page
  const content = await world.page.content();
  expect(content).toMatch(/error|Error/i);
  console.log('🌍 Verified error message is visible');
});

Then('I should remain on the login page', async function () {
  const currentUrl = world.page.url();
  expect(currentUrl).toContain('/auth/login');
  console.log('🌍 Verified still on login page');
});

Then('I should remain on the registration page', async function () {
  const currentUrl = world.page.url();
  expect(currentUrl).toContain('/auth/register');
  console.log('🌍 Verified still on registration page');
});

/**
 * Helper: Verify user was created via UI (no database check)
 */
Then('my user account should exist', async function () {
  if (!world.user) {
    throw new Error('No user credentials available');
  }
  
  // We can't check the database directly in acceptance tests
  // Instead, verify we're logged in (user profile page)
  await expect(world.page.locator('text=Welcome')).toBeVisible();
  console.log('🌍 Verified user account was created successfully');
});

/**
 * Schedule steps
 */
When('I go to my schedule page', async function () {
  console.log('🌍 Going to schedule page');
  // Navigate to the schedule page
  // The URL pattern would be /players/{playerId}/schedule
  // We'll navigate to /players/schedule which should redirect or work
  await world.page.goto(`${world.baseURL}/players/schedule`);
  await world.page.waitForLoadState('networkidle');
});

Given('I have upcoming matches in my schedule', async function () {
  console.log('🌍 Note: This step requires database setup via API or UI');
  console.log('🌍 For acceptance tests, this would be set up before running the test');
  // For true acceptance testing, we would:
  // 1. Create a tournament
  // 2. Add the player as a participant
  // 3. Generate a schedule
  // 4. The match would then appear in the player's schedule
  
  // For now, this is a placeholder that indicates data setup is needed
  // In a real test run, this data would already exist in the dev database
});