added public api for shipments

core/shipments/tests/v2/test_api.py

@@ -322,3 +322,274 @@ class ShipmentApiTest(TestCase):
         # Verify state hasn't changed
         shipment.refresh_from_db()
         self.assertEqual(shipment.state, Shipment.PENDING_REVIEW)
+
+    def test_public_shipment_detail_success(self):
+        """Test retrieving shipment details via public API with valid public_secret"""
+        # Create a shipment in PENDING_REVIEW state
+        shipment = Shipment.objects.create(
+            recipient_name='John Doe',
+            street_address='123 Main St',
+            city='Anytown',
+            state_province='State',
+            postal_code='12345',
+            country='Country',
+            state=Shipment.PENDING_REVIEW,
+            review_requirement=Shipment.REVIEW_ADDRESS
+        )
+        shipment.related_items.add(self.item1)
+        
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test retrieving shipment details
+        response = public_client.get(f'/api/2/public/shipments/{shipment.public_secret}/')
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(response.json()['id'], shipment.id)
+        self.assertEqual(response.json()['recipient_name'], 'John Doe')
+        self.assertEqual(response.json()['state'], Shipment.PENDING_REVIEW)
+        self.assertEqual(len(response.json()['related_items']), 1)
+
+    def test_public_shipment_detail_not_found(self):
+        """Test retrieving shipment details with non-existent public_secret"""
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test with non-existent public_secret
+        response = public_client.get('/api/2/public/shipments/00000000-0000-0000-0000-000000000000/')
+        self.assertEqual(response.status_code, 404)
+
+    def test_public_shipment_detail_wrong_state(self):
+        """Test retrieving shipment details when shipment is not in PENDING_REVIEW state"""
+        # Create a shipment in CREATED state
+        shipment = Shipment.objects.create(
+            recipient_name='Jane Smith',
+            street_address='456 Oak Ave',
+            city='Somewhere',
+            state_province='Province',
+            postal_code='67890',
+            country='Nation',
+            state=Shipment.CREATED
+        )
+        
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test retrieving shipment details
+        response = public_client.get(f'/api/2/public/shipments/{shipment.public_secret}/')
+        self.assertEqual(response.status_code, 404)
+
+    def test_public_shipment_update_success_address_only(self):
+        """Test updating shipment with address information when review_requirement is ADDRESS"""
+        # Create a shipment in PENDING_REVIEW state with ADDRESS review requirement
+        shipment = Shipment.objects.create(
+            recipient_name='Alice Johnson',
+            street_address='789 Pine Rd',
+            city='Nowhere',
+            state_province='Region',
+            postal_code='13579',
+            country='Land',
+            state=Shipment.PENDING_REVIEW,
+            review_requirement=Shipment.REVIEW_ADDRESS
+        )
+        shipment.related_items.add(self.item1)
+        
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test updating shipment with address information
+        data = {
+            'recipient_name': 'Alice Johnson',
+            'street_address': '789 Pine Rd, Apt 4B',
+            'city': 'Nowhere',
+            'state_province': 'Region',
+            'postal_code': '13579',
+            'country': 'Land'
+        }
+        response = public_client.post(
+            f'/api/2/public/shipments/{shipment.public_secret}/update/',
+            data,
+            content_type='application/json'
+        )
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(response.json()['state'], Shipment.READY_FOR_SHIPPING)
+        self.assertEqual(response.json()['street_address'], '789 Pine Rd, Apt 4B')
+        
+        # Verify state has changed
+        shipment.refresh_from_db()
+        self.assertEqual(shipment.state, Shipment.READY_FOR_SHIPPING)
+
+    def test_public_shipment_update_success_both_review(self):
+        """Test updating shipment with address information when review_requirement is BOTH"""
+        # Create a shipment in PENDING_REVIEW state with BOTH review requirement
+        shipment = Shipment.objects.create(
+            recipient_name='Bob Wilson',
+            street_address='321 Elm St',
+            city='Elsewhere',
+            state_province='Territory',
+            postal_code='24680',
+            country='Realm',
+            state=Shipment.PENDING_REVIEW,
+            review_requirement=Shipment.REVIEW_BOTH
+        )
+        shipment.related_items.add(self.item1)
+        
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test updating shipment with address information
+        data = {
+            'recipient_name': 'Bob Wilson',
+            'street_address': '321 Elm St, Suite 7',
+            'city': 'Elsewhere',
+            'state_province': 'Territory',
+            'postal_code': '24680',
+            'country': 'Realm'
+        }
+        response = public_client.post(
+            f'/api/2/public/shipments/{shipment.public_secret}/update/',
+            data,
+            content_type='application/json'
+        )
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(response.json()['state'], Shipment.READY_FOR_SHIPPING)
+        self.assertEqual(response.json()['street_address'], '321 Elm St, Suite 7')
+        
+        # Verify state has changed
+        shipment.refresh_from_db()
+        self.assertEqual(shipment.state, Shipment.READY_FOR_SHIPPING)
+
+    def test_public_shipment_update_success_items_only(self):
+        """Test updating shipment with address information when review_requirement is ITEMS"""
+        # Create a shipment in PENDING_REVIEW state with ITEMS review requirement
+        shipment = Shipment.objects.create(
+            recipient_name='Carol Davis',
+            street_address='654 Maple Dr',
+            city='Anywhere',
+            state_province='District',
+            postal_code='97531',
+            country='Kingdom',
+            state=Shipment.PENDING_REVIEW,
+            review_requirement=Shipment.REVIEW_ITEMS
+        )
+        shipment.related_items.add(self.item1)
+        
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test updating shipment with address information
+        data = {
+            'recipient_name': 'Carol Davis',
+            'street_address': '654 Maple Dr, Unit 3',
+            'city': 'Anywhere',
+            'state_province': 'District',
+            'postal_code': '97531',
+            'country': 'Kingdom'
+        }
+        response = public_client.post(
+            f'/api/2/public/shipments/{shipment.public_secret}/update/',
+            data,
+            content_type='application/json'
+        )
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(response.json()['state'], Shipment.PENDING_REVIEW)  # State should not change
+        self.assertEqual(response.json()['street_address'], '654 Maple Dr, Unit 3')
+        
+        # Verify state has not changed
+        shipment.refresh_from_db()
+        self.assertEqual(shipment.state, Shipment.PENDING_REVIEW)
+
+    def test_public_shipment_update_not_found(self):
+        """Test updating shipment with non-existent public_secret"""
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test with non-existent public_secret
+        data = {
+            'recipient_name': 'Unknown Person',
+            'street_address': '123 Fake St',
+            'city': 'Fake City',
+            'state_province': 'Fake State',
+            'postal_code': '12345',
+            'country': 'Fake Country'
+        }
+        response = public_client.post(
+            '/api/2/public/shipments/00000000-0000-0000-0000-000000000000/update/',
+            data,
+            content_type='application/json'
+        )
+        self.assertEqual(response.status_code, 404)
+
+    def test_public_shipment_update_wrong_state(self):
+        """Test updating shipment when it's not in PENDING_REVIEW state"""
+        # Create a shipment in CREATED state
+        shipment = Shipment.objects.create(
+            recipient_name='David Lee',
+            street_address='987 Cedar Ln',
+            city='Nowhere',
+            state_province='Province',
+            postal_code='13579',
+            country='Country',
+            state=Shipment.CREATED
+        )
+        
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test updating shipment
+        data = {
+            'recipient_name': 'David Lee',
+            'street_address': '987 Cedar Ln, Apt 2C',
+            'city': 'Nowhere',
+            'state_province': 'Province',
+            'postal_code': '13579',
+            'country': 'Country'
+        }
+        response = public_client.post(
+            f'/api/2/public/shipments/{shipment.public_secret}/update/',
+            data,
+            content_type='application/json'
+        )
+        self.assertEqual(response.status_code, 404)
+        
+        # Verify state hasn't changed
+        shipment.refresh_from_db()
+        self.assertEqual(shipment.state, Shipment.CREATED)
+
+    def test_public_shipment_update_both_review_missing_items(self):
+        """Test updating shipment with BOTH review requirement when items are missing"""
+        # Create a shipment in PENDING_REVIEW state with BOTH review requirement but no items
+        shipment = Shipment.objects.create(
+            recipient_name='Eve Brown',
+            street_address='147 Birch Ave',
+            city='Somewhere',
+            state_province='Region',
+            postal_code='24680',
+            country='Land',
+            state=Shipment.PENDING_REVIEW,
+            review_requirement=Shipment.REVIEW_BOTH
+        )
+        
+        # Create a client without authentication
+        public_client = Client()
+        
+        # Test updating shipment with address information
+        data = {
+            'recipient_name': 'Eve Brown',
+            'street_address': '147 Birch Ave, Suite 5',
+            'city': 'Somewhere',
+            'state_province': 'Region',
+            'postal_code': '24680',
+            'country': 'Land'
+        }
+        response = public_client.post(
+            f'/api/2/public/shipments/{shipment.public_secret}/update/',
+            data,
+            content_type='application/json'
+        )
+        self.assertEqual(response.status_code, 400)
+        self.assertIn('error', response.json())
+        self.assertIn('Items must be added before approval', response.json()['error'])
+        
+        # Verify state hasn't changed
+        shipment.refresh_from_db()
+        self.assertEqual(shipment.state, Shipment.PENDING_REVIEW)