Mainflux.mainflux/auth/postgres/groups_test.go

// Copyright (c) Mainflux
// SPDX-License-Identifier: Apache-2.0

package postgres_test

import (
	"context"
	"fmt"
	"strings"
	"testing"
	"time"

	"github.com/mainflux/mainflux/auth"
	"github.com/mainflux/mainflux/auth/postgres"
	"github.com/mainflux/mainflux/pkg/errors"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
)

const (
	maxNameSize = 254
	maxDescSize = 1024
	groupName   = "Mainflux"
	description = "description"
)

var (
	invalidName = strings.Repeat("m", maxNameSize+1)
	invalidDesc = strings.Repeat("m", maxDescSize+1)
	metadata    = auth.GroupMetadata{
		"admin": "true",
	}
)

func generateGroupID(t *testing.T) string {
	grpID, err := ulidProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))
	return grpID
}

func TestGroupSave(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	usrID, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	wrongID, err := ulidProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	grpID := generateGroupID(t)

	cases := []struct {
		desc  string
		group auth.Group
		err   error
	}{
		{
			desc: "create new group",
			group: auth.Group{
				ID:      grpID,
				OwnerID: usrID,
				Name:    groupName,
			},
			err: nil,
		},
		{
			desc: "create new group with existing name",
			group: auth.Group{
				ID:      grpID,
				OwnerID: usrID,
				Name:    groupName,
			},
			err: errors.ErrConflict,
		},
		{
			desc: "create group with invalid name",
			group: auth.Group{
				ID:      generateGroupID(t),
				OwnerID: usrID,
				Name:    invalidName,
			},
			err: errors.ErrMalformedEntity,
		},
		{
			desc: "create group with invalid description",
			group: auth.Group{
				ID:          generateGroupID(t),
				OwnerID:     usrID,
				Name:        groupName,
				Description: invalidDesc,
			},
			err: errors.ErrMalformedEntity,
		},
		{
			desc: "create group with parent",
			group: auth.Group{
				ID:       generateGroupID(t),
				ParentID: grpID,
				OwnerID:  usrID,
				Name:     "withParent",
			},
			err: nil,
		},
		{
			desc: "create group with parent and existing name",
			group: auth.Group{
				ID:       generateGroupID(t),
				ParentID: grpID,
				OwnerID:  usrID,
				Name:     groupName,
			},
			err: nil,
		},
		{
			desc: "create group with wrong parent",
			group: auth.Group{
				ID:       generateGroupID(t),
				ParentID: wrongID,
				OwnerID:  usrID,
				Name:     "wrongParent",
			},
			err: errors.ErrCreateEntity,
		},
	}

	for _, tc := range cases {
		_, err := groupRepo.Save(context.Background(), tc.group)
		assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
	}

}

func TestGroupRetrieveByID(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	require.Nil(t, err, fmt.Sprintf("group id unexpected error: %s", err))
	group1 := auth.Group{
		ID:      generateGroupID(t),
		Name:    groupName + "TestGroupRetrieveByID1",
		OwnerID: uid,
	}

	_, err = groupRepo.Save(context.Background(), group1)
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	retrieved, err := groupRepo.RetrieveByID(context.Background(), group1.ID)
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))
	assert.True(t, retrieved.ID == group1.ID, fmt.Sprintf("Save group, ID: expected %s got %s\n", group1.ID, retrieved.ID))

	// Round to milliseconds as otherwise saving and retriving from DB
	// adds rounding error.
	creationTime := time.Now().UTC().Round(time.Millisecond)
	group2 := auth.Group{
		ID:          generateGroupID(t),
		Name:        groupName + "TestGroupRetrieveByID",
		OwnerID:     uid,
		ParentID:    group1.ID,
		CreatedAt:   creationTime,
		UpdatedAt:   creationTime,
		Description: description,
		Metadata:    metadata,
	}

	_, err = groupRepo.Save(context.Background(), group2)
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	retrieved, err = groupRepo.RetrieveByID(context.Background(), group2.ID)
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))
	assert.True(t, retrieved.ID == group2.ID, fmt.Sprintf("Save group, ID: expected %s got %s\n", group2.ID, retrieved.ID))
	assert.True(t, retrieved.CreatedAt.Equal(creationTime), fmt.Sprintf("Save group, CreatedAt: expected %s got %s\n", creationTime, retrieved.CreatedAt))
	assert.True(t, retrieved.UpdatedAt.Equal(creationTime), fmt.Sprintf("Save group, UpdatedAt: expected %s got %s\n", creationTime, retrieved.UpdatedAt))
	assert.True(t, retrieved.Level == 2, fmt.Sprintf("Save group, Level: expected %d got %d\n", retrieved.Level, 2))
	assert.True(t, retrieved.ParentID == group1.ID, fmt.Sprintf("Save group, Level: expected %s got %s\n", group1.ID, retrieved.ParentID))
	assert.True(t, retrieved.Description == description, fmt.Sprintf("Save group, Description: expected %v got %v\n", retrieved.Description, description))
	assert.True(t, retrieved.Path == fmt.Sprintf("%s.%s", group1.ID, group2.ID), fmt.Sprintf("Save group, Path: expected %s got %s\n", fmt.Sprintf("%s.%s", group1.ID, group2.ID), retrieved.Path))

	retrieved, err = groupRepo.RetrieveByID(context.Background(), generateGroupID(t))
	assert.True(t, errors.Contains(err, errors.ErrNotFound), fmt.Sprintf("Retrieve group: expected %s got %s\n", errors.ErrNotFound, err))
}

func TestGroupUpdate(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	creationTime := time.Now().UTC()
	updateTime := time.Now().UTC()
	groupID := generateGroupID(t)

	group := auth.Group{
		ID:          groupID,
		Name:        groupName + "TestGroupUpdate",
		OwnerID:     uid,
		CreatedAt:   creationTime,
		UpdatedAt:   creationTime,
		Description: description,
		Metadata:    metadata,
	}

	_, err = groupRepo.Save(context.Background(), group)
	require.Nil(t, err, fmt.Sprintf("group save got unexpected error: %s", err))

	retrieved, err := groupRepo.RetrieveByID(context.Background(), group.ID)
	require.Nil(t, err, fmt.Sprintf("group save got unexpected error: %s", err))

	cases := []struct {
		desc          string
		groupUpdate   auth.Group
		groupExpected auth.Group
		err           error
	}{
		{
			desc: "update group for existing id",
			groupUpdate: auth.Group{
				ID:        groupID,
				Name:      groupName + "Updated",
				UpdatedAt: updateTime,
				Metadata:  auth.GroupMetadata{"admin": "false"},
			},
			groupExpected: auth.Group{
				Name:      groupName + "Updated",
				UpdatedAt: updateTime,
				Metadata:  auth.GroupMetadata{"admin": "false"},
				CreatedAt: retrieved.CreatedAt,
				Path:      retrieved.Path,
				ParentID:  retrieved.ParentID,
				ID:        retrieved.ID,
				Level:     retrieved.Level,
			},
			err: nil,
		},
		{
			desc: "update group for non-existing id",
			groupUpdate: auth.Group{
				ID:   "wrong",
				Name: groupName + "-2",
			},
			err: errors.ErrUpdateEntity,
		},
		{
			desc: "update group for invalid name",
			groupUpdate: auth.Group{
				ID:   groupID,
				Name: invalidName,
			},
			err: errors.ErrMalformedEntity,
		},
		{
			desc: "update group for invalid description",
			groupUpdate: auth.Group{
				ID:          groupID,
				Description: invalidDesc,
			},
			err: errors.ErrMalformedEntity,
		},
	}

	for _, tc := range cases {
		updated, err := groupRepo.Update(context.Background(), tc.groupUpdate)
		assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
		if tc.desc == "update group for existing id" {
			assert.True(t, updated.Level == tc.groupExpected.Level, fmt.Sprintf("%s:Level: expected %d got %d\n", tc.desc, tc.groupExpected.Level, updated.Level))
			assert.True(t, updated.Name == tc.groupExpected.Name, fmt.Sprintf("%s:Name: expected %s got %s\n", tc.desc, tc.groupExpected.Name, updated.Name))
			assert.True(t, updated.Metadata["admin"] == tc.groupExpected.Metadata["admin"], fmt.Sprintf("%s:Level: expected %d got %d\n", tc.desc, tc.groupExpected.Metadata["admin"], updated.Metadata["admin"]))
		}
	}
}

func TestGroupDelete(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	creationTime := time.Now().UTC()
	groupParent := auth.Group{
		ID:        generateGroupID(t),
		Name:      groupName + "Updated",
		OwnerID:   uid,
		CreatedAt: creationTime,
		UpdatedAt: creationTime,
	}

	groupParent, err = groupRepo.Save(context.Background(), groupParent)
	require.Nil(t, err, fmt.Sprintf("group save got unexpected error: %s", err))

	creationTime = time.Now().UTC()
	groupChild1 := auth.Group{
		ID:        generateGroupID(t),
		ParentID:  groupParent.ID,
		Name:      groupName + "child1",
		OwnerID:   uid,
		CreatedAt: creationTime,
		UpdatedAt: creationTime,
	}

	creationTime = time.Now().UTC()
	groupChild2 := auth.Group{
		ID:        generateGroupID(t),
		ParentID:  groupParent.ID,
		Name:      groupName + "child2",
		OwnerID:   uid,
		CreatedAt: creationTime,
		UpdatedAt: creationTime,
	}

	meta := auth.PageMetadata{
		Level: auth.MaxLevel,
	}

	groupChild1, err = groupRepo.Save(context.Background(), groupChild1)
	require.Nil(t, err, fmt.Sprintf("group save got unexpected error: %s", err))

	groupChild2, err = groupRepo.Save(context.Background(), groupChild2)
	require.Nil(t, err, fmt.Sprintf("group save got unexpected error: %s", err))

	gp, err := groupRepo.RetrieveAllChildren(context.Background(), groupParent.ID, meta)
	assert.True(t, errors.Contains(err, nil), fmt.Sprintf("Retrieve children for parent: expected %v got %v\n", nil, err))
	assert.True(t, gp.Total == 3, fmt.Sprintf("Number of children + parent: expected %d got %d\n", 3, gp.Total))

	thingID, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("thing id create unexpected error: %s", err))

	err = groupRepo.Assign(context.Background(), groupChild1.ID, "things", thingID)
	require.Nil(t, err, fmt.Sprintf("thing assign got unexpected error: %s", err))

	err = groupRepo.Delete(context.Background(), groupChild1.ID)
	assert.True(t, errors.Contains(err, auth.ErrGroupNotEmpty), fmt.Sprintf("delete non empty group: expected %v got %v\n", auth.ErrGroupNotEmpty, err))

	err = groupRepo.Delete(context.Background(), groupChild2.ID)
	assert.True(t, errors.Contains(err, nil), fmt.Sprintf("delete empty group: expected %v got %v\n", nil, err))

	err = groupRepo.Delete(context.Background(), groupParent.ID)
	assert.True(t, errors.Contains(err, auth.ErrGroupNotEmpty), fmt.Sprintf("delete parent with children with members: expected %v got %v\n", auth.ErrGroupNotEmpty, err))

	gp, err = groupRepo.RetrieveAllChildren(context.Background(), groupParent.ID, meta)
	assert.True(t, errors.Contains(err, nil), fmt.Sprintf("retrieve children after one child removed: expected %v got %v\n", nil, err))
	assert.True(t, gp.Total == 2, fmt.Sprintf("number of children + parent: expected %d got %d\n", 2, gp.Total))

	err = groupRepo.Unassign(context.Background(), groupChild1.ID, thingID)
	require.Nil(t, err, fmt.Sprintf("failed to remove thing from a group error: %s", err))

	err = groupRepo.Delete(context.Background(), groupParent.ID)
	assert.True(t, errors.Contains(err, nil), fmt.Sprintf("delete parent with children with no members: expected %v got %v\n", nil, err))

	_, err = groupRepo.RetrieveByID(context.Background(), groupChild1.ID)
	assert.True(t, errors.Contains(err, errors.ErrNotFound), fmt.Sprintf("retrieve child after parent removed: expected %v got %v\n", nil, err))
}

func TestRetrieveAll(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)
	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	metadata := auth.PageMetadata{
		Metadata: auth.GroupMetadata{
			"field": "value",
		},
		Level: auth.MaxLevel,
	}
	wrongMeta := auth.PageMetadata{
		Metadata: auth.GroupMetadata{
			"wrong": "wrong",
		},
		Level: auth.MaxLevel,
	}

	metaNum := uint64(3)

	n := uint64(auth.MaxLevel)
	parentID := ""
	for i := uint64(0); i < n; i++ {
		creationTime := time.Now().UTC()
		group := auth.Group{
			ID:        generateGroupID(t),
			Name:      fmt.Sprintf("%s-%d", groupName, i),
			OwnerID:   uid,
			ParentID:  parentID,
			CreatedAt: creationTime,
			UpdatedAt: creationTime,
		}
		// Create Groups with metadata.
		if i < metaNum {
			group.Metadata = metadata.Metadata
		}

		_, err = groupRepo.Save(context.Background(), group)
		require.Nil(t, err, fmt.Sprintf("unexpected error: %s\n", err))
		parentID = group.ID
	}

	cases := map[string]struct {
		Size     uint64
		Metadata auth.PageMetadata
	}{
		"retrieve all groups": {
			Metadata: auth.PageMetadata{
				Total: n,
				Limit: n,
				Level: auth.MaxLevel,
			},
			Size: n,
		},
		"retrieve groups with existing metadata": {
			Metadata: auth.PageMetadata{
				Total:    metaNum,
				Limit:    n,
				Level:    auth.MaxLevel,
				Metadata: metadata.Metadata,
			},
			Size: metaNum,
		},
		"retrieve groups with non-existing metadata": {
			Metadata: auth.PageMetadata{
				Total:    uint64(0),
				Limit:    n,
				Level:    auth.MaxLevel,
				Metadata: wrongMeta.Metadata,
			},
			Size: uint64(0),
		},
		"retrieve groups with hierarchy level depth": {
			Metadata: auth.PageMetadata{
				Total:    uint64(metaNum),
				Limit:    n,
				Level:    auth.MaxLevel,
				Metadata: metadata.Metadata,
			},
			Size: uint64(metaNum),
		},
		"retrieve groups with hierarchy level depth and existing metadata": {
			Metadata: auth.PageMetadata{
				Total:    uint64(metaNum),
				Limit:    n,
				Level:    auth.MaxLevel,
				Metadata: metadata.Metadata,
			},
			Size: uint64(metaNum),
		},
	}

	for desc, tc := range cases {
		page, err := groupRepo.RetrieveAll(context.Background(), tc.Metadata)
		size := len(page.Groups)
		assert.Equal(t, tc.Size, uint64(size), fmt.Sprintf("%s: expected size %d got %d\n", desc, tc.Size, size))
		assert.Equal(t, tc.Metadata.Total, page.Total, fmt.Sprintf("%s: expected total %d got %d\n", desc, tc.Metadata.Total, page.Total))
		assert.Nil(t, err, fmt.Sprintf("%s: expected no error got %d\n", desc, err))
	}
}

func TestRetrieveAllParents(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	metadata := auth.GroupMetadata{
		"field": "value",
	}
	wrongMeta := auth.GroupMetadata{
		"wrong": "wrong",
	}

	p, err := groupRepo.RetrieveAll(context.Background(), auth.PageMetadata{Level: auth.MaxLevel})
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))
	assert.Equal(t, uint64(0), p.Total, fmt.Sprintf("expected total %d got %d\n", 0, p.Total))

	metaNum := uint64(3)

	n := uint64(10)
	parentID := ""
	parentMiddle := ""
	for i := uint64(0); i < n; i++ {
		creationTime := time.Now().UTC()
		group := auth.Group{
			ID:        generateGroupID(t),
			Name:      fmt.Sprintf("%s-%d", groupName, i),
			OwnerID:   uid,
			ParentID:  parentID,
			CreatedAt: creationTime,
			UpdatedAt: creationTime,
		}
		// Create Groups with metadata.
		if n-i <= metaNum {
			group.Metadata = metadata
		}
		if i == n/2 {
			parentMiddle = group.ID
		}
		_, err = groupRepo.Save(context.Background(), group)
		require.Nil(t, err, fmt.Sprintf("unexpected error: %s\n", err))
		parentID = group.ID
	}

	cases := map[string]struct {
		level    uint64
		parentID string
		Size     uint64
		Total    uint64
		Metadata auth.GroupMetadata
	}{
		"retrieve all parents": {
			Total:    n,
			Size:     auth.MaxLevel + 1,
			level:    auth.MaxLevel,
			parentID: parentID,
		},
		"retrieve groups with existing metadata": {
			Total:    metaNum,
			Size:     metaNum,
			Metadata: metadata,
			parentID: parentID,
			level:    auth.MaxLevel,
		},
		"retrieve groups with non-existing metadata": {
			Total:    uint64(0),
			Metadata: wrongMeta,
			Size:     uint64(0),
			level:    auth.MaxLevel,
			parentID: parentID,
		},
		"retrieve groups with hierarchy level depth": {
			Total:    n,
			Size:     2 + 1,
			level:    uint64(2),
			parentID: parentID,
		},
		"retrieve groups with hierarchy level depth and existing metadata": {
			Total:    metaNum,
			Size:     metaNum,
			level:    3,
			Metadata: metadata,
			parentID: parentID,
		},
		"retrieve parent groups from children in the middle": {
			Total:    n/2 + 1,
			Size:     n/2 + 1,
			level:    auth.MaxLevel,
			parentID: parentMiddle,
		},
	}

	for desc, tc := range cases {
		page, err := groupRepo.RetrieveAllParents(context.Background(), tc.parentID, auth.PageMetadata{Level: tc.level, Metadata: tc.Metadata})
		size := len(page.Groups)
		assert.Equal(t, tc.Size, uint64(size), fmt.Sprintf("%s: expected size %d got %d\n", desc, tc.Size, size))
		assert.Equal(t, tc.Total, page.Total, fmt.Sprintf("%s: expected total %d got %d\n", desc, tc.Total, page.Total))
		assert.Nil(t, err, fmt.Sprintf("%s: expected no error got %d\n", desc, err))
	}
}

func TestRetrieveAllChildren(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	metadata := auth.GroupMetadata{
		"field": "value",
	}
	wrongMeta := auth.GroupMetadata{
		"wrong": "wrong",
	}

	metaNum := uint64(3)

	n := uint64(10)
	groupID := generateGroupID(t)
	firstParentID := groupID
	parentID := ""
	parentMiddle := ""
	for i := uint64(0); i < n; i++ {
		creationTime := time.Now().UTC()
		group := auth.Group{
			ID:        groupID,
			Name:      fmt.Sprintf("%s-%d", groupName, i),
			OwnerID:   uid,
			ParentID:  parentID,
			CreatedAt: creationTime,
			UpdatedAt: creationTime,
		}
		// Create Groups with metadata.
		if i < metaNum {
			group.Metadata = metadata
		}
		if i == n/2 {
			parentMiddle = group.ID
		}
		_, err = groupRepo.Save(context.Background(), group)
		require.Nil(t, err, fmt.Sprintf("unexpected error: %s\n", err))
		parentID = group.ID
		groupID = generateGroupID(t)
	}

	p, err := groupRepo.RetrieveAll(context.Background(), auth.PageMetadata{Level: auth.MaxLevel})
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))
	assert.Equal(t, n, p.Total, fmt.Sprintf("expected total %d got %d\n", n, p.Total))

	cases := map[string]struct {
		parentID string
		size     uint64
		total    uint64
		metadata auth.PageMetadata
	}{
		"retrieve all children": {
			size:  auth.MaxLevel,
			total: n,
			metadata: auth.PageMetadata{
				Level: auth.MaxLevel,
			},
			parentID: firstParentID,
		},
		"retrieve groups with existing metadata": {
			size:  metaNum,
			total: metaNum,
			metadata: auth.PageMetadata{
				Level:    auth.MaxLevel,
				Metadata: metadata,
			},
			parentID: firstParentID,
		},
		"retrieve groups with non-existing metadata": {
			total: 0,
			size:  0,
			metadata: auth.PageMetadata{
				Level:    auth.MaxLevel,
				Metadata: wrongMeta,
			},
			parentID: firstParentID,
		},
		"retrieve groups with hierarchy level depth": {
			total: n,
			size:  2,
			metadata: auth.PageMetadata{
				Level: 2,
			},
			parentID: firstParentID,
		},
		"retrieve groups with hierarchy level depth and existing metadata": {
			total: metaNum,
			size:  metaNum,
			metadata: auth.PageMetadata{
				Level:    3,
				Metadata: metadata,
			},
			parentID: firstParentID,
		},
		"retrieve parent groups from children in the middle": {
			total: n / 2,
			size:  n / 2,
			metadata: auth.PageMetadata{
				Level: auth.MaxLevel,
			},
			parentID: parentMiddle,
		},
	}

	for desc, tc := range cases {
		page, err := groupRepo.RetrieveAllChildren(context.Background(), tc.parentID, tc.metadata)
		size := len(page.Groups)
		assert.Equal(t, tc.size, uint64(size), fmt.Sprintf("%s: expected size %d got %d\n", desc, tc.size, size))
		assert.Equal(t, tc.total, page.Total, fmt.Sprintf("%s: expected total %d got %d\n", desc, tc.total, page.Total))
		assert.Nil(t, err, fmt.Sprintf("%s: expected no error got %d\n", desc, err))
	}
}

func TestAssign(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	creationTime := time.Now().UTC()
	group := auth.Group{
		ID:        generateGroupID(t),
		Name:      groupName + "Updated",
		OwnerID:   uid,
		CreatedAt: creationTime,
		UpdatedAt: creationTime,
	}

	pm := auth.PageMetadata{
		Offset: 0,
		Limit:  10,
	}

	group, err = groupRepo.Save(context.Background(), group)
	require.Nil(t, err, fmt.Sprintf("group save got unexpected error: %s", err))

	mid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	err = groupRepo.Assign(context.Background(), group.ID, "things", mid)
	require.Nil(t, err, fmt.Sprintf("member assign save unexpected error: %s", err))

	mp, err := groupRepo.Members(context.Background(), group.ID, "things", pm)
	require.Nil(t, err, fmt.Sprintf("member assign save unexpected error: %s", err))
	assert.True(t, mp.Total == 1, fmt.Sprintf("retrieve members of a group: expected %d got %d\n", 1, mp.Total))

	err = groupRepo.Assign(context.Background(), group.ID, "things", mid)
	assert.True(t, errors.Contains(err, auth.ErrMemberAlreadyAssigned), fmt.Sprintf("assign member again: expected %v got %v\n", auth.ErrMemberAlreadyAssigned, err))
}

func TestUnassign(t *testing.T) {
	t.Cleanup(func() { cleanUp(t) })
	dbMiddleware := postgres.NewDatabase(db)
	groupRepo := postgres.NewGroupRepo(dbMiddleware)

	uid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	creationTime := time.Now().UTC()
	group := auth.Group{
		ID:        generateGroupID(t),
		Name:      groupName + "Updated",
		OwnerID:   uid,
		CreatedAt: creationTime,
		UpdatedAt: creationTime,
	}

	pm := auth.PageMetadata{
		Offset: 0,
		Limit:  10,
	}

	group, err = groupRepo.Save(context.Background(), group)
	require.Nil(t, err, fmt.Sprintf("group save got unexpected error: %s", err))

	mid, err := idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))

	err = groupRepo.Assign(context.Background(), group.ID, "things", mid)
	require.Nil(t, err, fmt.Sprintf("member assign unexpected error: %s", err))

	mid, err = idProvider.ID()
	require.Nil(t, err, fmt.Sprintf("got unexpected error: %s", err))
	err = groupRepo.Assign(context.Background(), group.ID, "things", mid)
	require.Nil(t, err, fmt.Sprintf("member assign unexpected error: %s", err))

	mp, err := groupRepo.Members(context.Background(), group.ID, "things", pm)
	require.Nil(t, err, fmt.Sprintf("member assign save unexpected error: %s", err))
	assert.True(t, mp.Total == 2, fmt.Sprintf("retrieve members of a group: expected %d got %d\n", 2, mp.Total))

	err = groupRepo.Unassign(context.Background(), group.ID, mid)
	require.Nil(t, err, fmt.Sprintf("member unassign save unexpected error: %s", err))

	mp, err = groupRepo.Members(context.Background(), group.ID, "things", pm)
	require.Nil(t, err, fmt.Sprintf("members retrieve unexpected error: %s", err))
	assert.True(t, mp.Total == 1, fmt.Sprintf("retrieve members of a group: expected %d got %d\n", 1, mp.Total))
}

func cleanUp(t *testing.T) {
	_, err := db.Exec("delete from group_relations")
	require.Nil(t, err, fmt.Sprintf("clean relations unexpected error: %s", err))
	_, err = db.Exec("delete from groups")
	require.Nil(t, err, fmt.Sprintf("clean groups unexpected error: %s", err))
}