Add tests for RemoveTeamMemberAPIView

django/thunderstore/api/cyberstorm/tests/test_team.py

@@ -7,7 +7,7 @@
 from thunderstore.account.factories import ServiceAccountFactory
 from thunderstore.core.types import UserType
 from thunderstore.repository.factories import TeamFactory, TeamMemberFactory
-from thunderstore.repository.models.team import Team
+from thunderstore.repository.models.team import Team, TeamMember
 
 User = get_user_model()
 
@@ -183,6 +183,89 @@ def test_team_member_list_api_view__for_member__sorts_results(
     assert result[4]["username"] == erin.username
 
 
+@pytest.mark.django_db
+def test_team_members_remove__when_removing_member__succeeds(
+    api_client: APIClient,
+    user: UserType,
+    team: Team,
+):
+    TeamMemberFactory(team=team, user=user, role="owner")
+    api_client.force_authenticate(user)
+    just_a_member = TeamMemberFactory(team=team, role="member")
+
+    response = api_client.post(
+        f"/api/cyberstorm/team/{team.name}/members/remove/",
+        json.dumps({"username": just_a_member.user.username}),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 200
+    response_json = response.json()
+    assert response_json["team_name"] == team.name
+    assert response_json["username"] == just_a_member.user.username
+
+
+@pytest.mark.django_db
+def test_team_members_remove__when_removing_member__fails_because_user_is_not_a_member_in_team(
+    api_client: APIClient,
+    user: UserType,
+    team: Team,
+):
+    TeamMemberFactory(team=team, user=user, role="owner")
+    api_client.force_authenticate(user)
+    another_team = TeamFactory()
+    member_in_another_team = TeamMemberFactory(team=another_team, role="owner")
+
+    response = api_client.post(
+        f"/api/cyberstorm/team/{team.name}/members/remove/",
+        json.dumps({"username": member_in_another_team.user.username}),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 404
+    response_json = response.json()
+    assert response_json["detail"] == "Not found."
+
+
+@pytest.mark.django_db
+def test_team_members_remove__when_removing_member__fails_because_team_does_not_exist(
+    api_client: APIClient,
+    user: UserType,
+):
+    api_client.force_authenticate(user)
+
+    response = api_client.post(
+        f"/api/cyberstorm/team/GhostTeam/members/remove/",
+        json.dumps({"username": user.username}),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 404
+    response_json = response.json()
+    assert response_json["detail"] == "Not found."
+
+
+@pytest.mark.django_db
+def test_team_members_remove__when_removing_member__fails_because_user_is_not_authenticated(
+    api_client: APIClient,
+    user: UserType,
+    team: Team,
+):
+    TeamMemberFactory(team=team, user=user, role="owner")
+    just_a_member = TeamMemberFactory(team=team, role="member")
+
+    response = api_client.post(
+        f"/api/cyberstorm/team/{team.name}/members/remove/",
+        json.dumps({"username": just_a_member.user.username}),
+        content_type="application/json",
+    )
+
+    assert response.status_code == 401
+    response_json = response.json()
+    assert response_json["detail"] == "Authentication credentials were not provided."
+    assert TeamMember.objects.filter(team=team, user=user).count() == 1
+
+
 @pytest.mark.django_db
 def test_team_service_account_list_api_view__for_member__returns_only_service_accounts(
     api_client: APIClient,