add gitlab ci

backend/handlers/files_test.go

@@ -39,6 +39,11 @@ type fileDTO struct {
 	CreatedAt string `json:"createdAt"`
 }
 
+type fileOcrDTO struct {
+	Text      string `json:"text"`
+	UpdatedAt string `json:"updatedAt"`
+}
+
 type apiError struct {
 	Error struct {
 		Code    string `json:"code"`
@@ -577,3 +582,54 @@ func TestFilesGetDeleteRejectInvalidID(t *testing.T) {
 	rec, _ = doRequest(t, r, http.MethodGet, "/api/v1/files/"+fileID, otherToken, nil, "")
 	expectError(t, rec, http.StatusNotFound, "NOT_FOUND", "get-cross-user")
 }
+
+func TestFilesGetOcrOwnerShareAndScoping(t *testing.T) {
+	r, _, repo := setup(t)
+	ownerDevice := repository.NewID()
+	ownerToken, owner := registerAndLogin(t, r, repo, testUserUsername(ownerDevice, "oc"), "ocr-get-test-password", ownerDevice)
+	granteeDevice := repository.NewID()
+	granteeToken, grantee := registerAndLogin(t, r, repo, testUserUsername(granteeDevice, "og"), "ocr-get-test-password-b", granteeDevice)
+	outsiderDevice := repository.NewID()
+	outsiderToken, _ := registerAndLogin(t, r, repo, testUserUsername(outsiderDevice, "oh"), "ocr-get-test-password-c", outsiderDevice)
+
+	fileID := repository.NewID()
+	if err := repo.Resources.InsertFile(owner, fileID, "scan.png", "", 128, nil, nil); err != nil {
+		t.Fatalf("insert file: %v", err)
+	}
+	if err := repo.Resources.UpdateOcrText(owner, fileID, "extrait du scan"); err != nil {
+		t.Fatalf("write ocr_text: %v", err)
+	}
+
+	// Owner : texte + updatedAt.
+	rec, _ := doRequest(t, r, http.MethodGet, "/api/v1/files/"+fileID+"/ocr", ownerToken, nil, "")
+	envOcr := expectOK(t, rec, "ocr-owner")
+	var ownerOcr fileOcrDTO
+	if err := json.Unmarshal(envOcr.Data, &ownerOcr); err != nil {
+		t.Fatalf("ocr-owner: unmarshal: %v", err)
+	}
+	if ownerOcr.Text != "extrait du scan" || ownerOcr.UpdatedAt == "" {
+		t.Errorf("ocr owner = %+v, attendu texte+updatedAt", ownerOcr)
+	}
+
+	// Grantée viewer+ : même texte (partage rend l'OCR lisible).
+	if err := repo.Shares.Upsert(fileID, grantee, "viewer", false, nil, owner); err != nil {
+		t.Fatalf("share: %v", err)
+	}
+	rec, _ = doRequest(t, r, http.MethodGet, "/api/v1/files/"+fileID+"/ocr", granteeToken, nil, "")
+	envOcr = expectOK(t, rec, "ocr-grantee")
+	var granteeOcr fileOcrDTO
+	if err := json.Unmarshal(envOcr.Data, &granteeOcr); err != nil {
+		t.Fatalf("ocr-grantee: unmarshal: %v", err)
+	}
+	if granteeOcr.Text != "extrait du scan" {
+		t.Errorf("ocr grantee = %+v, attendu texte partagé", granteeOcr)
+	}
+
+	// Outsider : invisible (404).
+	rec, _ = doRequest(t, r, http.MethodGet, "/api/v1/files/"+fileID+"/ocr", outsiderToken, nil, "")
+	expectError(t, rec, http.StatusNotFound, "NOT_FOUND", "ocr-outsider")
+
+	// ID invalide → 404.
+	rec, _ = doRequest(t, r, http.MethodGet, "/api/v1/files/not-hex/ocr", ownerToken, nil, "")
+	expectError(t, rec, http.StatusNotFound, "NOT_FOUND", "ocr-invalid-id")
+}