test: add AdminControllerTest with 10 role-enforcement and validation cases
- GET /api/admin/orders:
- shouldReturn403WhenNotAuthenticated
- shouldReturn403ForNonAdminUser (roles = USER)
- shouldReturnAllOrdersForAdmin (roles = ADMIN, checks all response fields
including email, plate, letterText, status)
- shouldReturnEmptyArrayWhenNoOrders
- PATCH /api/admin/orders/{id}/status:
- shouldReturn403WhenPatchingStatusWithoutAuth
- shouldReturn403WhenPatchingStatusAsNonAdmin
- shouldUpdateOrderStatusSuccessfully (verifies response id matches
path variable, status reflects update)
- shouldReturn400WhenStatusIsInvalid (invalid_status rejected by
@Pattern validator)
- shouldReturn400WhenStatusIsBlank
- shouldReturn404WhenOrderNotFound
- Helper createOrder(UUID orderId, String plate, String email,
OrderStatus) builds domain objects with User relationship for
realistic response mapping
Joakim Mörling
5df7c97977