Bağlam ve Görev Tarifi — Yazmadığın Her Karar Bir Tahmindir

1
**Card service rules**
2

3
- Money is `Money(BigDecimal value, Currency currency)`. Never `double`.
4
- Errors go through `ApiErrors` and return `ProblemDetail`.
5
- The customer comes from the JWT subject, never from the request body.
6
- Never log a full card number; use `CardNumbers.mask()`.
7
- Controller tests are `@WebMvcTest` with AssertJ and Mockito.
8
- No new dependencies without asking.

1
**Goal:** `POST /cards/{cardId}/temporary-limit`. A cardholder raises the
2
limit for 7 days, up to 1.5 times the permanent limit.
3

4
**Context:** the rule lives in `CardLimitService.raiseTemporarily`.
5
Follow `CardBlockController` as the example controller.
6

7
**Boundaries:** only the `card.limit` package. Do not touch the fraud
8
rules or `config/prod`. Test data is made up; no real card numbers.
9

10
**Acceptance:** within 1.5x → 200 with `expiresOn`; above → 422
11
`limit-too-high`; someone else's card → 404. One test each.
12

13
**Working mode:** write a short plan first and wait for my OK.

1
@WebMvcTest(TemporaryLimitController.class)
2
@Import(ApiErrors.class)
3
class TemporaryLimitControllerTest {
4

5
    private static final Currency TRY = Currency.getInstance("TRY");
6

7
    @Autowired
8
    MockMvc mvc;
9

10
    @MockitoBean
11
    CardLimitService limits;
12

13
    @Test
14
    void grantsTheRaiseForSevenDays() throws Exception {
15
        when(limits.raiseTemporarily("C-1001", "card-7", money("30000.00")))
16
                .thenReturn(new TemporaryLimit(money("30000.00"), LocalDate.parse("2026-10-02")));
17

18
        request("C-1001", "30000.00")
19
                .andExpect(status().isOk())
20
                .andExpect(jsonPath("$.expiresOn").value("2026-10-02"));
21
    }
22

23
    @Test
24
    void refusesMoreThanOneAndAHalfTimes() throws Exception {
25
        when(limits.raiseTemporarily("C-1001", "card-7", money("45000.00")))
26
                .thenThrow(new LimitTooHighException(money("30000.00")));
27

28
        request("C-1001", "45000.00")
29
                .andExpect(status().isUnprocessableEntity())
30
                .andExpect(jsonPath("$.type").value(endsWith("limit-too-high")));
31
    }
32

33
    @Test
34
    void someoneElsesCardIsNotFound() throws Exception {
35
        when(limits.raiseTemporarily("C-2002", "card-7", money("30000.00")))
36
                .thenThrow(new CardNotFoundException("card-7"));
37

38
        request("C-2002", "30000.00").andExpect(status().isNotFound());
39
    }
40

41
    private ResultActions request(String customerNo, String amount) throws Exception {
42
        return mvc.perform(post("/cards/card-7/temporary-limit")
43
                .with(jwt().jwt(token -> token.subject(customerNo)))
44
                .with(csrf())
45
                .contentType(MediaType.APPLICATION_JSON)
46
                .content("""
47
                        {"amount": "%s", "currency": "TRY"}
48
                        """.formatted(amount)));
49
    }
50

51
    private static Money money(String value) {
52
        return new Money(new BigDecimal(value), TRY);
53
    }
54
}