android: add auth sessions hardening APIs and tests

android/app/src/test/java/ru/daemonlord/messenger/data/auth/repository/NetworkAuthRepositoryTest.kt

@@ -13,6 +13,7 @@ import okhttp3.mockwebserver.MockResponse
 import okhttp3.mockwebserver.MockWebServer
 import org.junit.After
 import org.junit.Assert.assertEquals
+import org.junit.Assert.assertFalse
 import org.junit.Assert.assertTrue
 import org.junit.Before
 import org.junit.Test
@@ -101,6 +102,34 @@ class NetworkAuthRepositoryTest {
         assertEquals(AppError.InvalidCredentials, error.reason)
     }
 
+    @Test
+    fun listSessions_success_mapsSessionDtos() = runTest(dispatcher) {
+        server.enqueue(
+            MockResponse().setResponseCode(200).setBody(
+                """
+                [
+                  {"jti":"abc","created_at":"2026-03-09T10:00:00Z","ip_address":"127.0.0.1","user_agent":"Android","current":true,"token_type":"refresh"},
+                  {"jti":"def","created_at":"2026-03-09T11:00:00Z","ip_address":null,"user_agent":null,"current":false,"token_type":"access"}
+                ]
+                """.trimIndent()
+            )
+        )
+
+        val repository = NetworkAuthRepository(
+            authApiService = authApiService,
+            tokenRepository = tokenRepository,
+            ioDispatcher = dispatcher,
+        )
+
+        val result = repository.listSessions()
+        assertTrue(result is AppResult.Success)
+        val sessions = (result as AppResult.Success).data
+        assertEquals(2, sessions.size)
+        assertEquals("abc", sessions.first().jti)
+        assertTrue(sessions.first().current == true)
+        assertFalse(sessions.last().current == true)
+    }
+
     private class InMemoryTokenRepository : TokenRepository {
         private val state = MutableStateFlow<TokenBundle?>(null)
 

android/app/src/test/java/ru/daemonlord/messenger/data/message/repository/NetworkMessageRepositoryTest.kt

@@ -4,6 +4,8 @@ import androidx.room.Room
 import androidx.test.core.app.ApplicationProvider
 import kotlinx.coroutines.ExperimentalCoroutinesApi
 import kotlinx.coroutines.flow.first
+import kotlinx.coroutines.flow.Flow
+import kotlinx.coroutines.flow.MutableStateFlow
 import kotlinx.coroutines.test.StandardTestDispatcher
 import kotlinx.coroutines.test.runTest
 import org.junit.After
@@ -14,9 +16,20 @@ import org.junit.Test
 import org.junit.runner.RunWith
 import org.robolectric.RobolectricTestRunner
 import ru.daemonlord.messenger.data.chat.local.db.MessengerDatabase
+import ru.daemonlord.messenger.core.token.TokenBundle
+import ru.daemonlord.messenger.core.token.TokenRepository
+import ru.daemonlord.messenger.data.media.api.MediaApiService
+import ru.daemonlord.messenger.data.media.dto.AttachmentCreateRequestDto
+import ru.daemonlord.messenger.data.media.dto.ChatAttachmentReadDto
+import ru.daemonlord.messenger.data.media.dto.UploadUrlRequestDto
+import ru.daemonlord.messenger.data.media.dto.UploadUrlResponseDto
 import ru.daemonlord.messenger.data.message.api.MessageApiService
 import ru.daemonlord.messenger.data.message.dto.MessageCreateRequestDto
+import ru.daemonlord.messenger.data.message.dto.MessageForwardRequestDto
 import ru.daemonlord.messenger.data.message.dto.MessageReadDto
+import ru.daemonlord.messenger.data.message.dto.MessageReactionDto
+import ru.daemonlord.messenger.data.message.dto.MessageReactionToggleRequestDto
+import ru.daemonlord.messenger.data.message.dto.MessageStatusUpdateRequestDto
 import ru.daemonlord.messenger.data.message.dto.MessageUpdateRequestDto
 import ru.daemonlord.messenger.domain.common.AppResult
 import ru.daemonlord.messenger.domain.media.repository.MediaRepository
@@ -95,6 +108,8 @@ class NetworkMessageRepositoryTest {
             messageDao = db.messageDao(),
             chatDao = db.chatDao(),
             mediaRepository = FakeMediaRepository(),
+            mediaApiService = FakeMediaApiService(),
+            tokenRepository = FakeTokenRepository(),
             ioDispatcher = dispatcher,
         )
     }
@@ -123,6 +138,19 @@ class NetworkMessageRepositoryTest {
         }
 
         override suspend fun deleteMessage(messageId: Long, forAll: Boolean) = Unit
+
+        override suspend fun updateMessageStatus(request: MessageStatusUpdateRequestDto) = Unit
+
+        override suspend fun forwardMessage(messageId: Long, request: MessageForwardRequestDto): MessageReadDto {
+            return sendResponse.copy(id = messageId + 1000, chatId = request.targetChatId)
+        }
+
+        override suspend fun listReactions(messageId: Long): List<MessageReactionDto> = emptyList()
+
+        override suspend fun toggleReaction(
+            messageId: Long,
+            request: MessageReactionToggleRequestDto,
+        ): List<MessageReactionDto> = emptyList()
     }
 
     private class FakeMediaRepository : MediaRepository {
@@ -135,4 +163,34 @@ class NetworkMessageRepositoryTest {
             return AppResult.Success(Unit)
         }
     }
+
+    private class FakeMediaApiService : MediaApiService {
+        override suspend fun requestUploadUrl(request: UploadUrlRequestDto): UploadUrlResponseDto {
+            error("Not expected in this test")
+        }
+
+        override suspend fun createAttachment(request: AttachmentCreateRequestDto) = Unit
+
+        override suspend fun getChatAttachments(
+            chatId: Long,
+            limit: Int,
+            beforeId: Long?,
+        ): List<ChatAttachmentReadDto> = emptyList()
+    }
+
+    private class FakeTokenRepository : TokenRepository {
+        private val state = MutableStateFlow<TokenBundle?>(null)
+
+        override fun observeTokens(): Flow<TokenBundle?> = state
+
+        override suspend fun getTokens(): TokenBundle? = state.value
+
+        override suspend fun saveTokens(tokens: TokenBundle) {
+            state.value = tokens
+        }
+
+        override suspend fun clearTokens() {
+            state.value = null
+        }
+    }
 }