From aba5460a492bef93534cce185f00f1e8952abb20 Mon Sep 17 00:00:00 2001
From: Ike Kottlowski <ikottlowski@bitwarden.com>
Date: Fri, 23 Jan 2026 16:50:46 -0500
Subject: [PATCH] test: add more test coverage.

---
 .../DeleteEmergencyAccessCommandTests.cs      | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/test/Core.Test/Auth/UserFeatures/EmergencyAccess/DeleteEmergencyAccessCommandTests.cs b/test/Core.Test/Auth/UserFeatures/EmergencyAccess/DeleteEmergencyAccessCommandTests.cs
index 5797d084cc..2b88bb7c5e 100644
--- a/test/Core.Test/Auth/UserFeatures/EmergencyAccess/DeleteEmergencyAccessCommandTests.cs
+++ b/test/Core.Test/Auth/UserFeatures/EmergencyAccess/DeleteEmergencyAccessCommandTests.cs
@@ -40,6 +40,29 @@ public class DeleteEmergencyAccessCommandTests
             .SendEmail<EmergencyAccessRemoveGranteesMailView>(default);
     }
 
+    /// <summary>
+    /// Verifies that attempting to delete a non-existent emergency access record
+    /// throws a <see cref="BadRequestException"/> and does not call delete or send email.
+    /// </summary>
+    [Theory, BitAutoData]
+    public async Task DeleteByIdGrantorIdAsync_DeletesEmergencyAccessAndSendsEmail(
+        SutProvider<DeleteEmergencyAccessCommand> sutProvider,
+        EmergencyAccessDetails emergencyAccessDetails)
+    {
+        sutProvider.GetDependency<IEmergencyAccessRepository>()
+            .GetDetailsByIdGrantorIdAsync(emergencyAccessDetails.Id, emergencyAccessDetails.GrantorId)
+            .Returns(emergencyAccessDetails);
+
+        var result = await sutProvider.Sut.DeleteByIdGrantorIdAsync(emergencyAccessDetails.Id, emergencyAccessDetails.GrantorId);
+
+        await sutProvider.GetDependency<IEmergencyAccessRepository>()
+            .Received(1)
+            .DeleteManyAsync(Arg.Any<ICollection<Guid>>());
+        await sutProvider.GetDependency<IMailer>()
+            .Received(1)
+            .SendEmail(Arg.Any<EmergencyAccessRemoveGranteesMail>());
+    }
+
     /// <summary>
     /// Verifies that when a grantor has no emergency access records, the method returns
     /// an empty collection and does not attempt to delete or send email.