AzuTear
71 lines
2.1 KiB
TypeScript
71 lines
2.1 KiB
TypeScript
import { afterEach, describe, expect, it, vi } from 'vitest'
|
|
import { createPinia, setActivePinia } from 'pinia'
|
|
import { useAuthStore } from '../src/stores/auth'
|
|
import { apiFetch } from '../src/services/api'
|
|
|
|
afterEach(() => {
|
|
vi.unstubAllGlobals()
|
|
})
|
|
|
|
describe('auth store', () => {
|
|
it('shares the initial refresh across overlapping router guards', async () => {
|
|
setActivePinia(createPinia())
|
|
const store = useAuthStore()
|
|
|
|
let resolveRefresh!: (response: Response) => void
|
|
const fetchMock = vi.fn(() => new Promise<Response>(resolve => {
|
|
resolveRefresh = resolve
|
|
}))
|
|
vi.stubGlobal('fetch', fetchMock)
|
|
|
|
const firstGuard = store.initialize()
|
|
const secondGuard = store.initialize()
|
|
|
|
expect(fetchMock).toHaveBeenCalledTimes(1)
|
|
|
|
resolveRefresh(new Response(JSON.stringify({
|
|
accessToken: 'test-access-token',
|
|
expiresAt: '2026-07-28T12:00:00.000Z',
|
|
user: {
|
|
id: 'bao',
|
|
email: 'bao@nexus.local',
|
|
displayName: 'Bao',
|
|
role: 'owner',
|
|
},
|
|
}), {
|
|
status: 200,
|
|
headers: { 'Content-Type': 'application/json' },
|
|
}))
|
|
|
|
await expect(Promise.all([firstGuard, secondGuard])).resolves.toEqual([true, true])
|
|
expect(store.isAuthenticated).toBe(true)
|
|
expect(store.user?.displayName).toBe('Bao')
|
|
})
|
|
|
|
it('uses the JWT without emitting a browser-controlled agent identity header', async () => {
|
|
setActivePinia(createPinia())
|
|
const store = useAuthStore()
|
|
store.initialized = true
|
|
store.applySession({
|
|
accessToken: 'signed-jwt',
|
|
expiresAt: '2026-07-28T12:00:00.000Z',
|
|
user: {
|
|
id: 'iris-user',
|
|
email: 'iris@nexus.local',
|
|
displayName: 'Iris',
|
|
role: 'owner',
|
|
},
|
|
})
|
|
|
|
const fetchMock = vi.fn(() => Promise.resolve(new Response(null, { status: 204 })))
|
|
vi.stubGlobal('fetch', fetchMock)
|
|
|
|
await apiFetch('/api/v1/tasks/board')
|
|
|
|
const requestInit = fetchMock.mock.calls[0]?.[1] as RequestInit
|
|
const headers = new Headers(requestInit.headers)
|
|
expect(headers.get('Authorization')).toBe('Bearer signed-jwt')
|
|
expect(headers.has('X-Agent-Id')).toBe(false)
|
|
})
|
|
})
|