ae4f76c433
/api/auth/status did not expose whether the auth cookie corresponds to a valid dashboard session, so /login could only detect "auth disabled" (requireLogin === false) and not "already logged in". Add authenticated to the status response and redirect from /login when it's true.
70 lines
1.9 KiB
JavaScript
70 lines
1.9 KiB
JavaScript
import { describe, it, expect, vi, beforeEach } from "vitest";
|
|
|
|
const mocks = vi.hoisted(() => ({
|
|
json: vi.fn((body, init) => ({
|
|
status: init?.status || 200,
|
|
body,
|
|
})),
|
|
cookies: vi.fn(),
|
|
getSettings: vi.fn(),
|
|
isOidcConfigured: vi.fn(),
|
|
getDashboardAuthSession: vi.fn(),
|
|
}));
|
|
|
|
vi.mock("next/server", () => ({
|
|
NextResponse: { json: mocks.json },
|
|
}));
|
|
|
|
vi.mock("next/headers", () => ({
|
|
cookies: mocks.cookies,
|
|
}));
|
|
|
|
vi.mock("@/lib/localDb", () => ({
|
|
getSettings: mocks.getSettings,
|
|
}));
|
|
|
|
vi.mock("@/lib/auth/oidc", () => ({
|
|
isOidcConfigured: mocks.isOidcConfigured,
|
|
}));
|
|
|
|
vi.mock("@/lib/auth/dashboardSession", () => ({
|
|
getDashboardAuthSession: mocks.getDashboardAuthSession,
|
|
}));
|
|
|
|
const { GET } = await import("../../src/app/api/auth/status/route.js");
|
|
|
|
describe("GET /api/auth/status", () => {
|
|
beforeEach(() => {
|
|
vi.clearAllMocks();
|
|
mocks.getSettings.mockResolvedValue({ requireLogin: true, authMode: "password" });
|
|
mocks.cookies.mockResolvedValue({ get: vi.fn(() => ({ value: "session-token" })) });
|
|
mocks.isOidcConfigured.mockReturnValue(false);
|
|
});
|
|
|
|
it("reports an authenticated session when the auth cookie is valid", async () => {
|
|
mocks.getDashboardAuthSession.mockResolvedValue({ authenticated: true });
|
|
|
|
const response = await GET();
|
|
|
|
expect(response.body.authenticated).toBe(true);
|
|
expect(mocks.getDashboardAuthSession).toHaveBeenCalledWith("session-token");
|
|
});
|
|
|
|
it("reports unauthenticated when the auth cookie is invalid", async () => {
|
|
mocks.getDashboardAuthSession.mockResolvedValue(null);
|
|
|
|
const response = await GET();
|
|
|
|
expect(response.body.authenticated).toBe(false);
|
|
});
|
|
|
|
it("fails closed when status dependencies throw", async () => {
|
|
mocks.getSettings.mockRejectedValue(new Error("database unavailable"));
|
|
|
|
const response = await GET();
|
|
|
|
expect(response.body.authenticated).toBe(false);
|
|
expect(response.body.requireLogin).toBe(true);
|
|
});
|
|
});
|