43 lines
2.4 KiB
TypeScript
43 lines
2.4 KiB
TypeScript
import { readFile } from "node:fs/promises";
|
|
import { describe, expect, it } from "vitest";
|
|
import { isValidPhone, normalizePhone } from "@/lib/server/account-store";
|
|
|
|
type Fixture = {
|
|
version: 1;
|
|
phoneCases: Array<{ input: string; normalized: string; valid: boolean }>;
|
|
authorizationCases: Array<{ actorRole: string; targetRole: string; allowed: boolean }>;
|
|
sessionVersionCases: Array<{ name: string; increment: boolean }>;
|
|
archiveTables: string[];
|
|
};
|
|
|
|
const fixtureURL = new URL("../contracts/admin/accounts-organizations-v1.json", import.meta.url);
|
|
|
|
describe("administration accounts and organizations v1 contract", () => {
|
|
it("shares phone normalization and validation with the real TypeScript store", async () => {
|
|
const fixture = JSON.parse(await readFile(fixtureURL, "utf8")) as Fixture;
|
|
for (const testCase of fixture.phoneCases) {
|
|
expect(normalizePhone(testCase.input)).toBe(testCase.normalized);
|
|
expect(isValidPhone(testCase.input)).toBe(testCase.valid);
|
|
}
|
|
});
|
|
|
|
it("freezes route authorization and mutation policy consumed by Go", async () => {
|
|
const fixture = JSON.parse(await readFile(fixtureURL, "utf8")) as Fixture;
|
|
const accountsRoute = await readFile(new URL("../app/api/admin/accounts/route.ts", import.meta.url), "utf8");
|
|
const passwordRoute = await readFile(new URL("../app/api/admin/accounts/password/route.ts", import.meta.url), "utf8");
|
|
const organizationRoute = await readFile(new URL("../app/api/admin/organizations/route.ts", import.meta.url), "utf8");
|
|
const store = await readFile(new URL("../lib/server/account-store.ts", import.meta.url), "utf8");
|
|
|
|
expect(accountsRoute).toContain('target.role !== "user"');
|
|
expect(accountsRoute).toContain("actor.organizationId !== target.organizationId");
|
|
expect(passwordRoute).toContain('target.role !== "user"');
|
|
expect(organizationRoute).toContain("requireSuperAdmin(session.user)");
|
|
expect(store).toContain("sessionVersion: nextPassword || patch.role || patch.organizationId !== undefined || patch.status ? current.sessionVersion + 1 : current.sessionVersion");
|
|
expect(fixture.authorizationCases.filter((item) => item.allowed)).toHaveLength(2);
|
|
expect(fixture.sessionVersionCases.filter((item) => item.increment).map((item) => item.name)).toEqual([
|
|
"role mutation", "organization mutation", "status mutation", "password mutation"
|
|
]);
|
|
for (const table of fixture.archiveTables) expect(store).toContain(`"${table}"`);
|
|
});
|
|
});
|