/** * Component: Token Login Route Tests * Documentation: documentation/testing.md */ import { beforeEach, describe, expect, it, vi } from 'vitest'; import { createPrismaMock } from '../helpers/prisma'; const prismaMock = createPrismaMock(); const generateAccessTokenMock = vi.hoisted(() => vi.fn()); const generateRefreshTokenMock = vi.hoisted(() => vi.fn()); vi.mock('@/lib/db', () => ({ prisma: prismaMock, })); vi.mock('@/lib/utils/jwt', () => ({ generateAccessToken: generateAccessTokenMock, generateRefreshToken: generateRefreshTokenMock, })); describe('GET /api/auth/token/login', () => { beforeEach(() => { vi.clearAllMocks(); generateAccessTokenMock.mockReturnValue('access-token'); generateRefreshTokenMock.mockReturnValue('refresh-token'); }); it('authenticates user with a valid token', async () => { prismaMock.user.findFirst.mockResolvedValueOnce({ id: 'u1', plexId: 'plex-1', plexUsername: 'testuser', plexEmail: 'test@example.com', avatarUrl: null, role: 'user', }); prismaMock.user.update.mockResolvedValueOnce({}); const { GET } = await import('@/app/api/auth/token/login/route'); const request = { nextUrl: { searchParams: new URLSearchParams('token=rmab_valid_token') } }; const response = await GET(request as any); const payload = await response.json(); expect(response.status).toBe(200); expect(payload.accessToken).toBe('access-token'); expect(payload.refreshToken).toBe('refresh-token'); expect(payload.user.username).toBe('testuser'); expect(payload.user.email).toBe('test@example.com'); }); it('returns 400 when token parameter is missing', async () => { const { GET } = await import('@/app/api/auth/token/login/route'); const request = { nextUrl: { searchParams: new URLSearchParams() } }; const response = await GET(request as any); const payload = await response.json(); expect(response.status).toBe(400); expect(payload.error).toMatch(/Missing token/); }); it('returns 401 when token is invalid or user not found', async () => { prismaMock.user.findFirst.mockResolvedValueOnce(null); const { GET } = await import('@/app/api/auth/token/login/route'); const request = { nextUrl: { searchParams: new URLSearchParams('token=rmab_invalid') } }; const response = await GET(request as any); const payload = await response.json(); expect(response.status).toBe(401); expect(payload.error).toMatch(/Invalid token/); }); });