Files
umami/src/app/api/auth/logout/route.test.ts
T

69 lines
1.7 KiB
TypeScript

import { beforeEach, expect, test, vi } from 'vitest';
import redis from '@/lib/redis';
import { parseRequest } from '@/lib/request';
import { POST } from './route';
vi.mock('@/lib/redis', () => ({
default: {
enabled: true,
client: {
del: vi.fn(),
},
},
}));
vi.mock('@/lib/request', () => ({
parseRequest: vi.fn(),
}));
vi.mock('@/lib/response', () => ({
ok: () => new Response(null, { status: 200 }),
}));
const redisMock = redis as unknown as {
enabled: boolean;
client: {
del: ReturnType<typeof vi.fn>;
};
};
const parseRequestMock = vi.mocked(parseRequest);
beforeEach(() => {
redisMock.enabled = true;
redisMock.client.del.mockReset();
parseRequestMock.mockReset();
});
test('POST deletes the authenticated Redis auth key', async () => {
parseRequestMock.mockResolvedValue({
auth: { authKey: 'auth:session-key' },
error: undefined,
});
const response = await POST(
new Request('http://localhost/api/auth/logout', {
method: 'POST',
headers: {
authorization: 'Bearer secure-token',
},
}),
);
expect(redisMock.client.del).toHaveBeenCalledTimes(1);
expect(redisMock.client.del).toHaveBeenCalledWith('auth:session-key');
expect(redisMock.client.del).not.toHaveBeenCalledWith('secure-token');
expect(response.status).toBe(200);
});
test('POST does not delete a key when auth fails', async () => {
parseRequestMock.mockResolvedValue({
auth: null,
error: () => new Response(null, { status: 401 }),
});
const response = await POST(new Request('http://localhost/api/auth/logout', { method: 'POST' }));
expect(redisMock.client.del).not.toHaveBeenCalled();
expect(response.status).toBe(401);
});