Spaces:
Sleeping
Sleeping
File size: 3,198 Bytes
05c5ed5 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 | import { describe, it, expect, vi, beforeEach } from "vitest";
// Mocks
vi.mock("./auth-instance", () => ({
getSession: vi.fn(),
}));
vi.mock("lib/user/utils", () => ({
getIsUserAdmin: vi.fn(),
}));
// server-only is used inside the module; stub it for tests
vi.mock("server-only", () => ({}));
const { getSession } = await import("./auth-instance");
const { getIsUserAdmin } = await import("lib/user/utils");
describe("auth/permissions", () => {
beforeEach(() => {
vi.resetAllMocks();
});
it("hasAdminPermission returns true when user is admin", async () => {
const permissions = await import("./permissions");
vi.mocked(getSession).mockResolvedValue({
user: { id: "u1", role: "admin" },
} as any);
vi.mocked(getIsUserAdmin).mockReturnValue(true);
await expect(permissions.hasAdminPermission()).resolves.toBe(true);
});
it("hasAdminPermission returns false when no session", async () => {
const permissions = await import("./permissions");
vi.mocked(getSession).mockResolvedValue(null as any);
await expect(permissions.hasAdminPermission()).resolves.toBe(false);
});
it("canManageUsers equals hasAdminPermission", async () => {
const permissions = await import("./permissions");
vi.mocked(getSession).mockResolvedValue({
user: { id: "u1", role: "user" },
} as any);
vi.mocked(getIsUserAdmin).mockReturnValue(false);
await expect(permissions.canManageUsers()).resolves.toBe(false);
vi.mocked(getIsUserAdmin).mockReturnValue(true);
await expect(permissions.canManageUsers()).resolves.toBe(true);
});
it("canManageUser returns true for self regardless of admin", async () => {
const permissions = await import("./permissions");
vi.mocked(getSession).mockResolvedValue({
user: { id: "self", role: "user" },
} as any);
vi.mocked(getIsUserAdmin).mockReturnValue(false);
await expect(permissions.canManageUser("self")).resolves.toBe(true);
});
it("canManageUser returns true for others if admin", async () => {
const permissions = await import("./permissions");
vi.mocked(getSession).mockResolvedValue({
user: { id: "u1", role: "admin" },
} as any);
vi.mocked(getIsUserAdmin).mockReturnValue(true);
await expect(permissions.canManageUser("other")).resolves.toBe(true);
});
it("requireAdminPermission throws when not admin", async () => {
const permissions = await import("./permissions");
vi.mocked(getSession).mockResolvedValue({
user: { id: "u1", role: "user" },
} as any);
vi.mocked(getIsUserAdmin).mockReturnValue(false);
await expect(
permissions.requireAdminPermission("do admin thing"),
).rejects.toThrow(/Admin access required/);
});
it("requireUserManagePermissionFor throws when cannot manage target", async () => {
const permissions = await import("./permissions");
vi.mocked(getSession).mockResolvedValue({
user: { id: "u1", role: "user" },
} as any);
vi.mocked(getIsUserAdmin).mockReturnValue(false);
await expect(
permissions.requireUserManagePermissionFor("u2", "manage this user"),
).rejects.toThrow(/Permission required/);
});
});
|