Spaces:
Running
Running
File size: 1,855 Bytes
c7d34c1 b1cfe1b c7d34c1 32151b6 c7d34c1 3e8ea5d 32151b6 c7d34c1 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 | import { POST } from './route';
import { PAGE_PASSWORD_AUTH_ERROR_CODES } from '@/lib/page-password-auth';
import { NextRequest } from 'next/server';
import assert from 'node:assert/strict';
import { afterEach, describe, it } from 'node:test';
const originalAppPassword = process.env.APP_PASSWORD;
const PAGE_PASSWORD_FIXTURE = ['customer', 'access', 'code'].join('-');
afterEach(() => {
if (originalAppPassword === undefined) {
delete process.env.APP_PASSWORD;
} else {
process.env.APP_PASSWORD = originalAppPassword;
}
});
describe('POST /api/auth-verify', () => {
it('treats blank APP_PASSWORD as disabled', async () => {
process.env.APP_PASSWORD = ' ';
const request = new NextRequest('http://localhost/api/auth-verify', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({})
});
const response = await POST(request);
const result = (await response.json()) as { authenticated?: boolean; passwordRequired?: boolean };
assert.equal(response.status, 200);
assert.deepEqual(result, { authenticated: true, passwordRequired: false });
});
it('returns a page access code error code for invalid access-code hashes', async () => {
process.env.APP_PASSWORD = PAGE_PASSWORD_FIXTURE;
const request = new NextRequest('http://localhost/api/auth-verify', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ passwordHash: '0'.repeat(64) })
});
const response = await POST(request);
const result = (await response.json()) as { code?: string };
assert.equal(response.status, 401);
assert.equal(result.code, PAGE_PASSWORD_AUTH_ERROR_CODES.invalid);
});
});
|