Full tests coverage

packages/web/tests/lib/auth.test.ts

@@ -0,0 +1,82 @@
+import { vi, describe, it, expect } from 'vitest';
+
+// Define environment variables required statically by auth.ts
+process.env.KEYCLOAK_URL = 'http://keycloak-internal';
+process.env.NEXT_PUBLIC_KEYCLOAK_URL = 'https://keycloak-public';
+process.env.KEYCLOAK_REALM = 'meshitrack';
+process.env.KEYCLOAK_CLIENT_ID = 'web-client';
+process.env.KEYCLOAK_CLIENT_SECRET = 'secret';
+
+vi.mock('next-auth', () => {
+  return {
+    default: vi.fn((config) => {
+      (globalThis as any).__capturedConfig = config;
+      return {
+        handlers: { GET: vi.fn(), POST: vi.fn() },
+        signIn: vi.fn(),
+        signOut: vi.fn(),
+        auth: vi.fn(),
+      };
+    }),
+  };
+});
+
+vi.mock('next-auth/providers/keycloak', () => {
+  return {
+    default: vi.fn((config) => config),
+  };
+});
+
+// Import auth.ts to trigger the NextAuth config capture
+import { auth } from '../../src/lib/auth';
+
+describe('auth library configuration', () => {
+  it('initializes NextAuth with correct pages and structures', () => {
+    expect(auth).toBeDefined();
+    const config = (globalThis as any).__capturedConfig;
+    expect(config).toBeDefined();
+    expect(config.pages.signIn).toBe('/login');
+    expect(config.callbacks).toBeDefined();
+  });
+
+  it('jwt callback appends access tokens when account metadata is present', async () => {
+    const config = (globalThis as any).__capturedConfig;
+    const jwtCallback = config.callbacks.jwt;
+    const token = { name: 'Admin' };
+    const account = {
+      access_token: 'jwt-access-token-xyz',
+      refresh_token: 'jwt-refresh-token-abc',
+      expires_at: 1999999999,
+    };
+
+    const result = await jwtCallback({ token, account });
+    expect(result).toEqual({
+      name: 'Admin',
+      accessToken: 'jwt-access-token-xyz',
+      refreshToken: 'jwt-refresh-token-abc',
+      expiresAt: 1999999999,
+    });
+  });
+
+  it('jwt callback returns standard token without change if account metadata is missing', async () => {
+    const config = (globalThis as any).__capturedConfig;
+    const jwtCallback = config.callbacks.jwt;
+    const token = { name: 'Admin', accessToken: 'pre-existing-token' };
+
+    const result = await jwtCallback({ token, account: undefined });
+    expect(result).toEqual({
+      name: 'Admin',
+      accessToken: 'pre-existing-token',
+    });
+  });
+
+  it('session callback populates access token from jwt metadata', async () => {
+    const config = (globalThis as any).__capturedConfig;
+    const sessionCallback = config.callbacks.session;
+    const session = { user: { name: 'Admin' } } as any;
+    const token = { accessToken: 'extracted-token-from-jwt' };
+
+    const result = await sessionCallback({ session, token });
+    expect(result.accessToken).toBe('extracted-token-from-jwt');
+  });
+});