Rollback to eebcb648

deployment-package/source_server/__tests__/localAuth.test.ts

@@ -0,0 +1,106 @@
+import { describe, it, expect, beforeAll } from "vitest";
+import { getDb } from "../db";
+import { users } from "../../drizzle/schema";
+import { eq } from "drizzle-orm";
+
+describe("Local Authentication", () => {
+  beforeAll(async () => {
+    // Vérifier que la base de données est accessible
+    const db = await getDb();
+    expect(db).toBeDefined();
+  });
+
+  it("should have an admin user with username adminServFormation", async () => {
+    const db = await getDb();
+    if (!db) {
+      throw new Error("Database not available");
+    }
+
+    const result = await db
+      .select()
+      .from(users)
+      .where(eq(users.username, "adminServFormation"))
+      .limit(1);
+
+    expect(result.length).toBe(1);
+    expect(result[0].username).toBe("adminServFormation");
+    expect(result[0].role).toBe("admin");
+    expect(result[0].password).toBeDefined();
+    expect(result[0].password).not.toBeNull();
+  });
+
+  it("should authenticate with correct credentials", async () => {
+    const response = await fetch("http://localhost:3000/api/auth/local/login", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        username: "adminServFormation",
+        password: "Itinova69!",
+      }),
+    });
+
+    expect(response.status).toBe(200);
+    const data = await response.json();
+    expect(data.success).toBe(true);
+    expect(data.user).toBeDefined();
+    expect(data.user.username).toBe("adminServFormation");
+    expect(data.user.role).toBe("admin");
+    expect(data.user.password).toBeUndefined(); // Le mot de passe ne doit pas être retourné
+  });
+
+  it("should reject authentication with incorrect password", async () => {
+    const response = await fetch("http://localhost:3000/api/auth/local/login", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        username: "adminServFormation",
+        password: "wrongpassword",
+      }),
+    });
+
+    expect(response.status).toBe(401);
+    const data = await response.json();
+    expect(data.success).toBe(false);
+    expect(data.message).toContain("incorrect");
+  });
+
+  it("should reject authentication with non-existent username", async () => {
+    const response = await fetch("http://localhost:3000/api/auth/local/login", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        username: "nonexistentuser",
+        password: "anypassword",
+      }),
+    });
+
+    expect(response.status).toBe(401);
+    const data = await response.json();
+    expect(data.success).toBe(false);
+    expect(data.message).toContain("incorrect");
+  });
+
+  it("should reject authentication with missing credentials", async () => {
+    const response = await fetch("http://localhost:3000/api/auth/local/login", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        username: "adminServFormation",
+        // password manquant
+      }),
+    });
+
+    expect(response.status).toBe(400);
+    const data = await response.json();
+    expect(data.success).toBe(false);
+    expect(data.message).toContain("requis");
+  });
+});