107 lines
3.2 KiB
TypeScript
107 lines
3.2 KiB
TypeScript
import { describe, it, expect, beforeAll } from "vitest";
|
|
import { getDb } from "../db";
|
|
import { users } from "../../drizzle/schema";
|
|
import { eq } from "drizzle-orm";
|
|
|
|
describe("Local Authentication", () => {
|
|
beforeAll(async () => {
|
|
// Vérifier que la base de données est accessible
|
|
const db = await getDb();
|
|
expect(db).toBeDefined();
|
|
});
|
|
|
|
it("should have an admin user with username adminServFormation", async () => {
|
|
const db = await getDb();
|
|
if (!db) {
|
|
throw new Error("Database not available");
|
|
}
|
|
|
|
const result = await db
|
|
.select()
|
|
.from(users)
|
|
.where(eq(users.username, "adminServFormation"))
|
|
.limit(1);
|
|
|
|
expect(result.length).toBe(1);
|
|
expect(result[0].username).toBe("adminServFormation");
|
|
expect(result[0].role).toBe("admin");
|
|
expect(result[0].password).toBeDefined();
|
|
expect(result[0].password).not.toBeNull();
|
|
});
|
|
|
|
it("should authenticate with correct credentials", async () => {
|
|
const response = await fetch("http://localhost:3000/api/auth/local/login", {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
},
|
|
body: JSON.stringify({
|
|
username: "adminServFormation",
|
|
password: "Itinova69!",
|
|
}),
|
|
});
|
|
|
|
expect(response.status).toBe(200);
|
|
const data = await response.json();
|
|
expect(data.success).toBe(true);
|
|
expect(data.user).toBeDefined();
|
|
expect(data.user.username).toBe("adminServFormation");
|
|
expect(data.user.role).toBe("admin");
|
|
expect(data.user.password).toBeUndefined(); // Le mot de passe ne doit pas être retourné
|
|
});
|
|
|
|
it("should reject authentication with incorrect password", async () => {
|
|
const response = await fetch("http://localhost:3000/api/auth/local/login", {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
},
|
|
body: JSON.stringify({
|
|
username: "adminServFormation",
|
|
password: "wrongpassword",
|
|
}),
|
|
});
|
|
|
|
expect(response.status).toBe(401);
|
|
const data = await response.json();
|
|
expect(data.success).toBe(false);
|
|
expect(data.message).toContain("incorrect");
|
|
});
|
|
|
|
it("should reject authentication with non-existent username", async () => {
|
|
const response = await fetch("http://localhost:3000/api/auth/local/login", {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
},
|
|
body: JSON.stringify({
|
|
username: "nonexistentuser",
|
|
password: "anypassword",
|
|
}),
|
|
});
|
|
|
|
expect(response.status).toBe(401);
|
|
const data = await response.json();
|
|
expect(data.success).toBe(false);
|
|
expect(data.message).toContain("incorrect");
|
|
});
|
|
|
|
it("should reject authentication with missing credentials", async () => {
|
|
const response = await fetch("http://localhost:3000/api/auth/local/login", {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
},
|
|
body: JSON.stringify({
|
|
username: "adminServFormation",
|
|
// password manquant
|
|
}),
|
|
});
|
|
|
|
expect(response.status).toBe(400);
|
|
const data = await response.json();
|
|
expect(data.success).toBe(false);
|
|
expect(data.message).toContain("requis");
|
|
});
|
|
});
|