@app-connect/core 1.7.24 → 1.7.26

package/test/index.test.js

@@ -1,105 +1,105 @@
-const express = require('express');
-const request = require('supertest');
-
-jest.mock('../lib/jwt', () => ({
-  decodeJwt: jest.fn(),
-  generateJwt: jest.fn(),
-}));
-jest.mock('../handlers/auth', () => ({
-  authValidation: jest.fn(),
-}));
-jest.mock('../lib/analytics', () => ({
-  init: jest.fn(),
-  track: jest.fn(),
-}));
-
-const jwt = require('../lib/jwt');
-const authCore = require('../handlers/auth');
-const { createCoreRouter, createCoreMiddleware } = require('../index');
-
-function buildApp() {
-  const app = express();
-  createCoreMiddleware().forEach((m) => app.use(m));
-  app.use('/', createCoreRouter());
-  return app;
-}
-
-describe('Core Router JWT normalization', () => {
-  beforeEach(() => {
-    jest.clearAllMocks();
-  });
-
-  test('should accept query jwtToken without refreshing it', async () => {
-    jwt.decodeJwt.mockReturnValue({ id: 'user-1', platform: 'testCRM' });
-    authCore.authValidation.mockResolvedValue({
-      successful: true,
-      returnMessage: { message: 'ok' },
-      failReason: null,
-      status: 200,
-    });
-    const app = buildApp();
-
-    const response = await request(app).get('/authValidation?jwtToken=query-token');
-
-    expect(response.status).toBe(200);
-    expect(response.headers['x-refreshed-jwt-token']).toBeUndefined();
-    expect(authCore.authValidation).toHaveBeenCalledWith({
-      platform: 'testCRM',
-      userId: 'user-1',
-    });
-    expect(jwt.generateJwt).not.toHaveBeenCalled();
-  });
-
-  test('should refresh near-expiry bearer token and expose header', async () => {
-    const nowMs = 1700000000000;
-    const nowSeconds = Math.floor(nowMs / 1000);
-    const nowSpy = jest.spyOn(Date, 'now').mockReturnValue(nowMs);
-    jwt.decodeJwt.mockImplementation((token) => {
-      if (token === 'old-token') {
-        return { id: 'user-1', platform: 'testCRM', exp: nowSeconds + 60 };
-      }
-      if (token === 'new-token') {
-        return { id: 'user-1', platform: 'testCRM', exp: nowSeconds + (14 * 24 * 60 * 60) };
-      }
-      return null;
-    });
-    jwt.generateJwt.mockReturnValue('new-token');
-    const app = buildApp();
-
-    const response = await request(app)
-      .get('/isAlive')
-      .set('Authorization', 'Bearer old-token')
-      .set('Origin', 'https://example.com');
-
-    expect(response.status).toBe(200);
-    expect(response.headers['x-refreshed-jwt-token']).toBe('new-token');
-    expect(response.headers['access-control-expose-headers']).toContain('x-refreshed-jwt-token');
-    expect(jwt.generateJwt).toHaveBeenCalledWith({ id: 'user-1', platform: 'testCRM' });
-    nowSpy.mockRestore();
-  });
-
-  test('should treat invalid bearer token as unauthenticated for authValidation route', async () => {
-    jwt.decodeJwt.mockReturnValue(null);
-    const app = buildApp();
-
-    const response = await request(app)
-      .get('/authValidation?jwtToken=query-token')
-      .set('Authorization', 'Bearer invalid-token');
-
-    expect(response.status).toBe(400);
-    expect(response.text).toContain('authorize CRM platform');
-    expect(authCore.authValidation).not.toHaveBeenCalled();
-  });
-
-  test('should bypass normalization for /mcp routes', async () => {
-    const app = buildApp();
-
-    const response = await request(app)
-      .get('/mcp')
-      .set('Authorization', 'Bearer maybe-token');
-
-    expect(response.status).toBe(404);
-    expect(jwt.decodeJwt).not.toHaveBeenCalled();
-  });
-});
-
+const express = require('express');
+const request = require('supertest');
+
+jest.mock('../lib/jwt', () => ({
+  decodeJwt: jest.fn(),
+  generateJwt: jest.fn(),
+}));
+jest.mock('../handlers/auth', () => ({
+  authValidation: jest.fn(),
+}));
+jest.mock('../lib/analytics', () => ({
+  init: jest.fn(),
+  track: jest.fn(),
+}));
+
+const jwt = require('../lib/jwt');
+const authCore = require('../handlers/auth');
+const { createCoreRouter, createCoreMiddleware } = require('../index');
+
+function buildApp() {
+  const app = express();
+  createCoreMiddleware().forEach((m) => app.use(m));
+  app.use('/', createCoreRouter());
+  return app;
+}
+
+describe('Core Router JWT normalization', () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+  });
+
+  test('should accept query jwtToken without refreshing it', async () => {
+    jwt.decodeJwt.mockReturnValue({ id: 'user-1', platform: 'testCRM' });
+    authCore.authValidation.mockResolvedValue({
+      successful: true,
+      returnMessage: { message: 'ok' },
+      failReason: null,
+      status: 200,
+    });
+    const app = buildApp();
+
+    const response = await request(app).get('/authValidation?jwtToken=query-token');
+
+    expect(response.status).toBe(200);
+    expect(response.headers['x-refreshed-jwt-token']).toBeUndefined();
+    expect(authCore.authValidation).toHaveBeenCalledWith({
+      platform: 'testCRM',
+      userId: 'user-1',
+    });
+    expect(jwt.generateJwt).not.toHaveBeenCalled();
+  });
+
+  test('should refresh near-expiry bearer token and expose header', async () => {
+    const nowMs = 1700000000000;
+    const nowSeconds = Math.floor(nowMs / 1000);
+    const nowSpy = jest.spyOn(Date, 'now').mockReturnValue(nowMs);
+    jwt.decodeJwt.mockImplementation((token) => {
+      if (token === 'old-token') {
+        return { id: 'user-1', platform: 'testCRM', exp: nowSeconds + 60 };
+      }
+      if (token === 'new-token') {
+        return { id: 'user-1', platform: 'testCRM', exp: nowSeconds + (14 * 24 * 60 * 60) };
+      }
+      return null;
+    });
+    jwt.generateJwt.mockReturnValue('new-token');
+    const app = buildApp();
+
+    const response = await request(app)
+      .get('/isAlive')
+      .set('Authorization', 'Bearer old-token')
+      .set('Origin', 'https://example.com');
+
+    expect(response.status).toBe(200);
+    expect(response.headers['x-refreshed-jwt-token']).toBe('new-token');
+    expect(response.headers['access-control-expose-headers']).toContain('x-refreshed-jwt-token');
+    expect(jwt.generateJwt).toHaveBeenCalledWith({ id: 'user-1', platform: 'testCRM' });
+    nowSpy.mockRestore();
+  });
+
+  test('should treat invalid bearer token as unauthenticated for authValidation route', async () => {
+    jwt.decodeJwt.mockReturnValue(null);
+    const app = buildApp();
+
+    const response = await request(app)
+      .get('/authValidation?jwtToken=query-token')
+      .set('Authorization', 'Bearer invalid-token');
+
+    expect(response.status).toBe(400);
+    expect(response.text).toContain('authorize CRM platform');
+    expect(authCore.authValidation).not.toHaveBeenCalled();
+  });
+
+  test('should bypass normalization for /mcp routes', async () => {
+    const app = buildApp();
+
+    const response = await request(app)
+      .get('/mcp')
+      .set('Authorization', 'Bearer maybe-token');
+
+    expect(response.status).toBe(404);
+    expect(jwt.decodeJwt).not.toHaveBeenCalled();
+  });
+});
+

package/test/lib/cacheCleanup.test.js

@@ -0,0 +1,42 @@
+const { CacheModel } = require('../../models/cacheModel');
+const { clearExpiredCache } = require('../../lib/cacheCleanup');
+
+describe('cacheCleanup', () => {
+  beforeEach(async () => {
+    await CacheModel.destroy({ where: {} });
+  });
+
+  test('deletes only cache records whose expiry has passed', async () => {
+    const now = new Date('2026-05-08T00:00:00.000Z');
+
+    await CacheModel.bulkCreate([
+      {
+        id: 'expired-cache',
+        userId: 'user-1',
+        cacheKey: 'auth-session',
+        status: 'expired',
+        expiry: new Date('2026-05-07T23:59:59.000Z')
+      },
+      {
+        id: 'active-cache',
+        userId: 'user-1',
+        cacheKey: 'auth-session',
+        status: 'pending',
+        expiry: new Date('2026-05-08T00:00:01.000Z')
+      },
+      {
+        id: 'cache-without-expiry',
+        userId: 'user-2',
+        cacheKey: 'contacts',
+        status: 'active'
+      }
+    ]);
+
+    const deletedCount = await clearExpiredCache({ now });
+
+    expect(deletedCount).toBe(1);
+    expect(await CacheModel.findByPk('expired-cache')).toBeNull();
+    expect(await CacheModel.findByPk('active-cache')).not.toBeNull();
+    expect(await CacheModel.findByPk('cache-without-expiry')).not.toBeNull();
+  });
+});