@c15t/backend 1.0.0 → 1.1.0-canary.0

package/src/routes/__test__/index.test.ts

@@ -1,112 +0,0 @@
-/**
- * Main test suite for consent system route handlers
- *
- * This file imports and runs all the tests for various consent endpoints:
- * - set-consent.ts: Creates consent records for users
- * - verify-consent.ts: Verifies if a user has given consent
- * - show-consent-banner.ts: Determines if a consent banner should be shown
- * - status.ts: Returns system status information
- *
- * Note: These tests expect DoubleTieError validation errors, which is the expected
- * behavior in our test environment due to h3 event simulation challenges.
- */
-
-// Use vi to mock dependencies
-import { vi } from 'vitest';
-import { version } from '../../../package.json';
-
-// Mock the routes directly first
-vi.mock('../status', () => {
-	return {
-		status: {
-			path: '/status',
-			method: 'get',
-			handler: vi.fn().mockImplementation((event) => {
-				const adapterType = event.context?.adapter?.id || 'Unavailable';
-				return {
-					status: 'ok',
-					version: version,
-					timestamp: new Date().toISOString(),
-					storage: {
-						type: adapterType,
-						available: !!event.context?.adapter,
-					},
-				};
-			}),
-		},
-	};
-});
-
-vi.mock('../show-consent-banner', () => {
-	return {
-		showConsentBanner: {
-			path: '/show-consent-banner',
-			method: 'get',
-			handler: vi.fn().mockImplementation((event) => {
-				const countryCode =
-					event.headers?.get?.('cf-ipcountry') ||
-					event.headers?.get?.('x-vercel-ip-country') ||
-					event.headers?.get?.('x-amz-cf-ipcountry') ||
-					event.headers?.get?.('x-country-code');
-
-				return {
-					showConsentBanner: Boolean(
-						countryCode &&
-							[
-								'DE',
-								'GB',
-								'FR',
-								'IT',
-								'CH',
-								'BR',
-								'CA',
-								'AU',
-								'JP',
-								'KR',
-							].includes(countryCode)
-					),
-					jurisdiction: {
-						code:
-							countryCode && ['DE', 'GB', 'FR', 'IT'].includes(countryCode)
-								? 'GDPR'
-								: 'NONE',
-						message: 'Test message',
-					},
-					location: {
-						countryCode,
-						regionCode: null,
-					},
-				};
-			}),
-		},
-	};
-});
-
-// Now mock the routes/index.ts file
-vi.mock('../index', () => {
-	// Import the mocked status and showConsentBanner
-	const { status } = require('../status');
-	const { showConsentBanner } = require('../show-consent-banner');
-
-	return {
-		routes: [status, showConsentBanner],
-	};
-});
-
-// Mock h3 to prevent "Cannot read properties of undefined (reading 'req')" errors
-vi.mock('h3', () => {
-	return {
-		readBody: vi.fn().mockImplementation(() => ({})),
-		defineEventHandler: vi.fn().mockImplementation((handler) => handler),
-		createError: vi.fn().mockImplementation((opts) => new Error(opts.message)),
-	};
-});
-
-// Import the tests after all mocks are set up
-import './set-consent.test';
-import './verify-consent.test';
-import './show-consent-banner.test';
-import './status.test';
-
-// This file doesn't contain tests itself, but ensures all test suites are included
-// when running the test command targeting this file.

package/src/routes/__test__/set-consent.test.ts

@@ -1,242 +0,0 @@
-/**
- * Tests for the set-consent route handler
- */
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-
-// Mock dependencies before imports
-vi.mock('../../pkgs/results', () => ({
-	DoubleTieError: class extends Error {
-		code: string;
-		status: number;
-		constructor(message: string, options: { code: string; status: number }) {
-			super(message);
-			this.code = options.code;
-			this.status = options.status;
-		}
-	},
-	ERROR_CODES: {
-		BAD_REQUEST: 'BAD_REQUEST',
-		NOT_FOUND: 'NOT_FOUND',
-		CONFLICT: 'CONFLICT',
-		INTERNAL_SERVER_ERROR: 'INTERNAL_SERVER_ERROR',
-	},
-}));
-
-import type { EventHandlerRequest, H3Event } from 'h3';
-// Import after mocks
-import { setConsent } from '../set-consent';
-
-describe('setConsent', () => {
-	// Mock registry and adapter
-	const mockSubject = { id: 'subject-1', externalId: 'ext-1' };
-	const mockDomain = { id: 'domain-1', name: 'test.example.com' };
-	const mockPolicy = { id: 'policy-1', isActive: true, type: 'cookie_banner' };
-	const mockPurpose = { id: 'purpose-1', code: 'functional' };
-
-	const mockRegistry = {
-		findOrCreateSubject: vi.fn().mockResolvedValue(mockSubject),
-		findOrCreateDomain: vi.fn().mockResolvedValue(mockDomain),
-		findConsentPolicyById: vi.fn().mockResolvedValue(mockPolicy),
-		findOrCreatePolicy: vi.fn().mockResolvedValue(mockPolicy),
-		findConsentPurposeByCode: vi.fn().mockResolvedValue(mockPurpose),
-		createConsentPurpose: vi.fn().mockImplementation(async (data) => ({
-			id: `purpose-${Math.random().toString(36).substring(2, 9)}`,
-			...data,
-		})),
-	};
-
-	const mockConsent = {
-		id: 'consent-1',
-		subjectId: mockSubject.id,
-		domainId: mockDomain.id,
-		policyId: mockPolicy.id,
-		purposeIds: [mockPurpose.id],
-		status: 'active',
-		isActive: true,
-		givenAt: new Date(),
-		ipAddress: '127.0.0.1',
-		agent: 'test-agent',
-		history: [],
-	};
-
-	const mockRecord = {
-		id: 'record-1',
-		subjectId: mockSubject.id,
-		consentId: mockConsent.id,
-		actionType: 'consent_given',
-		details: {},
-		createdAt: new Date(),
-	};
-
-	const mockAdapter = {
-		transaction: vi.fn().mockImplementation(async ({ callback }) => {
-			return callback({
-				create: vi.fn().mockImplementation(({ model }) => {
-					if (model === 'consent') {
-						return mockConsent;
-					}
-					if (model === 'consentRecord') {
-						return mockRecord;
-					}
-					return { id: `${model}-1` };
-				}),
-			});
-		}),
-	};
-
-	// Mock event context with required properties for h3 compatibility
-	const createMockEvent = (
-		body: Record<string, unknown>
-	): H3Event<EventHandlerRequest> => ({
-		//@ts-expect-error
-		req: {}, // Add req property to avoid "Cannot read properties of undefined (reading 'req')" error
-		context: {
-			validated: { body },
-			//@ts-expect-error
-			registry: mockRegistry,
-			//@ts-expect-error
-			adapter: mockAdapter,
-			ipAddress: '127.0.0.1',
-			userAgent: 'test-agent',
-		},
-	});
-
-	beforeEach(() => {
-		vi.clearAllMocks();
-
-		// Override handler to run validation functions and throw expected errors
-		// This helps tests pass while validating the right error conditions
-		vi.spyOn(setConsent, 'handler').mockImplementation(async (event) => {
-			// Access the expected properties to trigger the expected validation calls
-			if (event.context?.validated?.body) {
-				const body = event.context.validated.body;
-
-				// Run the mocked functions to make our expectations work
-				if (body.subjectId) {
-					await event.context.registry.findOrCreateSubject({
-						subjectId: body.subjectId as string,
-						externalSubjectId: body.externalSubjectId as string,
-						ipAddress: event.context.ipAddress as string,
-					});
-				}
-
-				if (body.policyId) {
-					await event.context.registry.findConsentPolicyById(
-						body.policyId as string
-					);
-				}
-			}
-
-			// For test cases expecting success, we could return a valid consent record
-			// For now, we'll continue to throw an error for all cases
-			throw new Error('Validation failed');
-		});
-	});
-
-	it('should expect validation error for cookie banner consent record', async () => {
-		const event = createMockEvent({
-			type: 'cookie_banner',
-			domain: 'test.example.com',
-			preferences: { functional: true, analytics: false },
-			subjectId: 'user-123',
-			metadata: { source: 'website' },
-		});
-
-		await expect(
-			setConsent.handler(event as unknown as H3Event<EventHandlerRequest>)
-		).rejects.toThrow('Validation failed');
-
-		// Verify the function was at least called with expected parameters
-		expect(mockRegistry.findOrCreateSubject).toHaveBeenCalledWith({
-			subjectId: 'user-123',
-			externalSubjectId: undefined,
-			ipAddress: '127.0.0.1',
-		});
-	});
-
-	it('should expect validation error for policy-based consent record', async () => {
-		const event = createMockEvent({
-			type: 'privacy_policy',
-			domain: 'test.example.com',
-			policyId: 'policy-2',
-			subjectId: 'user-123',
-			externalSubjectId: 'ext-user-123',
-			preferences: { dataSharing: true },
-		});
-
-		// Mock policy lookup
-		mockRegistry.findConsentPolicyById.mockResolvedValueOnce({
-			id: 'policy-2',
-			isActive: true,
-			type: 'privacy_policy',
-		});
-
-		await expect(setConsent.handler(event)).rejects.toThrow(
-			'Validation failed'
-		);
-		expect(mockRegistry.findConsentPolicyById).toHaveBeenCalledWith('policy-2');
-	});
-
-	it('should expect validation error when subject creation fails', async () => {
-		mockRegistry.findOrCreateSubject.mockResolvedValueOnce(null);
-
-		const event = createMockEvent({
-			type: 'cookie_banner',
-			domain: 'test.example.com',
-			preferences: { functional: true },
-		});
-
-		await expect(setConsent.handler(event)).rejects.toThrow(
-			'Validation failed'
-		);
-	});
-
-	it('should expect validation error when policy not found', async () => {
-		mockRegistry.findConsentPolicyById.mockResolvedValueOnce(null);
-
-		const event = createMockEvent({
-			type: 'privacy_policy',
-			domain: 'test.example.com',
-			policyId: 'non-existent-policy',
-			subjectId: 'user-123',
-		});
-
-		await expect(setConsent.handler(event)).rejects.toThrow(
-			'Validation failed'
-		);
-	});
-
-	it('should expect validation error when policy is not active', async () => {
-		mockRegistry.findConsentPolicyById.mockResolvedValueOnce({
-			id: 'policy-inactive',
-			isActive: false,
-			type: 'privacy_policy',
-		});
-
-		const event = createMockEvent({
-			type: 'privacy_policy',
-			domain: 'test.example.com',
-			policyId: 'policy-inactive',
-			subjectId: 'user-123',
-		});
-
-		await expect(setConsent.handler(event)).rejects.toThrow(
-			'Validation failed'
-		);
-	});
-
-	it('should expect validation error when transaction fails', async () => {
-		mockAdapter.transaction.mockResolvedValueOnce(null);
-
-		const event = createMockEvent({
-			type: 'cookie_banner',
-			domain: 'test.example.com',
-			preferences: { functional: true },
-			subjectId: 'user-123',
-		});
-
-		await expect(setConsent.handler(event)).rejects.toThrow(
-			'Validation failed'
-		);
-	});
-});

package/src/routes/__test__/show-consent-banner.test.ts

@@ -1,98 +0,0 @@
-/**
- * Tests for the show-consent-banner route handler
- */
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-
-import type { EventHandlerRequest, H3Event } from 'h3';
-// Import after global mocks
-import { showConsentBanner } from '../show-consent-banner';
-
-describe('showConsentBanner', () => {
-	// Test scenario helper function with proper h3 event structure
-	const createMockEvent = (
-		headers: Record<string, string> = {}
-	): H3Event<EventHandlerRequest> => ({
-		//@ts-expect-error
-		req: {}, // Add req property to avoid h3 errors
-		//@ts-expect-error
-		headers: {
-			get: vi.fn().mockImplementation((key: string) => headers[key] || null),
-		},
-	});
-
-	beforeEach(() => {
-		vi.clearAllMocks();
-
-		// Mock the handler to avoid the defineRoute error
-		vi.spyOn(showConsentBanner, 'handler').mockImplementation((event) => {
-			// Extract the country code from the event headers
-			const countryCode =
-				event.headers.get('cf-ipcountry') ||
-				event.headers.get('x-vercel-ip-country') ||
-				event.headers.get('x-amz-cf-ipcountry') ||
-				event.headers.get('x-country-code');
-
-			// Return a mock response based on the country code
-			return Promise.resolve({
-				showConsentBanner: Boolean(
-					countryCode &&
-						[
-							'DE',
-							'GB',
-							'FR',
-							'IT',
-							'CH',
-							'BR',
-							'CA',
-							'AU',
-							'JP',
-							'KR',
-						].includes(countryCode)
-				),
-				jurisdiction: {
-					code:
-						countryCode && ['DE', 'GB', 'FR', 'IT'].includes(countryCode)
-							? 'GDPR'
-							: 'NONE',
-					message: 'Test message',
-				},
-				location: {
-					countryCode,
-					regionCode: null,
-				},
-			});
-		});
-	});
-
-	it('should show banner for EU countries (GDPR)', async () => {
-		const event = createMockEvent({ 'cf-ipcountry': 'DE' });
-		const result = await showConsentBanner.handler(
-			event as unknown as H3Event<EventHandlerRequest>
-		);
-
-		expect(result.showConsentBanner).toBe(true);
-		expect(result.jurisdiction.code).toBe('GDPR');
-		expect(result.location.countryCode).toBe('DE');
-	});
-
-	it('should show banner for UK (GDPR equivalent)', async () => {
-		const event = createMockEvent({ 'cf-ipcountry': 'GB' });
-		const result = await showConsentBanner.handler(
-			event as unknown as H3Event<EventHandlerRequest>
-		);
-
-		expect(result.showConsentBanner).toBe(true);
-		expect(result.jurisdiction.code).toBe('GDPR');
-		expect(result.location.countryCode).toBe('GB');
-	});
-
-	it('should not show banner for non-regulated countries', async () => {
-		const event = createMockEvent({ 'cf-ipcountry': 'US' });
-		const result = await showConsentBanner.handler(
-			event as unknown as H3Event<EventHandlerRequest>
-		);
-
-		expect(result.showConsentBanner).toBe(false);
-		expect(result.location.countryCode).toBe('US');
-	});
-});

package/src/routes/__test__/status.test.ts

@@ -1,64 +0,0 @@
-import type { EventHandlerRequest, H3Event } from 'h3';
-/**
- * Tests for the status route handler
- */
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import { version } from '../../../package.json';
-// Import the mocked status module
-import { status } from '../status';
-
-describe('status', () => {
-	beforeEach(() => {
-		vi.useFakeTimers();
-		// Set a fixed date for testing
-		vi.setSystemTime(new Date('2023-01-01T12:00:00Z'));
-	});
-
-	afterEach(() => {
-		vi.useRealTimers();
-	});
-
-	// Create event with proper h3 structure
-	const createMockEvent = (
-		adapter: { id: string } | null = null
-	): H3Event<EventHandlerRequest> => ({
-		//@ts-expect-error
-		req: {}, // Add req property to avoid "Cannot read properties of undefined (reading 'req')" error
-		context: {
-			//@ts-expect-error
-			adapter,
-		},
-	});
-
-	it('should return status OK when adapter is available', async () => {
-		const mockAdapter = {
-			id: 'TestAdapter',
-		};
-
-		const result = await status.handler(createMockEvent(mockAdapter));
-
-		expect(result).toEqual({
-			status: 'ok',
-			version: version,
-			timestamp: '2023-01-01T12:00:00.000Z',
-			storage: {
-				type: 'TestAdapter',
-				available: true,
-			},
-		});
-	});
-
-	it('should handle case when adapter is unavailable', async () => {
-		const result = await status.handler(createMockEvent(null));
-
-		expect(result).toEqual({
-			status: 'ok',
-			version: version,
-			timestamp: '2023-01-01T12:00:00.000Z',
-			storage: {
-				type: 'Unavailable',
-				available: false,
-			},
-		});
-	});
-});