@civic/auth 0.0.1-beta.9 → 0.0.1-tsc.alpha.2

package/dist/test/unit/nextjs/middleware.test.js

@@ -0,0 +1,113 @@
+import { describe, it, expect, beforeEach, vi } from "vitest";
+import { NextResponse } from "next/server.js";
+import { authMiddleware, withAuth } from "@/nextjs/middleware/index.js";
+import { defaultAuthConfig } from "@/nextjs/config.js";
+// Mock next/server
+vi.mock("next/server.js", () => ({
+    NextResponse: {
+        next: vi.fn(() => ({ type: "next" })),
+        redirect: vi.fn((url) => ({ type: "redirect", url })),
+    },
+}));
+describe("Auth Middleware", () => {
+    let request;
+    beforeEach(() => {
+        // Reset mocks
+        vi.clearAllMocks();
+        // Create base request
+        request = {
+            nextUrl: {
+                pathname: "/protected",
+            },
+            cookies: {
+                get: vi.fn(),
+            },
+            method: "GET",
+            url: "http://example.com/protected",
+        };
+        process.env._civic_auth_client_id = "abc";
+    });
+    describe("authMiddleware", () => {
+        /* FIXME
+        it("should redirect to login when no token present", async () => {
+          const middleware = authMiddleware();
+          const response = await middleware(request);
+    
+          expect(NextResponse.redirect).toHaveBeenCalledWith("http://example.com/");
+          expect(response.type).toBe("redirect");
+        });
+        */
+        it("should allow access when token is present", async () => {
+            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
+            const middleware = authMiddleware();
+            const response = await middleware(request);
+            expect(NextResponse.next).toHaveBeenCalled();
+            expect(response.type).toBe("next");
+        });
+        it("should skip auth check for redirect to login page", async () => {
+            request.nextUrl.pathname = "/login";
+            const middleware = authMiddleware({
+                ...defaultAuthConfig,
+                loginUrl: "/login",
+            });
+            const response = await middleware(request);
+            expect(NextResponse.next).toHaveBeenCalled();
+            expect(response.type).toBe("next");
+        });
+        it("should not skip auth check for non-GET to login page", async () => {
+            request.nextUrl.pathname = "/login";
+            const middleware = authMiddleware({
+                ...defaultAuthConfig,
+                loginUrl: "/login",
+            });
+            const response = await middleware({
+                ...request,
+                method: "POST",
+            });
+            // should have redirected to the login page
+            expect(NextResponse.next).not.toHaveBeenCalled();
+            expect(response.type).toBe("redirect");
+        });
+    });
+    describe("withAuth", () => {
+        it("should chain custom middleware when authenticated", async () => {
+            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
+            const customMiddleware = vi.fn(() => NextResponse.next());
+            const middleware = withAuth(customMiddleware);
+            await middleware(request);
+            expect(customMiddleware).toHaveBeenCalled();
+        });
+        it("should not chain custom middleware when unauthorized", async () => {
+            const customMiddleware = vi.fn(() => NextResponse.next());
+            const middleware = withAuth(customMiddleware);
+            const response = await middleware(request);
+            expect(customMiddleware).not.toHaveBeenCalled();
+            expect(NextResponse.redirect).toHaveBeenCalled();
+            expect(response.type).toBe("redirect");
+        });
+    });
+    describe("path matching", () => {
+        it("should respect include patterns", async () => {
+            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
+            request.nextUrl.pathname = "/public";
+            const middleware = authMiddleware({
+                include: ["/protected/**"],
+            });
+            const response = await middleware(request);
+            expect(NextResponse.next).toHaveBeenCalled();
+            expect(response.type).toBe("next");
+        });
+        it("should respect exclude patterns", async () => {
+            request.cookies.get = vi.fn().mockReturnValue({ value: "valid-token" });
+            request.nextUrl.pathname = "/protected/public";
+            const middleware = authMiddleware({
+                include: ["/protected/**"],
+                exclude: ["/protected/public"],
+            });
+            const response = await middleware(request);
+            expect(NextResponse.next).toHaveBeenCalled();
+            expect(response.type).toBe("next");
+        });
+    });
+});
+//# sourceMappingURL=middleware.test.js.map

package/dist/test/unit/nextjs/middleware.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAoB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,mBAAmB;AACnB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;KACtD;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,OAAoB,CAAC;IAEzB,UAAU,CAAC,GAAG,EAAE;QACd,cAAc;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,sBAAsB;QACtB,OAAO,GAAG;YACR,OAAO,EAAE;gBACP,QAAQ,EAAE,YAAY;aACvB;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;aACb;YACD,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,8BAA8B;SACV,CAAC;QAE5B,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,KAAK,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B;;;;;;;;UAQE;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACpC,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,GAAG,iBAAiB;gBACpB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACpC,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,GAAG,iBAAiB;gBACpB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;gBAChC,GAAG,OAAO;gBACV,MAAM,EAAE,MAAM;aACA,CAAC,CAAC;YAElB,2CAA2C;YAC3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAE9C,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE1B,MAAM,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAE9C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;YAErC,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,OAAO,EAAE,CAAC,eAAe,CAAC;aAC3B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,mBAAmB,CAAC;YAE/C,MAAM,UAAU,GAAG,cAAc,CAAC;gBAChC,OAAO,EAAE,CAAC,eAAe,CAAC;gBAC1B,OAAO,EAAE,CAAC,mBAAmB,CAAC;aAC/B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, beforeEach, vi } from \"vitest\";\nimport { NextResponse, type NextRequest } from \"next/server.js\";\nimport { authMiddleware, withAuth } from \"@/nextjs/middleware/index.js\";\nimport { defaultAuthConfig } from \"@/nextjs/config.js\";\n\n// Mock next/server\nvi.mock(\"next/server.js\", () => ({\n  NextResponse: {\n    next: vi.fn(() => ({ type: \"next\" })),\n    redirect: vi.fn((url) => ({ type: \"redirect\", url })),\n  },\n}));\n\ndescribe(\"Auth Middleware\", () => {\n  let request: NextRequest;\n\n  beforeEach(() => {\n    // Reset mocks\n    vi.clearAllMocks();\n\n    // Create base request\n    request = {\n      nextUrl: {\n        pathname: \"/protected\",\n      },\n      cookies: {\n        get: vi.fn(),\n      },\n      method: \"GET\",\n      url: \"http://example.com/protected\",\n    } as unknown as NextRequest;\n\n    process.env._civic_auth_client_id = \"abc\";\n  });\n\n  describe(\"authMiddleware\", () => {\n    /* FIXME\n    it(\"should redirect to login when no token present\", async () => {\n      const middleware = authMiddleware();\n      const response = await middleware(request);\n\n      expect(NextResponse.redirect).toHaveBeenCalledWith(\"http://example.com/\");\n      expect(response.type).toBe(\"redirect\");\n    });\n    */\n\n    it(\"should allow access when token is present\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      const middleware = authMiddleware();\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n\n    it(\"should skip auth check for redirect to login page\", async () => {\n      request.nextUrl.pathname = \"/login\";\n      const middleware = authMiddleware({\n        ...defaultAuthConfig,\n        loginUrl: \"/login\",\n      });\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n\n    it(\"should not skip auth check for non-GET to login page\", async () => {\n      request.nextUrl.pathname = \"/login\";\n      const middleware = authMiddleware({\n        ...defaultAuthConfig,\n        loginUrl: \"/login\",\n      });\n      const response = await middleware({\n        ...request,\n        method: \"POST\",\n      } as NextRequest);\n\n      // should have redirected to the login page\n      expect(NextResponse.next).not.toHaveBeenCalled();\n      expect(response.type).toBe(\"redirect\");\n    });\n  });\n\n  describe(\"withAuth\", () => {\n    it(\"should chain custom middleware when authenticated\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      const customMiddleware = vi.fn(() => NextResponse.next());\n      const middleware = withAuth(customMiddleware);\n\n      await middleware(request);\n\n      expect(customMiddleware).toHaveBeenCalled();\n    });\n\n    it(\"should not chain custom middleware when unauthorized\", async () => {\n      const customMiddleware = vi.fn(() => NextResponse.next());\n      const middleware = withAuth(customMiddleware);\n\n      const response = await middleware(request);\n\n      expect(customMiddleware).not.toHaveBeenCalled();\n      expect(NextResponse.redirect).toHaveBeenCalled();\n      expect(response.type).toBe(\"redirect\");\n    });\n  });\n\n  describe(\"path matching\", () => {\n    it(\"should respect include patterns\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      request.nextUrl.pathname = \"/public\";\n\n      const middleware = authMiddleware({\n        include: [\"/protected/**\"],\n      });\n\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n\n    it(\"should respect exclude patterns\", async () => {\n      request.cookies.get = vi.fn().mockReturnValue({ value: \"valid-token\" });\n      request.nextUrl.pathname = \"/protected/public\";\n\n      const middleware = authMiddleware({\n        include: [\"/protected/**\"],\n        exclude: [\"/protected/public\"],\n      });\n\n      const response = await middleware(request);\n\n      expect(NextResponse.next).toHaveBeenCalled();\n      expect(response.type).toBe(\"next\");\n    });\n  });\n});\n"]}

package/dist/test/unit/nextjs/routeHandler.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=routeHandler.test.d.ts.map

package/dist/test/unit/nextjs/routeHandler.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeHandler.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/routeHandler.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/nextjs/routeHandler.test.js

@@ -0,0 +1,271 @@
+import { describe, it, expect, beforeEach, vi } from "vitest";
+import { NextRequest, NextResponse } from "next/server.js";
+import { handler } from "@/nextjs/routeHandler.js";
+import { revalidatePath } from "next/cache.js";
+import * as logger from "@/lib/logger.js";
+import * as login from "@/server/login.js";
+import * as session from "@/shared/lib/session.js";
+import * as cookies from "@/nextjs/cookies.js";
+import * as PKCE from "@/services/PKCE.js";
+import { GenericUserSession } from "@/shared/lib/UserSession.js";
+import { TOKEN_EXCHANGE_TRIGGER_TEXT } from "@/constants.js";
+vi.mock("next/headers.js", () => {
+    return {
+        cookies: vi.fn().mockReturnValue({
+            set: vi.fn(),
+            get: (name) => {
+                if (name === "codeVerifier") {
+                    return "test-code-verifier";
+                }
+            },
+        }),
+    };
+});
+vi.mock("@/server/login.js");
+vi.mock("@/shared/lib/session.js");
+vi.mock("@/nextjs/cookies.js");
+vi.mock("@/services/PKCE.js");
+const mockUser = {
+    id: "user123",
+    name: "John Doe",
+    email: "john@example.com",
+    picture: "https://example.com/john.jpg",
+};
+// Mock implementations
+vi.mock("next/server.js", () => {
+    class MockNextResponse {
+        body;
+        init;
+        constructor(body, init) {
+            this.body = body;
+            this.init = init;
+            this.body = body;
+            this.init = init;
+        }
+        headers = {
+            set: vi.fn(),
+        };
+        cookies = {
+            set: vi.fn(),
+            get: vi.fn(),
+        };
+        json() {
+            return Promise.resolve({});
+        }
+        static json(data, options) {
+            return {
+                ...options,
+                data,
+                json: () => Promise.resolve(data),
+                headers: {
+                    set: vi.fn(),
+                },
+                cookies: {
+                    set: vi.fn(),
+                    get: vi.fn(),
+                },
+            };
+        }
+        static redirect(url) {
+            return {
+                url,
+                cookies: {
+                    set: vi.fn(),
+                    get: vi.fn(),
+                },
+            };
+        }
+    }
+    return {
+        NextResponse: MockNextResponse,
+        NextRequest: vi.fn().mockImplementation((url) => ({
+            url,
+            nextUrl: new URL(url),
+        })),
+    };
+});
+vi.mock("next/cache", () => ({
+    revalidatePath: vi.fn(),
+}));
+describe("Auth Route Handler", () => {
+    let mockLogger;
+    afterEach(vi.clearAllMocks);
+    beforeEach(() => {
+        mockLogger = {
+            error: vi.fn(),
+            info: vi.fn(),
+            warn: vi.fn(),
+            debug: vi.fn(),
+        };
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "debug").mockImplementation((...args) => mockLogger.debug(...args));
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "info").mockImplementation((...args) => mockLogger.info(...args));
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "warn").mockImplementation((...args) => mockLogger.warn(...args));
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "error").mockImplementation((...args) => mockLogger.error(...args));
+    });
+    beforeEach(() => {
+        vi.clearAllMocks();
+        vi.stubEnv("_civic_auth_client_id", "test-client-id");
+        vi.spyOn(login, "resolveOAuthAccessCode").mockResolvedValue({});
+        vi.spyOn(session, "getUser").mockResolvedValue(mockUser);
+        vi.spyOn(GenericUserSession.prototype, "set");
+    });
+    describe("Challenge Handler", () => {
+        beforeEach(() => {
+            vi.spyOn(PKCE.GenericPublicClientPKCEProducer.prototype, "getCodeChallenge").mockResolvedValue("test-code-challenge");
+        });
+        it("should handle challenge request", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/challenge");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.json()).resolves.toEqual({
+                status: "success",
+                challenge: "test-code-challenge",
+            });
+        });
+    });
+    describe("Callback Handler", () => {
+        let mockRequest;
+        let routeHandler;
+        beforeAll(() => {
+            routeHandler = handler();
+        });
+        it("should handle missing parameters", async () => {
+            mockRequest = new NextRequest("https://example.com/api/auth/callback");
+            mockRequest.cookies = {
+                get: (cookieName) => cookieName === "code_verifier" ? "test-code-verifier" : undefined,
+            };
+            const response = await routeHandler(mockRequest);
+            expect(response.json()).resolves.toEqual({
+                error: "Bad parameters",
+            });
+            expect(response.status).toBe(400);
+        });
+        describe("with all parameters passed in", () => {
+            beforeAll(() => {
+                mockRequest = new NextRequest("https://example.com/api/auth/callback?code=123&state=testState&appUrl=https://example.com");
+                mockRequest.cookies = {
+                    get: (cookieName) => cookieName === "code_verifier" ? "test-code-verifier" : undefined,
+                };
+            });
+            it("should handle error when resolving the access code", async () => {
+                vi.spyOn(login, "resolveOAuthAccessCode").mockRejectedValue("Token exchange failed");
+                const response = await routeHandler(mockRequest);
+                expect(response.json()).resolves.toEqual({
+                    error: "Failed to authenticate user",
+                });
+                expect(response.status).toBe(401);
+            });
+            describe("with code_verifier cookie present on request", () => {
+                it("should do token exchange", async () => {
+                    const routeHandler = handler();
+                    const response = await routeHandler(mockRequest);
+                    // should have resolved the access code
+                    expect(login.resolveOAuthAccessCode).toHaveBeenCalled();
+                    // verify response data
+                    const responseData = await response.json();
+                    expect(responseData).toEqual({});
+                    // verify user is being set to the session
+                    expect(GenericUserSession.prototype.set).toHaveBeenCalledWith(mockUser);
+                });
+                it("should return empty html response", async () => {
+                    const response = await routeHandler(mockRequest);
+                    expect(response.body).toEqual('<html><span style="display:none">serverSideTokenExchangeSuccess</span></html>');
+                });
+            });
+            describe("with no code_verifier cookie present on request", () => {
+                beforeAll(() => {
+                    mockRequest.cookies = {
+                        get: () => undefined,
+                    };
+                });
+                it("should not do token exchange", async () => {
+                    const response = await routeHandler(mockRequest);
+                    // should have resolved the access code
+                    expect(login.resolveOAuthAccessCode).not.toHaveBeenCalled();
+                    // verify response data
+                    const responseData = await response.json();
+                    expect(responseData).toEqual({});
+                    // verify user is being set to the session
+                    expect(GenericUserSession.prototype.set).not.toHaveBeenCalled();
+                });
+                describe("in server token-exchange mode", () => {
+                    let state;
+                    beforeEach(() => {
+                        state =
+                            "eyJ1dWlkIjoiMGY0NWU5YWItY2U1Ni00OWZiLTlkYmUtOGQ3ZmM3YTI3NDFhIiwiZGlzcGxheU1vZGUiOiJpZnJhbWUiLCJzZXJ2ZXJUb2tlbkV4Y2hhbmdlIjp0cnVlfQ";
+                        const params = new URLSearchParams({ code: "123", state });
+                        mockRequest = new NextRequest(`https://example.com/api/auth/callback?${params.toString()}`);
+                        mockRequest.cookies = {
+                            get: () => undefined,
+                        };
+                    });
+                    it("should return html with a javascript fetch call to retry the callback token exchange", async () => {
+                        // this state indicates server-side token exchange
+                        const response = await routeHandler(mockRequest);
+                        expect(response.body).toContain(`fetch('/api/auth/callback?code=123&state=${state}&sameDomainServerTokenExchange=true&appUrl=' + appUrl)`);
+                    });
+                });
+                describe("in client token-exchange mode", () => {
+                    let state;
+                    beforeEach(() => {
+                        state =
+                            "eyJ1dWlkIjoiNzE5MmI3MmItYzk5ZC00NjhmLTliMDAtMWFhOWVhYjI0YjgxIiwiZGlzcGxheU1vZGUiOiJyZWRpcmVjdCJ9";
+                        const params = new URLSearchParams({ code: "123", state });
+                        mockRequest = new NextRequest(`https://example.com/api/auth/callback?${params.toString()}`);
+                        mockRequest.cookies = {
+                            get: () => undefined,
+                        };
+                    });
+                    it("should return html response indicating a token exchange is required", async () => {
+                        const response = await routeHandler(mockRequest);
+                        expect(response.body).toEqual(`<html><body><span style="display:none">${TOKEN_EXCHANGE_TRIGGER_TEXT}</span></body></html>`);
+                    });
+                });
+            });
+        });
+    });
+    describe("Logout Handler", () => {
+        beforeEach(() => {
+            vi.spyOn(cookies, "clearAuthCookies");
+        });
+        it("should clear auth cookies", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
+            const routeHandler = handler();
+            await routeHandler(mockRequest);
+            expect(cookies.clearAuthCookies).toHaveBeenCalled();
+        });
+        it("should handle relative redirect paths", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.url).toBe("https://example.com/dashboard");
+            expect(revalidatePath).toHaveBeenCalledWith("/dashboard");
+        });
+        it("should handle default redirect to home", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.url).toBe("https://example.com/");
+            expect(revalidatePath).toHaveBeenCalledWith("/");
+        });
+        it("should handle absolute URLs and preserve the domain", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=https://other-domain.com/page");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            // The URL constructor will preserve the absolute URL
+            expect(response.url).toBe("https://other-domain.com/page");
+            expect(revalidatePath).toHaveBeenCalledWith("https://other-domain.com/page");
+        });
+        it("should handle revalidation failure gracefully", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
+            vi.mocked(revalidatePath).mockImplementationOnce(() => {
+                throw new Error("Revalidation failed");
+            });
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.url).toBe("https://example.com/dashboard");
+            expect(mockLogger.warn).toHaveBeenCalled();
+        });
+    });
+});
+//# sourceMappingURL=routeHandler.test.js.map

package/dist/test/unit/nextjs/routeHandler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeHandler.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/routeHandler.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,OAAO,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAC/C,OAAO,KAAK,IAAI,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAE7D,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC9B,OAAO;QACL,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;YAC/B,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;YACZ,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE;gBACpB,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC5B,OAAO,oBAAoB,CAAC;gBAC9B,CAAC;YACH,CAAC;SACF,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC7B,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AACnC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAC/B,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAE9B,MAAM,QAAQ,GAAS;IACrB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,8BAA8B;CACrB,CAAC;AAErB,uBAAuB;AACvB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC7B,MAAM,gBAAgB;QAEX;QACA;QAFT,YACS,IAAU,EACV,IAAU;YADV,SAAI,GAAJ,IAAI,CAAM;YACV,SAAI,GAAJ,IAAI,CAAM;YAEjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;QAEM,OAAO,GAAG;YACf,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;SACb,CAAC;QAEK,OAAO,GAAG;YACf,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;YACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;SACb,CAAC;QAEF,IAAI;YACF,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,IAAS,EAAE,OAAY;YACjC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;gBACJ,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE;oBACP,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;iBACb;gBACD,OAAO,EAAE;oBACP,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;oBACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;iBACb;aACF,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,GAAW;YACzB,OAAO;gBACL,GAAG;gBACH,OAAO,EAAE;oBACP,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;oBACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;iBACb;aACF,CAAC;QACJ,CAAC;KACF;IAED,OAAO;QACL,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG;YACH,OAAO,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC;SACtB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;CACxB,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,UAAyB,CAAC;IAC9B,SAAS,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAC5B,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG;YACX,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;SACf,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,kBAAkB,CACvE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CACvC,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,kBAAkB,CACtE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CACtC,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,kBAAkB,CACtE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CACtC,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,kBAAkB,CACvE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;QACtD,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,iBAAiB,CACzD,EAA2B,CAC5B,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACzD,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,EAAE,CAAC,KAAK,CACN,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAC9C,kBAAkB,CACnB,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,wCAAwC,CACzC,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvC,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,qBAAqB;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAI,WAAwB,CAAC;QAC7B,IAAI,YAA6D,CAAC;QAClE,SAAS,CAAC,GAAG,EAAE;YACb,YAAY,GAAG,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,WAAW,GAAG,IAAI,WAAW,CAC3B,uCAAuC,CACxC,CAAC;YAED,WAAkD,CAAC,OAAO,GAAG;gBAC5D,GAAG,EAAE,CAAC,UAAkB,EAAE,EAAE,CAC1B,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;aACpE,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvC,KAAK,EAAE,gBAAgB;aACxB,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;YAC7C,SAAS,CAAC,GAAG,EAAE;gBACb,WAAW,GAAG,IAAI,WAAW,CAC3B,2FAA2F,CAC5F,CAAC;gBAED,WAAkD,CAAC,OAAO,GAAG;oBAC5D,GAAG,EAAE,CAAC,UAAkB,EAAE,EAAE,CAC1B,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;gBAClE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,iBAAiB,CACzD,uBAAuB,CACxB,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;gBAEjD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACvC,KAAK,EAAE,6BAA6B;iBACrC,CAAC,CAAC;gBACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;gBAC5D,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;oBACxC,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;oBAEjD,uCAAuC;oBACvC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,gBAAgB,EAAE,CAAC;oBAExD,uBAAuB;oBACvB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAEjC,0CAA0C;oBAC1C,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAC3D,QAAQ,CACT,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;oBACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;oBACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAC3B,+EAA+E,CAChF,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;gBAC/D,SAAS,CAAC,GAAG,EAAE;oBACZ,WAAkD,CAAC,OAAO,GAAG;wBAC5D,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;qBACrB,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;oBAC5C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;oBAEjD,uCAAuC;oBACvC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;oBAE5D,uBAAuB;oBACvB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAEjC,0CAA0C;oBAC1C,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBAClE,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;oBAC7C,IAAI,KAAa,CAAC;oBAClB,UAAU,CAAC,GAAG,EAAE;wBACd,KAAK;4BACH,oIAAoI,CAAC;wBACvI,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;wBAC3D,WAAW,GAAG,IAAI,WAAW,CAC3B,yCAAyC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7D,CAAC;wBACD,WAAkD,CAAC,OAAO,GAAG;4BAC5D,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;yBACrB,CAAC;oBACJ,CAAC,CAAC,CAAC;oBACH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;wBACpG,kDAAkD;wBAElD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;wBAEjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAC7B,4CAA4C,KAAK,wDAAwD,CAC1G,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;oBAC7C,IAAI,KAAa,CAAC;oBAClB,UAAU,CAAC,GAAG,EAAE;wBACd,KAAK;4BACH,kGAAkG,CAAC;wBACrG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;wBAC3D,WAAW,GAAG,IAAI,WAAW,CAC3B,yCAAyC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7D,CAAC;wBACD,WAAkD,CAAC,OAAO,GAAG;4BAC5D,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;yBACrB,CAAC;oBACJ,CAAC,CAAC,CAAC;oBACH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;wBACnF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;wBACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAC3B,0CAA0C,2BAA2B,uBAAuB,CAC7F,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,UAAU,CAAC,GAAG,EAAE;YACd,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,yDAAyD,CAC1D,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,yDAAyD,CAC1D,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,qCAAqC,CACtC,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,4EAA4E,CAC7E,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,qDAAqD;YACrD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,+BAA+B,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,yDAAyD,CAC1D,CAAC;YAEF,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,sBAAsB,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, beforeEach, vi } from \"vitest\";\nimport { NextRequest, NextResponse } from \"next/server.js\";\nimport { handler } from \"@/nextjs/routeHandler.js\";\nimport { revalidatePath } from \"next/cache.js\";\nimport type { OIDCTokenResponseBody, User } from \"@/types.ts\";\nimport * as logger from \"@/lib/logger.js\";\nimport * as login from \"@/server/login.js\";\nimport * as session from \"@/shared/lib/session.js\";\nimport * as cookies from \"@/nextjs/cookies.js\";\nimport * as PKCE from \"@/services/PKCE.js\";\nimport { GenericUserSession } from \"@/shared/lib/UserSession.js\";\nimport { TOKEN_EXCHANGE_TRIGGER_TEXT } from \"@/constants.js\";\n\nvi.mock(\"next/headers.js\", () => {\n  return {\n    cookies: vi.fn().mockReturnValue({\n      set: vi.fn(),\n      get: (name: string) => {\n        if (name === \"codeVerifier\") {\n          return \"test-code-verifier\";\n        }\n      },\n    }),\n  };\n});\n\nvi.mock(\"@/server/login.js\");\nvi.mock(\"@/shared/lib/session.js\");\nvi.mock(\"@/nextjs/cookies.js\");\nvi.mock(\"@/services/PKCE.js\");\n\nconst mockUser: User = {\n  id: \"user123\",\n  name: \"John Doe\",\n  email: \"john@example.com\",\n  picture: \"https://example.com/john.jpg\",\n} as unknown as User;\n\n// Mock implementations\nvi.mock(\"next/server.js\", () => {\n  class MockNextResponse {\n    constructor(\n      public body?: any,\n      public init?: any,\n    ) {\n      this.body = body;\n      this.init = init;\n    }\n\n    public headers = {\n      set: vi.fn(),\n    };\n\n    public cookies = {\n      set: vi.fn(),\n      get: vi.fn(),\n    };\n\n    json() {\n      return Promise.resolve({});\n    }\n\n    static json(data: any, options: any) {\n      return {\n        ...options,\n        data,\n        json: () => Promise.resolve(data),\n        headers: {\n          set: vi.fn(),\n        },\n        cookies: {\n          set: vi.fn(),\n          get: vi.fn(),\n        },\n      };\n    }\n\n    static redirect(url: string) {\n      return {\n        url,\n        cookies: {\n          set: vi.fn(),\n          get: vi.fn(),\n        },\n      };\n    }\n  }\n\n  return {\n    NextResponse: MockNextResponse,\n    NextRequest: vi.fn().mockImplementation((url) => ({\n      url,\n      nextUrl: new URL(url),\n    })),\n  };\n});\n\nvi.mock(\"next/cache\", () => ({\n  revalidatePath: vi.fn(),\n}));\n\ndescribe(\"Auth Route Handler\", () => {\n  let mockLogger: logger.Logger;\n  afterEach(vi.clearAllMocks);\n  beforeEach(() => {\n    mockLogger = {\n      error: vi.fn(),\n      info: vi.fn(),\n      warn: vi.fn(),\n      debug: vi.fn(),\n    };\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"debug\").mockImplementation(\n      (...args) => mockLogger.debug(...args),\n    );\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"info\").mockImplementation(\n      (...args) => mockLogger.info(...args),\n    );\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"warn\").mockImplementation(\n      (...args) => mockLogger.warn(...args),\n    );\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"error\").mockImplementation(\n      (...args) => mockLogger.error(...args),\n    );\n  });\n\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.stubEnv(\"_civic_auth_client_id\", \"test-client-id\");\n    vi.spyOn(login, \"resolveOAuthAccessCode\").mockResolvedValue(\n      {} as OIDCTokenResponseBody,\n    );\n    vi.spyOn(session, \"getUser\").mockResolvedValue(mockUser);\n    vi.spyOn(GenericUserSession.prototype, \"set\");\n  });\n\n  describe(\"Challenge Handler\", () => {\n    beforeEach(() => {\n      vi.spyOn(\n        PKCE.GenericPublicClientPKCEProducer.prototype,\n        \"getCodeChallenge\",\n      ).mockResolvedValue(\"test-code-challenge\");\n    });\n\n    it(\"should handle challenge request\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/challenge\",\n      );\n\n      const routeHandler = handler();\n      const response = await routeHandler(mockRequest);\n\n      expect(response.json()).resolves.toEqual({\n        status: \"success\",\n        challenge: \"test-code-challenge\",\n      });\n    });\n  });\n\n  describe(\"Callback Handler\", () => {\n    let mockRequest: NextRequest;\n    let routeHandler: (request: NextRequest) => Promise<NextResponse>;\n    beforeAll(() => {\n      routeHandler = handler();\n    });\n    it(\"should handle missing parameters\", async () => {\n      mockRequest = new NextRequest(\n        \"https://example.com/api/auth/callback\", // missing params\n      );\n\n      (mockRequest as unknown as Record<string, unknown>).cookies = {\n        get: (cookieName: string) =>\n          cookieName === \"code_verifier\" ? \"test-code-verifier\" : undefined,\n      };\n      const response = await routeHandler(mockRequest);\n\n      expect(response.json()).resolves.toEqual({\n        error: \"Bad parameters\",\n      });\n      expect(response.status).toBe(400);\n    });\n\n    describe(\"with all parameters passed in\", () => {\n      beforeAll(() => {\n        mockRequest = new NextRequest(\n          \"https://example.com/api/auth/callback?code=123&state=testState&appUrl=https://example.com\",\n        );\n\n        (mockRequest as unknown as Record<string, unknown>).cookies = {\n          get: (cookieName: string) =>\n            cookieName === \"code_verifier\" ? \"test-code-verifier\" : undefined,\n        };\n      });\n      it(\"should handle error when resolving the access code\", async () => {\n        vi.spyOn(login, \"resolveOAuthAccessCode\").mockRejectedValue(\n          \"Token exchange failed\",\n        );\n        const response = await routeHandler(mockRequest);\n\n        expect(response.json()).resolves.toEqual({\n          error: \"Failed to authenticate user\",\n        });\n        expect(response.status).toBe(401);\n      });\n      describe(\"with code_verifier cookie present on request\", () => {\n        it(\"should do token exchange\", async () => {\n          const routeHandler = handler();\n          const response = await routeHandler(mockRequest);\n\n          // should have resolved the access code\n          expect(login.resolveOAuthAccessCode).toHaveBeenCalled();\n\n          // verify response data\n          const responseData = await response.json();\n          expect(responseData).toEqual({});\n\n          // verify user is being set to the session\n          expect(GenericUserSession.prototype.set).toHaveBeenCalledWith(\n            mockUser,\n          );\n        });\n        it(\"should return empty html response\", async () => {\n          const response = await routeHandler(mockRequest);\n          expect(response.body).toEqual(\n            '<html><span style=\"display:none\">serverSideTokenExchangeSuccess</span></html>',\n          );\n        });\n      });\n      describe(\"with no code_verifier cookie present on request\", () => {\n        beforeAll(() => {\n          (mockRequest as unknown as Record<string, unknown>).cookies = {\n            get: () => undefined,\n          };\n        });\n        it(\"should not do token exchange\", async () => {\n          const response = await routeHandler(mockRequest);\n\n          // should have resolved the access code\n          expect(login.resolveOAuthAccessCode).not.toHaveBeenCalled();\n\n          // verify response data\n          const responseData = await response.json();\n          expect(responseData).toEqual({});\n\n          // verify user is being set to the session\n          expect(GenericUserSession.prototype.set).not.toHaveBeenCalled();\n        });\n\n        describe(\"in server token-exchange mode\", () => {\n          let state: string;\n          beforeEach(() => {\n            state =\n              \"eyJ1dWlkIjoiMGY0NWU5YWItY2U1Ni00OWZiLTlkYmUtOGQ3ZmM3YTI3NDFhIiwiZGlzcGxheU1vZGUiOiJpZnJhbWUiLCJzZXJ2ZXJUb2tlbkV4Y2hhbmdlIjp0cnVlfQ\";\n            const params = new URLSearchParams({ code: \"123\", state });\n            mockRequest = new NextRequest(\n              `https://example.com/api/auth/callback?${params.toString()}`,\n            );\n            (mockRequest as unknown as Record<string, unknown>).cookies = {\n              get: () => undefined,\n            };\n          });\n          it(\"should return html with a javascript fetch call to retry the callback token exchange\", async () => {\n            // this state indicates server-side token exchange\n\n            const response = await routeHandler(mockRequest);\n\n            expect(response.body).toContain(\n              `fetch('/api/auth/callback?code=123&state=${state}&sameDomainServerTokenExchange=true&appUrl=' + appUrl)`,\n            );\n          });\n        });\n\n        describe(\"in client token-exchange mode\", () => {\n          let state: string;\n          beforeEach(() => {\n            state =\n              \"eyJ1dWlkIjoiNzE5MmI3MmItYzk5ZC00NjhmLTliMDAtMWFhOWVhYjI0YjgxIiwiZGlzcGxheU1vZGUiOiJyZWRpcmVjdCJ9\";\n            const params = new URLSearchParams({ code: \"123\", state });\n            mockRequest = new NextRequest(\n              `https://example.com/api/auth/callback?${params.toString()}`,\n            );\n            (mockRequest as unknown as Record<string, unknown>).cookies = {\n              get: () => undefined,\n            };\n          });\n          it(\"should return html response indicating a token exchange is required\", async () => {\n            const response = await routeHandler(mockRequest);\n            expect(response.body).toEqual(\n              `<html><body><span style=\"display:none\">${TOKEN_EXCHANGE_TRIGGER_TEXT}</span></body></html>`,\n            );\n          });\n        });\n      });\n    });\n  });\n\n  describe(\"Logout Handler\", () => {\n    beforeEach(() => {\n      vi.spyOn(cookies, \"clearAuthCookies\");\n    });\n\n    it(\"should clear auth cookies\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=/dashboard\",\n      );\n\n      const routeHandler = handler();\n\n      await routeHandler(mockRequest);\n      expect(cookies.clearAuthCookies).toHaveBeenCalled();\n    });\n\n    it(\"should handle relative redirect paths\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=/dashboard\",\n      );\n\n      const routeHandler = handler();\n\n      const response = await routeHandler(mockRequest);\n\n      expect(response.url).toBe(\"https://example.com/dashboard\");\n      expect(revalidatePath).toHaveBeenCalledWith(\"/dashboard\");\n    });\n\n    it(\"should handle default redirect to home\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout\",\n      );\n\n      const routeHandler = handler();\n\n      const response = await routeHandler(mockRequest);\n\n      expect(response.url).toBe(\"https://example.com/\");\n      expect(revalidatePath).toHaveBeenCalledWith(\"/\");\n    });\n\n    it(\"should handle absolute URLs and preserve the domain\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=https://other-domain.com/page\",\n      );\n\n      const routeHandler = handler();\n\n      const response = await routeHandler(mockRequest);\n\n      // The URL constructor will preserve the absolute URL\n      expect(response.url).toBe(\"https://other-domain.com/page\");\n      expect(revalidatePath).toHaveBeenCalledWith(\n        \"https://other-domain.com/page\",\n      );\n    });\n\n    it(\"should handle revalidation failure gracefully\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=/dashboard\",\n      );\n\n      vi.mocked(revalidatePath).mockImplementationOnce(() => {\n        throw new Error(\"Revalidation failed\");\n      });\n\n      const routeHandler = handler();\n      const response = await routeHandler(mockRequest);\n      expect(response.url).toBe(\"https://example.com/dashboard\");\n      expect(mockLogger.warn).toHaveBeenCalled();\n    });\n  });\n});"]}

package/dist/test/unit/nextjs/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/test/unit/nextjs/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/utils.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/nextjs/utils.test.js

@@ -0,0 +1,13 @@
+import { describe, it, expect } from "vitest";
+import { resolveCallbackUrl } from "@/nextjs/utils.js";
+describe("Nextjs utils", () => {
+    describe("resolveCallbackUrl", () => {
+        it("should resolve the callbackUrl by combining the relative callbackUrl from config with baseUrl", () => {
+            const callbackUrl = resolveCallbackUrl({
+                callbackUrl: "/callback",
+            }, "https://example.com");
+            expect(callbackUrl).toBe("https://example.com/callback");
+        });
+    });
+});
+//# sourceMappingURL=utils.test.js.map

package/dist/test/unit/nextjs/utils.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/utils.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;YACvG,MAAM,WAAW,GAAG,kBAAkB,CACpC;gBACE,WAAW,EAAE,WAAW;aACY,EACtC,qBAAqB,CACtB,CAAC;YACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect } from \"vitest\";\nimport type { AuthConfigWithDefaults } from \"@/nextjs/config.js\";\nimport { resolveCallbackUrl } from \"@/nextjs/utils.js\";\n\ndescribe(\"Nextjs utils\", () => {\n  describe(\"resolveCallbackUrl\", () => {\n    it(\"should resolve the callbackUrl by combining the relative callbackUrl from config with baseUrl\", () => {\n      const callbackUrl = resolveCallbackUrl(\n        {\n          callbackUrl: \"/callback\",\n        } as unknown as AuthConfigWithDefaults,\n        \"https://example.com\",\n      );\n      expect(callbackUrl).toBe(\"https://example.com/callback\");\n    });\n  });\n});\n"]}

package/dist/test/unit/publicApi/apiSnapshot.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=apiSnapshot.test.d.ts.map

package/dist/test/unit/publicApi/apiSnapshot.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiSnapshot.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/publicApi/apiSnapshot.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/publicApi/apiSnapshot.test.js

@@ -0,0 +1,10 @@
+import * as authClient from "../../../src/reactjs/index.js";
+import { describe, expect, it } from "vitest";
+// This test checks if the current state of the authClient matches the previously saved snapshot.
+// If the API updates, you will need to update the snapshot by running the test:update script, i.e. `pnpm test:update`
+describe("Auth Client Public API Snapshot", () => {
+    it("should match the previous API snapshot", () => {
+        expect(authClient).toMatchSnapshot();
+    });
+});
+//# sourceMappingURL=apiSnapshot.test.js.map

package/dist/test/unit/publicApi/apiSnapshot.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiSnapshot.test.js","sourceRoot":"","sources":["../../../../test/unit/publicApi/apiSnapshot.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,iGAAiG;AACjG,sHAAsH;AACtH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import * as authClient from \"../../../src/reactjs/index.js\";\n\nimport { describe, expect, it } from \"vitest\";\n\n// This test checks if the current state of the authClient matches the previously saved snapshot.\n// If the API updates, you will need to update the snapshot by running the test:update script, i.e. `pnpm test:update`\ndescribe(\"Auth Client Public API Snapshot\", () => {\n  it(\"should match the previous API snapshot\", () => {\n    expect(authClient).toMatchSnapshot();\n  });\n});\n"]}

package/dist/test/unit/react/components/SignInButton.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SignInButton.test.d.ts.map

package/dist/test/unit/react/components/SignInButton.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInButton.test.d.ts","sourceRoot":"","sources":["../../../../../test/unit/react/components/SignInButton.test.tsx"],"names":[],"mappings":""}

package/dist/test/unit/react/components/SignInButton.test.js

@@ -0,0 +1,31 @@
+import { describe, it, expect, vi } from "vitest";
+import React from "react";
+import { fireEvent, render, screen } from "@testing-library/react";
+import { CivicAuthProvider } from "@/shared/providers/CivicAuthProvider.js";
+import { SignInButton } from "@/reactjs/components/SignInButton.js";
+import * as civicHook from "@/reactjs/hooks/useUser.js";
+describe("SignInButton Component", () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it("should render a SignInButton component", () => {
+        render(React.createElement(CivicAuthProvider, { clientId: "test-client-id", redirectUrl: "https://example.com" },
+            React.createElement(SignInButton, null)));
+        expect(screen.getByText("Sign In")).toBeDefined();
+    });
+    it("should call signIn when the button is clicked", () => {
+        const mockSignIn = vi.fn();
+        vi.spyOn(civicHook, "useUser").mockReturnValue({
+            signIn: mockSignIn,
+            signOut: async () => { },
+            error: null,
+            isLoading: false,
+            user: null,
+        });
+        render(React.createElement(CivicAuthProvider, { clientId: "test-client-id", redirectUrl: "https://example.com" },
+            React.createElement(SignInButton, null)));
+        fireEvent.click(screen.getByText("Sign In"));
+        expect(mockSignIn).toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=SignInButton.test.js.map

package/dist/test/unit/react/components/SignInButton.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInButton.test.js","sourceRoot":"","sources":["../../../../../test/unit/react/components/SignInButton.test.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,KAAK,SAAS,MAAM,4BAA4B,CAAC;AAExD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CACJ,oBAAC,iBAAiB,IAChB,QAAQ,EAAC,gBAAgB,EACzB,WAAW,EAAC,qBAAqB;YAEjC,oBAAC,YAAY,OAAG,CACE,CACrB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAE3B,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC;YAC7C,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,MAAM,CACJ,oBAAC,iBAAiB,IAChB,QAAQ,EAAC,gBAAgB,EACzB,WAAW,EAAC,qBAAqB;YAEjC,oBAAC,YAAY,OAAG,CACE,CACrB,CAAC;QAEF,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAE7C,MAAM,CAAC,UAAU,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, vi } from \"vitest\";\nimport React from \"react\";\nimport { fireEvent, render, screen } from \"@testing-library/react\";\nimport { CivicAuthProvider } from \"@/shared/providers/CivicAuthProvider.js\";\nimport { SignInButton } from \"@/reactjs/components/SignInButton.js\";\nimport * as civicHook from \"@/reactjs/hooks/useUser.js\";\n\ndescribe(\"SignInButton Component\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n  });\n\n  it(\"should render a SignInButton component\", () => {\n    render(\n      <CivicAuthProvider\n        clientId=\"test-client-id\"\n        redirectUrl=\"https://example.com\"\n      >\n        <SignInButton />\n      </CivicAuthProvider>,\n    );\n\n    expect(screen.getByText(\"Sign In\")).toBeDefined();\n  });\n\n  it(\"should call signIn when the button is clicked\", () => {\n    const mockSignIn = vi.fn();\n\n    vi.spyOn(civicHook, \"useUser\").mockReturnValue({\n      signIn: mockSignIn,\n      signOut: async () => {},\n      error: null,\n      isLoading: false,\n      user: null,\n    });\n\n    render(\n      <CivicAuthProvider\n        clientId=\"test-client-id\"\n        redirectUrl=\"https://example.com\"\n      >\n        <SignInButton />\n      </CivicAuthProvider>,\n    );\n\n    fireEvent.click(screen.getByText(\"Sign In\"));\n\n    expect(mockSignIn).toHaveBeenCalled();\n  });\n});\n"]}

package/dist/test/unit/react/components/SignOutButton.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SignOutButton.test.d.ts.map

package/dist/test/unit/react/components/SignOutButton.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignOutButton.test.d.ts","sourceRoot":"","sources":["../../../../../test/unit/react/components/SignOutButton.test.tsx"],"names":[],"mappings":""}

package/dist/test/unit/react/components/SignOutButton.test.js

@@ -0,0 +1,30 @@
+import { describe, it, expect, vi } from "vitest";
+import { fireEvent, render, screen } from "@testing-library/react";
+import { CivicAuthProvider, SignOutButton } from "@/reactjs/index.js";
+import * as userHook from "@/reactjs/hooks/useUser.js";
+import React from "react";
+describe("SignOutButton Component", () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it("should render a SignOutButton component", () => {
+        render(React.createElement(CivicAuthProvider, { clientId: "test-client-id", redirectUrl: "https://example.com" },
+            React.createElement(SignOutButton, null)));
+        expect(screen.getByText("Sign Out")).toBeDefined();
+    });
+    it("should call signIn when the button is clicked", () => {
+        const mockSignOut = vi.fn();
+        vi.spyOn(userHook, "useUser").mockReturnValue({
+            signOut: mockSignOut,
+            signIn: async () => { },
+            error: null,
+            isLoading: false,
+            user: null,
+        });
+        render(React.createElement(CivicAuthProvider, { clientId: "test-client-id", redirectUrl: "https://example.com" },
+            React.createElement(SignOutButton, null)));
+        fireEvent.click(screen.getByText("Sign Out"));
+        expect(mockSignOut).toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=SignOutButton.test.js.map

package/dist/test/unit/react/components/SignOutButton.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignOutButton.test.js","sourceRoot":"","sources":["../../../../../test/unit/react/components/SignOutButton.test.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,QAAQ,MAAM,4BAA4B,CAAC;AACvD,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CACJ,oBAAC,iBAAiB,IAChB,QAAQ,EAAC,gBAAgB,EACzB,WAAW,EAAC,qBAAqB;YAEjC,oBAAC,aAAa,OAAG,CACC,CACrB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAE5B,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC;YAC5C,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACtB,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,MAAM,CACJ,oBAAC,iBAAiB,IAChB,QAAQ,EAAC,gBAAgB,EACzB,WAAW,EAAC,qBAAqB;YAEjC,oBAAC,aAAa,OAAG,CACC,CACrB,CAAC;QAEF,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAE9C,MAAM,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, vi } from \"vitest\";\nimport { fireEvent, render, screen } from \"@testing-library/react\";\nimport { CivicAuthProvider, SignOutButton } from \"@/reactjs/index.js\";\nimport * as userHook from \"@/reactjs/hooks/useUser.js\";\nimport React from \"react\";\n\ndescribe(\"SignOutButton Component\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n  });\n\n  it(\"should render a SignOutButton component\", () => {\n    render(\n      <CivicAuthProvider\n        clientId=\"test-client-id\"\n        redirectUrl=\"https://example.com\"\n      >\n        <SignOutButton />\n      </CivicAuthProvider>,\n    );\n\n    expect(screen.getByText(\"Sign Out\")).toBeDefined();\n  });\n\n  it(\"should call signIn when the button is clicked\", () => {\n    const mockSignOut = vi.fn();\n\n    vi.spyOn(userHook, \"useUser\").mockReturnValue({\n      signOut: mockSignOut,\n      signIn: async () => {},\n      error: null,\n      isLoading: false,\n      user: null,\n    });\n\n    render(\n      <CivicAuthProvider\n        clientId=\"test-client-id\"\n        redirectUrl=\"https://example.com\"\n      >\n        <SignOutButton />\n      </CivicAuthProvider>,\n    );\n\n    fireEvent.click(screen.getByText(\"Sign Out\"));\n\n    expect(mockSignOut).toHaveBeenCalled();\n  });\n});\n"]}

package/dist/test/unit/server/login.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=login.test.d.ts.map

package/dist/test/unit/server/login.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/server/login.test.ts"],"names":[],"mappings":""}