@civic/auth 0.3.2-beta.0 → 0.3.2-beta.1

package/dist/test/unit/nextjs/config.test.js

@@ -0,0 +1,203 @@
+/* eslint-disable turbo/no-undeclared-env-vars */
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import { resolveAuthConfig, createCivicAuthPlugin, defaultAuthConfig, } from "@/nextjs/config.js";
+import { DEFAULT_AUTH_SERVER } from "@/constants.js";
+const defaultCookies = {
+    id_token: {
+        httpOnly: true,
+        path: "/",
+        sameSite: "strict",
+        secure: false,
+    },
+    access_token: {
+        httpOnly: true,
+        path: "/",
+        sameSite: "strict",
+        secure: false,
+    },
+    refresh_token: {
+        httpOnly: true,
+        path: "/",
+        sameSite: "strict",
+        secure: false,
+    },
+    expires_in: {
+        httpOnly: true,
+        path: "/",
+        sameSite: "strict",
+        secure: false,
+    },
+    timestamp: {
+        httpOnly: true,
+        path: "/",
+        sameSite: "strict",
+        secure: false,
+    },
+    code_verifier: {
+        httpOnly: true,
+        path: "/",
+        sameSite: "strict",
+        secure: false,
+    },
+    app_url: {
+        httpOnly: true,
+        path: "/",
+        sameSite: "strict",
+        secure: false,
+    },
+};
+describe("nextjs/config", () => {
+    const originalEnv = process.env;
+    beforeEach(() => {
+        vi.resetModules();
+        process.env = { ...originalEnv, NODE_ENV: "development" };
+    });
+    afterEach(() => {
+        process.env = originalEnv;
+        vi.restoreAllMocks();
+    });
+    describe("resolveAuthConfig", () => {
+        it("should throw an error if clientId is not provided", () => {
+            expect(() => resolveAuthConfig()).toThrowError("Civic Auth client ID is required");
+        });
+        it("should use default values when no config is provided", () => {
+            // client id must be defined
+            process.env._civic_auth_client_id = "clientId";
+            const result = resolveAuthConfig();
+            expect(result).toEqual({ ...defaultAuthConfig, clientId: "clientId" });
+        });
+        it("should override default values with provided config", () => {
+            const config = {
+                clientId: "clientId",
+                callbackUrl: "/custom/callback",
+                loginUrl: "/custom/login",
+                include: ["/protected/*"],
+                exclude: ["/public/*"],
+            };
+            const result = resolveAuthConfig(config);
+            expect(result.callbackUrl).toBe("/custom/callback");
+            expect(result.loginUrl).toBe("/custom/login");
+            expect(result.include).toEqual(["/protected/*"]);
+            expect(result.exclude).toEqual(["/public/*"]);
+        });
+        it("should use environment variables if set", () => {
+            process.env._civic_auth_client_id = "clientId";
+            process.env._civic_auth_callback_url = "/env/callback";
+            process.env._civic_auth_login_url = "/env/login";
+            process.env._civic_auth_includes = "/env/protected/*";
+            process.env._civic_auth_excludes = "/env/public/*";
+            const result = resolveAuthConfig();
+            expect(result.callbackUrl).toBe("/env/callback");
+            expect(result.loginUrl).toBe("/env/login");
+            expect(result.include).toEqual(["/env/protected/*"]);
+            expect(result.exclude).toEqual(["/env/public/*"]);
+        });
+        it("should prioritize provided config over environment variables", () => {
+            process.env._civic_auth_callback_url = "/env/callback";
+            const config = {
+                clientId: "clientId",
+                callbackUrl: "/config/callback",
+            };
+            const result = resolveAuthConfig(config);
+            expect(result.callbackUrl).toBe("/config/callback");
+        });
+        it("should merge cookie configurations correctly", () => {
+            const config = {
+                clientId: "clientId",
+                cookies: {
+                    tokens: {
+                        id_token: { ...defaultCookies.id_token, secure: false },
+                    },
+                    user: {
+                        httpOnly: false,
+                        secure: false,
+                        sameSite: "strict",
+                    },
+                },
+            };
+            const result = resolveAuthConfig(config);
+            expect(result.cookies.tokens).toEqual({
+                ...defaultCookies,
+                id_token: { ...defaultCookies.id_token, secure: false },
+            });
+            expect(result.cookies.user).toEqual({
+                httpOnly: false,
+                secure: false,
+                sameSite: "strict",
+                path: "/",
+                maxAge: 3600,
+            });
+        });
+        it("should set secure to true in the default cookie configs if NODE_ENV is not development", async () => {
+            process.env = { ...originalEnv, NODE_ENV: "production" };
+            // re-import to get the configs with the updated NODE_ENV
+            const configs = await import("../../../src/nextjs/config.js");
+            const result = configs.resolveAuthConfig({ clientId: "clientId" });
+            Object.values(result.cookies.tokens).forEach((cookie) => {
+                expect(cookie.secure).toBe(true);
+            });
+        });
+    });
+    describe("createCivicAuthPlugin", () => {
+        it("should return a function", () => {
+            const plugin = createCivicAuthPlugin({ clientId: "clientId" });
+            expect(typeof plugin).toBe("function");
+        });
+        it("should set environment variables based on resolved config", () => {
+            const config = {
+                clientId: "clientId",
+                callbackUrl: "/custom/callback",
+                loginUrl: "/custom/login",
+                logoutUrl: "/custom/logout",
+                logoutCallbackUrl: "/custom/logoutcallback",
+                include: ["/protected/*"],
+                exclude: ["/public/*"],
+                cookies: {
+                    tokens: defaultCookies,
+                    user: {
+                        secure: false,
+                        sameSite: "strict",
+                        maxAge: 3600,
+                    },
+                },
+            };
+            const plugin = createCivicAuthPlugin(config);
+            const nextConfig = plugin({});
+            expect(nextConfig.env).toEqual({
+                _civic_auth_client_id: "clientId",
+                _civic_auth_callback_url: "/custom/callback",
+                _civic_auth_challenge_url: "/api/auth/challenge",
+                _civic_auth_login_url: "/custom/login",
+                _civic_auth_logout_url: "/custom/logout",
+                _civic_auth_logout_callback_url: "/custom/logoutcallback",
+                _civic_auth_includes: "/protected/*",
+                _civic_auth_excludes: "/public/*",
+                _civic_oauth_server: DEFAULT_AUTH_SERVER,
+                _civic_auth_cookie_config: JSON.stringify({
+                    tokens: defaultCookies,
+                    user: {
+                        secure: false,
+                        httpOnly: false,
+                        sameSite: "strict",
+                        path: "/",
+                        maxAge: 3600,
+                    },
+                }),
+            });
+        });
+        it("should merge with existing Next.js config", () => {
+            const existingConfig = {
+                reactStrictMode: true,
+                env: {
+                    CUSTOM_VAR: "value",
+                },
+            };
+            const plugin = createCivicAuthPlugin({ clientId: "clientId" });
+            const nextConfig = plugin(existingConfig);
+            expect(nextConfig.reactStrictMode).toBe(true);
+            expect(nextConfig.env).toHaveProperty("CUSTOM_VAR", "value");
+            expect(nextConfig.env).toHaveProperty("_civic_auth_callback_url");
+        });
+    });
+});
+//# sourceMappingURL=config.test.js.map

package/dist/test/unit/nextjs/config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/config.test.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EAErB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,cAAc,GAAG;IACrB,QAAQ,EAAE;QACR,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,UAAU,EAAE;QACV,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,SAAS,EAAE;QACT,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,KAAK;KACd;CACoB,CAAC;AAExB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,YAAY,CAC5C,kCAAkC,CACnC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,4BAA4B;YAC5B,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,UAAU,CAAC;YAC/C,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAe;gBACzB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,kBAAkB;gBAC/B,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,CAAC,cAAc,CAAC;gBACzB,OAAO,EAAE,CAAC,WAAW,CAAC;aACvB,CAAC;YACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,UAAU,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,eAAe,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,kBAAkB,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,eAAe,CAAC;YAEnD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,eAAe,CAAC;YACvD,MAAM,MAAM,GAAe;gBACzB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,kBAAkB;aAChC,CAAC;YAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,MAAM,GAAe;gBACzB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE;oBACP,MAAM,EAAE;wBACN,QAAQ,EAAE,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;qBAClC;oBACvB,IAAI,EAAE;wBACJ,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,QAAQ;qBACnB;iBACF;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACpC,GAAG,cAAc;gBACjB,QAAQ,EAAE,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;aACxD,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBAClC,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;YACtG,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;YACzD,yDAAyD;YACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAG;gBACb,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,kBAAkB;gBAC/B,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,gBAAgB;gBAC3B,iBAAiB,EAAE,wBAAwB;gBAC3C,OAAO,EAAE,CAAC,cAAc,CAAC;gBACzB,OAAO,EAAE,CAAC,WAAW,CAAC;gBACtB,OAAO,EAAE;oBACP,MAAM,EAAE,cAAc;oBACtB,IAAI,EAAE;wBACJ,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,QAAQ;wBAClB,MAAM,EAAE,IAAI;qBACJ;iBACX;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YAE9B,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC7B,qBAAqB,EAAE,UAAU;gBACjC,wBAAwB,EAAE,kBAAkB;gBAC5C,yBAAyB,EAAE,qBAAqB;gBAChD,qBAAqB,EAAE,eAAe;gBACtC,sBAAsB,EAAE,gBAAgB;gBACxC,+BAA+B,EAAE,wBAAwB;gBACzD,oBAAoB,EAAE,cAAc;gBACpC,oBAAoB,EAAE,WAAW;gBACjC,mBAAmB,EAAE,mBAAmB;gBACxC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC;oBACxC,MAAM,EAAE,cAAc;oBACtB,IAAI,EAAE;wBACJ,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,GAAG;wBACT,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC;aACH,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,cAAc,GAAG;gBACrB,eAAe,EAAE,IAAI;gBACrB,GAAG,EAAE;oBACH,UAAU,EAAE,OAAO;iBACpB;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;YAE1C,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["/* eslint-disable turbo/no-undeclared-env-vars */\nimport { describe, it, expect, beforeEach, afterEach, vi } from \"vitest\";\nimport {\n  resolveAuthConfig,\n  createCivicAuthPlugin,\n  type AuthConfig,\n  defaultAuthConfig,\n} from \"@/nextjs/config.js\";\nimport type { TokensCookieConfig } from \"@/index.js\";\nimport { DEFAULT_AUTH_SERVER } from \"@/constants.js\";\n\nconst defaultCookies = {\n  id_token: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  access_token: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  refresh_token: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  expires_in: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  timestamp: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  code_verifier: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n  app_url: {\n    httpOnly: true,\n    path: \"/\",\n    sameSite: \"strict\",\n    secure: false,\n  },\n} as TokensCookieConfig;\n\ndescribe(\"nextjs/config\", () => {\n  const originalEnv = process.env;\n\n  beforeEach(() => {\n    vi.resetModules();\n    process.env = { ...originalEnv, NODE_ENV: \"development\" };\n  });\n\n  afterEach(() => {\n    process.env = originalEnv;\n    vi.restoreAllMocks();\n  });\n\n  describe(\"resolveAuthConfig\", () => {\n    it(\"should throw an error if clientId is not provided\", () => {\n      expect(() => resolveAuthConfig()).toThrowError(\n        \"Civic Auth client ID is required\",\n      );\n    });\n\n    it(\"should use default values when no config is provided\", () => {\n      // client id must be defined\n      process.env._civic_auth_client_id = \"clientId\";\n      const result = resolveAuthConfig();\n      expect(result).toEqual({ ...defaultAuthConfig, clientId: \"clientId\" });\n    });\n\n    it(\"should override default values with provided config\", () => {\n      const config: AuthConfig = {\n        clientId: \"clientId\",\n        callbackUrl: \"/custom/callback\",\n        loginUrl: \"/custom/login\",\n        include: [\"/protected/*\"],\n        exclude: [\"/public/*\"],\n      };\n      const result = resolveAuthConfig(config);\n      expect(result.callbackUrl).toBe(\"/custom/callback\");\n      expect(result.loginUrl).toBe(\"/custom/login\");\n      expect(result.include).toEqual([\"/protected/*\"]);\n      expect(result.exclude).toEqual([\"/public/*\"]);\n    });\n\n    it(\"should use environment variables if set\", () => {\n      process.env._civic_auth_client_id = \"clientId\";\n      process.env._civic_auth_callback_url = \"/env/callback\";\n      process.env._civic_auth_login_url = \"/env/login\";\n      process.env._civic_auth_includes = \"/env/protected/*\";\n      process.env._civic_auth_excludes = \"/env/public/*\";\n\n      const result = resolveAuthConfig();\n      expect(result.callbackUrl).toBe(\"/env/callback\");\n      expect(result.loginUrl).toBe(\"/env/login\");\n      expect(result.include).toEqual([\"/env/protected/*\"]);\n      expect(result.exclude).toEqual([\"/env/public/*\"]);\n    });\n\n    it(\"should prioritize provided config over environment variables\", () => {\n      process.env._civic_auth_callback_url = \"/env/callback\";\n      const config: AuthConfig = {\n        clientId: \"clientId\",\n        callbackUrl: \"/config/callback\",\n      };\n\n      const result = resolveAuthConfig(config);\n      expect(result.callbackUrl).toBe(\"/config/callback\");\n    });\n\n    it(\"should merge cookie configurations correctly\", () => {\n      const config: AuthConfig = {\n        clientId: \"clientId\",\n        cookies: {\n          tokens: {\n            id_token: { ...defaultCookies.id_token, secure: false },\n          } as TokensCookieConfig,\n          user: {\n            httpOnly: false,\n            secure: false,\n            sameSite: \"strict\",\n          },\n        },\n      };\n\n      const result = resolveAuthConfig(config);\n      expect(result.cookies.tokens).toEqual({\n        ...defaultCookies,\n        id_token: { ...defaultCookies.id_token, secure: false },\n      });\n\n      expect(result.cookies.user).toEqual({\n        httpOnly: false,\n        secure: false,\n        sameSite: \"strict\",\n        path: \"/\",\n        maxAge: 3600,\n      });\n    });\n\n    it(\"should set secure to true in the default cookie configs if NODE_ENV is not development\", async () => {\n      process.env = { ...originalEnv, NODE_ENV: \"production\" };\n      // re-import to get the configs with the updated NODE_ENV\n      const configs = await import(\"../../../src/nextjs/config.js\");\n      const result = configs.resolveAuthConfig({ clientId: \"clientId\" });\n      Object.values(result.cookies.tokens).forEach((cookie) => {\n        expect(cookie.secure).toBe(true);\n      });\n    });\n  });\n\n  describe(\"createCivicAuthPlugin\", () => {\n    it(\"should return a function\", () => {\n      const plugin = createCivicAuthPlugin({ clientId: \"clientId\" });\n      expect(typeof plugin).toBe(\"function\");\n    });\n\n    it(\"should set environment variables based on resolved config\", () => {\n      const config = {\n        clientId: \"clientId\",\n        callbackUrl: \"/custom/callback\",\n        loginUrl: \"/custom/login\",\n        logoutUrl: \"/custom/logout\",\n        logoutCallbackUrl: \"/custom/logoutcallback\",\n        include: [\"/protected/*\"],\n        exclude: [\"/public/*\"],\n        cookies: {\n          tokens: defaultCookies,\n          user: {\n            secure: false,\n            sameSite: \"strict\",\n            maxAge: 3600,\n          } as const,\n        },\n      };\n\n      const plugin = createCivicAuthPlugin(config);\n      const nextConfig = plugin({});\n\n      expect(nextConfig.env).toEqual({\n        _civic_auth_client_id: \"clientId\",\n        _civic_auth_callback_url: \"/custom/callback\",\n        _civic_auth_challenge_url: \"/api/auth/challenge\",\n        _civic_auth_login_url: \"/custom/login\",\n        _civic_auth_logout_url: \"/custom/logout\",\n        _civic_auth_logout_callback_url: \"/custom/logoutcallback\",\n        _civic_auth_includes: \"/protected/*\",\n        _civic_auth_excludes: \"/public/*\",\n        _civic_oauth_server: DEFAULT_AUTH_SERVER,\n        _civic_auth_cookie_config: JSON.stringify({\n          tokens: defaultCookies,\n          user: {\n            secure: false,\n            httpOnly: false,\n            sameSite: \"strict\",\n            path: \"/\",\n            maxAge: 3600,\n          },\n        }),\n      });\n    });\n\n    it(\"should merge with existing Next.js config\", () => {\n      const existingConfig = {\n        reactStrictMode: true,\n        env: {\n          CUSTOM_VAR: \"value\",\n        },\n      };\n\n      const plugin = createCivicAuthPlugin({ clientId: \"clientId\" });\n      const nextConfig = plugin(existingConfig);\n\n      expect(nextConfig.reactStrictMode).toBe(true);\n      expect(nextConfig.env).toHaveProperty(\"CUSTOM_VAR\", \"value\");\n      expect(nextConfig.env).toHaveProperty(\"_civic_auth_callback_url\");\n    });\n  });\n});\n"]}

package/dist/test/unit/nextjs/getUser.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=getUser.test.d.ts.map

package/dist/test/unit/nextjs/getUser.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUser.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/getUser.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/nextjs/getUser.test.js

@@ -0,0 +1,22 @@
+import { describe, it, expect, beforeEach, vi } from "vitest";
+import { GenericUserSession } from "@/shared/lib/UserSession.js";
+import { getUser } from "@/nextjs/index.js";
+import { NextjsClientStorage } from "@/nextjs/cookies.js";
+import * as session from "@/shared/lib/session.js";
+const mockUser = {
+    id: "user123",
+    name: "John Doe",
+    email: "john@example.com",
+    picture: "https://example.com/john.jpg",
+};
+describe("getUser", () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        vi.spyOn(session, "getUser").mockResolvedValue(mockUser);
+    });
+    it("should get the user from session", async () => {
+        const user = await getUser();
+        expect(user).toEqual(mockUser);
+    });
+});
+//# sourceMappingURL=getUser.test.js.map

package/dist/test/unit/nextjs/getUser.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUser.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/getUser.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,OAAO,MAAM,yBAAyB,CAAC;AAEnD,MAAM,QAAQ,GAAS;IACrB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,8BAA8B;CACrB,CAAC;AAErB,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, beforeEach, vi } from \"vitest\";\nimport { GenericUserSession } from \"@/shared/lib/UserSession.js\";\nimport type { User } from \"@/types.ts\";\nimport { getUser } from \"@/nextjs/index.js\";\nimport { NextjsClientStorage } from \"@/nextjs/cookies.js\";\nimport * as session from \"@/shared/lib/session.js\";\n\nconst mockUser: User = {\n  id: \"user123\",\n  name: \"John Doe\",\n  email: \"john@example.com\",\n  picture: \"https://example.com/john.jpg\",\n} as unknown as User;\n\ndescribe(\"getUser\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.spyOn(session, \"getUser\").mockResolvedValue(mockUser);\n  });\n\n  it(\"should get the user from session\", async () => {\n    const user = await getUser();\n    expect(user).toEqual(mockUser);\n  });\n});\n"]}

package/dist/test/unit/nextjs/handler.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handler.test.d.ts.map

package/dist/test/unit/nextjs/handler.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/handler.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/nextjs/handler.test.js

@@ -0,0 +1,207 @@
+import { describe, it, expect, beforeEach, vi } from "vitest";
+import * as PKCE from "@/services/PKCE.js";
+import { NextRequest } from "next/server.js";
+import { handler } from "@/nextjs/routeHandler.js";
+import { revalidatePath } from "next/cache.js";
+import * as logger from "@/lib/logger.js";
+import * as login from "@/server/login.js";
+import * as session from "@/shared/lib/session.js";
+import * as cookies from "@/nextjs/cookies.js";
+import { GenericUserSession } from "@/shared/lib/UserSession.js";
+import { TOKEN_EXCHANGE_TRIGGER_TEXT } from "@/constants.js";
+vi.mock("@/services/PKCE.js");
+vi.mock("next/cache", () => ({
+    revalidatePath: vi.fn(),
+}));
+const mockUser = {
+    id: "user123",
+    name: "John Doe",
+    email: "john@example.com",
+    picture: "https://example.com/john.jpg",
+};
+const mockCookies = {
+    get: vi.fn(),
+    set: vi.fn(),
+    delete: vi.fn(),
+};
+vi.mock("next/headers.js", () => {
+    return {
+        cookies: () => mockCookies,
+    };
+});
+describe("Auth Route Handler", () => {
+    let mockLogger;
+    afterEach(vi.clearAllMocks);
+    beforeEach(() => {
+        mockLogger = {
+            error: vi.fn(),
+            info: vi.fn(),
+            warn: vi.fn(),
+            debug: vi.fn(),
+        };
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "debug").mockImplementation((...args) => mockLogger.debug(...args));
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "info").mockImplementation((...args) => mockLogger.info(...args));
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "warn").mockImplementation((...args) => mockLogger.warn(...args));
+        vi.spyOn(logger.loggers.nextjs.handlers.auth, "error").mockImplementation((...args) => mockLogger.error(...args));
+    });
+    beforeEach(() => {
+        vi.clearAllMocks();
+        vi.stubEnv("_civic_auth_client_id", "test-client-id");
+        vi.spyOn(login, "resolveOAuthAccessCode").mockResolvedValue({});
+        vi.spyOn(session, "getUser").mockResolvedValue(mockUser);
+        vi.spyOn(GenericUserSession.prototype, "set");
+    });
+    describe("Challenge Handler", () => {
+        beforeEach(() => {
+            vi.spyOn(PKCE.GenericPublicClientPKCEProducer.prototype, "getCodeChallenge").mockResolvedValue("test-code-challenge");
+        });
+        it("should handle challenge request", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/challenge");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.json()).resolves.toEqual({
+                status: "success",
+                challenge: "test-code-challenge",
+            });
+        });
+    });
+    describe("Callback Handler", () => {
+        let mockRequest;
+        let routeHandler;
+        beforeAll(() => {
+            routeHandler = handler();
+        });
+        it("should handle missing parameters", async () => {
+            mockRequest = new NextRequest("https://example.com/api/auth/callback");
+            vi.spyOn(mockRequest.cookies, "get").mockReturnValue("test-code-verifier");
+            vi.spyOn(mockRequest.cookies, "set");
+            const response = await routeHandler(mockRequest);
+            expect(response.json()).resolves.toEqual({
+                error: "Bad parameters",
+            });
+            expect(response.status).toBe(400);
+        });
+        describe("with all parameters passed in", () => {
+            beforeAll(() => {
+                mockRequest = new NextRequest("https://example.com/api/auth/callback?code=123&state=testState&appUrl=https://example.com");
+                vi.spyOn(mockRequest.cookies, "get").mockReturnValue("test-code-verifier");
+                vi.spyOn(mockRequest.cookies, "set");
+            });
+            it("should handle error when resolving the access code", async () => {
+                vi.spyOn(login, "resolveOAuthAccessCode").mockRejectedValue("Token exchange failed");
+                const response = await routeHandler(mockRequest);
+                expect(response.json()).resolves.toEqual({
+                    error: "Failed to authenticate user",
+                });
+                expect(response.status).toBe(401);
+            });
+            describe("with code_verifier cookie present on request", () => {
+                it("should do token exchange", async () => {
+                    const routeHandler = handler();
+                    const response = await routeHandler(mockRequest);
+                    // should have resolved the access code
+                    expect(login.resolveOAuthAccessCode).toHaveBeenCalled();
+                    // verify response data
+                    expect(response.status).toBe(200);
+                    // verify user is being set to the session
+                    expect(GenericUserSession.prototype.set).toHaveBeenCalledWith(mockUser);
+                });
+                it("should return empty html response", async () => {
+                    const response = await routeHandler(mockRequest);
+                    const body = await response.text();
+                    expect(body).toEqual('<html><span style="display:none">serverSideTokenExchangeSuccess</span></html>');
+                });
+            });
+            describe("with no code_verifier cookie present on request", () => {
+                beforeAll(() => {
+                    vi.spyOn(mockRequest.cookies, "get").mockReturnValue(undefined);
+                });
+                it("should not do token exchange", async () => {
+                    const response = await routeHandler(mockRequest);
+                    // should have resolved the access code
+                    expect(login.resolveOAuthAccessCode).not.toHaveBeenCalled();
+                    // verify response data
+                    expect(response.status).toBe(200);
+                    // verify user is being set to the session
+                    expect(GenericUserSession.prototype.set).not.toHaveBeenCalled();
+                });
+                describe("in server token-exchange mode", () => {
+                    let state;
+                    beforeEach(() => {
+                        state =
+                            "eyJ1dWlkIjoiMGY0NWU5YWItY2U1Ni00OWZiLTlkYmUtOGQ3ZmM3YTI3NDFhIiwiZGlzcGxheU1vZGUiOiJpZnJhbWUiLCJzZXJ2ZXJUb2tlbkV4Y2hhbmdlIjp0cnVlfQ";
+                        const params = new URLSearchParams({ code: "123", state });
+                        mockRequest = new NextRequest(`https://example.com/api/auth/callback?${params.toString()}`);
+                        vi.spyOn(mockRequest.cookies, "get").mockReturnValue(undefined);
+                    });
+                    it("should return html with a javascript fetch call to retry the callback token exchange", async () => {
+                        // this state indicates server-side token exchange
+                        const response = await routeHandler(mockRequest);
+                        const body = await response.text();
+                        expect(body).toContain(`fetch('/api/auth/callback?code=123&state=${state}&sameDomainCallback=true&appUrl=' + appUrl)`);
+                    });
+                });
+                describe("in client token-exchange mode", () => {
+                    let state;
+                    beforeEach(() => {
+                        state =
+                            "eyJ1dWlkIjoiNzE5MmI3MmItYzk5ZC00NjhmLTliMDAtMWFhOWVhYjI0YjgxIiwiZGlzcGxheU1vZGUiOiJyZWRpcmVjdCJ9";
+                        const params = new URLSearchParams({ code: "123", state });
+                        mockRequest = new NextRequest(`https://example.com/api/auth/callback?${params.toString()}`);
+                        vi.spyOn(mockRequest.cookies, "get").mockReturnValue(undefined);
+                    });
+                    it("should return html response indicating a token exchange is required", async () => {
+                        const response = await routeHandler(mockRequest);
+                        const body = await response.text();
+                        expect(body).toEqual(`<html><body><span style="display:none">${TOKEN_EXCHANGE_TRIGGER_TEXT}</span></body></html>`);
+                    });
+                });
+            });
+        });
+    });
+    describe.skip("Logout Handler", () => {
+        beforeEach(() => {
+            vi.spyOn(cookies, "clearAuthCookies");
+            vi.spyOn(cookies.NextjsCookieStorage.prototype, "get").mockResolvedValue("test");
+        });
+        it("should clear auth cookies", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
+            const routeHandler = handler();
+            await routeHandler(mockRequest);
+            expect(cookies.clearAuthCookies).toHaveBeenCalled();
+        });
+        it("should handle relative redirect paths", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard&state=testState");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.url).toBe("https://example.com/dashboard");
+            expect(revalidatePath).toHaveBeenCalledWith("/dashboard");
+        });
+        it("should handle default redirect to home", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.url).toBe("https://example.com/");
+            expect(revalidatePath).toHaveBeenCalledWith("/");
+        });
+        it("should handle absolute URLs and preserve the domain", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=https://other-domain.com/page");
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            // The URL constructor will preserve the absolute URL
+            expect(response.url).toBe("https://other-domain.com/page");
+            expect(revalidatePath).toHaveBeenCalledWith("https://other-domain.com/page");
+        });
+        it("should handle revalidation failure gracefully", async () => {
+            const mockRequest = new NextRequest("https://example.com/api/auth/logout?redirect=/dashboard");
+            vi.mocked(revalidatePath).mockImplementationOnce(() => {
+                throw new Error("Revalidation failed");
+            });
+            const routeHandler = handler();
+            const response = await routeHandler(mockRequest);
+            expect(response.url).toBe("https://example.com/dashboard");
+            expect(mockLogger.warn).toHaveBeenCalled();
+        });
+    });
+});
+//# sourceMappingURL=handler.test.js.map

package/dist/test/unit/nextjs/handler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.test.js","sourceRoot":"","sources":["../../../../test/unit/nextjs/handler.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,KAAK,IAAI,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,OAAO,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAE7D,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAE9B,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;CACxB,CAAC,CAAC,CAAC;AAEJ,MAAM,QAAQ,GAAS;IACrB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,8BAA8B;CACrB,CAAC;AAErB,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;IACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;CAChB,CAAC;AAEF,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC9B,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW;KAC3B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,UAAyB,CAAC;IAC9B,SAAS,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAC5B,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG;YACX,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;SACf,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,kBAAkB,CACvE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CACvC,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,kBAAkB,CACtE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CACtC,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,kBAAkB,CACtE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CACtC,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,kBAAkB,CACvE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;QACtD,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,iBAAiB,CACzD,EAA2B,CAC5B,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACzD,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,EAAE,CAAC,KAAK,CACN,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAC9C,kBAAkB,CACnB,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,wCAAwC,CACzC,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvC,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,qBAAqB;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAI,WAAwB,CAAC;QAC7B,IAAI,YAA6D,CAAC;QAClE,SAAS,CAAC,GAAG,EAAE;YACb,YAAY,GAAG,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,WAAW,GAAG,IAAI,WAAW,CAC3B,uCAAuC,CACxC,CAAC;YAEF,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAClD,oBAAgD,CACjD,CAAC;YACF,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvC,KAAK,EAAE,gBAAgB;aACxB,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;YAC7C,SAAS,CAAC,GAAG,EAAE;gBACb,WAAW,GAAG,IAAI,WAAW,CAC3B,2FAA2F,CAC5F,CAAC;gBACF,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAClD,oBAAgD,CACjD,CAAC;gBACF,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YACH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;gBAClE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,iBAAiB,CACzD,uBAAuB,CACxB,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;gBAEjD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACvC,KAAK,EAAE,6BAA6B;iBACrC,CAAC,CAAC;gBACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;gBAC5D,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;oBACxC,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;oBAEjD,uCAAuC;oBACvC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,gBAAgB,EAAE,CAAC;oBAExD,uBAAuB;oBACvB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAClC,0CAA0C;oBAC1C,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAC3D,QAAQ,CACT,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;oBACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;oBACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAClB,+EAA+E,CAChF,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;gBAC/D,SAAS,CAAC,GAAG,EAAE;oBACb,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;oBAC5C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;oBAEjD,uCAAuC;oBACvC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;oBAE5D,uBAAuB;oBACvB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAElC,0CAA0C;oBAC1C,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;gBAClE,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;oBAC7C,IAAI,KAAa,CAAC;oBAClB,UAAU,CAAC,GAAG,EAAE;wBACd,KAAK;4BACH,oIAAoI,CAAC;wBACvI,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;wBAC3D,WAAW,GAAG,IAAI,WAAW,CAC3B,yCAAyC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7D,CAAC;wBACF,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;oBACH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;wBACpG,kDAAkD;wBAElD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;wBACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CACpB,4CAA4C,KAAK,6CAA6C,CAC/F,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;oBAC7C,IAAI,KAAa,CAAC;oBAClB,UAAU,CAAC,GAAG,EAAE;wBACd,KAAK;4BACH,kGAAkG,CAAC;wBACrG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;wBAC3D,WAAW,GAAG,IAAI,WAAW,CAC3B,yCAAyC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7D,CAAC;wBACF,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;oBACH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;wBACnF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;wBACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACnC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAClB,0CAA0C,2BAA2B,uBAAuB,CAC7F,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACnC,UAAU,CAAC,GAAG,EAAE;YACd,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YACtC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,iBAAiB,CACtE,MAAM,CACP,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,yDAAyD,CAC1D,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,yEAAyE,CAC1E,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,qCAAqC,CACtC,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,4EAA4E,CAC7E,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAE/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YAEjD,qDAAqD;YACrD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,+BAA+B,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,yDAAyD,CAC1D,CAAC;YAEF,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,sBAAsB,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,OAAO,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect, beforeEach, vi } from \"vitest\";\nimport * as PKCE from \"@/services/PKCE.js\";\nimport type { NextResponse } from \"next/server.js\";\nimport { NextRequest } from \"next/server.js\";\nimport { handler } from \"@/nextjs/routeHandler.js\";\nimport type { RequestCookie } from \"next/dist/compiled/@edge-runtime/cookies\";\nimport { revalidatePath } from \"next/cache.js\";\nimport type { OIDCTokenResponseBody, User } from \"@/types.ts\";\nimport * as logger from \"@/lib/logger.js\";\nimport * as login from \"@/server/login.js\";\nimport * as session from \"@/shared/lib/session.js\";\nimport * as cookies from \"@/nextjs/cookies.js\";\nimport { GenericUserSession } from \"@/shared/lib/UserSession.js\";\nimport { TOKEN_EXCHANGE_TRIGGER_TEXT } from \"@/constants.js\";\n\nvi.mock(\"@/services/PKCE.js\");\n\nvi.mock(\"next/cache\", () => ({\n  revalidatePath: vi.fn(),\n}));\n\nconst mockUser: User = {\n  id: \"user123\",\n  name: \"John Doe\",\n  email: \"john@example.com\",\n  picture: \"https://example.com/john.jpg\",\n} as unknown as User;\n\nconst mockCookies = {\n  get: vi.fn(),\n  set: vi.fn(),\n  delete: vi.fn(),\n};\n\nvi.mock(\"next/headers.js\", () => {\n  return {\n    cookies: () => mockCookies,\n  };\n});\n\ndescribe(\"Auth Route Handler\", () => {\n  let mockLogger: logger.Logger;\n  afterEach(vi.clearAllMocks);\n  beforeEach(() => {\n    mockLogger = {\n      error: vi.fn(),\n      info: vi.fn(),\n      warn: vi.fn(),\n      debug: vi.fn(),\n    };\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"debug\").mockImplementation(\n      (...args) => mockLogger.debug(...args),\n    );\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"info\").mockImplementation(\n      (...args) => mockLogger.info(...args),\n    );\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"warn\").mockImplementation(\n      (...args) => mockLogger.warn(...args),\n    );\n    vi.spyOn(logger.loggers.nextjs.handlers.auth, \"error\").mockImplementation(\n      (...args) => mockLogger.error(...args),\n    );\n  });\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.stubEnv(\"_civic_auth_client_id\", \"test-client-id\");\n    vi.spyOn(login, \"resolveOAuthAccessCode\").mockResolvedValue(\n      {} as OIDCTokenResponseBody,\n    );\n    vi.spyOn(session, \"getUser\").mockResolvedValue(mockUser);\n    vi.spyOn(GenericUserSession.prototype, \"set\");\n  });\n  describe(\"Challenge Handler\", () => {\n    beforeEach(() => {\n      vi.spyOn(\n        PKCE.GenericPublicClientPKCEProducer.prototype,\n        \"getCodeChallenge\",\n      ).mockResolvedValue(\"test-code-challenge\");\n    });\n    it(\"should handle challenge request\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/challenge\",\n      );\n\n      const routeHandler = handler();\n      const response = await routeHandler(mockRequest);\n\n      expect(response.json()).resolves.toEqual({\n        status: \"success\",\n        challenge: \"test-code-challenge\",\n      });\n    });\n  });\n\n  describe(\"Callback Handler\", () => {\n    let mockRequest: NextRequest;\n    let routeHandler: (request: NextRequest) => Promise<NextResponse>;\n    beforeAll(() => {\n      routeHandler = handler();\n    });\n    it(\"should handle missing parameters\", async () => {\n      mockRequest = new NextRequest(\n        \"https://example.com/api/auth/callback\", // missing params\n      );\n\n      vi.spyOn(mockRequest.cookies, \"get\").mockReturnValue(\n        \"test-code-verifier\" as unknown as RequestCookie,\n      );\n      vi.spyOn(mockRequest.cookies, \"set\");\n      const response = await routeHandler(mockRequest);\n\n      expect(response.json()).resolves.toEqual({\n        error: \"Bad parameters\",\n      });\n      expect(response.status).toBe(400);\n    });\n\n    describe(\"with all parameters passed in\", () => {\n      beforeAll(() => {\n        mockRequest = new NextRequest(\n          \"https://example.com/api/auth/callback?code=123&state=testState&appUrl=https://example.com\",\n        );\n        vi.spyOn(mockRequest.cookies, \"get\").mockReturnValue(\n          \"test-code-verifier\" as unknown as RequestCookie,\n        );\n        vi.spyOn(mockRequest.cookies, \"set\");\n      });\n      it(\"should handle error when resolving the access code\", async () => {\n        vi.spyOn(login, \"resolveOAuthAccessCode\").mockRejectedValue(\n          \"Token exchange failed\",\n        );\n        const response = await routeHandler(mockRequest);\n\n        expect(response.json()).resolves.toEqual({\n          error: \"Failed to authenticate user\",\n        });\n        expect(response.status).toBe(401);\n      });\n      describe(\"with code_verifier cookie present on request\", () => {\n        it(\"should do token exchange\", async () => {\n          const routeHandler = handler();\n          const response = await routeHandler(mockRequest);\n\n          // should have resolved the access code\n          expect(login.resolveOAuthAccessCode).toHaveBeenCalled();\n\n          // verify response data\n          expect(response.status).toBe(200);\n          // verify user is being set to the session\n          expect(GenericUserSession.prototype.set).toHaveBeenCalledWith(\n            mockUser,\n          );\n        });\n        it(\"should return empty html response\", async () => {\n          const response = await routeHandler(mockRequest);\n          const body = await response.text();\n          expect(body).toEqual(\n            '<html><span style=\"display:none\">serverSideTokenExchangeSuccess</span></html>',\n          );\n        });\n      });\n      describe(\"with no code_verifier cookie present on request\", () => {\n        beforeAll(() => {\n          vi.spyOn(mockRequest.cookies, \"get\").mockReturnValue(undefined);\n        });\n        it(\"should not do token exchange\", async () => {\n          const response = await routeHandler(mockRequest);\n\n          // should have resolved the access code\n          expect(login.resolveOAuthAccessCode).not.toHaveBeenCalled();\n\n          // verify response data\n          expect(response.status).toBe(200);\n\n          // verify user is being set to the session\n          expect(GenericUserSession.prototype.set).not.toHaveBeenCalled();\n        });\n\n        describe(\"in server token-exchange mode\", () => {\n          let state: string;\n          beforeEach(() => {\n            state =\n              \"eyJ1dWlkIjoiMGY0NWU5YWItY2U1Ni00OWZiLTlkYmUtOGQ3ZmM3YTI3NDFhIiwiZGlzcGxheU1vZGUiOiJpZnJhbWUiLCJzZXJ2ZXJUb2tlbkV4Y2hhbmdlIjp0cnVlfQ\";\n            const params = new URLSearchParams({ code: \"123\", state });\n            mockRequest = new NextRequest(\n              `https://example.com/api/auth/callback?${params.toString()}`,\n            );\n            vi.spyOn(mockRequest.cookies, \"get\").mockReturnValue(undefined);\n          });\n          it(\"should return html with a javascript fetch call to retry the callback token exchange\", async () => {\n            // this state indicates server-side token exchange\n\n            const response = await routeHandler(mockRequest);\n            const body = await response.text();\n            expect(body).toContain(\n              `fetch('/api/auth/callback?code=123&state=${state}&sameDomainCallback=true&appUrl=' + appUrl)`,\n            );\n          });\n        });\n\n        describe(\"in client token-exchange mode\", () => {\n          let state: string;\n          beforeEach(() => {\n            state =\n              \"eyJ1dWlkIjoiNzE5MmI3MmItYzk5ZC00NjhmLTliMDAtMWFhOWVhYjI0YjgxIiwiZGlzcGxheU1vZGUiOiJyZWRpcmVjdCJ9\";\n            const params = new URLSearchParams({ code: \"123\", state });\n            mockRequest = new NextRequest(\n              `https://example.com/api/auth/callback?${params.toString()}`,\n            );\n            vi.spyOn(mockRequest.cookies, \"get\").mockReturnValue(undefined);\n          });\n          it(\"should return html response indicating a token exchange is required\", async () => {\n            const response = await routeHandler(mockRequest);\n            const body = await response.text();\n            expect(body).toEqual(\n              `<html><body><span style=\"display:none\">${TOKEN_EXCHANGE_TRIGGER_TEXT}</span></body></html>`,\n            );\n          });\n        });\n      });\n    });\n  });\n\n  describe.skip(\"Logout Handler\", () => {\n    beforeEach(() => {\n      vi.spyOn(cookies, \"clearAuthCookies\");\n      vi.spyOn(cookies.NextjsCookieStorage.prototype, \"get\").mockResolvedValue(\n        \"test\",\n      );\n    });\n\n    it(\"should clear auth cookies\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=/dashboard\",\n      );\n\n      const routeHandler = handler();\n\n      await routeHandler(mockRequest);\n      expect(cookies.clearAuthCookies).toHaveBeenCalled();\n    });\n\n    it(\"should handle relative redirect paths\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=/dashboard&state=testState\",\n      );\n\n      const routeHandler = handler();\n\n      const response = await routeHandler(mockRequest);\n\n      expect(response.url).toBe(\"https://example.com/dashboard\");\n      expect(revalidatePath).toHaveBeenCalledWith(\"/dashboard\");\n    });\n\n    it(\"should handle default redirect to home\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout\",\n      );\n\n      const routeHandler = handler();\n\n      const response = await routeHandler(mockRequest);\n\n      expect(response.url).toBe(\"https://example.com/\");\n      expect(revalidatePath).toHaveBeenCalledWith(\"/\");\n    });\n\n    it(\"should handle absolute URLs and preserve the domain\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=https://other-domain.com/page\",\n      );\n\n      const routeHandler = handler();\n\n      const response = await routeHandler(mockRequest);\n\n      // The URL constructor will preserve the absolute URL\n      expect(response.url).toBe(\"https://other-domain.com/page\");\n      expect(revalidatePath).toHaveBeenCalledWith(\n        \"https://other-domain.com/page\",\n      );\n    });\n\n    it(\"should handle revalidation failure gracefully\", async () => {\n      const mockRequest = new NextRequest(\n        \"https://example.com/api/auth/logout?redirect=/dashboard\",\n      );\n\n      vi.mocked(revalidatePath).mockImplementationOnce(() => {\n        throw new Error(\"Revalidation failed\");\n      });\n\n      const routeHandler = handler();\n      const response = await routeHandler(mockRequest);\n      expect(response.url).toBe(\"https://example.com/dashboard\");\n      expect(mockLogger.warn).toHaveBeenCalled();\n    });\n  });\n});\n"]}

package/dist/test/unit/nextjs/middleware.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=middleware.test.d.ts.map

package/dist/test/unit/nextjs/middleware.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.test.d.ts","sourceRoot":"","sources":["../../../../test/unit/nextjs/middleware.test.ts"],"names":[],"mappings":""}