@geekmidas/constructs 9.0.2 → 10.0.0-alpha.0

package/src/endpoints/__tests__/EndpointFactory.authorizers.spec.ts

@@ -1,492 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { z } from 'zod';
-import { BUILT_IN_SECURITY_SCHEMES } from '../Authorizer';
-import { EndpointFactory } from '../EndpointFactory';
-
-describe('EndpointFactory.authorizers', () => {
-	it('should create factory with available authorizers', () => {
-		const factory = new EndpointFactory().authorizers([
-			'iam',
-			'jwt-auth0',
-			'custom',
-		] as const);
-
-		const endpoint = factory
-			.get('/users')
-			.authorizer('iam')
-			.handle(async () => ({ success: true }));
-
-		expect(endpoint.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-	});
-
-	it('should allow setting authorizer on individual endpoints', () => {
-		const factory = new EndpointFactory().authorizers(['iam', 'jwt'] as const);
-
-		const endpoint1 = factory
-			.post('/admin/users')
-			.authorizer('iam')
-			.body(z.object({ name: z.string() }))
-			.handle(async () => ({ success: true }));
-
-		const endpoint2 = factory
-			.get('/api/users')
-			.authorizer('jwt')
-			.handle(async () => ({ users: [] }));
-
-		expect(endpoint1.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-		expect(endpoint2.authorizer).toEqual({
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		});
-	});
-
-	it('should throw error when using non-existent authorizer', () => {
-		const factory = new EndpointFactory().authorizers(['iam', 'jwt'] as const);
-
-		expect(() => {
-			factory
-				.post('/users')
-				// @ts-expect-error - testing invalid authorizer
-				.authorizer('invalid')
-				.handle(async () => ({ success: true }));
-		}).toThrow(
-			'Authorizer "invalid" not found in available authorizers: iam, jwt',
-		);
-	});
-
-	it('should allow endpoints without authorizers', () => {
-		const factory = new EndpointFactory().authorizers(['iam', 'jwt'] as const);
-
-		const endpoint = factory
-			.get('/public')
-			.handle(async () => ({ success: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-	});
-
-	it('should preserve authorizers when chaining factory methods', () => {
-		const factory = new EndpointFactory()
-			.authorizers(['iam', 'jwt', 'api-key'] as const)
-			.route('/api/v1');
-
-		const endpoint = factory
-			.get('/protected')
-			.authorizer('jwt')
-			.handle(async () => ({ data: 'protected' }));
-
-		expect(endpoint.authorizer).toEqual({
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		});
-		expect(endpoint.route).toBe('/api/v1/protected');
-	});
-
-	it('should work with services and authorizers together', () => {
-		const dbService = {
-			serviceName: 'database' as const,
-			register: async () => ({ query: async () => [] }),
-		};
-
-		const factory = new EndpointFactory()
-			.services([dbService])
-			.authorizers(['iam'] as const);
-
-		const endpoint = factory
-			.post('/users')
-			.authorizer('iam')
-			.body(z.object({ name: z.string() }))
-			.handle(async ({ body, services }) => {
-				await services.database.query();
-				return { name: body.name };
-			});
-
-		expect(endpoint.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-	});
-
-	it('should maintain type safety with authorizer names', () => {
-		const factory = new EndpointFactory().authorizers(['iam', 'jwt'] as const);
-
-		// This should compile with valid authorizer
-		factory
-			.get('/test1')
-			.authorizer('iam')
-			.handle(async () => ({}));
-
-		// This should compile with valid authorizer
-		factory
-			.get('/test2')
-			.authorizer('jwt')
-			.handle(async () => ({}));
-
-		// This should not compile with invalid authorizer (tested via TypeScript)
-		// factory.get('/test3').authorizer('invalid').handle(async () => ({}));
-	});
-
-	it('should allow creating endpoints without calling authorizer() method', () => {
-		const factory = new EndpointFactory().authorizers(['iam'] as const);
-
-		const endpoint1 = factory
-			.get('/public')
-			.handle(async () => ({ public: true }));
-
-		const endpoint2 = factory
-			.get('/protected')
-			.authorizer('iam')
-			.handle(async () => ({ protected: true }));
-
-		expect(endpoint1.authorizer).toBeUndefined();
-		expect(endpoint2.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-	});
-
-	it('should work with nested routes', () => {
-		const apiFactory = new EndpointFactory()
-			.authorizers(['iam', 'jwt'] as const)
-			.route('/api');
-
-		const v1Factory = apiFactory.route('/v1');
-		const adminFactory = v1Factory.route('/admin');
-
-		const endpoint = adminFactory
-			.delete('/users/:id')
-			.authorizer('iam')
-			.params(z.object({ id: z.string() }))
-			.handle(async () => ({ deleted: true }));
-
-		expect(endpoint.route).toBe('/api/v1/admin/users/:id');
-		expect(endpoint.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-	});
-
-	it('should work with all HTTP methods', () => {
-		const factory = new EndpointFactory().authorizers(['jwt'] as const);
-
-		const getEndpoint = factory
-			.get('/users')
-			.authorizer('jwt')
-			.handle(async () => ({ users: [] }));
-		const postEndpoint = factory
-			.post('/users')
-			.authorizer('jwt')
-			.handle(async () => ({ id: '1' }));
-		const putEndpoint = factory
-			.put('/users/:id')
-			.authorizer('jwt')
-			.handle(async () => ({ updated: true }));
-		const patchEndpoint = factory
-			.patch('/users/:id')
-			.authorizer('jwt')
-			.handle(async () => ({ patched: true }));
-		const deleteEndpoint = factory
-			.delete('/users/:id')
-			.authorizer('jwt')
-			.handle(async () => ({ deleted: true }));
-		const optionsEndpoint = factory
-			.options('/users')
-			.authorizer('jwt')
-			.handle(async () => ({}));
-
-		const expectedJwt = {
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		};
-		expect(getEndpoint.authorizer).toEqual(expectedJwt);
-		expect(postEndpoint.authorizer).toEqual(expectedJwt);
-		expect(putEndpoint.authorizer).toEqual(expectedJwt);
-		expect(patchEndpoint.authorizer).toEqual(expectedJwt);
-		expect(deleteEndpoint.authorizer).toEqual(expectedJwt);
-		expect(optionsEndpoint.authorizer).toEqual(expectedJwt);
-	});
-
-	it('should work with output schemas', () => {
-		const factory = new EndpointFactory().authorizers(['iam'] as const);
-
-		const outputSchema = z.object({
-			id: z.string(),
-			name: z.string(),
-		});
-
-		const endpoint = factory
-			.get('/user')
-			.authorizer('iam')
-			.output(outputSchema)
-			.handle(async () => ({
-				id: '123',
-				name: 'John Doe',
-			}));
-
-		expect(endpoint.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-		expect(endpoint.outputSchema).toBe(outputSchema);
-	});
-
-	it('should not throw error when no authorizers are configured', () => {
-		const factory = new EndpointFactory();
-
-		const endpoint = factory
-			.get('/test')
-			.handle(async () => ({ success: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-	});
-
-	it('should handle multiple authorizers with similar names', () => {
-		const factory = new EndpointFactory().authorizers([
-			'jwt-user',
-			'jwt-admin',
-			'jwt',
-		] as const);
-
-		const endpoint1 = factory
-			.get('/user')
-			.authorizer('jwt-user')
-			.handle(async () => ({}));
-		const endpoint2 = factory
-			.get('/admin')
-			.authorizer('jwt-admin')
-			.handle(async () => ({}));
-		const endpoint3 = factory
-			.get('/api')
-			.authorizer('jwt')
-			.handle(async () => ({}));
-
-		// jwt-user and jwt-admin are custom names (no built-in scheme)
-		expect(endpoint1.authorizer).toEqual({ name: 'jwt-user' });
-		expect(endpoint2.authorizer).toEqual({ name: 'jwt-admin' });
-		// jwt is a built-in scheme
-		expect(endpoint3.authorizer).toEqual({
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		});
-	});
-
-	it('should support "none" to explicitly mark endpoint as having no authorizer', () => {
-		const factory = new EndpointFactory().authorizers(['iam', 'jwt'] as const);
-
-		const endpoint = factory
-			.get('/public')
-			.authorizer('none')
-			.handle(async () => ({ public: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-	});
-
-	it('should allow "none" to override default authorizer from factory', () => {
-		const factory = new EndpointFactory().authorizers(['iam', 'jwt'] as const);
-
-		// In the future, if we add default authorizer support at factory level,
-		// 'none' should override it
-		const endpoint = factory
-			.post('/public/signup')
-			.authorizer('none')
-			.body(z.object({ email: z.string() }))
-			.handle(async () => ({ success: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-	});
-
-	it('should allow "none" even when no authorizers are configured', () => {
-		const factory = new EndpointFactory();
-
-		const endpoint = factory
-			.get('/test')
-			.authorizer('none')
-			.handle(async () => ({ test: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-	});
-
-	it('should work with "none" in combination with other endpoint methods', () => {
-		const factory = new EndpointFactory().authorizers(['iam'] as const);
-
-		const endpoint = factory
-			.post('/public/contact')
-			.authorizer('none')
-			.body(z.object({ message: z.string() }))
-			.output(z.object({ sent: z.boolean() }))
-			.description('Public contact form')
-			.tags(['public', 'contact'])
-			.handle(async () => ({ sent: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-		expect(endpoint.description).toBe('Public contact form');
-		expect(endpoint.tags).toEqual(['public', 'contact']);
-	});
-});
-
-describe('EndpointFactory.authorizer (default)', () => {
-	it('should set default authorizer for all endpoints', () => {
-		const factory = new EndpointFactory()
-			.authorizers(['iam', 'jwt'] as const)
-			.authorizer('jwt');
-
-		const endpoint1 = factory.get('/users').handle(async () => ({ users: [] }));
-		const endpoint2 = factory
-			.post('/users')
-			.body(z.object({ name: z.string() }))
-			.handle(async () => ({ id: '1' }));
-
-		const expectedJwt = {
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		};
-		expect(endpoint1.authorizer).toEqual(expectedJwt);
-		expect(endpoint2.authorizer).toEqual(expectedJwt);
-	});
-
-	it('should allow endpoint to override factory default authorizer', () => {
-		const factory = new EndpointFactory()
-			.authorizers(['iam', 'jwt'] as const)
-			.authorizer('jwt');
-
-		const endpoint = factory
-			.get('/admin')
-			.authorizer('iam')
-			.handle(async () => ({ admin: true }));
-
-		expect(endpoint.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-	});
-
-	it('should allow endpoint to disable authorizer with none', () => {
-		const factory = new EndpointFactory()
-			.authorizers(['iam', 'jwt'] as const)
-			.authorizer('jwt');
-
-		const endpoint = factory
-			.get('/public')
-			.authorizer('none')
-			.handle(async () => ({ public: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-	});
-
-	it('should throw error when setting non-existent default authorizer', () => {
-		const factory = new EndpointFactory().authorizers(['iam', 'jwt'] as const);
-
-		expect(() => {
-			factory.authorizer('invalid');
-		}).toThrow(
-			'Authorizer "invalid" not found in available authorizers: iam, jwt',
-		);
-	});
-
-	it('should preserve default authorizer when chaining factory methods', () => {
-		const factory = new EndpointFactory()
-			.authorizers(['iam', 'jwt'] as const)
-			.authorizer('jwt')
-			.route('/api/v1');
-
-		const endpoint = factory.get('/users').handle(async () => ({ users: [] }));
-
-		expect(endpoint.authorizer).toEqual({
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		});
-		expect(endpoint.route).toBe('/api/v1/users');
-	});
-
-	it('should preserve default authorizer with services', () => {
-		const dbService = {
-			serviceName: 'database' as const,
-			register: async () => ({ query: async () => [] }),
-		};
-
-		const factory = new EndpointFactory()
-			.authorizers(['jwt'] as const)
-			.authorizer('jwt')
-			.services([dbService]);
-
-		const endpoint = factory.get('/users').handle(async ({ services }) => {
-			await services.database.query();
-			return { users: [] };
-		});
-
-		expect(endpoint.authorizer).toEqual({
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		});
-	});
-
-	it('should allow factory.authorizer("none") to clear default', () => {
-		const factory = new EndpointFactory()
-			.authorizers(['iam', 'jwt'] as const)
-			.authorizer('jwt')
-			.authorizer('none');
-
-		const endpoint = factory.get('/test').handle(async () => ({ test: true }));
-
-		expect(endpoint.authorizer).toBeUndefined();
-	});
-
-	it('should allow setting default authorizer without calling authorizers() first', () => {
-		// When no authorizers are defined, validation is skipped
-		const factory = new EndpointFactory().authorizer('custom');
-
-		const endpoint = factory.get('/test').handle(async () => ({ test: true }));
-
-		expect(endpoint.authorizer).toEqual({ name: 'custom' });
-	});
-
-	it('should work with nested route factories', () => {
-		const rootFactory = new EndpointFactory()
-			.authorizers(['iam', 'jwt', 'api-key'] as const)
-			.authorizer('jwt');
-
-		const apiFactory = rootFactory.route('/api');
-		const adminFactory = apiFactory.route('/admin');
-
-		const endpoint = adminFactory
-			.delete('/users/:id')
-			.params(z.object({ id: z.string() }))
-			.handle(async () => ({ deleted: true }));
-
-		expect(endpoint.route).toBe('/api/admin/users/:id');
-		expect(endpoint.authorizer).toEqual({
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		});
-	});
-
-	it('should allow sub-factory to override parent default authorizer', () => {
-		const rootFactory = new EndpointFactory()
-			.authorizers(['iam', 'jwt'] as const)
-			.authorizer('jwt');
-
-		const adminFactory = rootFactory.route('/admin').authorizer('iam');
-
-		const publicEndpoint = rootFactory
-			.get('/public')
-			.handle(async () => ({ public: true }));
-
-		const adminEndpoint = adminFactory
-			.get('/dashboard')
-			.handle(async () => ({ admin: true }));
-
-		expect(publicEndpoint.authorizer).toEqual({
-			name: 'jwt',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.jwt,
-		});
-		expect(adminEndpoint.authorizer).toEqual({
-			name: 'iam',
-			securityScheme: BUILT_IN_SECURITY_SCHEMES.iam,
-		});
-	});
-});