@go-mondo/identity-sdk 0.0.2-beta.74 → 0.0.2-beta.76

package/src/app/authorization/schema.test.ts.bak

@@ -1,412 +0,0 @@
-import { type } from 'arktype';
-import { describe, expect, test } from 'vitest';
-import {
-  type Authorization,
-  AuthorizationPayloadSchema,
-  AuthorizationSchema,
-  UpsertAuthorizationPayloadSchema,
-} from './schema.js';
-
-describe('App Authorization - Schema', () => {
-  describe('AuthorizationSchema', () => {
-    test('should accept complete authorization object', () => {
-      const authorization = {
-        refreshTokenDuration: 3600,
-        accessTokenDuration: 900,
-        accessTokenSignatureAlgorithm: 'HS256' as const,
-        loginUri: 'https://app.example.com/login',
-        callbackUrls: [
-          'https://app.example.com/callback',
-          'https://app.example.com/oauth/callback',
-        ],
-        availableAudiences: ['api.example.com', 'admin.example.com'],
-        availableGrants: new Set([
-          'authorization_code',
-          'refresh_token',
-        ] as const),
-        defaultAudience: 'api.example.com',
-        updatedAt: new Date(),
-        deletedAt: new Date(),
-        deactivatedAt: new Date(),
-        metadata: {
-          oauth_version: '2.0',
-          pkce_required: true,
-          state_parameter_required: true,
-        },
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect((result as Authorization).availableGrants).toBeInstanceOf(Set);
-    });
-
-    test('should accept minimal authorization object', () => {
-      const authorization = {
-        metadata: {},
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept authorization with grant array and convert to Set', () => {
-      const authorization = {
-        refreshTokenDuration: 7200,
-        accessTokenDuration: 1800,
-        availableGrants: ['authorization_code', 'client_credentials'] as const,
-        metadata: {
-          client_type: 'confidential',
-        },
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect((result as Authorization).availableGrants).toBeInstanceOf(Set);
-      expect(
-        (result as Authorization).availableGrants?.has('authorization_code')
-      ).toBe(true);
-      expect(
-        (result as Authorization).availableGrants?.has('client_credentials')
-      ).toBe(true);
-    });
-
-    test('should accept authorization with Set of grants', () => {
-      const authorization = {
-        accessTokenDuration: 600,
-        availableGrants: new Set(['implicit', 'authorization_code'] as const),
-        callbackUrls: ['https://spa.example.com/callback'],
-        metadata: {
-          client_type: 'public',
-          application_type: 'spa',
-        },
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect((result as Authorization).availableGrants).toBeInstanceOf(Set);
-    });
-
-    test('should accept authorization with callback URLs as Set', () => {
-      const authorization = {
-        callbackUrls: new Set([
-          'https://app.example.com/auth',
-          'https://app.example.com/oauth',
-        ]),
-        availableAudiences: new Set(['api1.example.com', 'api2.example.com']),
-        metadata: {
-          multi_tenant: true,
-        },
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect((result as Authorization).callbackUrls).toBeInstanceOf(Set);
-      expect((result as Authorization).availableAudiences).toBeInstanceOf(Set);
-    });
-
-    test('should accept authorization with optional fields', () => {
-      const authorization = {
-        refreshTokenDuration: 86400,
-        accessTokenDuration: 3600,
-        accessTokenSignatureAlgorithm: 'RS256' as const,
-        loginUri: 'https://auth.example.com/login',
-        defaultAudience: 'https://api.example.com',
-        updatedAt: new Date(),
-        metadata: {
-          jwt_configuration: {
-            algorithm: 'RS256',
-            public_key: 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...',
-          },
-          scopes: ['read:users', 'write:users', 'admin:all'],
-        },
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should filter empty strings from URLs and audiences', () => {
-      const authorization = {
-        callbackUrls: new Set([
-          'https://valid.example.com/callback',
-          'https://another.example.com/auth',
-        ]),
-        availableAudiences: ['api.example.com', 'admin.example.com'],
-        metadata: {},
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect((result as Authorization).callbackUrls).toEqual(
-        new Set([
-          'https://valid.example.com/callback',
-          'https://another.example.com/auth',
-        ])
-      );
-      expect((result as Authorization).availableAudiences).toEqual(
-        new Set(['api.example.com', 'admin.example.com'])
-      );
-    });
-
-    test('should reject invalid grant types', () => {
-      const authorization = {
-        availableGrants: ['invalid_grant_type'],
-        metadata: {},
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).toBeInstanceOf(type.errors);
-    });
-
-    test('should reject invalid URL formats', () => {
-      const authorization = {
-        loginUri: 'not-a-valid-url',
-        metadata: {},
-      };
-
-      const result = AuthorizationSchema(authorization);
-      expect(result).toBeInstanceOf(type.errors);
-    });
-  });
-
-  describe('AuthorizationPayloadSchema', () => {
-    test('should accept complete authorization payload', () => {
-      const payload = {
-        refreshTokenDuration: 3600,
-        accessTokenDuration: 900,
-        accessTokenSignatureAlgorithm: 'HS256' as const,
-        loginUri: 'https://app.example.com/login',
-        callbackUrls: ['https://app.example.com/callback'],
-        availableAudiences: ['api.example.com'],
-        availableGrants: ['authorization_code', 'refresh_token'] as const,
-        defaultAudience: 'api.example.com',
-        updatedAt: new Date().toISOString(),
-        deletedAt: new Date().toISOString(),
-        deactivatedAt: new Date().toISOString(),
-        metadata: {
-          client_id: 'oauth_client_123',
-          client_secret_set: true,
-          token_endpoint_auth_method: 'client_secret_basic',
-        },
-      };
-
-      const result = AuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toEqual(payload);
-    });
-
-    test('should accept minimal authorization payload', () => {
-      const payload = {
-        metadata: {},
-      };
-
-      const result = AuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toHaveProperty('accessTokenDuration');
-      expect(result).toHaveProperty('accessTokenSignatureAlgorithm');
-      expect(result).toHaveProperty('refreshTokenDuration');
-    });
-
-    test('should accept payload with grant arrays', () => {
-      const payload = {
-        refreshTokenDuration: 7200,
-        accessTokenDuration: 1800,
-        availableGrants: ['authorization_code', 'client_credentials'] as const,
-        callbackUrls: ['https://server.example.com/oauth/callback'],
-        metadata: {
-          client_type: 'confidential',
-          requires_client_secret: true,
-        },
-      };
-
-      const result = AuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept payload with Set of grants', () => {
-      const payload = {
-        accessTokenDuration: 600,
-        availableGrants: new Set(['implicit'] as const),
-        defaultAudience: 'https://spa-api.example.com',
-        metadata: {
-          client_type: 'public',
-          application_type: 'single_page_app',
-        },
-      };
-
-      const result = AuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept payload with comprehensive OAuth configuration', () => {
-      const payload = {
-        refreshTokenDuration: 2592000, // 30 days
-        accessTokenDuration: 3600, // 1 hour
-        accessTokenSignatureAlgorithm: 'RS256' as const,
-        loginUri: 'https://auth.corporate.com/oauth/authorize',
-        callbackUrls: [
-          'https://app.corporate.com/auth/callback',
-          'https://mobile.corporate.com/oauth/callback',
-          'https://admin.corporate.com/auth/return',
-        ],
-        availableAudiences: [
-          'https://api.corporate.com',
-          'https://admin-api.corporate.com',
-          'https://analytics.corporate.com',
-        ],
-        availableGrants: [
-          'authorization_code',
-          'refresh_token',
-          'client_credentials',
-        ] as const,
-        defaultAudience: 'https://api.corporate.com',
-        updatedAt: new Date().toISOString(),
-        metadata: {
-          client_name: 'Corporate Application',
-          client_uri: 'https://corporate.com',
-          logo_uri: 'https://corporate.com/logo.png',
-          tos_uri: 'https://corporate.com/terms',
-          policy_uri: 'https://corporate.com/privacy',
-        },
-      };
-
-      const result = AuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should reject invalid date format', () => {
-      const payload = {
-        updatedAt: 'invalid-date',
-        metadata: {},
-      };
-
-      const result = AuthorizationPayloadSchema(payload);
-      expect(result).toBeInstanceOf(type.errors);
-    });
-
-    test('should reject invalid signature algorithm', () => {
-      const payload = {
-        accessTokenSignatureAlgorithm: 'INVALID_ALG',
-        metadata: {},
-      };
-
-      const result = AuthorizationPayloadSchema(payload);
-      expect(result).toBeInstanceOf(type.errors);
-    });
-  });
-
-  describe('UpsertAuthorizationPayloadSchema', () => {
-    test('should accept upsert with all fields', () => {
-      const payload = {
-        refreshTokenDuration: 3600,
-        accessTokenDuration: 900,
-        accessTokenSignatureAlgorithm: 'HS256' as const,
-        loginUri: 'https://updated.example.com/login',
-        callbackUrls: ['https://updated.example.com/callback'],
-        availableAudiences: ['updated-api.example.com'],
-        availableGrants: ['authorization_code'] as const,
-        defaultAudience: 'updated-api.example.com',
-        metadata: {
-          update_reason: 'security_enhancement',
-          updated_by: 'admin@example.com',
-        },
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toEqual(payload);
-    });
-
-    test('should accept partial upsert payload', () => {
-      const payload = {
-        accessTokenDuration: 1800,
-        callbackUrls: ['https://new-callback.example.com'],
-        metadata: {
-          fields_updated: 'accessTokenDuration',
-        },
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept upsert with undefined values', () => {
-      const payload = {
-        loginUri: undefined,
-        defaultAudience: undefined,
-        metadata: {
-          reset_fields: 'loginUri',
-        },
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept empty metadata upsert', () => {
-      const payload = {
-        refreshTokenDuration: 7200,
-        metadata: {},
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept upsert with grant types modification', () => {
-      const payload = {
-        availableGrants: [
-          'authorization_code',
-          'refresh_token',
-          'client_credentials',
-        ] as const,
-        metadata: {
-          added_grants: 'client_credentials',
-        },
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept upsert with complex callback URL updates', () => {
-      const payload = {
-        callbackUrls: [
-          'https://prod.example.com/oauth/callback',
-          'https://staging.example.com/oauth/callback',
-          'https://dev.example.com/oauth/callback',
-        ],
-        availableAudiences: [
-          'https://api.example.com',
-          'https://staging-api.example.com',
-        ],
-        metadata: {
-          environment: 'production',
-        },
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should reject invalid grant types in upsert', () => {
-      const payload = {
-        availableGrants: ['invalid_grant'],
-        metadata: {},
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).toBeInstanceOf(type.errors);
-    });
-
-    test('should reject invalid URL in upsert', () => {
-      const payload = {
-        loginUri: 'not-a-valid-url',
-        metadata: {},
-      };
-
-      const result = UpsertAuthorizationPayloadSchema(payload);
-      expect(result).toBeInstanceOf(type.errors);
-    });
-  });
-});

package/src/app/oidc/schema.test.ts.bak

@@ -1,117 +0,0 @@
-import { type } from 'arktype';
-import { describe, expect, test } from 'vitest';
-import {
-  InsertOIDCPayloadSchema,
-  OIDCPayloadSchema,
-  OIDCSchema,
-  UpdateOIDCPayloadSchema,
-} from './schema.js';
-
-describe('App OIDC - Schema', () => {
-  describe('OIDCSchema', () => {
-    test('should accept complete OIDC object', () => {
-      const oidc = {
-        updatedAt: new Date(),
-        deletedAt: new Date(),
-        deactivatedAt: new Date(),
-        metadata: { provider: 'auth0' },
-      };
-
-      const result = OIDCSchema(oidc);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept minimal OIDC object', () => {
-      const oidc = {
-        metadata: {},
-      };
-
-      const result = OIDCSchema(oidc);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-
-    test('should accept OIDC with only some optional dates', () => {
-      const oidc = {
-        updatedAt: new Date(),
-        metadata: { configured: true },
-      };
-
-      const result = OIDCSchema(oidc);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-  });
-
-  describe('OIDCPayloadSchema', () => {
-    test('should accept complete payload', () => {
-      const payload = {
-        updatedAt: new Date().toISOString(),
-        deletedAt: new Date().toISOString(),
-        deactivatedAt: new Date().toISOString(),
-        metadata: { issuer: 'https://auth.example.com' },
-      };
-
-      const result = OIDCPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toEqual(payload);
-    });
-
-    test('should accept minimal payload', () => {
-      const payload = {
-        metadata: {},
-      };
-
-      const result = OIDCPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toEqual(payload);
-    });
-
-    test('should accept payload with optional dates', () => {
-      const payload = {
-        updatedAt: new Date().toISOString(),
-        metadata: { clientId: 'oidc_client_123' },
-      };
-
-      const result = OIDCPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-  });
-
-  describe('InsertOIDCPayloadSchema', () => {
-    test('should accept metadata payload', () => {
-      const payload = {
-        metadata: { setup: 'initial' },
-      };
-
-      const result = InsertOIDCPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toEqual(payload);
-    });
-
-    test('should accept undefined', () => {
-      const result = InsertOIDCPayloadSchema(undefined);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toBeUndefined();
-    });
-
-    test('should accept empty metadata', () => {
-      const payload = {
-        metadata: {},
-      };
-
-      const result = InsertOIDCPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-    });
-  });
-
-  describe('UpdateOIDCPayloadSchema', () => {
-    test('should accept metadata update', () => {
-      const payload = {
-        metadata: { version: '2.0' },
-      };
-
-      const result = UpdateOIDCPayloadSchema(payload);
-      expect(result).not.toBeInstanceOf(type.errors);
-      expect(result).toEqual(payload);
-    });
-  });
-});