@nathapp/nestjs-csrf 3.3.0 → 4.0.1

package/test/resolve-csrf-options.spec.ts

@@ -1,128 +0,0 @@
-/* eslint-disable @typescript-eslint/no-var-requires */
-describe('resolveCsrfOptions defaults', () => {
-  const resolve = (options: unknown) => {
-    const mod = require('../lib');
-    expect(typeof mod.resolveCsrfOptions).toBe('function');
-    return mod.resolveCsrfOptions(options);
-  };
-
-  it('AC8: cookie.name defaults to "csrf-token"', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.cookie.name).toBe('csrf-token');
-  });
-
-  it('AC9: headerName defaults to "x-csrf-token"', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.headerName).toBe('x-csrf-token');
-  });
-
-  it('AC10: ignoreMethods defaults to ["GET", "HEAD", "OPTIONS"]', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.ignoreMethods).toEqual(['GET', 'HEAD', 'OPTIONS']);
-  });
-
-  it('AC11: cookie.sameSite defaults to "lax"', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.cookie.sameSite).toBe('lax');
-  });
-
-  it('AC12: skipWhenBearer defaults to true', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.skipWhenBearer).toBe(true);
-  });
-
-  it('AC13: enabled defaults to true', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.enabled).toBe(true);
-  });
-
-  it('cookie.path defaults to "/" when no cookie overrides are provided', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.cookie.path).toBe('/');
-  });
-
-  it('cookie.httpOnly defaults to false when no cookie overrides are provided', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.cookie.httpOnly).toBe(false);
-  });
-
-  it('cookie.secure defaults to true when no cookie overrides are provided', () => {
-    const resolved = resolve({ secret: 's' });
-    expect(resolved.cookie.secure).toBe(true);
-  });
-
-  it('headerName override is applied', () => {
-    const resolved = resolve({ secret: 's', headerName: 'x-custom-csrf' });
-    expect(resolved.headerName).toBe('x-custom-csrf');
-  });
-
-  it('ignoreMethods override replaces the default list', () => {
-    const resolved = resolve({ secret: 's', ignoreMethods: ['POST'] });
-    expect(resolved.ignoreMethods).toEqual(['POST']);
-  });
-
-  it('ignoreMethods override produces a fresh array (no shared mutation with caller input)', () => {
-    const callerInput = ['POST', 'PUT'];
-    const resolved = resolve({ secret: 's', ignoreMethods: callerInput });
-    callerInput.push('DELETE');
-    expect(resolved.ignoreMethods).toEqual(['POST', 'PUT']);
-  });
-
-  it('enabled: false override is applied', () => {
-    const resolved = resolve({ secret: 's', enabled: false });
-    expect(resolved.enabled).toBe(false);
-  });
-
-  it('skipWhenBearer: false override is applied', () => {
-    const resolved = resolve({ secret: 's', skipWhenBearer: false });
-    expect(resolved.skipWhenBearer).toBe(false);
-  });
-
-  it('partial cookie overrides merge with defaults', () => {
-    const resolved = resolve({
-      secret: 's',
-      cookie: { name: 'my-csrf', sameSite: 'strict' },
-    });
-    expect(resolved.cookie.name).toBe('my-csrf');
-    expect(resolved.cookie.sameSite).toBe('strict');
-    expect(resolved.cookie.path).toBe('/');
-    expect(resolved.cookie.httpOnly).toBe(false);
-    expect(resolved.cookie.secure).toBe(true);
-  });
-
-  it('empty cookie override object keeps all cookie defaults', () => {
-    const resolved = resolve({ secret: 's', cookie: {} });
-    expect(resolved.cookie).toEqual({
-      name: 'csrf-token',
-      path: '/',
-      httpOnly: false,
-      secure: true,
-      sameSite: 'lax',
-    });
-  });
-
-  it('full cookie override replaces every cookie field', () => {
-    const resolved = resolve({
-      secret: 's',
-      cookie: {
-        name: 'my-csrf',
-        path: '/api',
-        httpOnly: false,
-        secure: false,
-        sameSite: 'none',
-      },
-    });
-    expect(resolved.cookie).toEqual({
-      name: 'my-csrf',
-      path: '/api',
-      httpOnly: false,
-      secure: false,
-      sameSite: 'none',
-    });
-  });
-
-  it('secret is passed through unchanged', () => {
-    const resolved = resolve({ secret: 'my-very-secret-key' });
-    expect(resolved.secret).toBe('my-very-secret-key');
-  });
-});

package/test/skip-csrf.decorator.spec.ts

@@ -1,77 +0,0 @@
-/* eslint-disable @typescript-eslint/no-var-requires */
-describe('@SkipCsrf() decorator', () => {
-  const loadDeps = () => {
-    const mod = require('../lib');
-    const { Reflector } = require('@nestjs/core');
-    return { mod, Reflector };
-  };
-
-  it('AC15: sets SKIP_CSRF_METADATA_KEY to true on a decorated method handler', () => {
-    const { mod, Reflector } = loadDeps();
-    const { SKIP_CSRF_METADATA_KEY, SkipCsrf } = mod;
-
-    expect(typeof SkipCsrf).toBe('function');
-    expect(SKIP_CSRF_METADATA_KEY).toBeDefined();
-
-    class ProbeController {
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      handler(_req: unknown): void {
-        return;
-      }
-    }
-    const descriptor = Object.getOwnPropertyDescriptor(ProbeController.prototype, 'handler')!;
-    SkipCsrf()(ProbeController.prototype, 'handler', descriptor);
-
-    const reflector = new Reflector();
-    const metadata = reflector.get(SKIP_CSRF_METADATA_KEY, ProbeController.prototype.handler);
-    expect(metadata).toBe(true);
-  });
-
-  it('AC15 (boundary): does NOT set metadata on handlers that are not decorated', () => {
-    const { mod, Reflector } = loadDeps();
-    const { SKIP_CSRF_METADATA_KEY } = mod;
-
-    expect(SKIP_CSRF_METADATA_KEY).toBeDefined();
-
-    class ProbeController {
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      undecorated(_req: unknown): void {
-        return;
-      }
-    }
-
-    const reflector = new Reflector();
-    const metadata = reflector.get(SKIP_CSRF_METADATA_KEY, ProbeController.prototype.undecorated);
-    expect(metadata).toBeUndefined();
-  });
-
-  it('AC15 (boundary): SkipCsrf() returns a callable decorator', () => {
-    const { mod } = loadDeps();
-    const { SkipCsrf } = mod;
-
-    expect(typeof SkipCsrf).toBe('function');
-
-    const decorator = SkipCsrf();
-    expect(typeof decorator).toBe('function');
-  });
-
-  it('AC15 (boundary): SkipCsrf() can be applied at the class level', () => {
-    const { mod, Reflector } = loadDeps();
-    const { SKIP_CSRF_METADATA_KEY, SkipCsrf } = mod;
-
-    expect(typeof SkipCsrf).toBe('function');
-    expect(SKIP_CSRF_METADATA_KEY).toBeDefined();
-
-    class ClassDecoratedController {
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      handler(_req: unknown): void {
-        return;
-      }
-    }
-    SkipCsrf()(ClassDecoratedController);
-
-    const reflector = new Reflector();
-    const metadata = reflector.get(SKIP_CSRF_METADATA_KEY, ClassDecoratedController);
-    expect(metadata).toBe(true);
-  });
-});

package/tsconfig.json

@@ -1,9 +0,0 @@
-{
-  "extends": "@nathapp/typescript-config/base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./lib"
-  },
-  "include": ["lib/**/*", "../index.ts", "../test/**/*"],
-  "exclude": ["node_modules", "test", "dist", "**/*spec.ts"]
-}