@o3co/create-auth-provider 0.17.0 → 0.18.0-rc.1

package/templates/standalone/src/__tests__/repositories-logger.test.mts

@@ -1,119 +0,0 @@
-/*
- * Copyright 2026 1o1 Co. Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-/**
- * The repositories module builds its user repository with the composition's
- * logger: the yaml user builder's `user_repository_in_memory` line reaches the
- * `logger` bootstrap component (the template's pino logger, at its level),
- * not the console.
- */
-
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import {
-	type BootstrapMap,
-	createApp,
-	defineModule,
-	type Logger,
-	type UserRepository,
-} from "@o3co/auth-provider-core";
-import {
-	CORE_RELOCATIONS,
-	makeValidCoreConfig,
-	renamedVariableCaptures,
-} from "@o3co/auth-provider-core/testing";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { repositoriesModuleFor } from "../modules.mjs";
-
-const spyLogger = () => {
-	const logger = {
-		trace: vi.fn(),
-		debug: vi.fn(),
-		info: vi.fn(),
-		warn: vi.fn(),
-		error: vi.fn(),
-		fatal: vi.fn(),
-		child: vi.fn(),
-	};
-	logger.child.mockReturnValue(logger);
-	return logger;
-};
-
-describe("the repositories module's user repository", () => {
-	let dir: string;
-	beforeEach(() => {
-		dir = fs.mkdtempSync(path.join(os.tmpdir(), "repositories-logger-"));
-	});
-	afterEach(() => {
-		fs.rmSync(dir, { recursive: true, force: true });
-		vi.restoreAllMocks();
-	});
-
-	it("warns user_repository_in_memory on the composition's logger, built through createApp, and not on the console", async () => {
-		const usersPath = path.join(dir, "users.yaml");
-		fs.writeFileSync(usersPath, 'alice:\n  password: "plainpass"\n');
-		const clientsPath = path.join(dir, "clients.yaml");
-		fs.writeFileSync(clientsPath, "");
-		const consoleWarn = vi.spyOn(console, "warn").mockImplementation(() => {});
-		const logger = spyLogger();
-		let built: UserRepository | undefined;
-		const reader = defineModule({
-			name: "test:user-repository-reader",
-			requires: ["userRepository"] as const,
-			provides: {
-				userRepositoryRead: ({ userRepository }: { userRepository: UserRepository }) => {
-					built = userRepository;
-					return true;
-				},
-			},
-			lifecycle: { userRepositoryRead: { eager: true } },
-		} as never);
-
-		const repositories = repositoriesModuleFor({ client: "yaml", user: "yaml" });
-		const handle = await createApp({
-			modules: [repositories, reader],
-			bootstrapComponents: {
-				config: {
-					...makeValidCoreConfig(),
-					repositories: {
-						client: { yaml: { path: clientsPath } },
-						user: { yaml: { path: usersPath }, http: {} },
-					},
-					// What a resolution with none of the renamed variables set captures.
-					"renamed-variables": renamedVariableCaptures({
-						modules: [repositories],
-						core: CORE_RELOCATIONS,
-						env: {},
-					}),
-				},
-				pathResolver: (p: string) => p,
-				logger: logger as unknown as Logger,
-			} as unknown as BootstrapMap,
-		});
-		try {
-			expect((await built?.authenticate("alice", "plainpass"))?.username).toBe("alice");
-			expect(
-				logger.warn.mock.calls.filter(([, event]) => event === "user_repository_in_memory"),
-			).toEqual([[{ store: "userRepository", adapter: "yaml" }, "user_repository_in_memory"]]);
-			expect(
-				consoleWarn.mock.calls.filter((args) => args.includes("user_repository_in_memory")),
-			).toEqual([]);
-		} finally {
-			await handle.dispose();
-		}
-	});
-});

package/templates/standalone/src/__tests__/router-error-answers.test.mts

@@ -1,146 +0,0 @@
-/*
- * Copyright 2026 1o1 Co. Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-/**
- * The template's composition, booted through core's `createApp` and mounted
- * with no terminal handler of the template's after it — the router alone, as
- * a composition root that copies nothing of `app.mts` mounts it.
- *
- * The router core returns answers a body parser's refusal and any error a
- * route lets through itself. Left to Express's final handler, a host would
- * answer with an HTML page carrying the stack outside production, where V8's
- * JSON error quotes the body it could not parse.
- */
-
-import { defineModule } from "@o3co/auth-provider-core";
-import { Router } from "express";
-import request from "supertest";
-import { afterEach, describe, expect, it } from "vitest";
-import {
-	basic,
-	type Composition,
-	compose,
-	JSON_TYPE,
-	KIB,
-	M2M,
-	padJson,
-} from "./all-modules-composition.fixture.mjs";
-
-let current: Composition | undefined;
-
-afterEach(async () => {
-	await current?.handle.dispose();
-	current = undefined;
-});
-
-/** A route that lets an error through, contributed as a deployment adds one. */
-const throwingRouteModule = defineModule({
-	name: "test:throwing-route",
-	contributes: {
-		routes: [
-			() => {
-				const router = Router();
-				router.get("/", () => {
-					throw new Error("a store said something: escaped-error-marker");
-				});
-				return { id: "test:throwing-route", mountPath: "/throws", handler: router };
-			},
-		],
-	},
-});
-
-/** The composition, the router alone mounted. */
-const boot = async (): Promise<Composition> => {
-	current = await compose({
-		terminalErrorHandler: false,
-		extraModules: () => [throwingRouteModule],
-	});
-	return current;
-};
-
-/** The routes that parse a body, and what each needs to reach its parser. */
-const PARSING_ROUTES = [
-	["/oauth/token", { authorization: basic(M2M) }],
-	["/oauth/introspect", { authorization: basic(M2M) }],
-	["/session/login", {}],
-] as const;
-
-const errorLines = (c: Composition) => c.logger.lines.filter((line) => line.level === "error");
-
-describe("the composed router, mounted alone, answers a body parser's refusal", () => {
-	it.each(PARSING_ROUTES)(
-		"%s: malformed JSON is 400 in the envelope, nothing logged",
-		async (path, headers) => {
-			const c = await boot();
-			const res = await request(c.app)
-				.post(path)
-				.set(headers)
-				.set("Content-Type", JSON_TYPE)
-				.send('{"password":"body-secret-marker');
-
-			expect(res.status).toBe(400);
-			expect(res.headers["content-type"]).toMatch(/^application\/json/);
-			expect(res.body).toEqual({ error: "invalid_request", error_description: "malformed_body" });
-			expect(res.text).not.toContain("body-secret-marker");
-			expect(res.text).not.toMatch(/ at /);
-			expect(errorLines(c)).toEqual([]);
-		},
-	);
-
-	it.each(PARSING_ROUTES)(
-		"%s: a body over the parser's limit is 413 in the envelope, nothing logged",
-		async (path, headers) => {
-			const c = await boot();
-			const res = await request(c.app)
-				.post(path)
-				.set(headers)
-				.set("Content-Type", JSON_TYPE)
-				.send(padJson(200 * KIB));
-
-			expect(res.status).toBe(413);
-			expect(res.headers["content-type"]).toMatch(/^application\/json/);
-			expect(res.body).toEqual({ error: "invalid_request", error_description: "body_too_large" });
-			expect(errorLines(c)).toEqual([]);
-		},
-	);
-});
-
-describe("the composed router, mounted alone, answers an error a route let through", () => {
-	it("is 500 server_error in the envelope, logged once at error", async () => {
-		const c = await boot();
-		const res = await request(c.app).get("/throws");
-
-		expect(res.status).toBe(500);
-		expect(res.headers["content-type"]).toMatch(/^application\/json/);
-		expect(res.body).toEqual({ error: "server_error", error_description: "unexpected_error" });
-		expect(res.text).not.toContain("escaped-error-marker");
-		expect(errorLines(c)).toEqual([
-			{
-				level: "error",
-				args: [
-					{
-						endpoint: "/throws",
-						err: expect.objectContaining({
-							name: "Error",
-							detail: "a store said something: escaped-error-marker",
-						}),
-					},
-					"unhandled_request_error",
-				],
-			},
-		]);
-	});
-});