@prosopo/client-example-server 2.7.123 → 2.7.124

package/dist/tests/clientExampleServer.test-d.js

@@ -0,0 +1,84 @@
+import { assertType, describe, expectTypeOf, test } from "vitest";
+import { createApp, isDevelopmentOrTest, main, resolvePort, resolveVerifyEndpoint, resolveVerifyType, startServer, } from "../app.js";
+import { isAuth, login, signup } from "../controllers/auth.js";
+import getRoutes from "../routes/routes.js";
+import connectionFactory from "../utils/connection.js";
+import memoryServerSetup from "../utils/database.js";
+describe("the app module's types", () => {
+    test("the environment readers take no arguments", () => {
+        expectTypeOf(resolveVerifyEndpoint).parameters.toEqualTypeOf();
+        expectTypeOf(resolveVerifyEndpoint).returns.toEqualTypeOf();
+        expectTypeOf(resolveVerifyType).returns.toEqualTypeOf();
+        expectTypeOf(isDevelopmentOrTest).returns.toEqualTypeOf();
+    });
+    test("the verification type is a closed set", () => {
+        expectTypeOf().toEqualTypeOf();
+        assertType("carrier-pigeon");
+    });
+    test("the port comes from the shared server config, not a loose object", () => {
+        expectTypeOf(resolvePort)
+            .parameter(0)
+            .toEqualTypeOf();
+        expectTypeOf(resolvePort).returns.toEqualTypeOf();
+    });
+    test("createApp yields an express app the caller can mount routes on", () => {
+        expectTypeOf(createApp).returns.toEqualTypeOf();
+    });
+    test("startServer's module directory is optional and it returns a server", () => {
+        expectTypeOf(startServer).parameter(1).toEqualTypeOf();
+        expectTypeOf(startServer).parameter(2).toEqualTypeOf();
+        expectTypeOf(startServer).returns.toEqualTypeOf();
+    });
+    test("main resolves to the server it started, so a caller can close it", () => {
+        expectTypeOf(main).parameters.toEqualTypeOf();
+        expectTypeOf(main).returns.toEqualTypeOf();
+    });
+});
+describe("the router's types", () => {
+    test("routes are built from a connection, config and verification settings", () => {
+        expectTypeOf(getRoutes).parameters.toEqualTypeOf();
+        expectTypeOf(getRoutes).returns.toEqualTypeOf();
+    });
+    test("every argument is required", () => {
+        getRoutes({}, {}, "endpoint");
+    });
+});
+describe("the controllers' types", () => {
+    test("signup and login are express handlers with their context bound first", () => {
+        expectTypeOf(signup).parameter(0).toEqualTypeOf();
+        expectTypeOf(signup)
+            .parameter(1)
+            .toEqualTypeOf();
+        expectTypeOf(signup).parameter(2).toEqualTypeOf();
+        expectTypeOf(signup).parameter(3).toEqualTypeOf();
+        expectTypeOf(signup).returns.toExtend();
+        expectTypeOf(login).parameter(0).toEqualTypeOf();
+        expectTypeOf(login).returns.toEqualTypeOf();
+    });
+    test("isAuth needs nothing bound, so it mounts directly", () => {
+        expectTypeOf(isAuth).parameters.toEqualTypeOf();
+    });
+});
+describe("the persistence types", () => {
+    test("connectionFactory takes a URI and returns a mongoose connection", () => {
+        expectTypeOf(connectionFactory).parameters.toEqualTypeOf();
+        expectTypeOf(connectionFactory).returns.toEqualTypeOf();
+    });
+    test("the memory server hands back a URI string", () => {
+        expectTypeOf(memoryServerSetup).parameters.toEqualTypeOf();
+        expectTypeOf(memoryServerSetup).returns.toEqualTypeOf();
+    });
+    test("the user schema is typed by the interface it stores", () => {
+        expectTypeOf().toEqualTypeOf();
+        expectTypeOf().toEqualTypeOf();
+    });
+    test("a user document cannot be built without credentials", () => {
+        assertType({
+            id: 1,
+            email: "user@example.com",
+            name: "user",
+            password: "0xhash",
+        });
+    });
+});
+//# sourceMappingURL=clientExampleServer.test-d.js.map

package/dist/tests/clientExampleServer.test-d.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientExampleServer.test-d.js","sourceRoot":"","sources":["../../src/tests/clientExampleServer.test-d.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAEN,SAAS,EACT,mBAAmB,EACnB,IAAI,EACJ,WAAW,EACX,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,iBAAiB,MAAM,wBAAwB,CAAC;AACvD,OAAO,iBAAiB,MAAM,sBAAsB,CAAC;AAErD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACvC,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACtD,YAAY,CAAC,qBAAqB,CAAC,CAAC,UAAU,CAAC,aAAa,EAAM,CAAC;QACnE,YAAY,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,aAAa,EAAU,CAAC;QACpE,YAAY,CACX,iBAAiB,CACjB,CAAC,OAAO,CAAC,aAAa,EAA2B,CAAC;QACnD,YAAY,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,aAAa,EAAW,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAClD,YAAY,EAAgC,CAAC,aAAa,EAEvD,CAAC;QAEJ,UAAU,CAA0B,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC7E,YAAY,CAAC,WAAW,CAAC;aACvB,SAAS,CAAC,CAAC,CAAC;aACZ,aAAa,EAA6B,CAAC;QAC7C,YAAY,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,EAAU,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;QAC3E,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,aAAa,EAAmB,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC/E,YAAY,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAU,CAAC;QAC/D,YAAY,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAsB,CAAC;QAC3E,YAAY,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,EAAU,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC7E,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,EAAM,CAAC;QAClD,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,EAAmB,CAAC;IAC7D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;QACjF,YAAY,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,aAAa,EAE7C,CAAC;QACJ,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,aAAa,EAAkB,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAGvC,SAAS,CAAC,EAAgB,EAAE,EAA+B,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACvC,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;QACjF,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAc,CAAC;QAC9D,YAAY,CAAC,MAAM,CAAC;aAClB,SAAS,CAAC,CAAC,CAAC;aACZ,aAAa,EAA6B,CAAC;QAC7C,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAU,CAAC;QAC1D,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAU,CAAC;QAC1D,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAoB,CAAC;QAC1D,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAc,CAAC;QAC7D,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,EAAiB,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC9D,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,aAAa,EAE1C,CAAC;IACL,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACtC,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;QAC5E,YAAY,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,aAAa,EAAY,CAAC;QACrE,YAAY,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,aAAa,EAAc,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACtD,YAAY,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,aAAa,EAAM,CAAC;QAC/D,YAAY,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,aAAa,EAAmB,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAChE,YAAY,EAA+B,CAAC,aAAa,EAEtD,CAAC;QACJ,YAAY,EAAiB,CAAC,aAAa,EAMvC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAEhE,UAAU,CAAgB;YACzB,EAAE,EAAE,CAAC;YACL,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,QAAQ;SAClB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/routes.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=routes.unit.test.d.ts.map

package/dist/tests/routes.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.unit.test.d.ts","sourceRoot":"","sources":["../../src/tests/routes.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/routes.unit.test.js

@@ -0,0 +1,123 @@
+import express from "express";
+import { afterEach, describe, expect, test, vi } from "vitest";
+import getRoutes from "../routes/routes.js";
+import { VERIFY_ENDPOINT, serverConfig } from "./authHarness.js";
+const mocks = vi.hoisted(() => ({
+    calls: [],
+}));
+vi.mock("../controllers/auth.js", () => {
+    const record = (handler) => (...args) => {
+        mocks.calls.push({ handler, args: args.slice(0, 4) });
+        const res = args[args.length - 2];
+        res.status(200).json({ handler });
+    };
+    return {
+        signup: record("signup"),
+        login: record("login"),
+        isAuth: (_req, res) => res
+            .status(200)
+            .json({ handler: "isAuth" }),
+    };
+});
+const connection = {};
+let server;
+const listen = () => {
+    const app = express();
+    app.use(express.json());
+    app.use(getRoutes(connection, serverConfig(), VERIFY_ENDPOINT, "api"));
+    return new Promise((resolve) => {
+        server = app.listen(0, () => {
+            const { port } = server?.address();
+            resolve(`http://127.0.0.1:${port}`);
+        });
+    });
+};
+afterEach(async () => {
+    mocks.calls.length = 0;
+    await new Promise((resolve) => {
+        if (!server)
+            return resolve();
+        server.close(() => resolve());
+        server = undefined;
+    });
+});
+describe("the router", () => {
+    test("serves the public resource without any authentication", async () => {
+        const base = await listen();
+        const response = await fetch(`${base}/public`);
+        expect(response.status).toBe(200);
+        expect(await response.json()).toEqual({
+            message: "here is your public resource",
+        });
+    });
+    test("answers health checks", async () => {
+        const base = await listen();
+        const response = await fetch(`${base}/health`);
+        expect(response.status).toBe(200);
+        expect(await response.json()).toEqual({ status: "ok" });
+    });
+    test("routes a signup to the signup handler, with the bound context", async () => {
+        const base = await listen();
+        const response = await fetch(`${base}/signup`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ email: "user@example.com" }),
+        });
+        expect(response.status).toBe(200);
+        expect(mocks.calls[0]?.handler).toBe("signup");
+        expect(mocks.calls[0]?.args).toEqual([
+            connection,
+            serverConfig(),
+            VERIFY_ENDPOINT,
+            "api",
+        ]);
+    });
+    test("routes a login to the login handler", async () => {
+        const base = await listen();
+        await fetch(`${base}/login`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({}),
+        });
+        expect(mocks.calls[0]?.handler).toBe("login");
+    });
+    test("guards the private resource", async () => {
+        const base = await listen();
+        const response = await fetch(`${base}/private`);
+        expect(await response.json()).toEqual({ handler: "isAuth" });
+    });
+    test("answers anything else with a 404 body, not express's HTML", async () => {
+        const base = await listen();
+        const response = await fetch(`${base}/nope`);
+        expect(response.status).toBe(404);
+        expect(await response.json()).toEqual({ error: "page not found" });
+    });
+    test("a GET to a POST-only path falls through to the catch-all", async () => {
+        const base = await listen();
+        const response = await fetch(`${base}/login`);
+        expect(response.status).toBe(404);
+        expect(mocks.calls).toHaveLength(0);
+    });
+    test("each call builds a fresh router", async () => {
+        const first = getRoutes(connection, serverConfig(), "https://one", "api");
+        const second = getRoutes(connection, serverConfig(), "https://two", "api");
+        expect(first).not.toBe(second);
+        const app = express();
+        app.use(express.json());
+        app.use(second);
+        const base = await new Promise((resolve) => {
+            server = app.listen(0, () => {
+                const { port } = server?.address();
+                resolve(`http://127.0.0.1:${port}`);
+            });
+        });
+        await fetch(`${base}/signup`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({}),
+        });
+        expect(mocks.calls).toHaveLength(1);
+        expect(mocks.calls[0]?.args[2]).toBe("https://two");
+    });
+});
+//# sourceMappingURL=routes.unit.test.js.map

package/dist/tests/routes.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.unit.test.js","sourceRoot":"","sources":["../../src/tests/routes.unit.test.ts"],"names":[],"mappings":"AAgBA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC/D,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMjE,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/B,KAAK,EAAE,EAA4C;CACnD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE;IAEtC,MAAM,MAAM,GACX,CAAC,OAAe,EAAW,EAAE,CAC7B,CAAC,GAAG,IAAe,EAAE,EAAE;QACtB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAE/B,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC;IACH,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAEtB,MAAM,EAAE,CAAC,IAAa,EAAE,GAAY,EAAE,EAAE,CACtC,GAAuE;aACtE,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;KAC9B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAe,EAA2B,CAAC;AAE3D,IAAI,MAA0B,CAAC;AAE/B,MAAM,MAAM,GAAG,GAAoB,EAAE;IACpC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;YAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,OAAO,EAAiB,CAAC;YAClD,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,SAAS,CAAC,KAAK,IAAI,EAAE;IACpB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACvB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9B,MAAM,GAAG,SAAS,CAAC;IACpB,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC3B,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACrC,OAAO,EAAE,8BAA8B;SACvC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;YACpC,UAAU;YACV,YAAY,EAAE;YACd,eAAe;YACf,KAAK;SACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAIlD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE;gBAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,OAAO,EAAiB,CAAC;gBAClD,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/utils.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.unit.test.d.ts.map

package/dist/tests/utils.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.unit.test.d.ts","sourceRoot":"","sources":["../../src/tests/utils.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/utils.unit.test.js

@@ -0,0 +1,125 @@
+import { beforeEach, describe, expect, test, vi } from "vitest";
+import UserSchema from "../models/user.js";
+import connectionFactory from "../utils/connection.js";
+import memoryServerSetup from "../utils/database.js";
+const mocks = vi.hoisted(() => ({
+    createConnection: vi.fn(),
+    models: {},
+    model: vi.fn(),
+    plugin: vi.fn(),
+    connectionOptions: vi.fn(),
+    memoryUri: "mongodb://memory:27017/",
+    memoryCreate: vi.fn(),
+}));
+vi.mock("mongoose", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        default: {
+            ...actual.default,
+            createConnection: (...args) => {
+                mocks.createConnection(...args);
+                return {
+                    models: mocks.models,
+                    model: mocks.model,
+                };
+            },
+        },
+    };
+});
+vi.mock("@typegoose/auto-increment", () => ({
+    AutoIncrementID: "auto-increment-plugin",
+}));
+vi.mock("@prosopo/database", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        getMongoConnectionOptions: (args) => {
+            mocks.connectionOptions(args);
+            return { appName: args.appName };
+        },
+    };
+});
+vi.mock("mongodb-memory-server", () => ({
+    MongoMemoryServer: {
+        create: () => {
+            mocks.memoryCreate();
+            return Promise.resolve({ getUri: () => mocks.memoryUri });
+        },
+    },
+}));
+beforeEach(() => {
+    mocks.createConnection.mockClear();
+    mocks.model.mockClear();
+    mocks.plugin.mockClear();
+    mocks.connectionOptions.mockClear();
+    mocks.memoryCreate.mockClear();
+    mocks.models = {};
+    vi.spyOn(UserSchema, "plugin").mockImplementation((...args) => {
+        mocks.plugin(...args);
+        return UserSchema;
+    });
+});
+describe("connectionFactory", () => {
+    const URI = "mongodb://localhost:27017/client-example";
+    test("connects to the URI it was given", () => {
+        connectionFactory(URI);
+        expect(mocks.createConnection).toHaveBeenCalledTimes(1);
+        expect(mocks.createConnection.mock.calls[0]?.[0]).toBe(URI);
+    });
+    test("names the connection after the module, for mongo's server logs", () => {
+        connectionFactory(URI);
+        const options = mocks.createConnection.mock.calls[0]?.[1];
+        expect(options.appName).toContain("connection");
+        expect(mocks.connectionOptions).toHaveBeenCalledWith({
+            url: URI,
+            appName: options.appName,
+        });
+    });
+    test("registers the User model with auto-incrementing ids", () => {
+        connectionFactory(URI);
+        expect(mocks.plugin).toHaveBeenCalledWith("auto-increment-plugin", {
+            field: "id",
+        });
+        expect(mocks.model).toHaveBeenCalledWith("User", UserSchema);
+    });
+    test("leaves an already-registered model alone", () => {
+        mocks.models = { user: {} };
+        connectionFactory(URI);
+        expect(mocks.model).not.toHaveBeenCalled();
+        expect(mocks.plugin).not.toHaveBeenCalled();
+    });
+    test("returns the connection it created", () => {
+        const connection = connectionFactory(URI);
+        expect(connection.model).toBe(mocks.model);
+    });
+});
+describe("memoryServerSetup", () => {
+    test("boots an in-memory mongo and returns its URI", async () => {
+        await expect(memoryServerSetup()).resolves.toBe(mocks.memoryUri);
+        expect(mocks.memoryCreate).toHaveBeenCalledTimes(1);
+    });
+    test("each call gets its own server", async () => {
+        await memoryServerSetup();
+        await memoryServerSetup();
+        expect(mocks.memoryCreate).toHaveBeenCalledTimes(2);
+    });
+});
+describe("the User schema", () => {
+    test("requires the fields a login needs to work", () => {
+        for (const field of ["email", "password", "salt"]) {
+            expect(UserSchema.path(field).isRequired).toBe(true);
+        }
+    });
+    test("leaves name and id optional", () => {
+        expect(UserSchema.path("name").isRequired).toBeFalsy();
+        expect(UserSchema.path("id").isRequired).toBeFalsy();
+    });
+    test("stores the id as a number and the rest as strings", () => {
+        expect(UserSchema.path("id").instance).toBe("Number");
+        for (const field of ["email", "name", "password", "salt"]) {
+            expect(UserSchema.path(field).instance).toBe("String");
+        }
+    });
+});
+//# sourceMappingURL=utils.unit.test.js.map

package/dist/tests/utils.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.unit.test.js","sourceRoot":"","sources":["../../src/tests/utils.unit.test.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAChE,OAAO,UAAkC,MAAM,mBAAmB,CAAC;AACnE,OAAO,iBAAiB,MAAM,wBAAwB,CAAC;AACvD,OAAO,iBAAiB,MAAM,sBAAsB,CAAC;AAOrD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/B,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,MAAM,EAAE,EAA6B;IACrC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;IACf,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,SAAS,EAAE,yBAAyB;IACpC,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;CACrB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC5C,MAAM,MAAM,GAAG,MAAM,cAAc,EAA6B,CAAC;IACjE,OAAO;QACN,GAAG,MAAM;QACT,OAAO,EAAE;YACR,GAAG,MAAM,CAAC,OAAO;YACjB,gBAAgB,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACxC,KAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChC,OAAO;oBACN,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;iBACO,CAAC;YAC5B,CAAC;SACD;KACD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,eAAe,EAAE,uBAAuB;CACxC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAsC,CAAC;IAC1E,OAAO;QACN,GAAG,MAAM;QACT,yBAAyB,EAAE,CAAC,IAAsC,EAAE,EAAE;YACrE,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,CAAC;KACD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,iBAAiB,EAAE;QAClB,MAAM,EAAE,GAAG,EAAE;YACZ,KAAK,CAAC,YAAY,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;KACD;CACD,CAAC,CAAC,CAAC;AAEJ,UAAU,CAAC,GAAG,EAAE;IACf,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC;IACnC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;IACxB,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IACzB,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC;IACpC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;IAC/B,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;IAClB,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,kBAAkB,CAChD,CAAC,GAAG,IAAe,EAAyB,EAAE;QAC7C,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACtB,OAAO,UAAU,CAAC;IACnB,CAAC,CACD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,MAAM,GAAG,GAAG,0CAA0C,CAAC;IAEvD,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC7C,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;QAC3E,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAEvD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC;YACpD,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;SACxB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAChE,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,uBAAuB,EAAE;YAClE,KAAK,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAGrD,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5B,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC9C,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,IAAI,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAChC,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QAEtD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAExC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prosopo/client-example-server",
-	"version": "2.7.123",
+	"version": "2.7.124",
 	"description": "Backend for client-example",
 	"main": "dist/app.js",
 	"types": "dist/app.d.ts",
@@ -25,6 +25,9 @@
 		"build:tsc": "tsc --build --verbose",
 		"build:cjs": "NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV",
 		"typecheck": "tsc --project tsconfig.types.json",
+		"test": "NODE_ENV=${NODE_ENV:-test}; npx vitest run --config ./vite.test.config.ts",
+		"test:watch": "NODE_ENV=${NODE_ENV:-test}; npx vitest --config ./vite.test.config.ts",
+		"test:coverage": "NODE_ENV=${NODE_ENV:-test}; npx vitest run --coverage --config ./vite.test.config.ts",
 		"bundle": "NODE_ENV=${NODE_ENV:-development}; vite build --config vite.config.ts --mode $NODE_ENV"
 	},
 	"repository": {
@@ -43,11 +46,11 @@
 		"@polkadot/util": "13.5.7",
 		"@polkadot/util-crypto": "13.5.7",
 		"@prosopo/common": "3.1.48",
-		"@prosopo/database": "3.15.20",
+		"@prosopo/database": "3.15.21",
 		"@prosopo/logger": "2.0.4",
 		"@prosopo/dotenv": "3.0.50",
 		"@prosopo/keyring": "2.9.61",
-		"@prosopo/server": "2.10.41",
+		"@prosopo/server": "2.10.42",
 		"@prosopo/types": "4.10.0",
 		"@prosopo/util": "3.3.5",
 		"@typegoose/auto-increment": "4.13.0",

package/src/app.ts

@@ -14,6 +14,7 @@
 
 import fs from "node:fs";
 import http from "node:http";
+import type { Server } from "node:http";
 import https from "node:https";
 import type { ServerOptions } from "node:https";
 import path from "node:path";
@@ -22,41 +23,50 @@ import { ProsopoEnvError } from "@prosopo/common";
 import { loadEnv } from "@prosopo/dotenv";
 import { getLogger } from "@prosopo/logger";
 import { getServerConfig } from "@prosopo/server";
-import { at } from "@prosopo/util";
+import type { ProsopoServerConfigOutput } from "@prosopo/types";
+import { at, isMain } from "@prosopo/util";
 import cors from "cors";
 import express from "express";
 import routesFactory from "./routes/routes.js";
 import connectionFactory from "./utils/connection.js";
 import memoryServerSetup from "./utils/database.js";
 
-loadEnv();
-
-enum ProsopoVerificationType {
+export enum ProsopoVerificationType {
 	api = "api",
 	local = "local",
 }
 
 const logger = getLogger("info", "client-example-server:app");
 
-async function main() {
-	loadEnv();
-
+/**
+ * The siteverify endpoint the deployment talks to. Non-production
+ * environments get their name as a subdomain prefix. An unset NODE_ENV is
+ * treated as production: prefixing it produced `undefined-api.prosopo.io`,
+ * a host that does not exist.
+ */
+export const resolveVerifyEndpoint = (): string => {
+	const environment = process.env.NODE_ENV;
 	const apiPrefix =
-		process.env.NODE_ENV && process.env.NODE_ENV === "production"
-			? ""
-			: `${process.env.NODE_ENV}-`;
-	const verifyEndpoint =
+		!environment || environment === "production" ? "" : `${environment}-`;
+	return (
 		process.env.PROSOPO_VERIFY_ENDPOINT ||
-		`https://${apiPrefix}api.prosopo.io/siteverify`;
-
-	logger.info(() => ({ data: { verifyEndpoint } }));
-
-	const verifyType: ProsopoVerificationType = Object.keys(
-		ProsopoVerificationType,
-	).includes(process.env.PROSOPO_VERIFICATION_TYPE as string)
+		`https://${apiPrefix}api.prosopo.io/siteverify`
+	);
+};
+
+/** Anything the enum doesn't name falls back to the hosted API. */
+export const resolveVerifyType = (): ProsopoVerificationType =>
+	Object.keys(ProsopoVerificationType).includes(
+		process.env.PROSOPO_VERIFICATION_TYPE as string,
+	)
 		? (process.env.PROSOPO_VERIFICATION_TYPE as ProsopoVerificationType)
 		: ProsopoVerificationType.api;
 
+export const isDevelopmentOrTest = (): boolean =>
+	process.env.NODE_ENV === "development" || process.env.NODE_ENV === "test";
+
+/** The express app, minus the routes, which need a database connection. */
+export const createApp = (): express.Express => {
 	const app = express();
 
 	// https://express-rate-limit.mintlify.app/guides/troubleshooting-proxy-issues
@@ -81,15 +91,79 @@ async function main() {
 		next();
 	});
 
-	app.options("/*", (_, res) => {
-		res.sendStatus(200);
+	// No explicit OPTIONS handler: cors() above already answers preflight
+	// requests with a 204 and never calls through, so the handler that used to
+	// sit here could not run.
+
+	return app;
+};
+
+export const DEFAULT_PORT = 9228;
+
+/**
+ * The port is the last segment of the configured server URL. A URL without
+ * one used to yield NaN, which node turns into an arbitrary free port — the
+ * server came up on an address nothing was configured to talk to.
+ */
+export const resolvePort = (config: ProsopoServerConfigOutput): number => {
+	if (!config.serverUrl) return DEFAULT_PORT;
+	const segments = config.serverUrl.split(":");
+	if (segments.length < 3) return DEFAULT_PORT;
+	const port = Number.parseInt(at(segments, 2));
+	return Number.isNaN(port) ? DEFAULT_PORT : port;
+};
+
+/**
+ * HTTPS in development/test when the repo's certificates exist, plain HTTP
+ * otherwise — in production Caddy terminates TLS.
+ */
+export const startServer = (
+	app: express.Express,
+	port: number,
+	dirname: string = path.dirname(fileURLToPath(import.meta.url)),
+): Server => {
+	if (isDevelopmentOrTest()) {
+		const certsDir = path.resolve(dirname, "../../../certs");
+
+		const keyPath = path.join(certsDir, "server.key");
+		const certPath = path.join(certsDir, "server.crt");
+
+		if (fs.existsSync(keyPath) && fs.existsSync(certPath)) {
+			const httpsOptions: ServerOptions = {
+				key: fs.readFileSync(keyPath),
+				cert: fs.readFileSync(certPath),
+			};
+
+			return https.createServer(httpsOptions, app).listen(port, () => {
+				logger.info(() => ({ msg: `HTTPS server started on port ${port}` }));
+			});
+		}
+		logger.warn(() => ({
+			msg: "Certificates not found, starting HTTP server instead. Run ./setup_certs.sh to enable HTTPS in development.",
+		}));
+		return http.createServer(app).listen(port, () => {
+			logger.info(() => ({ msg: `HTTP server started on port ${port}` }));
+		});
+	}
+	return http.createServer(app).listen(port, () => {
+		logger.info(() => ({
+			msg: `HTTP server started on port ${port} (TLS handled by reverse proxy)`,
+		}));
 	});
+};
+
+export async function main(): Promise<Server> {
+	loadEnv();
 
-	if (
-		!process.env.MONGO_URI &&
-		process.env.NODE_ENV !== "development" &&
-		process.env.NODE_ENV !== "test"
-	) {
+	const verifyEndpoint = resolveVerifyEndpoint();
+
+	logger.info(() => ({ data: { verifyEndpoint } }));
+
+	const verifyType = resolveVerifyType();
+
+	const app = createApp();
+
+	if (!process.env.MONGO_URI && !isDevelopmentOrTest()) {
 		throw new Error(
 			"Cannot run mongo memory when NODE_ENV is neither development nor test",
 		);
@@ -113,57 +187,24 @@ async function main() {
 
 	app.use(routesFactory(mongoose, config, verifyEndpoint, verifyType));
 
-	const port = config.serverUrl
-		? Number.parseInt(at(config.serverUrl.split(":"), 2))
-		: 9228;
+	const port = resolvePort(config);
 
 	logger.info(() => ({ msg: "Listening on port", data: { port } }));
 
-	// Use HTTPS only in development/test when we have certificates
-	// In production, use HTTP because Caddy handles TLS termination
-	const isDev =
-		process.env.NODE_ENV === "development" || process.env.NODE_ENV === "test";
-
-	if (isDev) {
-		const __filename = fileURLToPath(import.meta.url);
-		const __dirname = path.dirname(__filename);
-		const certsDir = path.resolve(__dirname, "../../../certs");
-
-		const keyPath = path.join(certsDir, "server.key");
-		const certPath = path.join(certsDir, "server.crt");
-
-		if (fs.existsSync(keyPath) && fs.existsSync(certPath)) {
-			const httpsOptions: ServerOptions = {
-				key: fs.readFileSync(keyPath),
-				cert: fs.readFileSync(certPath),
-			};
+	return startServer(app, port);
+}
 
-			https.createServer(httpsOptions, app).listen(port, () => {
-				logger.info(() => ({ msg: `HTTPS server started on port ${port}` }));
-			});
-		} else {
-			logger.warn(() => ({
-				msg: "Certificates not found, starting HTTP server instead. Run ./setup_certs.sh to enable HTTPS in development.",
-			}));
-			http.createServer(app).listen(port, () => {
-				logger.info(() => ({ msg: `HTTP server started on port ${port}` }));
-			});
-		}
-	} else {
-		// Production: use plain HTTP, Caddy handles TLS
-		http.createServer(app).listen(port, () => {
-			logger.info(() => ({
-				msg: `HTTP server started on port ${port} (TLS handled by reverse proxy)`,
-			}));
+// Only boot when run as a binary: importing this module (a test, or another
+// entrypoint reusing createApp) must not open a port or spin up mongo.
+if (isMain(import.meta.url)) {
+	main()
+		.then(() => {
+			logger.info(() => ({ msg: "Server started" }));
+		})
+		.catch((err) => {
+			logger.error(() => ({ err }));
+			// Non-zero, so a boot failure is visible to whatever supervises the
+			// process rather than reading as a clean shutdown.
+			process.exit(1);
 		});
-	}
 }
-
-main()
-	.then(() => {
-		logger.info(() => ({ msg: "Server started" }));
-	})
-	.catch((err) => {
-		logger.error(() => ({ err }));
-		process.exit();
-	});