@redacto.io/consent-sdk-react 9.2.0 → 9.3.0-beta.1

package/tests/Form.test.tsx

@@ -694,6 +694,13 @@ describe('Form (P2-SDK-3)', () => {
       fireEvent.click(submitButton);
     });
 
+    // ERASURE asks whether to also revoke consent before it submits.
+    // Choosing "Yes" (revokeConsentYes) sets revoke_consent_on_fulfilment=true.
+    const revokeYesButton = await screen.findByRole('button', { name: 'Yes' });
+    await act(async () => {
+      fireEvent.click(revokeYesButton);
+    });
+
     await waitFor(() => {
       expect(createCaseRequest).toHaveBeenCalledTimes(1);
     });
@@ -703,7 +710,7 @@ describe('Form (P2-SDK-3)', () => {
     expect('data_principal_uuid' in payload).toBe(false);
     expect(payload.uuid).toBe('form-session-uuid');
     expect(payload.request_type).toBe('erasure');
-    // ERASURE submits must set this flag so the backend's
+    // The user chose "Yes" in the consent-revoke modal, so the backend's
     // auto-revoke task fires when the case is fulfilled (DPDPA Sec 12:
     // erasing data implies revoking the consent that authorized
     // processing it).
@@ -714,6 +721,86 @@ describe('Form (P2-SDK-3)', () => {
     });
   });
 
+  it('opens the consent-revoke modal on erasure and sends revoke_consent_on_fulfilment=false when the user declines', async () => {
+    setupSession();
+    const directGroup = makeGroup({
+      product_uuid: 'prod-direct',
+      product_name: 'Acme Loyalty',
+      purposes: [basePurpose('purp-direct', 'Marketing')],
+    });
+    const nominatedGroup = makeGroup({
+      product_uuid: 'prod-nominated',
+      product_name: 'Partner Bank',
+      nominator: {
+        uuid: 'nominator-uuid',
+        org_user_id: 'org-user-1',
+        name: 'Alice',
+        email: 'alice@example.com',
+      },
+      purposes: [basePurpose('purp-nominated', 'Analytics')],
+    });
+    getFormData.mockResolvedValue(
+      makeFormData({
+        direct_groups: [directGroup],
+        nominated_groups: [nominatedGroup],
+      }),
+    );
+    createCaseRequest.mockResolvedValueOnce({
+      case_id: 'CASE-2',
+      uuid: 'uuid-2',
+    });
+
+    render(<Form onCreateRequest={vi.fn()} />);
+    await waitFor(() => expect(getFormData).toHaveBeenCalled());
+
+    pickRequestType(RequestTypeEnum.ERASURE);
+
+    await waitFor(() =>
+      expect(screen.getByText('Acme Loyalty')).toBeInTheDocument(),
+    );
+    clickProductChip('prod-direct');
+
+    await waitFor(() => {
+      expect(
+        screen.getByTestId('per-product-purposes-prod-direct'),
+      ).toBeInTheDocument();
+    });
+
+    const marketingCheckbox = screen
+      .getByText('Marketing')
+      .closest('label')
+      ?.querySelector('input[type="checkbox"]') as HTMLInputElement | null;
+    expect(marketingCheckbox).toBeTruthy();
+    fireEvent.click(marketingCheckbox!);
+
+    const confirmCheckbox = (
+      screen.getAllByRole('checkbox') as HTMLInputElement[]
+    ).find((c) => c.closest('label')?.textContent?.includes('I confirm'));
+    expect(confirmCheckbox).toBeTruthy();
+    fireEvent.click(confirmCheckbox!);
+
+    await act(async () => {
+      fireEvent.click(screen.getByRole('button', { name: /^submit$/i }));
+    });
+
+    // The consent-revoke modal must appear, and no request fires until the
+    // user makes a choice. ('Revoke consent?' === revokeConsentModalTitle stub.)
+    expect(await screen.findByText('Revoke consent?')).toBeInTheDocument();
+    expect(createCaseRequest).not.toHaveBeenCalled();
+
+    // Declining ('No' === revokeConsentNo) submits with the flag explicitly false.
+    await act(async () => {
+      fireEvent.click(screen.getByRole('button', { name: 'No' }));
+    });
+
+    await waitFor(() => {
+      expect(createCaseRequest).toHaveBeenCalledTimes(1);
+    });
+    const payload = createCaseRequest.mock.calls[0][2];
+    expect(payload.request_type).toBe('erasure');
+    expect(payload.revoke_consent_on_fulfilment).toBe(false);
+  });
+
   it('switches the inline purpose panel when another product chip is selected', async () => {
     setupSession();
     const creditCard = makeGroup({
@@ -1052,6 +1139,11 @@ describe('Form (P2-SDK-3)', () => {
       fireEvent.click(screen.getByRole('button', { name: /^submit$/i }));
     });
 
+    // ERASURE routes through the consent-revoke modal before submitting.
+    await act(async () => {
+      fireEvent.click(await screen.findByRole('button', { name: 'Yes' }));
+    });
+
     await waitFor(() => {
       expect(createCaseRequest).toHaveBeenCalledTimes(1);
     });