@terreno/api 0.0.18 → 0.2.0

package/dist/betterAuthSetup.test.js

@@ -0,0 +1,684 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var bun_test_1 = require("bun:test");
+var express_1 = __importDefault(require("express"));
+var mongodb_memory_server_1 = require("mongodb-memory-server");
+var mongoose_1 = __importStar(require("mongoose"));
+var betterAuthSetup_1 = require("./betterAuthSetup");
+// Use a separate connection to avoid conflict with bunSetup.ts preload
+var conn;
+var mongod;
+var TestUser;
+// Simple user schema for testing
+var testUserSchema = new mongoose_1.Schema({
+    admin: { default: false, type: Boolean },
+    betterAuthId: { type: String },
+    email: { required: true, type: String },
+    name: { type: String },
+    oauthProvider: { type: String },
+});
+// Start memory server and create connection before tests run
+var setup = (function () { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, mongodb_memory_server_1.MongoMemoryServer.create()];
+            case 1:
+                mongod = _a.sent();
+                conn = mongoose_1.default.createConnection(mongod.getUri());
+                return [4 /*yield*/, conn.asPromise()];
+            case 2:
+                _a.sent();
+                TestUser = conn.model("BetterAuthTestUser", testUserSchema);
+                return [2 /*return*/];
+        }
+    });
+}); })();
+// Helper to get the mongo client from our separate connection
+var getClient = function () { return conn.client; };
+(0, bun_test_1.afterAll)(function () { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (conn === null || conn === void 0 ? void 0 : conn.close())];
+            case 1:
+                _a.sent();
+                return [4 /*yield*/, (mongod === null || mongod === void 0 ? void 0 : mongod.stop())];
+            case 2:
+                _a.sent();
+                return [2 /*return*/];
+        }
+    });
+}); });
+(0, bun_test_1.afterEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, setup];
+            case 1:
+                _a.sent();
+                return [4 /*yield*/, TestUser.deleteMany({})];
+            case 2:
+                _a.sent();
+                return [2 /*return*/];
+        }
+    });
+}); });
+(0, bun_test_1.describe)("createBetterAuth", function () {
+    (0, bun_test_1.it)("throws if secret is not provided", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var originalSecret, config;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    originalSecret = process.env.BETTER_AUTH_SECRET;
+                    delete process.env.BETTER_AUTH_SECRET;
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                    };
+                    (0, bun_test_1.expect)(function () { return (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() }); }).toThrow("BETTER_AUTH_SECRET must be set");
+                    process.env.BETTER_AUTH_SECRET = originalSecret;
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("throws if baseURL is not provided", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var originalUrl, config;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    originalUrl = process.env.BETTER_AUTH_URL;
+                    delete process.env.BETTER_AUTH_URL;
+                    config = {
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    (0, bun_test_1.expect)(function () { return (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() }); }).toThrow("BETTER_AUTH_URL must be set");
+                    process.env.BETTER_AUTH_URL = originalUrl;
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("creates a Better Auth instance with valid config", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    (0, bun_test_1.expect)(auth).toBeDefined();
+                    (0, bun_test_1.expect)(auth.api).toBeDefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("creates instance with social providers", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        appleOAuth: { clientId: "apple-id", clientSecret: "apple-secret" },
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        githubOAuth: { clientId: "github-id", clientSecret: "github-secret" },
+                        googleOAuth: { clientId: "google-id", clientSecret: "google-secret" },
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    (0, bun_test_1.expect)(auth).toBeDefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("uses env vars as fallback for secret and baseURL", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    process.env.BETTER_AUTH_SECRET = "env-secret-at-least-32-characters-long";
+                    process.env.BETTER_AUTH_URL = "http://localhost:4000";
+                    config = { enabled: true };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    (0, bun_test_1.expect)(auth).toBeDefined();
+                    delete process.env.BETTER_AUTH_SECRET;
+                    delete process.env.BETTER_AUTH_URL;
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("uses custom basePath when provided", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        basePath: "/custom/auth",
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    (0, bun_test_1.expect)(auth).toBeDefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+(0, bun_test_1.describe)("syncBetterAuthUser", function () {
+    var makeBetterAuthUser = function (overrides) {
+        if (overrides === void 0) { overrides = {}; }
+        return (__assign({ createdAt: new Date(), email: "test@example.com", emailVerified: true, id: "ba-user-123", image: null, name: "Test User", updatedAt: new Date() }, overrides));
+    };
+    (0, bun_test_1.it)("creates a new user when none exists", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var baUser, result;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    baUser = makeBetterAuthUser();
+                    return [4 /*yield*/, (0, betterAuthSetup_1.syncBetterAuthUser)(TestUser, baUser)];
+                case 2:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result).toBeDefined();
+                    (0, bun_test_1.expect)(result.email).toBe("test@example.com");
+                    (0, bun_test_1.expect)(result.name).toBe("Test User");
+                    (0, bun_test_1.expect)(result.betterAuthId).toBe("ba-user-123");
+                    (0, bun_test_1.expect)(result.admin).toBe(false);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("updates an existing user matched by betterAuthId", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var baUser, result, count;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, TestUser.create({
+                            betterAuthId: "ba-user-123",
+                            email: "old@example.com",
+                            name: "Old Name",
+                        })];
+                case 2:
+                    _a.sent();
+                    baUser = makeBetterAuthUser({ email: "new@example.com", name: "New Name" });
+                    return [4 /*yield*/, (0, betterAuthSetup_1.syncBetterAuthUser)(TestUser, baUser)];
+                case 3:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.email).toBe("new@example.com");
+                    (0, bun_test_1.expect)(result.name).toBe("New Name");
+                    (0, bun_test_1.expect)(result.betterAuthId).toBe("ba-user-123");
+                    return [4 /*yield*/, TestUser.countDocuments()];
+                case 4:
+                    count = _a.sent();
+                    (0, bun_test_1.expect)(count).toBe(1);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("links existing user matched by email", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var baUser, result, count;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, TestUser.create({
+                            email: "test@example.com",
+                            name: "Existing User",
+                        })];
+                case 2:
+                    _a.sent();
+                    baUser = makeBetterAuthUser();
+                    return [4 /*yield*/, (0, betterAuthSetup_1.syncBetterAuthUser)(TestUser, baUser)];
+                case 3:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.betterAuthId).toBe("ba-user-123");
+                    (0, bun_test_1.expect)(result.email).toBe("test@example.com");
+                    return [4 /*yield*/, TestUser.countDocuments()];
+                case 4:
+                    count = _a.sent();
+                    (0, bun_test_1.expect)(count).toBe(1);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("sets oauthProvider when linking by email", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var baUser, result;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, TestUser.create({
+                            email: "test@example.com",
+                            name: "Existing User",
+                        })];
+                case 2:
+                    _a.sent();
+                    baUser = makeBetterAuthUser();
+                    return [4 /*yield*/, (0, betterAuthSetup_1.syncBetterAuthUser)(TestUser, baUser, "google")];
+                case 3:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.oauthProvider).toBe("google");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("uses email prefix as name when name is null", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var baUser, result;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    baUser = makeBetterAuthUser({ name: null });
+                    return [4 /*yield*/, (0, betterAuthSetup_1.syncBetterAuthUser)(TestUser, baUser)];
+                case 2:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.name).toBe("test");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("does not overwrite name when betterAuthUser.name is null", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var baUser, result;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, TestUser.create({
+                            betterAuthId: "ba-user-123",
+                            email: "test@example.com",
+                            name: "Keep This Name",
+                        })];
+                case 2:
+                    _a.sent();
+                    baUser = makeBetterAuthUser({ name: null });
+                    return [4 /*yield*/, (0, betterAuthSetup_1.syncBetterAuthUser)(TestUser, baUser)];
+                case 3:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.name).toBe("Keep This Name");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+(0, bun_test_1.describe)("createBetterAuthSessionMiddleware", function () {
+    (0, bun_test_1.it)("calls next when no session exists", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth, middleware, req, res, next;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    middleware = (0, betterAuthSetup_1.createBetterAuthSessionMiddleware)(auth);
+                    req = { headers: {} };
+                    res = {};
+                    next = (0, bun_test_1.mock)(function () { });
+                    return [4 /*yield*/, middleware(req, res, next)];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(next).toHaveBeenCalledTimes(1);
+                    (0, bun_test_1.expect)(req.user).toBeUndefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("calls next on error without crashing", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth, origGetSession, middleware, req, res, next;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    origGetSession = auth.api.getSession;
+                    auth.api.getSession = function () {
+                        throw new Error("Session error");
+                    };
+                    middleware = (0, betterAuthSetup_1.createBetterAuthSessionMiddleware)(auth);
+                    req = { headers: {} };
+                    res = {};
+                    next = (0, bun_test_1.mock)(function () { });
+                    return [4 /*yield*/, middleware(req, res, next)];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(next).toHaveBeenCalledTimes(1);
+                    (0, bun_test_1.expect)(req.user).toBeUndefined();
+                    auth.api.getSession = origGetSession;
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("attaches basic user data when no userModel is provided", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth, mockSession, middleware, req, res, next;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    mockSession = {
+                        session: { id: "session-1", userId: "user-1" },
+                        user: {
+                            email: "user@example.com",
+                            id: "user-1",
+                            name: "Test User",
+                        },
+                    };
+                    // Override getSession to return mock session
+                    auth.api.getSession = function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                        return [2 /*return*/, mockSession];
+                    }); }); };
+                    middleware = (0, betterAuthSetup_1.createBetterAuthSessionMiddleware)(auth);
+                    req = { headers: {} };
+                    res = {};
+                    next = (0, bun_test_1.mock)(function () { });
+                    return [4 /*yield*/, middleware(req, res, next)];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(next).toHaveBeenCalledTimes(1);
+                    (0, bun_test_1.expect)(req.user).toBeDefined();
+                    (0, bun_test_1.expect)(req.user.email).toBe("user@example.com");
+                    (0, bun_test_1.expect)(req.user.betterAuthId).toBe("user-1");
+                    (0, bun_test_1.expect)(req.user.admin).toBe(false);
+                    (0, bun_test_1.expect)(req.betterAuthSession).toBe(mockSession);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("looks up app user by betterAuthId when userModel is provided", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, appUser, auth, mockSession, middleware, req, res, next;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    return [4 /*yield*/, TestUser.create({
+                            betterAuthId: "user-1",
+                            email: "user@example.com",
+                            name: "App User",
+                        })];
+                case 2:
+                    appUser = _a.sent();
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    mockSession = {
+                        session: { id: "session-1", userId: "user-1" },
+                        user: {
+                            email: "user@example.com",
+                            id: "user-1",
+                            name: "Test User",
+                        },
+                    };
+                    auth.api.getSession = function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                        return [2 /*return*/, mockSession];
+                    }); }); };
+                    middleware = (0, betterAuthSetup_1.createBetterAuthSessionMiddleware)(auth, TestUser);
+                    req = { headers: {} };
+                    res = {};
+                    next = (0, bun_test_1.mock)(function () { });
+                    return [4 /*yield*/, middleware(req, res, next)];
+                case 3:
+                    _a.sent();
+                    (0, bun_test_1.expect)(next).toHaveBeenCalledTimes(1);
+                    (0, bun_test_1.expect)(req.user).toBeDefined();
+                    (0, bun_test_1.expect)(req.user._id.toString()).toBe(appUser._id.toString());
+                    (0, bun_test_1.expect)(req.betterAuthSession).toBe(mockSession);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("creates app user via sync when not found by betterAuthId", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth, mockSession, middleware, req, res, next, count;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    mockSession = {
+                        session: { id: "session-1", userId: "new-user-1" },
+                        user: {
+                            email: "newuser@example.com",
+                            id: "new-user-1",
+                            name: "New User",
+                        },
+                    };
+                    auth.api.getSession = function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                        return [2 /*return*/, mockSession];
+                    }); }); };
+                    middleware = (0, betterAuthSetup_1.createBetterAuthSessionMiddleware)(auth, TestUser);
+                    req = { headers: {} };
+                    res = {};
+                    next = (0, bun_test_1.mock)(function () { });
+                    return [4 /*yield*/, middleware(req, res, next)];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(next).toHaveBeenCalledTimes(1);
+                    (0, bun_test_1.expect)(req.user).toBeDefined();
+                    (0, bun_test_1.expect)(req.user.betterAuthId).toBe("new-user-1");
+                    (0, bun_test_1.expect)(req.user.email).toBe("newuser@example.com");
+                    return [4 /*yield*/, TestUser.countDocuments()];
+                case 3:
+                    count = _a.sent();
+                    (0, bun_test_1.expect)(count).toBe(1);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+(0, bun_test_1.describe)("mountBetterAuthRoutes", function () {
+    (0, bun_test_1.it)("mounts routes at the default path", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth, app;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    app = (0, express_1.default)();
+                    (0, bun_test_1.expect)(function () { return (0, betterAuthSetup_1.mountBetterAuthRoutes)(app, auth); }).not.toThrow();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("mounts routes at a custom path", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth, app;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    app = (0, express_1.default)();
+                    (0, bun_test_1.expect)(function () { return (0, betterAuthSetup_1.mountBetterAuthRoutes)(app, auth, "/custom/auth"); }).not.toThrow();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+(0, bun_test_1.describe)("getMongoClientFromMongoose", function () {
+    (0, bun_test_1.it)("returns the mongo client when connected", function () {
+        // Default mongoose connection is set up by bunSetup.ts preload
+        var client = (0, betterAuthSetup_1.getMongoClientFromMongoose)();
+        (0, bun_test_1.expect)(client).toBeDefined();
+    });
+});
+(0, bun_test_1.describe)("getBetterAuthSession", function () {
+    (0, bun_test_1.it)("returns null when no session is set", function () {
+        var req = {};
+        (0, bun_test_1.expect)((0, betterAuthSetup_1.getBetterAuthSession)(req)).toBeNull();
+    });
+    (0, bun_test_1.it)("returns session data when set", function () {
+        var sessionData = { session: { id: "s1" }, user: { id: "u1" } };
+        var req = { betterAuthSession: sessionData };
+        (0, bun_test_1.expect)((0, betterAuthSetup_1.getBetterAuthSession)(req)).toBe(sessionData);
+    });
+});
+(0, bun_test_1.describe)("hasBetterAuthSession", function () {
+    (0, bun_test_1.it)("returns false when no session is set", function () {
+        var req = {};
+        (0, bun_test_1.expect)((0, betterAuthSetup_1.hasBetterAuthSession)(req)).toBe(false);
+    });
+    (0, bun_test_1.it)("returns true when session is set", function () {
+        var req = { betterAuthSession: { session: {}, user: {} } };
+        (0, bun_test_1.expect)((0, betterAuthSetup_1.hasBetterAuthSession)(req)).toBe(true);
+    });
+});
+(0, bun_test_1.describe)("setupBetterAuthUserSync", function () {
+    (0, bun_test_1.it)("does not throw", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var config, auth;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup];
+                case 1:
+                    _a.sent();
+                    config = {
+                        baseURL: "http://localhost:3000",
+                        enabled: true,
+                        secret: "test-secret-at-least-32-characters-long",
+                    };
+                    auth = (0, betterAuthSetup_1.createBetterAuth)({ config: config, mongoClient: getClient() });
+                    (0, bun_test_1.expect)(function () { return (0, betterAuthSetup_1.setupBetterAuthUserSync)(auth, TestUser); }).not.toThrow();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});