@things-factory/auth-base 10.1.215 → 10.1.223

package/tests/invitation-state.test.ts

@@ -1,92 +0,0 @@
-import { InvitationStatus, invitationState, mayAccept } from '../server/utils/invitation-state'
-
-/**
- * What state an invitation is in, and whether its token still opens anything.
- *
- * The token in an invitation email is a credential: whoever holds it joins a domain. So the
- * cases below lean the way credentials lean — an invitation that cannot say it is live is not
- * live. The opposite mistake is a link that works forever, which is what the table had before
- * (no expiry column at all).
- */
-
-const NOW = new Date('2026-09-20T12:00:00Z')
-const LATER = new Date('2026-09-21T12:00:00Z')
-const EARLIER = new Date('2026-09-19T12:00:00Z')
-
-describe('a pending invitation', () => {
-  it('is pending while its expiry is ahead', () => {
-    expect(invitationState({ status: 'pending', expiresAt: LATER }, NOW)).toEqual(InvitationStatus.PENDING)
-    expect(mayAccept({ status: 'pending', expiresAt: LATER }, NOW)).toBe(true)
-  })
-
-  it('is expired once the expiry has passed, before anything writes that down', () => {
-    /*
-     * ⚠ The guard is the clock, not the column. If `expired` were only a written value, the gap
-     * between the expiry passing and something running to record it would be a window where the
-     * token still works.
-     */
-    expect(invitationState({ status: 'pending', expiresAt: EARLIER }, NOW)).toEqual(InvitationStatus.EXPIRED)
-    expect(mayAccept({ status: 'pending', expiresAt: EARLIER }, NOW)).toBe(false)
-  })
-
-  it('is expired exactly at the moment it runs out', () => {
-    /* The boundary belongs to the dead side — a credential does not get its last instant. */
-    expect(mayAccept({ status: 'pending', expiresAt: NOW }, NOW)).toBe(false)
-  })
-
-  it('reads a stored timestamp string the same as a Date', () => {
-    expect(mayAccept({ status: 'pending', expiresAt: LATER.toISOString() }, NOW)).toBe(true)
-    expect(mayAccept({ status: 'pending', expiresAt: EARLIER.toISOString() }, NOW)).toBe(false)
-  })
-})
-
-describe('what an absent value means', () => {
-  it('no status reads as pending', () => {
-    /* That is what a row existing meant in the old table, which had no status column. */
-    expect(invitationState({ expiresAt: LATER }, NOW)).toEqual(InvitationStatus.PENDING)
-  })
-
-  it('⚠ no expiry reads as expired', () => {
-    /*
-     * ⚠ Rows written before this existed have no expiry, and they come from a flow that never
-     * completed — the link in the email led to no route at all. Reading them as live would keep
-     * alive tokens that never worked. A credential that cannot say when it dies does not open
-     * anything.
-     */
-    expect(invitationState({ status: 'pending' }, NOW)).toEqual(InvitationStatus.EXPIRED)
-    expect(invitationState({}, NOW)).toEqual(InvitationStatus.EXPIRED)
-    expect(mayAccept({ status: 'pending', expiresAt: null }, NOW)).toBe(false)
-  })
-
-  it('an unreadable timestamp reads as expired too', () => {
-    expect(mayAccept({ status: 'pending', expiresAt: 'not a date' }, NOW)).toBe(false)
-  })
-
-  it('no invitation at all is not acceptable', () => {
-    expect(mayAccept(null, NOW)).toBe(false)
-    expect(mayAccept(undefined, NOW)).toBe(false)
-  })
-})
-
-describe('a row that is already finished', () => {
-  it('stays accepted however long ago it was', () => {
-    /*
-     * ⚠ Time does not rewrite history. If an accepted row expired later, the list would stop
-     * being able to say that this person was invited and came in — which is the whole reason the
-     * row is kept.
-     */
-    expect(invitationState({ status: 'accepted', expiresAt: EARLIER }, NOW)).toEqual(InvitationStatus.ACCEPTED)
-    expect(invitationState({ status: 'accepted' }, NOW)).toEqual(InvitationStatus.ACCEPTED)
-  })
-
-  it('stays cancelled', () => {
-    expect(invitationState({ status: 'cancelled', expiresAt: LATER }, NOW)).toEqual(InvitationStatus.CANCELLED)
-  })
-
-  it('cannot be accepted, whatever its expiry says', () => {
-    /* ⚠ A cancelled invitation whose expiry is still ahead must not open anything. */
-    expect(mayAccept({ status: 'cancelled', expiresAt: LATER }, NOW)).toBe(false)
-    expect(mayAccept({ status: 'accepted', expiresAt: LATER }, NOW)).toBe(false)
-    expect(mayAccept({ status: 'expired', expiresAt: LATER }, NOW)).toBe(false)
-  })
-})