@velajs/better-auth 0.5.0 → 0.6.0

package/dist/testing/acting-as.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The slice of `@velajs/testing`'s `TestingModule` this resolver depends on.
+ * Declared structurally so `@velajs/better-auth/testing` carries NO runtime
+ * (or type) dependency on `@velajs/testing` — a real `TestingModule` satisfies
+ * it, and the resolver stays assignable to `@velajs/testing`'s `ActingAsResolver`.
+ */
+export interface TestModuleLike {
+    get<T>(token: unknown): T;
+}
+/**
+ * A test principal. Opaque `Record<string, unknown>` to stay compatible with
+ * `@velajs/testing`'s `TestPrincipal`. Recognized fields:
+ *
+ * - `id`    — reuse the user with this id if it already exists.
+ * - `email` — reuse the user with this email, else create one.
+ * - `name`  — display name for a created user (defaults to the email).
+ *
+ * Any other fields are forwarded to `internalAdapter.createUser` (e.g. `role`)
+ * when a new user is minted, so role-guarded routes can be exercised.
+ */
+export type ActingAsPrincipal = Record<string, unknown>;
+/**
+ * actingAs — a `@velajs/testing` auth resolver for better-auth.
+ *
+ * Resolves {@link BetterAuthService} from the module, mints a REAL better-auth
+ * session for `principal` through `auth.$context.internalAdapter`, and returns
+ * a `Headers` carrying a properly signed session cookie. Guarded routes
+ * (`AuthGuard`) then accept requests carrying those headers because
+ * `auth.api.getSession` validates the cookie against the same session store.
+ *
+ * The signature `(module, principal) => Promise<Headers>` is exactly
+ * `@velajs/testing`'s `ActingAsResolver`, so it plugs straight in:
+ *
+ * @example
+ * ```ts
+ * import { actingAs } from '@velajs/better-auth/testing';
+ *
+ * // As the default resolver for the module:
+ * module.setAuthResolver(actingAs);
+ * await module.http.get('/me').actingAs({ email: 'ada@example.com' }).send();
+ *
+ * // Or passed per-request:
+ * await module.http.get('/me').actingAs({ id: existingUserId }, actingAs).send();
+ * ```
+ */
+export declare function actingAs(module: TestModuleLike, principal: ActingAsPrincipal): Promise<Headers>;

package/dist/testing/acting-as.js

@@ -0,0 +1,70 @@
+// Mechanics adapted from @stratal/testing (MIT, © Temitayo Fadojutimi):
+// mint a real better-auth session via `$context.internalAdapter` and hand back
+// a signed session-cookie header. Adapted to better-auth >=1.6: the session
+// cookie is signed with the package's own `makeSignature` (better-auth/crypto)
+// — the same primitive better-auth's built-in test cookie builder uses — so no
+// endpoint-context shim or `setSessionCookie` mock is needed.
+import { makeSignature } from "better-auth/crypto";
+import { BetterAuthService } from "../better-auth.service.js";
+/**
+ * actingAs — a `@velajs/testing` auth resolver for better-auth.
+ *
+ * Resolves {@link BetterAuthService} from the module, mints a REAL better-auth
+ * session for `principal` through `auth.$context.internalAdapter`, and returns
+ * a `Headers` carrying a properly signed session cookie. Guarded routes
+ * (`AuthGuard`) then accept requests carrying those headers because
+ * `auth.api.getSession` validates the cookie against the same session store.
+ *
+ * The signature `(module, principal) => Promise<Headers>` is exactly
+ * `@velajs/testing`'s `ActingAsResolver`, so it plugs straight in:
+ *
+ * @example
+ * ```ts
+ * import { actingAs } from '@velajs/better-auth/testing';
+ *
+ * // As the default resolver for the module:
+ * module.setAuthResolver(actingAs);
+ * await module.http.get('/me').actingAs({ email: 'ada@example.com' }).send();
+ *
+ * // Or passed per-request:
+ * await module.http.get('/me').actingAs({ id: existingUserId }, actingAs).send();
+ * ```
+ */ export async function actingAs(module, principal) {
+    const auth = module.get(BetterAuthService).auth;
+    const ctx = await auth.$context;
+    const internalAdapter = ctx.internalAdapter;
+    const id = typeof principal.id === 'string' ? principal.id : undefined;
+    const email = typeof principal.email === 'string' ? principal.email : undefined;
+    const name = typeof principal.name === 'string' ? principal.name : undefined;
+    // `findUserById`/`createUser` yield a bare user; `findUserByEmail` nests it
+    // under `{ user, accounts }` — normalize to the id we need.
+    let user = null;
+    if (id) user = await internalAdapter.findUserById(id);
+    if (!user && email) {
+        const found = await internalAdapter.findUserByEmail(email);
+        user = found?.user ?? null;
+    }
+    if (!user) {
+        if (!email) {
+            throw new Error('actingAs: principal must carry an `email` (to create a user) or an ' + '`id` matching an existing user.');
+        }
+        const { id: _id, email: _email, name: _name, ...extra } = principal;
+        user = await internalAdapter.createUser({
+            ...extra,
+            email,
+            name: name ?? email,
+            ...id ? {
+                id
+            } : {}
+        });
+    }
+    const session = await internalAdapter.createSession(user.id, false, {
+        ipAddress: '127.0.0.1',
+        userAgent: 'vela-test'
+    });
+    const cookieName = ctx.authCookies.sessionToken.name;
+    const signedToken = `${session.token}.${await makeSignature(session.token, ctx.secret)}`;
+    const headers = new Headers();
+    headers.set('Cookie', `${cookieName}=${signedToken}`);
+    return headers;
+}

package/dist/testing/index.d.ts

@@ -0,0 +1,2 @@
+export { actingAs } from './acting-as';
+export type { ActingAsPrincipal, TestModuleLike } from './acting-as';

package/dist/testing/index.js

@@ -0,0 +1,3 @@
+// `@velajs/better-auth/testing` — test-only helpers. Kept in a separate subpath
+// so nothing here is pulled into the runtime surface of `@velajs/better-auth`.
+export { actingAs } from "./acting-as.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velajs/better-auth",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "better-auth integration for the Vela framework",
   "type": "module",
   "main": "./dist/index.js",
@@ -9,6 +9,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./testing": {
+      "types": "./dist/testing/index.d.ts",
+      "import": "./dist/testing/index.js"
     }
   },
   "files": [