dolphin-server-modules 2.9.5 → 2.9.6

package/dist/auth/auth.test.js

@@ -1,286 +0,0 @@
-// test/auth/auth.test.ts
-import { createAuth } from './auth';
-import crypto from 'node:crypto';
-class MockAuthDB {
-    users = [];
-    tokens = [];
-    async createUser(data) {
-        const id = crypto.randomBytes(8).toString('hex');
-        const u = { id, ...data };
-        this.users.push(u);
-        return u;
-    }
-    async findUserByEmail(email) {
-        return this.users.find(u => u.email === email);
-    }
-    async findUserById(id) {
-        return this.users.find(u => u.id === id);
-    }
-    async updateUser(id, data) {
-        const idx = this.users.findIndex(u => u.id === id);
-        if (idx > -1)
-            this.users[idx] = { ...this.users[idx], ...data };
-        return this.users[idx];
-    }
-    async saveRefreshToken(data) {
-        this.tokens.push(data);
-    }
-    async findRefreshToken(token) {
-        return this.tokens.find(t => t.token === token) || null;
-    }
-    async deleteRefreshToken(token) {
-        this.tokens = this.tokens.filter(t => t.token !== token);
-    }
-}
-describe('Auth Module', () => {
-    let db;
-    let auth;
-    beforeEach(() => {
-        db = new MockAuthDB();
-        auth = createAuth({
-            secret: 'test-secret',
-            cookieMaxAge: 1000 * 60 * 60,
-            issuer: 'TestApp'
-        });
-    });
-    describe('Registration', () => {
-        it('registers a new user successfully', async () => {
-            const user = await auth.register(db, {
-                email: 'test@example.com',
-                password: 'password123'
-            });
-            expect(user.email).toBe('test@example.com');
-            expect(user.role).toBe('user');
-            expect(user.id).toBeDefined();
-        });
-        it('throws error for missing fields', async () => {
-            await expect(auth.register(db, { email: '', password: '123' }))
-                .rejects.toThrow('Missing fields');
-        });
-    });
-    describe('Login', () => {
-        beforeEach(async () => {
-            await auth.register(db, {
-                email: 'test@example.com',
-                password: 'password123'
-            });
-        });
-        it('logs in successfully with correct credentials', async () => {
-            const result = await auth.login(db, {
-                email: 'test@example.com',
-                password: 'password123'
-            });
-            expect(result.accessToken).toBeDefined();
-            expect(result.user.email).toBe('test@example.com');
-            expect(result.user.role).toBe('user');
-        });
-        it('rejects invalid password', async () => {
-            await expect(auth.login(db, {
-                email: 'test@example.com',
-                password: 'wrong'
-            })).rejects.toThrow('Invalid credentials');
-        });
-        it('rejects non-existent email', async () => {
-            await expect(auth.login(db, {
-                email: 'nonexistent@example.com',
-                password: 'password123'
-            })).rejects.toThrow('Invalid credentials');
-        });
-    });
-    describe('Middleware', () => {
-        let token;
-        let userId;
-        beforeEach(async () => {
-            const user = await auth.register(db, {
-                email: 'middleware@example.com',
-                password: 'password123'
-            });
-            userId = user.id;
-            const loginResult = await auth.login(db, {
-                email: 'middleware@example.com',
-                password: 'password123'
-            });
-            token = loginResult.accessToken;
-        });
-        it('should allow access with valid token', async () => {
-            const req = {
-                headers: { authorization: `Bearer ${token}` },
-                user: null
-            };
-            const res = {
-                status: jest.fn().mockReturnThis(),
-                json: jest.fn()
-            };
-            let nextCalled = false;
-            const next = () => { nextCalled = true; };
-            const middleware = auth.middleware();
-            await middleware(req, res, next);
-            expect(nextCalled).toBe(true);
-            expect(req.user).toBeDefined();
-            expect(req.user.id).toBe(userId);
-        });
-        it('should reject request without token', async () => {
-            const req = {
-                headers: {},
-                user: null
-            };
-            const res = {
-                status: jest.fn().mockReturnThis(),
-                json: jest.fn()
-            };
-            const next = jest.fn();
-            const middleware = auth.middleware();
-            await middleware(req, res, next);
-            expect(next).not.toHaveBeenCalled();
-            expect(res.status).toHaveBeenCalledWith(401);
-            expect(res.json).toHaveBeenCalledWith({ message: 'Unauthorized' });
-        });
-        it('should reject request with invalid token', async () => {
-            const req = {
-                headers: { authorization: 'Bearer invalid-token' },
-                user: null
-            };
-            const res = {
-                status: jest.fn().mockReturnThis(),
-                json: jest.fn()
-            };
-            const next = jest.fn();
-            const middleware = auth.middleware();
-            await middleware(req, res, next);
-            expect(next).not.toHaveBeenCalled();
-            expect(res.status).toHaveBeenCalledWith(401);
-            expect(res.json).toHaveBeenCalledWith({ message: 'Unauthorized' });
-        });
-        it('should handle Dolphin style context (no res, no next)', async () => {
-            const req = {
-                headers: { authorization: `Bearer ${token}` },
-                user: null
-            };
-            // Dolphin style: no res, next is not a function
-            const res = undefined;
-            let nextCalled = false;
-            const next = () => { nextCalled = true; };
-            const middleware = auth.middleware();
-            await middleware(req, res, next);
-            expect(nextCalled).toBe(true);
-            expect(req.user).toBeDefined();
-        });
-    });
-    describe('2FA', () => {
-        let userId;
-        beforeEach(async () => {
-            const user = await auth.register(db, {
-                email: '2fa@example.com',
-                password: 'password123'
-            });
-            userId = user.id;
-        });
-        it('enables 2FA and returns QR code', async () => {
-            const { secret, uri } = await auth.enable2FA(db, userId);
-            expect(secret).toBeDefined();
-            expect(secret.length).toBeGreaterThan(10);
-            expect(uri).toMatch(/otpauth:\/\/totp\/TestApp:2fa(@|%40)example\.com/);
-            expect(uri).toContain(`secret=${secret}`);
-        });
-        it('allows enabling 2FA multiple times (returns existing secret)', async () => {
-            const first = await auth.enable2FA(db, userId);
-            const second = await auth.enable2FA(db, userId);
-            expect(second.secret).toBe(first.secret);
-            expect(second.uri).toBe(first.uri);
-        });
-        it('rejects invalid TOTP verification', async () => {
-            await auth.enable2FA(db, userId);
-            await expect(auth.verify2FA(db, userId, '000000'))
-                .rejects.toThrow('Invalid verification token');
-        });
-    });
-    describe('Refresh Token', () => {
-        let refreshToken;
-        beforeEach(async () => {
-            await auth.register(db, {
-                email: 'refresh@example.com',
-                password: 'password123'
-            });
-            await auth.login(db, {
-                email: 'refresh@example.com',
-                password: 'password123'
-            });
-            refreshToken = db.tokens[0].token;
-        });
-        it('refreshes token successfully', async () => {
-            const newSession = await auth.refresh(db, refreshToken);
-            expect(newSession.accessToken).toBeDefined();
-            expect(newSession.user.email).toBe('refresh@example.com');
-        });
-        it('detects token reuse', async () => {
-            await auth.refresh(db, refreshToken);
-            await expect(auth.refresh(db, refreshToken))
-                .rejects.toThrow('Token reuse detected');
-        });
-        it('rejects expired token', async () => {
-            const shortAuth = createAuth({
-                secret: 'test-secret',
-                cookieMaxAge: 1
-            });
-            await shortAuth.register(db, {
-                email: 'expired@example.com',
-                password: 'password123'
-            });
-            await shortAuth.login(db, {
-                email: 'expired@example.com',
-                password: 'password123'
-            });
-            const user = db.users.find(u => u.email === 'expired@example.com');
-            const token = db.tokens.find(t => t.userId === user?.id)?.token;
-            await new Promise(resolve => setTimeout(resolve, 10));
-            await expect(shortAuth.refresh(db, token))
-                .rejects.toThrow('Invalid or expired refresh token');
-        });
-    });
-    describe('Logout', () => {
-        let refreshToken;
-        beforeEach(async () => {
-            await auth.register(db, {
-                email: 'logout@example.com',
-                password: 'password123'
-            });
-            await auth.login(db, {
-                email: 'logout@example.com',
-                password: 'password123'
-            });
-            refreshToken = db.tokens[0].token;
-        });
-        it('logs out successfully', async () => {
-            const result = await auth.logout(db, refreshToken);
-            expect(result.success).toBe(true);
-            const token = await db.findRefreshToken(refreshToken);
-            expect(token).toBeNull();
-        });
-    });
-    describe('Rate Limiting', () => {
-        it('limits login attempts', async () => {
-            await auth.register(db, {
-                email: 'ratelimit@example.com',
-                password: 'password123'
-            });
-            let rateLimited = false;
-            for (let i = 0; i < 7; i++) {
-                try {
-                    await auth.login(db, {
-                        email: 'ratelimit@example.com',
-                        password: 'wrong'
-                    });
-                }
-                catch (err) {
-                    if (err.message === 'Rate limit exceeded') {
-                        rateLimited = true;
-                        expect(err.status).toBe(429);
-                        break;
-                    }
-                }
-            }
-            expect(rateLimited).toBe(true);
-        });
-    });
-});
-//# sourceMappingURL=auth.test.js.map

package/dist/auth/auth.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../src/auth/auth.test.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,OAAO,EAAE,UAAU,EAAuC,MAAM,QAAQ,CAAC;AACzE,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,UAAU;IACd,KAAK,GAAU,EAAE,CAAC;IAClB,MAAM,GAAyB,EAAE,CAAC;IAElC,KAAK,CAAC,UAAU,CAAC,IAAS;QACxB,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,IAAS;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,IAAI,GAAG,GAAG,CAAC,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAwB;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,EAAc,CAAC;IACnB,IAAI,IAAmC,CAAC;IAExC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;QACtB,IAAI,GAAG,UAAU,CAAC;YAChB,MAAM,EAAE,aAAa;YACrB,YAAY,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE;YAC5B,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACnC,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;iBAC5D,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACtB,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBAClC,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBAC1B,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBAC1B,KAAK,EAAE,yBAAyB;gBAChC,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,IAAI,KAAa,CAAC;QAClB,IAAI,MAAc,CAAC;QAEnB,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACnC,KAAK,EAAE,wBAAwB;gBAC/B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;YAEjB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBACvC,KAAK,EAAE,wBAAwB;gBAC/B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,GAAG,GAAQ;gBACf,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC7C,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM,GAAG,GAAQ;gBACf,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;aAChB,CAAC;YACF,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAEjC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,GAAG,GAAQ;gBACf,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM,GAAG,GAAQ;gBACf,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;aAChB,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;YAEvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAEjC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,GAAG,GAAQ;gBACf,OAAO,EAAE,EAAE,aAAa,EAAE,sBAAsB,EAAE;gBAClD,IAAI,EAAE,IAAI;aACX,CAAC;YACF,MAAM,GAAG,GAAQ;gBACf,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;aAChB,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;YAEvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAEjC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,GAAG,GAAQ;gBACf,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC7C,IAAI,EAAE,IAAI;aACX,CAAC;YACF,gDAAgD;YAChD,MAAM,GAAG,GAAG,SAAS,CAAC;YACtB,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAEjC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE;QACnB,IAAI,MAAc,CAAC;QAEnB,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACnC,KAAK,EAAE,iBAAiB;gBACxB,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAEzD,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAEhD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;iBAC/C,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,IAAI,YAAoB,CAAC;QAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACtB,KAAK,EAAE,qBAAqB;gBAC5B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YAExD,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YACrC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;iBACzC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;YACrC,MAAM,SAAS,GAAG,UAAU,CAAC;gBAC3B,MAAM,EAAE,aAAa;gBACrB,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;YAEH,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC3B,KAAK,EAAE,qBAAqB;gBAC5B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE;gBACxB,KAAK,EAAE,qBAAqB;gBAC5B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,qBAAqB,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC;YAEhE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAEtD,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,KAAM,CAAC,CAAC;iBACxC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,IAAI,YAAoB,CAAC;QAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACtB,KAAK,EAAE,oBAAoB;gBAC3B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBACnB,KAAK,EAAE,oBAAoB;gBAC3B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;YACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAElC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;YACrC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACtB,KAAK,EAAE,uBAAuB;gBAC9B,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;YAEH,IAAI,WAAW,GAAG,KAAK,CAAC;YAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;wBACnB,KAAK,EAAE,uBAAuB;wBAC9B,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,IAAI,GAAG,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;wBAC1C,WAAW,GAAG,IAAI,CAAC;wBACnB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC7B,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/authController/authController.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/authController/authController.test.js

@@ -1,359 +0,0 @@
-// test/auth-controller.test.ts
-import { describe, it, expect, beforeEach } from '@jest/globals';
-// Mock the auth controller module
-jest.mock('../authController/authController', () => ({
-    createDolphinAuthController: jest.fn((db, config) => ({
-        register: jest.fn().mockImplementation(async (ctx) => {
-            const body = ctx.body;
-            if (body.email === 'exists@example.com') {
-                return { success: false, error: 'Email already exists', status: 400 };
-            }
-            return { success: true, data: { id: '1', email: body.email, role: 'user' } };
-        }),
-        login: jest.fn().mockImplementation(async (ctx) => {
-            const body = ctx.body;
-            if (body.email === 'test@example.com' && body.password === 'password123') {
-                // ✅ Cookie set गरेको simulation
-                ctx.res.setHeader('Set-Cookie', 'rt=refresh-token-123; HttpOnly; Max-Age=604800; Path=/; SameSite=Lax');
-                return { success: true, accessToken: 'token123', user: { id: '1', email: body.email } };
-            }
-            return { success: false, error: 'Invalid credentials', status: 401 };
-        }),
-        refresh: jest.fn().mockImplementation(async (ctx) => {
-            // ✅ Dolphin server style: header बाट cookie extract गर्ने
-            const getCookie = (req, name) => {
-                const cookieHeader = req.headers?.cookie;
-                if (!cookieHeader)
-                    return undefined;
-                const match = cookieHeader.match(new RegExp('(^| )' + name + '=([^;]+)'));
-                return match ? match[2] : undefined;
-            };
-            const refreshToken = getCookie(ctx.req, 'rt');
-            if (refreshToken === 'refresh-token-123') {
-                // ✅ New cookie set गर्ने
-                ctx.res.setHeader('Set-Cookie', 'rt=new-refresh-token-456; HttpOnly; Max-Age=604800; Path=/; SameSite=Lax');
-                return { success: true, accessToken: 'new-token-456', user: { id: '1' } };
-            }
-            return { success: false, error: 'No refresh token provided', status: 401 };
-        }),
-        logout: jest.fn().mockImplementation(async (ctx) => {
-            // ✅ Cookie clear गर्ने
-            ctx.res.setHeader('Set-Cookie', 'rt=; HttpOnly; Max-Age=0; Path=/; SameSite=Lax');
-            return { success: true };
-        }),
-        me: jest.fn().mockImplementation(async (ctx) => {
-            if (ctx.req.user) {
-                const { password, recoveryCodes, twoFactorSecret, ...safe } = ctx.req.user;
-                return { success: true, data: safe };
-            }
-            return { success: false, error: 'Unauthorized', status: 401 };
-        }),
-        changePassword: jest.fn().mockImplementation(async (ctx) => {
-            const { oldPassword, newPassword } = ctx.body;
-            if (oldPassword === 'old123' && newPassword?.length >= 8) {
-                return { success: true, message: 'Password changed successfully' };
-            }
-            return { success: false, error: 'Current password is incorrect', status: 400 };
-        }),
-        forgotPassword: jest.fn().mockImplementation(async (ctx) => {
-            const { email } = ctx.body;
-            if (email === 'test@example.com') {
-                return { success: true, message: 'Reset link sent' };
-            }
-            return { success: true, message: 'If email exists, reset link sent' };
-        }),
-        resetPassword: jest.fn().mockImplementation(async (ctx) => {
-            const { token, newPassword } = ctx.body;
-            if (token === 'valid-token') {
-                return { success: true, message: 'Password reset successfully' };
-            }
-            return { success: false, error: 'Invalid or expired reset token', status: 400 };
-        }),
-        enable2FA: jest.fn().mockImplementation(async () => {
-            return { success: true, secret: 'SECRET123', uri: 'otpauth://...' };
-        }),
-        verify2FA: jest.fn().mockImplementation(async (ctx) => {
-            const { totp } = ctx.body;
-            if (totp === '123456') {
-                return { success: true, recoveryCodes: ['code1', 'code2'] };
-            }
-            return { success: false, error: 'Invalid TOTP', status: 401 };
-        }),
-        disable2FA: jest.fn().mockImplementation(async () => {
-            return { success: true };
-        }),
-        requireAuth: jest.fn(() => (req, res, next) => next()),
-        require2FA: jest.fn(() => (req, res, next) => next()),
-        requireAdmin: jest.fn((ctx, next) => next()),
-        sanitize: jest.fn((user) => {
-            if (!user)
-                return null;
-            const { password, recoveryCodes, twoFactorSecret, pending2FASecret, resetPasswordToken, resetPasswordExpires, ...safe } = user;
-            return safe;
-        })
-    }))
-}));
-import { createDolphinAuthController } from '../authController/authController';
-describe('Auth Controller Factory - Dolphin Server Compatible', () => {
-    let mockDb;
-    let mockCtx;
-    let auth;
-    beforeEach(() => {
-        mockDb = {};
-        auth = createDolphinAuthController(mockDb, {
-            secret: 'test-secret',
-            cookieMaxAge: 7 * 24 * 60 * 60 * 1000, // 7 days
-            secureCookies: false
-        });
-        // ✅ Dolphin Server style mock context
-        mockCtx = {
-            req: {
-                headers: {
-                    cookie: '' // ← cookie header (Dolphin style)
-                },
-                user: null
-            },
-            res: {
-                setHeader: jest.fn(),
-                getHeader: jest.fn()
-            },
-            body: {},
-            status: jest.fn().mockReturnThis(),
-            json: jest.fn().mockReturnThis()
-        };
-    });
-    describe('createDolphinAuthController', () => {
-        it('creates auth controller with all required methods', () => {
-            expect(auth).toHaveProperty('register');
-            expect(auth).toHaveProperty('login');
-            expect(auth).toHaveProperty('refresh');
-            expect(auth).toHaveProperty('logout');
-            expect(auth).toHaveProperty('me');
-            expect(auth).toHaveProperty('changePassword');
-            expect(auth).toHaveProperty('forgotPassword');
-            expect(auth).toHaveProperty('resetPassword');
-            expect(auth).toHaveProperty('enable2FA');
-            expect(auth).toHaveProperty('verify2FA');
-            expect(auth).toHaveProperty('disable2FA');
-            expect(auth).toHaveProperty('requireAuth');
-            expect(auth).toHaveProperty('require2FA');
-            expect(auth).toHaveProperty('requireAdmin');
-            expect(auth).toHaveProperty('sanitize');
-        });
-    });
-    describe('register', () => {
-        it('creates new user successfully', async () => {
-            mockCtx.body = { email: 'new@example.com', password: 'password123' };
-            const result = await auth.register(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.data.email).toBe('new@example.com');
-        });
-        it('returns error when email already exists', async () => {
-            mockCtx.body = { email: 'exists@example.com', password: '123' };
-            const result = await auth.register(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('Email already exists');
-            expect(result.status).toBe(400);
-        });
-    });
-    describe('login - Cookie Test', () => {
-        it('logs in user successfully and sets refresh token cookie', async () => {
-            mockCtx.body = { email: 'test@example.com', password: 'password123' };
-            const result = await auth.login(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.accessToken).toBe('token123');
-            expect(result.user.email).toBe('test@example.com');
-            // ✅ Verify cookie was set with correct parameters
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('rt=refresh-token-123'));
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('HttpOnly'));
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('Path=/'));
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('SameSite=Lax'));
-        });
-        it('returns error for invalid credentials', async () => {
-            mockCtx.body = { email: 'wrong@example.com', password: 'wrong' };
-            const result = await auth.login(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('Invalid credentials');
-            expect(result.status).toBe(401);
-        });
-    });
-    describe('refresh - Cookie Test (Dolphin Style)', () => {
-        it('refreshes access token with valid refresh token from cookie header', async () => {
-            // ✅ Set cookie in headers (Dolphin server style)
-            mockCtx.req.headers.cookie = 'rt=refresh-token-123; other=value';
-            const result = await auth.refresh(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.accessToken).toBe('new-token-456');
-            // ✅ Verify new cookie was set
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('rt=new-refresh-token-456'));
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('Max-Age=604800'));
-        });
-        it('handles multiple cookies correctly', async () => {
-            // ✅ Multiple cookies in header
-            mockCtx.req.headers.cookie = 'session=abc123; rt=refresh-token-123; theme=dark';
-            const result = await auth.refresh(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.accessToken).toBe('new-token-456');
-        });
-        it('returns error when refresh token cookie is missing', async () => {
-            mockCtx.req.headers.cookie = '';
-            const result = await auth.refresh(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('No refresh token provided');
-            expect(result.status).toBe(401);
-        });
-        it('returns error when cookie header is undefined', async () => {
-            mockCtx.req.headers.cookie = undefined;
-            const result = await auth.refresh(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('No refresh token provided');
-            expect(result.status).toBe(401);
-        });
-    });
-    describe('logout - Cookie Test', () => {
-        it('clears refresh token cookie on logout', async () => {
-            mockCtx.req.headers.cookie = 'rt=refresh-token-123';
-            const result = await auth.logout(mockCtx);
-            expect(result.success).toBe(true);
-            // ✅ Verify cookie is cleared (Max-Age=0)
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('rt='));
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('Max-Age=0'));
-            expect(mockCtx.res.setHeader).toHaveBeenCalledWith('Set-Cookie', expect.stringContaining('Path=/'));
-        });
-    });
-    describe('me', () => {
-        it('returns current user profile without sensitive data', async () => {
-            const user = {
-                id: '1',
-                email: 'test@example.com',
-                password: 'hashed',
-                recoveryCodes: ['code1'],
-                name: 'Test User'
-            };
-            mockCtx.req.user = user;
-            const result = await auth.me(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.data).not.toHaveProperty('password');
-            expect(result.data).not.toHaveProperty('recoveryCodes');
-            expect(result.data.email).toBe('test@example.com');
-            expect(result.data.name).toBe('Test User');
-        });
-        it('returns unauthorized when user not found', async () => {
-            mockCtx.req.user = null;
-            const result = await auth.me(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('Unauthorized');
-            expect(result.status).toBe(401);
-        });
-    });
-    describe('changePassword', () => {
-        it('changes password successfully', async () => {
-            mockCtx.req.user = { id: '1' };
-            mockCtx.body = { oldPassword: 'old123', newPassword: 'new123456' };
-            const result = await auth.changePassword(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.message).toBe('Password changed successfully');
-        });
-        it('fails with incorrect old password', async () => {
-            mockCtx.req.user = { id: '1' };
-            mockCtx.body = { oldPassword: 'wrong', newPassword: 'new123456' };
-            const result = await auth.changePassword(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('Current password is incorrect');
-        });
-    });
-    describe('forgotPassword', () => {
-        it('sends reset link for existing email', async () => {
-            mockCtx.body = { email: 'test@example.com' };
-            const result = await auth.forgotPassword(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.message).toBe('Reset link sent');
-        });
-    });
-    describe('resetPassword', () => {
-        it('resets password with valid token', async () => {
-            mockCtx.body = { token: 'valid-token', newPassword: 'new123456' };
-            const result = await auth.resetPassword(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.message).toBe('Password reset successfully');
-        });
-        it('fails with invalid token', async () => {
-            mockCtx.body = { token: 'invalid-token', newPassword: 'new123456' };
-            const result = await auth.resetPassword(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('Invalid or expired reset token');
-        });
-    });
-    describe('2FA Methods', () => {
-        it('enables 2FA for user', async () => {
-            mockCtx.req.user = { id: '1' };
-            const result = await auth.enable2FA(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.secret).toBe('SECRET123');
-        });
-        it('verifies 2FA token', async () => {
-            mockCtx.req.user = { id: '1' };
-            mockCtx.body = { totp: '123456' };
-            const result = await auth.verify2FA(mockCtx);
-            expect(result.success).toBe(true);
-            expect(result.recoveryCodes).toEqual(['code1', 'code2']);
-        });
-        it('fails 2FA verification with invalid token', async () => {
-            mockCtx.req.user = { id: '1' };
-            mockCtx.body = { totp: '999999' };
-            const result = await auth.verify2FA(mockCtx);
-            expect(result.success).toBe(false);
-            expect(result.error).toBe('Invalid TOTP');
-        });
-    });
-    describe('sanitize', () => {
-        it('removes all sensitive fields from user object', () => {
-            const user = {
-                id: '1',
-                email: 'test@example.com',
-                password: 'secret',
-                recoveryCodes: ['code1'],
-                twoFactorSecret: 'secret',
-                pending2FASecret: 'pending',
-                resetPasswordToken: 'token',
-                resetPasswordExpires: new Date(),
-                name: 'Test User',
-                role: 'user'
-            };
-            const sanitized = auth.sanitize(user);
-            expect(sanitized).toEqual({
-                id: '1',
-                email: 'test@example.com',
-                name: 'Test User',
-                role: 'user'
-            });
-            expect(sanitized).not.toHaveProperty('password');
-            expect(sanitized).not.toHaveProperty('recoveryCodes');
-            expect(sanitized).not.toHaveProperty('twoFactorSecret');
-            expect(sanitized).not.toHaveProperty('resetPasswordToken');
-        });
-        it('returns null for null input', () => {
-            expect(auth.sanitize(null)).toBeNull();
-        });
-    });
-    describe('Cookie Integration Flow', () => {
-        it('complete auth flow with cookies', async () => {
-            // 1. Login - set cookie
-            mockCtx.body = { email: 'test@example.com', password: 'password123' };
-            const loginResult = await auth.login(mockCtx);
-            expect(loginResult.success).toBe(true);
-            // 2. Simulate cookie being set in browser
-            mockCtx.req.headers.cookie = 'rt=refresh-token-123';
-            // 3. Refresh - read cookie and set new one
-            const refreshResult = await auth.refresh(mockCtx);
-            expect(refreshResult.success).toBe(true);
-            expect(refreshResult.accessToken).toBe('new-token-456');
-            // 4. Logout - clear cookie
-            const logoutResult = await auth.logout(mockCtx);
-            expect(logoutResult.success).toBe(true);
-            // 5. Verify cookie clear header was set
-            expect(mockCtx.res.setHeader).toHaveBeenLastCalledWith('Set-Cookie', expect.stringContaining('Max-Age=0'));
-        });
-    });
-});
-//# sourceMappingURL=authController.test.js.map