homeio

1import { NextRequest } from "next/server";
2import { describe, expect, it, vi } from "vitest";
3
4vi.mock("@/lib/server/modules/auth/service", () => {
5  class AuthError extends Error {
6    constructor(
7      message: string,
8      public readonly statusCode: number,
9    ) {
10      super(message);
11    }
12  }
13
14  return {
15    AuthError,
16    verifyUnlockPassword: vi.fn(),
17  };
18});
19
20import { POST } from "@/app/api/auth/unlock/route";
21import { AuthError, verifyUnlockPassword } from "@/lib/server/modules/auth/service";
22
23describe("POST /api/auth/unlock", () => {
24  it("unlocks session when password is valid", async () => {
25    vi.mocked(verifyUnlockPassword).mockResolvedValueOnce({
26      userId: "u1",
27      username: "admin",
28    });
29
30    const request = new NextRequest("http://localhost/api/auth/unlock", {
31      method: "POST",
32      headers: {
33        cookie: "homeio_session=session-token",
34      },
35      body: JSON.stringify({ password: "StrongPass123" }),
36    });
37
38    const response = await POST(request);
39
40    expect(response.status).toBe(200);
41  });
42
43  it("returns auth error when password is invalid", async () => {
44    vi.mocked(verifyUnlockPassword).mockRejectedValueOnce(
45      new AuthError("Invalid password", 401),
46    );
47
48    const request = new NextRequest("http://localhost/api/auth/unlock", {
49      method: "POST",
50      headers: {
51        cookie: "homeio_session=session-token",
52      },
53      body: JSON.stringify({ password: "bad-pass" }),
54    });
55
56    const response = await POST(request);
57
58    expect(response.status).toBe(401);
59  });
60});
61