livedash-node/tests/unit/auth.test.ts

import { describe, it, expect, vi, beforeEach } from "vitest";
import { authOptions } from "../../app/api/auth/[...nextauth]/route";
import { PrismaClient } from "@prisma/client";
import bcrypt from "bcryptjs";

// Mock PrismaClient
const mockPrisma = {
  user: {
    findUnique: vi.fn(),
  },
};

vi.mock("../../lib/prisma", () => ({
  prisma: mockPrisma,
}));

// Mock bcryptjs
vi.mock("bcryptjs", () => ({
  default: {
    compare: vi.fn(),
  },
}));

describe("NextAuth Credentials Provider authorize function", () => {
  let mockFindUnique: vi.Mock;
  let mockBcryptCompare: vi.Mock;

  beforeEach(() => {
    mockFindUnique = vi.fn();
    // @ts-ignore
    prisma.user.findUnique = mockFindUnique;
    mockBcryptCompare = bcrypt.compare as vi.Mock;
    vi.clearAllMocks();
  });

  const authorize = authOptions.providers[0].authorize;

  it("should return null if email or password are not provided", async () => {
    // @ts-ignore
    const result1 = await authorize({
      email: "test@example.com",
      password: "",
    });
    expect(result1).toBeNull();
    expect(mockFindUnique).not.toHaveBeenCalled();

    // @ts-ignore
    const result2 = await authorize({ email: "", password: "password" });
    expect(result2).toBeNull();
    expect(mockFindUnique).not.toHaveBeenCalled();
  });

  it("should return null if user is not found", async () => {
    mockFindUnique.mockResolvedValue(null);

    // @ts-ignore
    const result = await authorize({
      email: "nonexistent@example.com",
      password: "password",
    });
    expect(result).toBeNull();
    expect(mockFindUnique).toHaveBeenCalledWith({
      where: { email: "nonexistent@example.com" },
    });
    expect(mockBcryptCompare).not.toHaveBeenCalled();
  });

  it("should return null if password does not match", async () => {
    const mockUser = {
      id: "user123",
      email: "test@example.com",
      password: "hashed_password",
      companyId: "company123",
      role: "USER",
    };
    mockFindUnique.mockResolvedValue(mockUser);
    mockBcryptCompare.mockResolvedValue(false);

    // @ts-ignore
    const result = await authorize({
      email: "test@example.com",
      password: "wrong_password",
    });
    expect(result).toBeNull();
    expect(mockFindUnique).toHaveBeenCalledWith({
      where: { email: "test@example.com" },
    });
    expect(mockBcryptCompare).toHaveBeenCalledWith(
      "wrong_password",
      "hashed_password"
    );
  });

  it("should return user object if credentials are valid", async () => {
    const mockUser = {
      id: "user123",
      email: "test@example.com",
      password: "hashed_password",
      companyId: "company123",
      role: "USER",
    };
    mockFindUnique.mockResolvedValue(mockUser);
    mockBcryptCompare.mockResolvedValue(true);

    // @ts-ignore
    const result = await authorize({
      email: "test@example.com",
      password: "correct_password",
    });
    expect(result).toEqual({
      id: "user123",
      email: "test@example.com",
      companyId: "company123",
      role: "USER",
    });
    expect(mockFindUnique).toHaveBeenCalledWith({
      where: { email: "test@example.com" },
    });
    expect(mockBcryptCompare).toHaveBeenCalledWith(
      "correct_password",
      "hashed_password"
    );
  });
});