livedash-node/tests/unit/platform-auth.test.ts

import { describe, it, expect, beforeEach, vi } from 'vitest'
import { hash, compare } from 'bcryptjs'
import { db } from '../../lib/db'

// Mock database
vi.mock('../../lib/db', () => ({
  db: {
    platformUser: {
      findUnique: vi.fn(),
    },
  },
}))

describe('Platform Authentication', () => {
  beforeEach(() => {
    vi.clearAllMocks()
  })

  describe('Platform User Authentication Logic', () => {
    it('should authenticate valid platform user with correct password', async () => {
      const plainPassword = 'SecurePassword123!'
      const hashedPassword = await hash(plainPassword, 10)
      
      const mockUser = {
        id: '1',
        email: 'admin@notso.ai',
        password: hashedPassword,
        role: 'SUPER_ADMIN',
        createdAt: new Date(),
        updatedAt: new Date(),
      }

      vi.mocked(db.platformUser.findUnique).mockResolvedValue(mockUser)

      // Simulate the authentication logic
      const user = await db.platformUser.findUnique({
        where: { email: 'admin@notso.ai' }
      })

      expect(user).toBeTruthy()
      expect(user?.email).toBe('admin@notso.ai')
      
      // Verify password
      const isValidPassword = await compare(plainPassword, user!.password)
      expect(isValidPassword).toBe(true)
    })

    it('should reject invalid email', async () => {
      vi.mocked(db.platformUser.findUnique).mockResolvedValue(null)

      const user = await db.platformUser.findUnique({
        where: { email: 'invalid@notso.ai' }
      })

      expect(user).toBeNull()
    })

    it('should reject invalid password', async () => {
      const correctPassword = 'SecurePassword123!'
      const wrongPassword = 'WrongPassword'
      const hashedPassword = await hash(correctPassword, 10)
      
      const mockUser = {
        id: '1',
        email: 'admin@notso.ai',
        password: hashedPassword,
        role: 'SUPER_ADMIN',
        createdAt: new Date(),
        updatedAt: new Date(),
      }

      vi.mocked(db.platformUser.findUnique).mockResolvedValue(mockUser)

      const user = await db.platformUser.findUnique({
        where: { email: 'admin@notso.ai' }
      })

      const isValidPassword = await compare(wrongPassword, user!.password)
      expect(isValidPassword).toBe(false)
    })
  })

  describe('Platform User Roles', () => {
    it('should support all platform user roles', async () => {
      const roles = ['SUPER_ADMIN', 'ADMIN', 'SUPPORT']
      
      for (const role of roles) {
        const mockUser = {
          id: '1',
          email: `${role.toLowerCase()}@notso.ai`,
          password: await hash('SecurePassword123!', 10),
          role,
          createdAt: new Date(),
          updatedAt: new Date(),
        }

        vi.mocked(db.platformUser.findUnique).mockResolvedValue(mockUser)

        const user = await db.platformUser.findUnique({
          where: { email: mockUser.email }
        })

        expect(user?.role).toBe(role)
      }
    })
  })

  describe('JWT Token Structure', () => {
    it('should include required platform user fields', () => {
      // Test the expected structure of JWT tokens
      const expectedToken = {
        sub: '1',
        email: 'admin@notso.ai',
        isPlatformUser: true,
        platformRole: 'SUPER_ADMIN',
      }

      expect(expectedToken).toHaveProperty('sub')
      expect(expectedToken).toHaveProperty('email')
      expect(expectedToken).toHaveProperty('isPlatformUser')
      expect(expectedToken).toHaveProperty('platformRole')
      expect(expectedToken.isPlatformUser).toBe(true)
    })
  })

  describe('Session Structure', () => {
    it('should include platform fields in session', () => {
      // Test the expected structure of sessions
      const expectedSession = {
        user: {
          id: '1',
          email: 'admin@notso.ai',
          isPlatformUser: true,
          platformRole: 'SUPER_ADMIN',
        },
        expires: new Date().toISOString(),
      }

      expect(expectedSession.user).toHaveProperty('id')
      expect(expectedSession.user).toHaveProperty('email')
      expect(expectedSession.user).toHaveProperty('isPlatformUser')
      expect(expectedSession.user).toHaveProperty('platformRole')
      expect(expectedSession.user.isPlatformUser).toBe(true)
    })
  })
})