root
68 lines
2.1 KiB
TypeScript
68 lines
2.1 KiB
TypeScript
import { beforeEach, describe, expect, it, vi } from 'vitest'
|
|
import type { NextFunction, Request, Response } from 'express'
|
|
|
|
vi.mock('../lib/prisma', () => ({
|
|
prisma: {
|
|
company: { findUnique: vi.fn() },
|
|
},
|
|
}))
|
|
|
|
import { prisma } from '../lib/prisma'
|
|
import { requireTenant } from './requireTenant'
|
|
|
|
function responseStub() {
|
|
const res = { status: vi.fn(), json: vi.fn() }
|
|
res.status.mockReturnValue(res)
|
|
res.json.mockReturnValue(res)
|
|
return res as unknown as Response & typeof res
|
|
}
|
|
|
|
describe('requireTenant middleware', () => {
|
|
beforeEach(() => {
|
|
vi.clearAllMocks()
|
|
})
|
|
|
|
it('fails fast when company auth did not set companyId', async () => {
|
|
const req = {} as Request
|
|
const res = responseStub()
|
|
const next = vi.fn() as NextFunction
|
|
|
|
await requireTenant(req, res, next)
|
|
|
|
expect(res.status).toHaveBeenCalledWith(401)
|
|
expect(res.json).toHaveBeenCalledWith({
|
|
error: 'unauthenticated',
|
|
message: 'Tenant context missing — requireCompanyAuth must run first',
|
|
statusCode: 401,
|
|
})
|
|
expect(prisma.company.findUnique).not.toHaveBeenCalled()
|
|
})
|
|
|
|
it('rejects company ids that no longer exist', async () => {
|
|
vi.mocked(prisma.company.findUnique).mockResolvedValue(null)
|
|
const req = { companyId: 'company_missing' } as Request
|
|
const res = responseStub()
|
|
const next = vi.fn() as NextFunction
|
|
|
|
await requireTenant(req, res, next)
|
|
|
|
expect(prisma.company.findUnique).toHaveBeenCalledWith({ where: { id: 'company_missing' } })
|
|
expect(res.status).toHaveBeenCalledWith(401)
|
|
expect(res.json).toHaveBeenCalledWith({ error: 'company_not_found', message: 'Company not found', statusCode: 401 })
|
|
expect(next).not.toHaveBeenCalled()
|
|
})
|
|
|
|
it('attaches the fresh company record and continues', async () => {
|
|
const company = { id: 'company_1', status: 'ACTIVE' }
|
|
vi.mocked(prisma.company.findUnique).mockResolvedValue(company as any)
|
|
const req = { companyId: 'company_1' } as Request
|
|
const res = responseStub()
|
|
const next = vi.fn() as NextFunction
|
|
|
|
await requireTenant(req, res, next)
|
|
|
|
expect(req.company).toEqual(company)
|
|
expect(next).toHaveBeenCalledTimes(1)
|
|
})
|
|
})
|