Files
ApiCore/ApiCore-Frontend/src/lib/auth/api.spec.ts
T
Nick SzaunigandClaude Opus 5.5 cdd30cf3ee feat: platform backbone and field capture complete (checkpoint)
Platform backbone (plan 2026-10-13-plattform-rueckgrat), all tasks reviewed:
- webhooks with delivery table, retries and stable delivery id
- calendar handlers; a finished task removes its Outlook event
- tasks, automations, inspections, varroa, treatments, feedings,
  harvests, colonies, wintering, stock and bottling record domain events
  in the same transaction; legacy post-commit calls removed
- row locks through one helper (lockRowForUpdate, lockRowsForShare,
  lockRowsForUpdate)
- job framework with JobRun, cli exit codes, cleanup, task templates,
  daily evaluation, hourly app-backup and the rekey job
- system API and page "Verwaltung > System" with retry
- @nestjs/schedule removed, guard tests against in-process schedulers

Field capture T3 (plan 2026-10-13-t3-erfassung-am-stand), all tasks reviewed:
- inspection photo offline without metadata
- bulk capture for treatments, feedings and varroa (backend + frontend)
- offline stand mode with service worker, offline pages and packs
- offline session, cold start and logout on shared devices

Docs: ARCHITECTURE.md assumptions and sections updated, TASKS.md.
Gates: backend lint, typecheck, 1770 unit, 420 e2e, build, no schema
drift; frontend lint, typecheck, 913 tests, build. Not rolled out.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
2026-10-14 11:36:38 +02:00

84 lines
2.3 KiB
TypeScript

import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
import {
DEFAULT_TIMEOUT_MS,
NON_IDEMPOTENT_WRITE_TIMEOUT_MS,
isNetworkError,
} from "@/lib/http/fetch-with-timeout";
import { expectTimeoutAt, stubHangingFetch } from "@/lib/http/deadline-test-helper";
import {
getCurrentUserRequest,
loginRequest,
logoutRequest,
refreshRequest,
ssoCompleteRequest,
verifyMfaRequest,
} from "./api";
vi.mock("../config/runtime-config", () => ({
getApiUrl: vi.fn().mockResolvedValue("http://api.test"),
}));
describe("auth api timeouts", () => {
beforeEach(() => {
vi.useFakeTimers();
stubHangingFetch();
});
afterEach(() => {
vi.useRealTimers();
vi.unstubAllGlobals();
});
it.each([
["login", () => loginRequest("[email protected]", "pw")],
["MFA verify", () => verifyMfaRequest("t", "123456")],
["refresh", () => refreshRequest()],
["SSO complete", () => ssoCompleteRequest()],
["logout", () => logoutRequest()],
])("%s (one-shot / rotating) uses the long write timeout", async (_name, call) => {
await expectTimeoutAt(call, NON_IDEMPOTENT_WRITE_TIMEOUT_MS);
});
it("plain reads use the default timeout", async () => {
await expectTimeoutAt(() => getCurrentUserRequest("tok"), DEFAULT_TIMEOUT_MS);
});
});
describe("refreshRequest outcome", () => {
afterEach(() => {
vi.unstubAllGlobals();
});
function answerWith(status: number, body: unknown = {}) {
vi.stubGlobal(
"fetch",
vi.fn().mockResolvedValue(new Response(JSON.stringify(body), { status })),
);
}
it("returns the access token when the server accepts the session", async () => {
answerWith(200, { accessToken: "token-1" });
await expect(refreshRequest()).resolves.toEqual({ accessToken: "token-1" });
});
it.each([401, 403])("says the session is over for %i", async (status) => {
answerWith(status);
await expect(refreshRequest()).resolves.toBeNull();
});
it.each([429, 500, 502, 503, 504])(
"does not end the session for %i - the server was just unavailable",
async (status) => {
answerWith(status);
const failure = await refreshRequest().catch((error: unknown) => error);
expect(failure).toBeInstanceOf(Error);
// Treated like a lost connection by everything that retries or queues.
expect(isNetworkError(failure)).toBe(true);
},
);
});