test: added testing for coverage

Author: Bccorb

tests/unit/config/directMessaging.spec.ts

@@ -0,0 +1,112 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+
+const createAuthMessagingServiceMock = vi.fn();
+const createAwsEmailTransportMock = vi.fn();
+const createAwsSmsTransportMock = vi.fn();
+const createTwilioSmsTransportMock = vi.fn();
+
+vi.unmock('../../../src/config/directMessaging.js');
+
+vi.mock('@seamless-auth/messaging', () => {
+  class MessagingConfigurationError extends Error {}
+
+  return {
+    MessagingConfigurationError,
+    createAuthMessagingService: createAuthMessagingServiceMock,
+  };
+});
+
+vi.mock('@seamless-auth/messaging-aws', () => ({
+  createAwsEmailTransport: createAwsEmailTransportMock,
+  createAwsSmsTransport: createAwsSmsTransportMock,
+}));
+
+vi.mock('@seamless-auth/messaging-twilio', () => ({
+  createTwilioSmsTransport: createTwilioSmsTransportMock,
+}));
+
+describe('directMessaging config', () => {
+  beforeEach(() => {
+    vi.resetModules();
+    vi.clearAllMocks();
+
+    delete process.env.MESSAGING_AWS_REGION;
+    delete process.env.AWS_REGION;
+    delete process.env.REGION;
+    delete process.env.MESSAGING_EMAIL_FROM;
+    delete process.env.SES_EMAIL;
+    delete process.env.MESSAGING_SMS_PROVIDER;
+    delete process.env.SMS_PROVIDER;
+    delete process.env.MESSAGING_TWILIO_ACCOUNT_SID;
+    delete process.env.TWILIO_ACCOUNT_SID;
+    delete process.env.MESSAGING_TWILIO_AUTH_TOKEN;
+    delete process.env.TWILIO_AUTH_TOKEN;
+    delete process.env.MESSAGING_SMS_FROM;
+    delete process.env.TWILIO_PHONE_NUMBER;
+
+    createAwsEmailTransportMock.mockReturnValue({ name: 'aws-email' });
+    createAwsSmsTransportMock.mockReturnValue({ name: 'aws-sms' });
+    createTwilioSmsTransportMock.mockReturnValue({ name: 'twilio-sms' });
+    createAuthMessagingServiceMock.mockReturnValue({ name: 'messaging-service' });
+  });
+
+  it('builds direct messaging with AWS defaults', async () => {
+    process.env.AWS_REGION = 'us-east-1';
+    process.env.SES_EMAIL = 'noreply@example.com';
+
+    const { createDirectAuthMessagingService } = await import('../../../src/config/directMessaging.js');
+
+    const result = createDirectAuthMessagingService('Test App');
+
+    expect(createAwsEmailTransportMock).toHaveBeenCalledWith({
+      region: 'us-east-1',
+      fromEmail: 'noreply@example.com',
+    });
+    expect(createAwsSmsTransportMock).toHaveBeenCalledWith({
+      region: 'us-east-1',
+      senderId: undefined,
+    });
+    expect(createAuthMessagingServiceMock).toHaveBeenCalledWith({
+      appName: 'Test App',
+      email: { name: 'aws-email' },
+      sms: { name: 'aws-sms' },
+    });
+    expect(result).toEqual({ name: 'messaging-service' });
+  });
+
+  it('builds Twilio SMS transport when configured', async () => {
+    process.env.MESSAGING_AWS_REGION = 'us-west-2';
+    process.env.MESSAGING_EMAIL_FROM = 'alerts@example.com';
+    process.env.MESSAGING_SMS_PROVIDER = 'twilio';
+    process.env.MESSAGING_TWILIO_ACCOUNT_SID = 'sid';
+    process.env.MESSAGING_TWILIO_AUTH_TOKEN = 'token';
+    process.env.MESSAGING_SMS_FROM = '+15555550123';
+
+    const { createDirectAuthMessagingService } = await import('../../../src/config/directMessaging.js');
+
+    createDirectAuthMessagingService('Test App');
+
+    expect(createAwsEmailTransportMock).toHaveBeenCalledWith({
+      region: 'us-west-2',
+      fromEmail: 'alerts@example.com',
+    });
+    expect(createTwilioSmsTransportMock).toHaveBeenCalledWith({
+      accountSid: 'sid',
+      authToken: 'token',
+      fromNumber: '+15555550123',
+    });
+    expect(createAwsSmsTransportMock).not.toHaveBeenCalled();
+  });
+
+  it('throws for an unsupported SMS provider', async () => {
+    process.env.MESSAGING_AWS_REGION = 'us-east-1';
+    process.env.MESSAGING_EMAIL_FROM = 'noreply@example.com';
+    process.env.MESSAGING_SMS_PROVIDER = 'postal-pigeon';
+
+    const { createDirectAuthMessagingService } = await import('../../../src/config/directMessaging.js');
+
+    expect(() => createDirectAuthMessagingService('Test App')).toThrow(
+      'Unsupported MESSAGING_SMS_PROVIDER "postal-pigeon"',
+    );
+  });
+});

tests/unit/controllers/authentication.spec.ts

@@ -86,6 +86,26 @@ describe('refreshSession', () => {
     expect(res.json).toHaveBeenCalledWith({ error: 'Not allowed' });
   });
 
+  it('rejects refresh tokens that do not resolve to a session', async () => {
+    const { refreshSession, AuthEventService, findRefreshSessionByToken } =
+      await loadAuthenticationModule();
+    const { req, res } = mockReqRes('Bearer raw-refresh-token');
+
+    (findRefreshSessionByToken as any).mockResolvedValue({
+      session: null,
+      legacyFallbackCandidates: 2,
+      usedLegacyFallback: true,
+    });
+    (AuthEventService.serviceTokenInvalid as any).mockResolvedValue(undefined);
+
+    await refreshSession(req, res);
+
+    expect(findRefreshSessionByToken).toHaveBeenCalledWith('raw-refresh-token', expect.any(Date));
+    expect(AuthEventService.serviceTokenInvalid).toHaveBeenCalledWith(req);
+    expect(res.status).toHaveBeenCalledWith(401);
+    expect(res.json).toHaveBeenCalledWith({ error: 'invalid_refresh_token' });
+  });
+
   it('rotates the session using the raw bearer refresh token in server mode', async () => {
     const {
       refreshSession,