5f28be5d58
Eliminate all code paths, configuration, and documentation related to running without authentication. Require AUTH_SECRET and BASE_URL at startup, updating middleware, server logic, and runtime checks to assume auth is always enabled. Simplify onboarding, settings, and test helpers to reflect mandatory auth. Update environment examples, Docker and deployment docs, and CI/test configs. Remove no-auth-specific UI flows, test cases, and feature toggles.
93 lines
2.7 KiB
TypeScript
93 lines
2.7 KiB
TypeScript
import { describe, expect, test } from 'vitest';
|
|
import { getAuthBaseUrl, getRequiredAuthEnv, isAnonymousAuthSessionsEnabled, isGithubAuthEnabled } from '../../src/lib/server/auth/config';
|
|
import { withEnv } from './support/env';
|
|
|
|
describe('auth config contract', () => {
|
|
test('reads required AUTH_SECRET and BASE_URL', async () => {
|
|
await withEnv(
|
|
{
|
|
AUTH_SECRET: 'unit-secret-2',
|
|
BASE_URL: 'http://localhost:3003',
|
|
},
|
|
async () => {
|
|
expect(getRequiredAuthEnv()).toEqual({
|
|
authSecret: 'unit-secret-2',
|
|
baseUrl: 'http://localhost:3003',
|
|
});
|
|
expect(getAuthBaseUrl()).toBe('http://localhost:3003');
|
|
},
|
|
);
|
|
});
|
|
|
|
test.each([
|
|
{ envValue: undefined, expected: false },
|
|
{ envValue: 'true', expected: true },
|
|
{ envValue: 'false', expected: false },
|
|
{ envValue: '1', expected: false },
|
|
{ envValue: 'TRUE', expected: true },
|
|
])(
|
|
'anonymous sessions honor strict boolean parsing when auth is enabled (value: $envValue)',
|
|
async ({ envValue, expected }) => {
|
|
await withEnv(
|
|
{
|
|
AUTH_SECRET: 'unit-secret',
|
|
BASE_URL: 'http://localhost:3003',
|
|
USE_ANONYMOUS_AUTH_SESSIONS: envValue,
|
|
},
|
|
async () => {
|
|
expect(isAnonymousAuthSessionsEnabled()).toBe(expected);
|
|
},
|
|
);
|
|
},
|
|
);
|
|
|
|
test('anonymous session config returns false for non-true values', async () => {
|
|
await withEnv(
|
|
{
|
|
AUTH_SECRET: 'unit-secret',
|
|
BASE_URL: 'http://localhost:3003',
|
|
USE_ANONYMOUS_AUTH_SESSIONS: '1',
|
|
},
|
|
async () => {
|
|
expect(isAnonymousAuthSessionsEnabled()).toBe(false);
|
|
},
|
|
);
|
|
});
|
|
|
|
test.each([
|
|
{
|
|
title: 'returns false when GitHub client id is missing',
|
|
env: {
|
|
AUTH_SECRET: 'unit-secret',
|
|
BASE_URL: 'http://localhost:3003',
|
|
GITHUB_CLIENT_ID: undefined,
|
|
GITHUB_CLIENT_SECRET: 'secret',
|
|
},
|
|
expected: false,
|
|
},
|
|
{
|
|
title: 'returns false when GitHub client secret is missing',
|
|
env: {
|
|
AUTH_SECRET: 'unit-secret',
|
|
BASE_URL: 'http://localhost:3003',
|
|
GITHUB_CLIENT_ID: 'id',
|
|
GITHUB_CLIENT_SECRET: undefined,
|
|
},
|
|
expected: false,
|
|
},
|
|
{
|
|
title: 'returns true when auth is enabled and GitHub credentials are present',
|
|
env: {
|
|
AUTH_SECRET: 'unit-secret',
|
|
BASE_URL: 'http://localhost:3003',
|
|
GITHUB_CLIENT_ID: 'id',
|
|
GITHUB_CLIENT_SECRET: 'secret',
|
|
},
|
|
expected: true,
|
|
},
|
|
])('$title', async ({ env, expected }) => {
|
|
await withEnv(env, async () => {
|
|
expect(isGithubAuthEnabled()).toBe(expected);
|
|
});
|
|
});
|
|
});
|