+
+ {
+ setAuthUser(null);
+ }}
+ />
+ }
+ >
+ {
+ setAuthUser(user);
+ }}
+ />
+ ) : (
+ {
+ setAuthUser(user);
+ }}
+ />
+ )
+ }
+ />
+ {
+ setAuthUser(user);
+ }}
+ />
+ )
+ }
+ />
+
+
+
+ );
+}
+
+export default App;
diff --git a/src/client/src/assets/logo.svg b/src/client/src/assets/logo.svg
new file mode 100644
index 00000000..9dfc1c05
--- /dev/null
+++ b/src/client/src/assets/logo.svg
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/src/client/src/components/Form/Form.css b/src/client/src/components/Form/Form.css
new file mode 100644
index 00000000..cca33157
--- /dev/null
+++ b/src/client/src/components/Form/Form.css
@@ -0,0 +1,163 @@
+.auth-form-section {
+ display: flex;
+ flex-direction: column;
+ align-items: center;
+ justify-content: center;
+ gap: 18px;
+ width: 100%;
+ padding: 48px 16px;
+}
+
+.auth-form {
+ width: min(100%, 440px);
+ padding: 32px;
+ border: 1px solid #d7dde5;
+ border-radius: 24px;
+ background:
+ linear-gradient(180deg, rgba(255, 255, 255, 0.96), rgba(245, 248, 252, 0.96));
+ box-shadow: 0 20px 50px rgba(25, 42, 70, 0.12);
+}
+
+.auth-form__eyebrow {
+ margin: 0 0 8px;
+ font-size: 12px;
+ font-weight: 700;
+ letter-spacing: 0.08em;
+ text-transform: uppercase;
+ color: #5b6c84;
+}
+
+.auth-form__title {
+ margin: 0;
+ font-size: 32px;
+ line-height: 1.1;
+ color: #172033;
+}
+
+.auth-form__subtitle {
+ margin: 12px 0 0;
+ color: #5f6f86;
+ line-height: 1.5;
+}
+
+.auth-form__fields {
+ display: grid;
+ gap: 16px;
+ margin-top: 28px;
+}
+
+.auth-form__field {
+ display: grid;
+ gap: 8px;
+}
+
+.auth-form__field span {
+ font-size: 14px;
+ font-weight: 600;
+ color: #24324a;
+}
+
+.auth-form__field input {
+ width: 100%;
+ min-height: 48px;
+ padding: 0 14px;
+ border: 1px solid #c9d3df;
+ border-radius: 14px;
+ background-color: #fff;
+ font: inherit;
+ color: #172033;
+ transition:
+ border-color 0.2s ease,
+ box-shadow 0.2s ease,
+ transform 0.2s ease;
+}
+
+.auth-form__field input::placeholder {
+ color: #98a4b5;
+}
+
+.auth-form__field input:focus {
+ outline: none;
+ border-color: #2f6fed;
+ box-shadow: 0 0 0 4px rgba(47, 111, 237, 0.12);
+ transform: translateY(-1px);
+}
+
+.auth-form__submit {
+ width: 100%;
+ min-height: 50px;
+ margin-top: 28px;
+ border: none;
+ border-radius: 14px;
+ background: linear-gradient(135deg, #1d4ed8, #2563eb);
+ color: #fff;
+ font: inherit;
+ font-weight: 700;
+ cursor: pointer;
+ transition:
+ transform 0.2s ease,
+ box-shadow 0.2s ease,
+ filter 0.2s ease;
+ box-shadow: 0 14px 30px rgba(37, 99, 235, 0.28);
+}
+
+.auth-form__status {
+ margin: 18px 0 0;
+ font-size: 14px;
+ line-height: 1.5;
+}
+
+.auth-form__status--error {
+ color: #b42318;
+}
+
+.auth-form__status--success {
+ color: #0f7b6c;
+}
+
+.auth-form__submit:hover {
+ filter: brightness(1.03);
+ transform: translateY(-1px);
+}
+
+.auth-form__submit:active {
+ transform: translateY(0);
+}
+
+.auth-form__toggle {
+ border: none;
+ padding: 0;
+ background: transparent;
+ color: #2454c6;
+ font: inherit;
+ font-weight: 600;
+ cursor: pointer;
+ transition:
+ color 0.2s ease,
+ opacity 0.2s ease;
+}
+
+.auth-form__toggle:hover {
+ color: #173d99;
+}
+
+.auth-form__toggle:focus-visible {
+ outline: 2px solid #2f6fed;
+ outline-offset: 4px;
+ border-radius: 8px;
+}
+
+@media (max-width: 640px) {
+ .auth-form-section {
+ padding: 24px 0;
+ }
+
+ .auth-form {
+ padding: 24px 20px;
+ border-radius: 20px;
+ }
+
+ .auth-form__title {
+ font-size: 28px;
+ }
+}
diff --git a/src/client/src/components/Form/Form.test.tsx b/src/client/src/components/Form/Form.test.tsx
new file mode 100644
index 00000000..bdad9045
--- /dev/null
+++ b/src/client/src/components/Form/Form.test.tsx
@@ -0,0 +1,73 @@
+import { render, screen } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { MemoryRouter } from 'react-router-dom';
+import { vi } from 'vitest';
+import { client } from '../../utils/client';
+import { Form } from './Form';
+
+vi.mock('../../utils/client', () => ({
+ client: {
+ post: vi.fn(),
+ },
+}));
+
+describe('Form', () => {
+ beforeEach(() => {
+ vi.clearAllMocks();
+ });
+
+ const renderForm = () => {
+ render(
+
+ 
+
+
+
+
+
+);
diff --git a/src/client/src/components/Loader/index.ts b/src/client/src/components/Loader/index.ts
new file mode 100644
index 00000000..d5ce9811
--- /dev/null
+++ b/src/client/src/components/Loader/index.ts
@@ -0,0 +1 @@
+export * from './Loader';
diff --git a/src/client/src/index.tsx b/src/client/src/index.tsx
new file mode 100644
index 00000000..15c7b4a0
--- /dev/null
+++ b/src/client/src/index.tsx
@@ -0,0 +1,18 @@
+import ReactDOM from 'react-dom/client';
+import App from './App';
+import reportWebVitals from './reportWebVitals';
+import { BrowserRouter as Router } from 'react-router-dom';
+
+const root = ReactDOM.createRoot(
+ document.getElementById('root') as HTMLElement,
+);
+root.render(
+ {status.message}
: 'Activating your account....'} + ); +}; diff --git a/src/client/src/modules/ActivationPage/index.ts b/src/client/src/modules/ActivationPage/index.ts new file mode 100644 index 00000000..5f87dff1 --- /dev/null +++ b/src/client/src/modules/ActivationPage/index.ts @@ -0,0 +1 @@ +export * from './ActivationPage'; diff --git a/src/client/src/modules/HomePage/HomePage.css b/src/client/src/modules/HomePage/HomePage.css new file mode 100644 index 00000000..e69de29b diff --git a/src/client/src/modules/HomePage/HomePage.tsx b/src/client/src/modules/HomePage/HomePage.tsx new file mode 100644 index 00000000..811df972 --- /dev/null +++ b/src/client/src/modules/HomePage/HomePage.tsx @@ -0,0 +1,3 @@ +export const HomePage = () => { + return <>Just Home page!; +}; diff --git a/src/client/src/modules/HomePage/index.ts b/src/client/src/modules/HomePage/index.ts new file mode 100644 index 00000000..11e53da6 --- /dev/null +++ b/src/client/src/modules/HomePage/index.ts @@ -0,0 +1 @@ +export * from './HomePage'; diff --git a/src/client/src/modules/Layout/Layout.css b/src/client/src/modules/Layout/Layout.css new file mode 100644 index 00000000..30cb978d --- /dev/null +++ b/src/client/src/modules/Layout/Layout.css @@ -0,0 +1,41 @@ +body { + margin: 0; + font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', + 'Ubuntu', 'Cantarell', 'Fira Sans', 'Droid Sans', 'Helvetica Neue', + sans-serif; + -webkit-font-smoothing: antialiased; + -moz-osx-font-smoothing: grayscale; +} + +code { + font-family: source-code-pro, Menlo, Monaco, Consolas, 'Courier New', + monospace; +} + +* { + box-sizing: border-box; +} + +.App { + display: grid; + grid-template-columns: repeat(3, 1fr); + grid-template-rows: auto; + grid-template-areas: + 'header header header' + 'main main main'; + gap: 20px; +} + +.Header { + grid-area: header; +} + +main { + grid-area: main; +} + +main { + display: flex; + align-items: center; + padding: 0 15%; +} diff --git a/src/client/src/modules/Layout/Layout.tsx b/src/client/src/modules/Layout/Layout.tsx new file mode 100644 index 00000000..0c8a88aa --- /dev/null +++ b/src/client/src/modules/Layout/Layout.tsx @@ -0,0 +1,22 @@ +import { Outlet } from 'react-router-dom'; + +import './Layout.css'; + +import { Header } from '../../components/Header/Header'; +import { AuthUser } from '../../types/auth'; + +type Props = { + authUser: AuthUser | null; + onLogoutSuccess: () => void; +}; + +export const Layout = ({ authUser, onLogoutSuccess }: Props) => { + return ( + <> +
+
+ Password reset
+Forgot your password?
++ Enter your email and we will send you a reset link. +
+ + + + + Back to login + +
+
+ Password reset
+Create a new password
++ Choose a new password and confirm it to finish the reset flow. +
+ + + + + Back to login + +
+
+ {content.eyebrow}
+{content.title}
+{content.description}
+ + + Go to login + +
+
+
+ Profile
+{user.name}
++ Manage your public info, password and email settings. +
+
+
+
+
+
+
+
+
+ {message}
+Activate your account:
`, + }); +}; + +export const sendEmailChangeNotification = async ( + oldEmail: string, + newEmail: string, +): PromiseYour account email has been changed to ${newEmail}.
`, + }); +}; + +export const sendPasswordResetEmail = async ( + email: string, + passwordResetToken: string, +): PromiseGo to confirm password change page:
`, + }); +}; diff --git a/tests/auth-controller.test.ts b/tests/auth-controller.test.ts new file mode 100644 index 00000000..b328c971 --- /dev/null +++ b/tests/auth-controller.test.ts @@ -0,0 +1,282 @@ +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import bcrypt from 'bcrypt'; +import { TokenType } from '../src/generated/prisma/enums.js'; +import { prisma } from '../src/lib/prisma.js'; +import { authController } from '../src/controllers/authController.js'; +import { sendActivationEmail } from '../src/services/mailService.js'; + +vi.mock('../src/lib/prisma.js', () => ({ + prisma: { + user: { + findUnique: vi.fn(), + create: vi.fn(), + update: vi.fn(), + }, + token: { + create: vi.fn(), + findFirst: vi.fn(), + delete: vi.fn(), + }, + }, +})); + +vi.mock('bcrypt', () => ({ + default: { + hash: vi.fn(), + }, +})); + +vi.mock('../src/services/mailService.js', () => ({ + sendActivationEmail: vi.fn(), +})); + +const createResponse = () => { + const status = vi.fn().mockReturnThis(); + const json = vi.fn(); + + return { status, json }; +}; + +describe('authController', () => { + beforeEach(() => { + vi.clearAllMocks(); + }); + + it('returns 400 when name is missing', async () => { + const response = createResponse(); + + await authController.registration( + { + body: { + email: 'test@example.com', + password: '12345678', + confirmPassword: '12345678', + }, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(400); + expect(response.json).toHaveBeenCalledWith({ + message: 'Name must be a string', + }); + }); + + it('returns 400 when passwords do not match', async () => { + const response = createResponse(); + + await authController.registration( + { + body: { + name: 'John Doe', + email: 'test@example.com', + password: '12345678', + confirmPassword: '87654321', + }, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(400); + expect(response.json).toHaveBeenCalledWith({ + message: 'Passwords do not match', + }); + }); + + it('returns 409 when user with email already exists', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: '1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + + await authController.registration( + { + body: { + name: 'John Doe', + email: 'test@example.com', + password: '12345678', + confirmPassword: '12345678', + }, + } as never, + response as never, + ); + + expect(prisma.user.findUnique).toHaveBeenCalledWith({ + where: { + email: 'test@example.com', + }, + }); + expect(response.status).toHaveBeenCalledWith(409); + expect(response.json).toHaveBeenCalledWith({ + message: 'User with this email already exists', + }); + }); + + it('returns 200 when registration payload is valid', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue(null); + vi.mocked(bcrypt.hash).mockResolvedValue('hashed-password'); + vi.mocked(prisma.user.create).mockResolvedValue({ + id: '1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'hashed-password', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: false, + }); + vi.mocked(prisma.token.create).mockResolvedValue({ + id: 'token-1', + userId: '1', + type: TokenType.EMAIL_ACTIVATION, + token: 'activation-token', + expiresAt: new Date(), + createdAt: new Date(), + }); + + await authController.registration( + { + body: { + name: ' John Doe ', + email: ' test@example.com ', + password: '12345678', + confirmPassword: '12345678', + }, + } as never, + response as never, + ); + + expect(bcrypt.hash).toHaveBeenCalledWith('12345678', 10); + expect(prisma.user.create).toHaveBeenCalledWith({ + data: { + name: 'John Doe', + email: 'test@example.com', + passwordHash: 'hashed-password', + }, + }); + expect(prisma.token.create).toHaveBeenCalledWith({ + data: expect.objectContaining({ + userId: '1', + type: TokenType.EMAIL_ACTIVATION, + }), + }); + expect(sendActivationEmail).toHaveBeenCalledWith( + 'test@example.com', + expect.any(String), + ); + expect(response.status).toHaveBeenCalledWith(201); + expect(response.json).toHaveBeenCalledWith({ + message: 'User registered successfully.', + data: { + id: '1', + email: 'test@example.com', + name: 'John Doe', + isActivated: false, + activationToken: expect.any(String), + }, + }); + }); + + it('returns 400 when activation token is invalid', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue(null); + + await authController.activate( + { + params: { + token: 'invalid-token', + }, + } as never, + response as never, + ); + + expect(prisma.token.findFirst).toHaveBeenCalledWith({ + where: { + token: 'invalid-token', + type: TokenType.EMAIL_ACTIVATION, + }, + }); + expect(response.status).toHaveBeenCalledWith(400); + expect(response.json).toHaveBeenCalledWith({ + message: 'Activation token is invalid or expired', + }); + }); + + it('returns 200 when activation token is valid', async () => { + const response = createResponse(); + const expiresAt = new Date(Date.now() + 60_000); + vi.mocked(prisma.token.findFirst).mockResolvedValue({ + id: 'token-1', + userId: '1', + type: TokenType.EMAIL_ACTIVATION, + token: 'valid-token', + expiresAt, + createdAt: new Date(), + }); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: '1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'hashed-password', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: false, + }); + vi.mocked(prisma.user.update).mockResolvedValue({ + id: '1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'hashed-password', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + vi.mocked(prisma.token.delete).mockResolvedValue({ + id: 'token-1', + userId: '1', + type: TokenType.EMAIL_ACTIVATION, + token: 'valid-token', + expiresAt, + createdAt: new Date(), + }); + + await authController.activate( + { + params: { + token: 'valid-token', + }, + } as never, + response as never, + ); + + expect(prisma.user.update).toHaveBeenCalledWith({ + where: { + id: '1', + }, + data: { + isActivated: true, + }, + }); + expect(prisma.token.delete).toHaveBeenCalledWith({ + where: { + id: 'token-1', + }, + }); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Account activated successfully.', + data: { + id: '1', + email: 'test@example.com', + name: 'John Doe', + isActivated: true, + }, + }); + }); +}); diff --git a/tests/login-controller.test.ts b/tests/login-controller.test.ts new file mode 100644 index 00000000..c7abc722 --- /dev/null +++ b/tests/login-controller.test.ts @@ -0,0 +1,195 @@ +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import bcrypt from 'bcrypt'; +import { TokenType } from '../src/generated/prisma/enums.js'; +import { prisma } from '../src/lib/prisma.js'; +import { loginController } from '../src/controllers/loginController.js'; + +vi.mock('../src/lib/prisma.js', () => ({ + prisma: { + user: { + findUnique: vi.fn(), + }, + token: { + create: vi.fn(), + }, + }, +})); + +vi.mock('bcrypt', () => ({ + default: { + compare: vi.fn(), + }, +})); + +const createResponse = () => { + const status = vi.fn().mockReturnThis(); + const json = vi.fn(); + const cookie = vi.fn(); + + return { status, json, cookie }; +}; + +describe('loginController', () => { + beforeEach(() => { + vi.clearAllMocks(); + }); + + it('returns 400 when email is missing', async () => { + const response = createResponse(); + + await loginController.login( + { + body: { + password: '12345678', + }, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(400); + expect(response.json).toHaveBeenCalledWith({ + message: 'Email must be a string', + }); + }); + + it('returns 401 when user is not found', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue(null); + + await loginController.login( + { + body: { + email: ' test@example.com ', + password: '12345678', + }, + } as never, + response as never, + ); + + expect(prisma.user.findUnique).toHaveBeenCalledWith({ + where: { + email: 'test@example.com', + }, + }); + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Invalid email or password', + }); + }); + + it('returns 401 when password does not match', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: '1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'stored-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + vi.mocked(bcrypt.compare).mockResolvedValue(false); + + await loginController.login( + { + body: { + email: 'test@example.com', + password: '12345678', + }, + } as never, + response as never, + ); + + expect(bcrypt.compare).toHaveBeenCalledWith('12345678', 'stored-hash'); + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Invalid email or password', + }); + }); + + it('returns 403 when user is not activated', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: '1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'stored-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: false, + }); + vi.mocked(bcrypt.compare).mockResolvedValue(true); + + await loginController.login( + { + body: { + email: 'test@example.com', + password: '12345678', + }, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(403); + expect(response.json).toHaveBeenCalledWith({ + message: 'Please activate your email first', + }); + }); + + it('returns 200 when login payload is valid', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: '1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'stored-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + vi.mocked(bcrypt.compare).mockResolvedValue(true); + vi.mocked(prisma.token.create).mockResolvedValue({ + id: 'token-1', + userId: '1', + type: TokenType.REFRESH_TOKEN, + token: 'generated-token', + expiresAt: new Date(), + createdAt: new Date(), + }); + + await loginController.login( + { + body: { + email: ' test@example.com ', + password: '12345678', + }, + } as never, + response as never, + ); + + expect(prisma.token.create).toHaveBeenCalledWith({ + data: expect.objectContaining({ + userId: '1', + type: TokenType.REFRESH_TOKEN, + }), + }); + expect(response.cookie).toHaveBeenCalledWith( + 'refreshToken', + expect.any(String), + expect.objectContaining({ + httpOnly: true, + sameSite: 'lax', + }), + ); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Login successful.', + data: { + id: '1', + email: 'test@example.com', + name: 'John Doe', + isActivated: true, + }, + }); + }); +}); diff --git a/tests/logout-controller.test.ts b/tests/logout-controller.test.ts new file mode 100644 index 00000000..147755f6 --- /dev/null +++ b/tests/logout-controller.test.ts @@ -0,0 +1,112 @@ +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import { TokenType } from '../src/generated/prisma/enums.js'; +import { prisma } from '../src/lib/prisma.js'; +import { logoutController } from '../src/controllers/logoutController.js'; + +vi.mock('../src/lib/prisma.js', () => ({ + prisma: { + token: { + findFirst: vi.fn(), + delete: vi.fn(), + }, + }, +})); + +const createResponse = () => { + const status = vi.fn().mockReturnThis(); + const json = vi.fn(); + const clearCookie = vi.fn(); + + return { status, json, clearCookie }; +}; + +describe('logoutController', () => { + beforeEach(() => { + vi.clearAllMocks(); + }); + + it('returns 401 when refresh token is missing', async () => { + const response = createResponse(); + + await logoutController.logout( + { + headers: {}, + cookies: {}, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Authentication is required', + }); + }); + + it('returns 401 and clears cookie when refresh token is not found in db', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue(null); + + await logoutController.logout( + { + headers: {}, + cookies: { + refreshToken: 'refresh-token-value', + }, + } as never, + response as never, + ); + + expect(prisma.token.findFirst).toHaveBeenCalledWith({ + where: { + token: 'refresh-token-value', + type: TokenType.REFRESH_TOKEN, + }, + }); + expect(response.clearCookie).toHaveBeenCalledWith('refreshToken'); + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Authentication is required', + }); + }); + + it('returns 200 and clears cookie when refresh token exists', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.REFRESH_TOKEN, + token: 'refresh-token-value', + expiresAt: new Date(), + createdAt: new Date(), + }); + vi.mocked(prisma.token.delete).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.REFRESH_TOKEN, + token: 'refresh-token-value', + expiresAt: new Date(), + createdAt: new Date(), + }); + + await logoutController.logout( + { + headers: {}, + cookies: { + refreshToken: 'refresh-token-value', + }, + } as never, + response as never, + ); + + expect(prisma.token.delete).toHaveBeenCalledWith({ + where: { + id: 'token-1', + }, + }); + expect(response.clearCookie).toHaveBeenCalledWith('refreshToken'); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Logout request is valid.', + }); + }); +}); diff --git a/tests/me-controller.test.ts b/tests/me-controller.test.ts new file mode 100644 index 00000000..758ce551 --- /dev/null +++ b/tests/me-controller.test.ts @@ -0,0 +1,146 @@ +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import { TokenType } from '../src/generated/prisma/enums.js'; +import { prisma } from '../src/lib/prisma.js'; +import { meController } from '../src/controllers/meController.js'; + +vi.mock('../src/lib/prisma.js', () => ({ + prisma: { + token: { + findFirst: vi.fn(), + }, + user: { + findUnique: vi.fn(), + }, + }, +})); + +const createResponse = () => { + const status = vi.fn().mockReturnThis(); + const json = vi.fn(); + const clearCookie = vi.fn(); + + return { status, json, clearCookie }; +}; + +describe('meController', () => { + beforeEach(() => { + vi.clearAllMocks(); + }); + + it('returns 401 when auth context is missing', async () => { + const response = createResponse(); + + await meController.me( + { + headers: {}, + cookies: {}, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Authentication is required', + }); + }); + + it('returns 401 and clears cookie when refresh token is not found', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue(null); + + await meController.me( + { + cookies: { + refreshToken: 'refresh-token-value', + }, + } as never, + response as never, + ); + + expect(prisma.token.findFirst).toHaveBeenCalledWith({ + where: { + token: 'refresh-token-value', + type: TokenType.REFRESH_TOKEN, + }, + }); + expect(response.clearCookie).toHaveBeenCalledWith('refreshToken'); + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Authentication is required', + }); + }); + + it('returns 401 and clears cookie when user is not found', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.REFRESH_TOKEN, + token: 'refresh-token-value', + expiresAt: new Date(), + createdAt: new Date(), + }); + vi.mocked(prisma.user.findUnique).mockResolvedValue(null); + + await meController.me( + { + cookies: { + refreshToken: 'refresh-token-value', + }, + } as never, + response as never, + ); + + expect(prisma.user.findUnique).toHaveBeenCalledWith({ + where: { + id: 'user-1', + }, + }); + expect(response.clearCookie).toHaveBeenCalledWith('refreshToken'); + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Authentication is required', + }); + }); + + it('returns 200 when auth context is present', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.REFRESH_TOKEN, + token: 'refresh-token-value', + expiresAt: new Date(), + createdAt: new Date(), + }); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: 'user-1', + email: 'test@example.com', + name: 'John Doe', + passwordHash: 'stored-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + + await meController.me( + { + cookies: { + refreshToken: 'refresh-token-value', + }, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Authentication context is present.', + data: { + id: 'user-1', + name: 'John Doe', + email: 'test@example.com', + isActivated: true, + }, + }); + }); +}); diff --git a/tests/password-reset-controller.test.ts b/tests/password-reset-controller.test.ts new file mode 100644 index 00000000..79c185ce --- /dev/null +++ b/tests/password-reset-controller.test.ts @@ -0,0 +1,252 @@ +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import bcrypt from 'bcrypt'; +import { TokenType } from '../src/generated/prisma/enums.js'; +import { prisma } from '../src/lib/prisma.js'; +import { passwordResetController } from '../src/controllers/passwordResetController.js'; +import { sendPasswordResetEmail } from '../src/services/mailService.js'; + +vi.mock('../src/lib/prisma.js', () => ({ + prisma: { + user: { + findUnique: vi.fn(), + update: vi.fn(), + }, + token: { + create: vi.fn(), + findFirst: vi.fn(), + delete: vi.fn(), + }, + }, +})); + +vi.mock('bcrypt', () => ({ + default: { + hash: vi.fn(), + }, +})); + +vi.mock('../src/services/mailService.js', () => ({ + sendPasswordResetEmail: vi.fn(), +})); + +const createResponse = () => { + const status = vi.fn().mockReturnThis(); + const json = vi.fn(); + + return { status, json }; +}; + +describe('passwordResetController', () => { + beforeEach(() => { + vi.clearAllMocks(); + }); + + it('returns neutral success when email does not exist', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue(null); + + await passwordResetController.request( + { + body: { + email: 'missing@example.com', + }, + } as never, + response as never, + ); + + expect(prisma.token.create).not.toHaveBeenCalled(); + expect(sendPasswordResetEmail).not.toHaveBeenCalled(); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: + 'If an account with this email exists, a reset link has been sent.', + data: {}, + }); + }); + + it('creates a password reset token and sends email when user exists', async () => { + const response = createResponse(); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: 'user-1', + email: 'john@example.com', + name: 'John Doe', + passwordHash: 'stored-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + vi.mocked(prisma.token.create).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.PASSWORD_RESET, + token: 'password-reset-token', + expiresAt: new Date(), + createdAt: new Date(), + }); + + await passwordResetController.request( + { + body: { + email: ' john@example.com ', + }, + } as never, + response as never, + ); + + expect(prisma.user.findUnique).toHaveBeenCalledWith({ + where: { + email: 'john@example.com', + }, + }); + expect(prisma.token.create).toHaveBeenCalledWith({ + data: expect.objectContaining({ + userId: 'user-1', + type: TokenType.PASSWORD_RESET, + }), + }); + expect(sendPasswordResetEmail).toHaveBeenCalledWith( + 'john@example.com', + expect.any(String), + ); + expect(response.status).toHaveBeenCalledWith(200); + }); + + it('returns 400 when password reset token is invalid', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue(null); + + await passwordResetController.confirm( + { + params: { + token: 'invalid-token', + }, + body: { + password: 'password123', + confirmPassword: 'password123', + }, + } as never, + response as never, + ); + + expect(prisma.token.findFirst).toHaveBeenCalledWith({ + where: { + token: 'invalid-token', + type: TokenType.PASSWORD_RESET, + }, + }); + expect(response.status).toHaveBeenCalledWith(400); + expect(response.json).toHaveBeenCalledWith({ + message: 'Password reset token is invalid or expired', + }); + }); + + it('returns 400 when new passwords do not match', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.PASSWORD_RESET, + token: 'valid-token', + expiresAt: new Date(Date.now() + 60_000), + createdAt: new Date(), + }); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: 'user-1', + email: 'john@example.com', + name: 'John Doe', + passwordHash: 'stored-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + + await passwordResetController.confirm( + { + params: { + token: 'valid-token', + }, + body: { + password: 'password123', + confirmPassword: 'password321', + }, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(400); + expect(response.json).toHaveBeenCalledWith({ + message: 'Passwords do not match', + }); + }); + + it('updates the password and deletes reset token when payload is valid', async () => { + const response = createResponse(); + vi.mocked(prisma.token.findFirst).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.PASSWORD_RESET, + token: 'valid-token', + expiresAt: new Date(Date.now() + 60_000), + createdAt: new Date(), + }); + vi.mocked(prisma.user.findUnique).mockResolvedValue({ + id: 'user-1', + email: 'john@example.com', + name: 'John Doe', + passwordHash: 'stored-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + vi.mocked(bcrypt.hash).mockResolvedValue('new-password-hash'); + vi.mocked(prisma.user.update).mockResolvedValue({ + id: 'user-1', + email: 'john@example.com', + name: 'John Doe', + passwordHash: 'new-password-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, + }); + vi.mocked(prisma.token.delete).mockResolvedValue({ + id: 'token-1', + userId: 'user-1', + type: TokenType.PASSWORD_RESET, + token: 'valid-token', + expiresAt: new Date(Date.now() + 60_000), + createdAt: new Date(), + }); + + await passwordResetController.confirm( + { + params: { + token: 'valid-token', + }, + body: { + password: 'password123', + confirmPassword: 'password123', + }, + } as never, + response as never, + ); + + expect(bcrypt.hash).toHaveBeenCalledWith('password123', 10); + expect(prisma.user.update).toHaveBeenCalledWith({ + where: { + id: 'user-1', + }, + data: { + passwordHash: 'new-password-hash', + }, + }); + expect(prisma.token.delete).toHaveBeenCalledWith({ + where: { + id: 'token-1', + }, + }); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Password updated successfully.', + }); + }); +}); diff --git a/tests/profile-controller.test.ts b/tests/profile-controller.test.ts new file mode 100644 index 00000000..a4ef176f --- /dev/null +++ b/tests/profile-controller.test.ts @@ -0,0 +1,218 @@ +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import bcrypt from 'bcrypt'; +import { TokenType } from '../src/generated/prisma/enums.js'; +import { prisma } from '../src/lib/prisma.js'; +import { profileController } from '../src/controllers/profileController.js'; +import { sendEmailChangeNotification } from '../src/services/mailService.js'; + +vi.mock('../src/lib/prisma.js', () => ({ + prisma: { + token: { + findFirst: vi.fn(), + }, + user: { + findUnique: vi.fn(), + update: vi.fn(), + }, + }, +})); + +vi.mock('bcrypt', () => ({ + default: { + compare: vi.fn(), + hash: vi.fn(), + }, +})); + +vi.mock('../src/services/mailService.js', () => ({ + sendEmailChangeNotification: vi.fn(), +})); + +const createResponse = () => { + const status = vi.fn().mockReturnThis(); + const json = vi.fn(); + const clearCookie = vi.fn(); + + return { status, json, clearCookie }; +}; + +const authenticatedRequest = { + cookies: { + refreshToken: 'refresh-token-value', + }, +}; + +const authenticatedToken = { + id: 'token-1', + userId: 'user-1', + type: TokenType.REFRESH_TOKEN, + token: 'refresh-token-value', + expiresAt: new Date(), + createdAt: new Date(), +}; + +const authenticatedUser = { + id: 'user-1', + email: 'john@example.com', + name: 'John Doe', + passwordHash: 'stored-password-hash', + createdAt: new Date(), + updatedAt: new Date(), + isActivated: true, +}; + +describe('profileController', () => { + beforeEach(() => { + vi.clearAllMocks(); + vi.mocked(prisma.token.findFirst).mockResolvedValue(authenticatedToken); + vi.mocked(prisma.user.findUnique).mockResolvedValue(authenticatedUser); + }); + + it('updates the user name', async () => { + const response = createResponse(); + vi.mocked(prisma.user.update).mockResolvedValue({ + ...authenticatedUser, + name: 'Jane Doe', + }); + + await profileController.updateName( + { + ...authenticatedRequest, + body: { + name: ' Jane Doe ', + }, + } as never, + response as never, + ); + + expect(prisma.user.update).toHaveBeenCalledWith({ + where: { + id: 'user-1', + }, + data: { + name: 'Jane Doe', + }, + }); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Name updated successfully.', + data: { + id: 'user-1', + name: 'Jane Doe', + email: 'john@example.com', + isActivated: true, + }, + }); + }); + + it('updates the password when the old password is correct', async () => { + const response = createResponse(); + vi.mocked(bcrypt.compare).mockResolvedValue(true); + vi.mocked(bcrypt.hash).mockResolvedValue('new-password-hash'); + vi.mocked(prisma.user.update).mockResolvedValue(authenticatedUser); + + await profileController.updatePassword( + { + ...authenticatedRequest, + body: { + oldPassword: 'password123', + newPassword: 'new-password123', + confirmNewPassword: 'new-password123', + }, + } as never, + response as never, + ); + + expect(bcrypt.compare).toHaveBeenCalledWith( + 'password123', + 'stored-password-hash', + ); + expect(bcrypt.hash).toHaveBeenCalledWith('new-password123', 10); + expect(prisma.user.update).toHaveBeenCalledWith({ + where: { + id: 'user-1', + }, + data: { + passwordHash: 'new-password-hash', + }, + }); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Password updated successfully.', + }); + }); + + it('updates the email and notifies the old address', async () => { + const response = createResponse(); + vi.mocked(bcrypt.compare).mockResolvedValue(true); + vi.mocked(prisma.user.findUnique) + .mockResolvedValueOnce(authenticatedUser) + .mockResolvedValueOnce(null); + vi.mocked(prisma.user.update).mockResolvedValue({ + ...authenticatedUser, + email: 'jane@example.com', + }); + + await profileController.updateEmail( + { + ...authenticatedRequest, + body: { + newEmail: 'jane@example.com', + confirmNewEmail: 'jane@example.com', + password: 'password123', + }, + } as never, + response as never, + ); + + expect(prisma.user.findUnique).toHaveBeenNthCalledWith(2, { + where: { + email: 'jane@example.com', + }, + }); + expect(prisma.user.update).toHaveBeenCalledWith({ + where: { + id: 'user-1', + }, + data: { + email: 'jane@example.com', + }, + }); + expect(sendEmailChangeNotification).toHaveBeenCalledWith( + 'john@example.com', + 'jane@example.com', + ); + expect(response.status).toHaveBeenCalledWith(200); + expect(response.json).toHaveBeenCalledWith({ + message: 'Email updated successfully.', + data: { + id: 'user-1', + name: 'John Doe', + email: 'jane@example.com', + isActivated: true, + }, + }); + }); + + it('returns 401 when the password is incorrect during email update', async () => { + const response = createResponse(); + vi.mocked(bcrypt.compare).mockResolvedValue(false); + + await profileController.updateEmail( + { + ...authenticatedRequest, + body: { + newEmail: 'jane@example.com', + confirmNewEmail: 'jane@example.com', + password: 'password123', + }, + } as never, + response as never, + ); + + expect(response.status).toHaveBeenCalledWith(401); + expect(response.json).toHaveBeenCalledWith({ + message: 'Password is incorrect', + }); + }); +}); diff --git a/tsconfig.json b/tsconfig.json new file mode 100644 index 00000000..28f66b74 --- /dev/null +++ b/tsconfig.json @@ -0,0 +1,14 @@ +{ + "compilerOptions": { + "target": "ES2022", + "module": "NodeNext", + "moduleResolution": "NodeNext", + "outDir": "dist", + "strict": true, + "esModuleInterop": true, + "types": ["node"], + "skipLibCheck": true + }, + "include": ["src/**/*.ts", "prisma.config.ts"], + "exclude": ["src/client"] +} diff --git a/vitest.config.ts b/vitest.config.ts new file mode 100644 index 00000000..c3b384bd --- /dev/null +++ b/vitest.config.ts @@ -0,0 +1,9 @@ +import { defineConfig } from 'vitest/config'; + +export default defineConfig({ + test: { + environment: 'node', + include: ['tests/**/*.test.ts'], + exclude: ['dist/**', 'node_modules/**', 'src/client/**'], + }, +});