to much to say

auth/middleware.test.js

@@ -0,0 +1,98 @@
+const dotenv = require("dotenv");
+const { generateAccesToken, generateRefreshToken, generatePermtoken, verifyToken} = require("./auth");
+const middleware = require("./middleware");
+dotenv.config();
+
+describe('Middleware.js Tests', () => {
+    let req, res, next;
+
+    const user = { id: 1, name: 'Test User' };
+
+    beforeEach(() => {
+        req = { cookies: {} };
+        res = { 
+            cookie: jest.fn(),
+            status: jest.fn(function() {
+                return this;
+            }),
+            json: jest.fn()
+        };
+        next = jest.fn();
+    });
+
+    test('should call next() if access token is valid', () => {
+        const token = generateAccesToken(user);
+        req.cookies.accessToken = token;
+        middleware(req, res, next);
+        expect(next).toHaveBeenCalled();
+    });
+
+    test('should call next() if refresh token is valid', () => {
+        const token = generateRefreshToken(user);
+        req.cookies.refreshToken = token;
+        middleware(req, res, next);
+        expect(next).toHaveBeenCalled();
+    });
+
+    test('should call next() if permtoken is valid', () => {
+        const token = generatePermtoken(user);
+        req.cookies.permtoken = token;
+        middleware(req, res, next);
+        expect(next).toHaveBeenCalled();
+    });
+
+    test('should return 401 if no tokens are present', () => {
+        middleware(req, res, next);
+        expect(res.status).toHaveBeenCalledWith(401);
+    });
+
+    test('should return 401 if access token is invalid', () => {
+        const token = generateAccesToken(user);
+        req.cookies.accessToken = token + 'a';
+        middleware(req, res, next);
+        expect(res.status).toHaveBeenCalledWith(401);
+    });
+
+    test('should return 401 if refresh token is invalid', () => {
+        const token = generateRefreshToken(user);
+        req.cookies.refreshToken = token + 'a';
+        middleware(req, res, next);
+        expect(res.status).toHaveBeenCalledWith(401);
+    });
+
+    test('should return 401 if permtoken is invalid', () => {
+        const token = generatePermtoken(user);
+        req.cookies.permtoken = token + 'a';
+        middleware(req, res, next);
+        expect(res.status).toHaveBeenCalledWith(401);
+    });
+
+    test('should return access token if refresh token is valid', () => {
+        const token = generateRefreshToken(user);
+        req.cookies.refreshToken = token;
+        middleware(req, res, next);
+        expect(res.cookie).toHaveBeenCalledWith('accessToken', expect.any(String), { httpOnly: true });
+    });
+
+    test('should return access token and refresh if permtoken is valid', () => {
+        const token = generatePermtoken(user);
+        req.cookies.permtoken = token;
+        middleware(req, res, next);
+        expect(res.cookie).toHaveBeenCalledWith('accessToken', expect.any(String), { httpOnly: true });
+        expect(res.cookie).toHaveBeenCalledWith('refreshToken', expect.any(String), { httpOnly: true });
+    });
+
+    test('should not return refresh token if access token is valid', () => {
+        const token = generateAccesToken(user);
+        req.cookies.accessToken = token;
+        middleware(req, res, next);
+        expect(res.cookie).not.toHaveBeenCalledWith('refreshToken', expect.any(String), { httpOnly: true });
+    });
+
+    test('should not return permtoken token if refresh is valid', () => {
+        const token = generatePermtoken(user);
+        req.cookies.permtoken = token;
+        middleware(req, res, next);
+        expect(res.cookie).not.toHaveBeenCalledWith('permtoken', expect.any(String), { httpOnly: true });
+    });
+});