t3-code-android-nightly/.repos/alchemy-effect/packages/alchemy/test/Planetscale/OAuthClient.test.ts

import {
  OAUTH_CLIENT_ID,
  exchange,
  usesCurrentClient,
} from "@/Planetscale/OAuthClient.ts";
import { describe, expect, it } from "alchemy-test";
import * as Effect from "effect/Effect";
import * as Redacted from "effect/Redacted";
import * as FetchHttpClient from "effect/http/FetchHttpClient";

describe(
  "PlanetScale OAuth client credentials",
  { tags: ["unit", "provider:planetscale", "local"] },
  () => {
    it("maps the token response onto stored credentials", async () => {
      // SAFETY: the test double implements the callable fetch contract; Bun's
      // nonstandard static `preconnect` member is not used by FetchHttpClient.
      const fetch = (async (_input, _init) =>
        new Response(
          JSON.stringify({
            access_token: "access",
            refresh_token: "refresh",
            expires_in: 3600,
            scope: "read write",
          }),
          { status: 200, headers: { "Content-Type": "application/json" } },
        )) as typeof globalThis.fetch;

      const before = Date.now();
      const credentials = await Effect.runPromise(
        exchange("code").pipe(
          Effect.provideService(FetchHttpClient.Fetch, fetch),
        ),
      );
      expect(credentials.type).toBe("oauth");
      expect(credentials.clientId).toBe(OAUTH_CLIENT_ID);
      expect(Redacted.value(credentials.access)).toBe("access");
      expect(Redacted.value(credentials.refresh)).toBe("refresh");
      expect(credentials.scopes).toEqual(["read", "write"]);
      expect(credentials.expires).toBeGreaterThanOrEqual(
        before + 3_600_000 - 1_000,
      );
    });

    it("flags credentials issued to a rotated client id as stale", () => {
      expect(usesCurrentClient({ clientId: OAUTH_CLIENT_ID })).toBe(true);
      expect(usesCurrentClient({ clientId: "pscale_app_old" })).toBe(false);
      // Credentials persisted before clientId was stored must read as stale so
      // login falls back to a fresh browser authorization.
      expect(usesCurrentClient({})).toBe(false);
    });
  },
);