release: WRNexusJS 0.5.0

packages/auth/test/validation.test.ts

@@ -0,0 +1,58 @@
+import { expect, test } from "bun:test";
+import {
+  invitationAcceptSchema,
+  loginSchema,
+  mfaSchema,
+  otpLoginRequestSchema,
+  registerSchema,
+  signUpSchema,
+} from "../src/validation.ts";
+
+test("authentication schemas reject malformed input", () => {
+  expect(registerSchema.parse({ email: "bad", password: "short", displayName: "A" }).ok).toBe(
+    false,
+  );
+  expect(loginSchema.parse({ identifier: "", password: "" }).ok).toBe(false);
+  expect(
+    otpLoginRequestSchema.parse({ identifier: "person@example.com", method: "voice" }).ok,
+  ).toBe(false);
+  expect(invitationAcceptSchema.parse({ token: "short" }).ok).toBe(false);
+  expect(mfaSchema.parse({ mfaToken: "short", method: "unknown", code: "1" }).ok).toBe(false);
+});
+
+test("sign-up schema is shared by browser and server registration", () => {
+  const invalid = signUpSchema.parse({
+    displayName: "A",
+    email: "bad",
+    password: "weak",
+    consent: false,
+  });
+  expect(invalid.ok).toBe(false);
+  expect(invalid.errors).toMatchObject({
+    displayName: "Enter your full name",
+    email: "Enter a valid email address",
+    consent: "Accept the terms and privacy policy to continue",
+  });
+
+  expect(
+    signUpSchema.parse({
+      displayName: "Ada Lovelace",
+      email: "ada@example.com",
+      password: "StrongPassword123",
+      consent: true,
+    }).ok,
+  ).toBe(true);
+});
+
+test("built-in browser schema registry covers packaged auth forms", async () => {
+  const { authBrowserSchemaDescriptors, authSchemas } = await import("../src/validation.ts");
+  const descriptors = authBrowserSchemaDescriptors(authSchemas);
+  expect(descriptors["auth-register"]).toBeDefined();
+  expect(descriptors["auth-password-request"]).toBeDefined();
+  expect(descriptors["auth-session-revoke"]).toBeDefined();
+  expect(descriptors["auth-authenticator-setup"]).toBeDefined();
+  expect(descriptors["auth-authenticator-confirm"]).toBeDefined();
+  expect(descriptors["auth-authenticator-disable"]).toBeDefined();
+  expect(descriptors["auth-recovery-codes"]).toBeDefined();
+  expect(descriptors["auth-empty"]).toBeDefined();
+});