Aether/frontend/src/api/__tests__/auth-turnstile.spec.ts

import { beforeEach, describe, expect, it, vi } from 'vitest'

const { postMock, setTokenMock } = vi.hoisted(() => ({
  postMock: vi.fn(),
  setTokenMock: vi.fn(),
}))

vi.mock('@/api/client', () => ({
  default: {
    post: postMock,
    setToken: setTokenMock,
  },
}))

import { authApi } from '@/api/auth'

describe('authApi turnstile payloads', () => {
  beforeEach(() => {
    postMock.mockReset()
    setTokenMock.mockReset()
    postMock.mockResolvedValue({ data: {} })
  })

  it('includes turnstile token when sending email verification code', async () => {
    await authApi.sendVerificationCode('[email protected]', 'turnstile-token')

    expect(postMock).toHaveBeenCalledWith('/api/auth/send-verification-code', {
      email: '[email protected]',
      turnstile_token: 'turnstile-token',
    })
  })

  it('includes turnstile token when registering', async () => {
    await authApi.register({
      email: '[email protected]',
      username: 'alice',
      password: 'secret123',
      turnstile_token: 'turnstile-token',
    })

    expect(postMock).toHaveBeenCalledWith('/api/auth/register', {
      email: '[email protected]',
      username: 'alice',
      password: 'secret123',
      turnstile_token: 'turnstile-token',
    })
  })

  it('refreshes auth token without a request body', async () => {
    postMock.mockResolvedValue({ data: { access_token: 'new-access-token' } })

    await authApi.refreshToken()

    expect(postMock).toHaveBeenCalledWith('/api/auth/refresh')
    expect(setTokenMock).toHaveBeenCalledWith('new-access-token')
  })
})