adminandClaude Sonnet 4.6
d18d29168a
Custom auth stack: bcryptjs password hashing (cost 10, GoTrue-compatible), jose JWT session cookies (edge-safe, 8hr TTL), new API routes for login/logout/reset/change-password, middleware rewritten to JWT-only verification with no DB access. All 38 protected pages and API routes migrated from supabase.auth.getUser() to getSession(). Supabase .from() queries retained for Phase 4. lib/db/index.ts refactored to lazy Proxy singleton to avoid module-level throw during Next.js build. tsc: clean, build: clean, tests: 4/4 passed Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
60 lines
2.5 KiB
TypeScript
60 lines
2.5 KiB
TypeScript
import { describe, it, expect, vi, beforeEach } from 'vitest'
|
|
import { uploadEvidenceFile, getEvidenceUrl } from '@/lib/supabase/storage'
|
|
|
|
vi.mock('file-type', () => ({
|
|
fileTypeFromBuffer: vi.fn().mockResolvedValue({ mime: 'image/jpeg', ext: 'jpg' }),
|
|
}))
|
|
|
|
const mockUpload = vi.fn()
|
|
const mockCreateSignedUrl = vi.fn()
|
|
const mockSupabase = {
|
|
storage: {
|
|
from: vi.fn(() => ({
|
|
upload: mockUpload,
|
|
createSignedUrl: mockCreateSignedUrl,
|
|
})),
|
|
},
|
|
} as any
|
|
|
|
beforeEach(() => {
|
|
vi.clearAllMocks()
|
|
mockUpload.mockResolvedValue({ data: { path: 'user-123/incident-abc/report/photo.jpg' }, error: null })
|
|
mockCreateSignedUrl.mockResolvedValue({ data: { signedUrl: 'https://example.com/photo.jpg' }, error: null })
|
|
})
|
|
|
|
describe('uploadEvidenceFile', () => {
|
|
it('uploads to path user-id/incident-id/stage/filename', async () => {
|
|
const file = new File(['content'], 'photo.jpg', { type: 'image/jpeg' })
|
|
const result = await uploadEvidenceFile(mockSupabase, file, 'incident-abc', 'report', 'user-123')
|
|
expect(mockSupabase.storage.from).toHaveBeenCalledWith('evidence')
|
|
expect(mockUpload).toHaveBeenCalledWith(
|
|
expect.stringContaining('user-123/incident-abc/report/'),
|
|
expect.any(ArrayBuffer),
|
|
expect.objectContaining({ contentType: 'image/jpeg', upsert: false })
|
|
)
|
|
expect(mockCreateSignedUrl).toHaveBeenCalledWith(expect.stringContaining('user-123/incident-abc/report/'), 315360000)
|
|
expect(result.path).toContain('user-123/incident-abc/report/')
|
|
expect(result.hash).toBeTruthy()
|
|
})
|
|
|
|
it('throws on upload error', async () => {
|
|
mockUpload.mockResolvedValue({ data: null, error: { message: 'Bucket not found' } })
|
|
const file = new File(['x'], 'f.jpg', { type: 'image/jpeg' })
|
|
await expect(uploadEvidenceFile(mockSupabase, file, 'inc', 'report', 'user-123')).rejects.toThrow('Bucket not found')
|
|
})
|
|
|
|
it('throws when photo exceeds 10MB', async () => {
|
|
const bigFile = new File([new Uint8Array(11 * 1024 * 1024)], 'big.jpg', { type: 'image/jpeg' })
|
|
await expect(uploadEvidenceFile(mockSupabase, bigFile, 'inc', 'report', 'user-123')).rejects.toThrow('File too large')
|
|
})
|
|
})
|
|
|
|
describe('getEvidenceUrl', () => {
|
|
it('returns signed URL for path', async () => {
|
|
const url = await getEvidenceUrl(mockSupabase, 'user-123/incident-abc/report/photo.jpg')
|
|
expect(mockSupabase.storage.from).toHaveBeenCalledWith('evidence')
|
|
expect(mockCreateSignedUrl).toHaveBeenCalledWith('user-123/incident-abc/report/photo.jpg', 3600)
|
|
expect(url).toBe('https://example.com/photo.jpg')
|
|
})
|
|
})
|