Roo-Code/packages/cloud/src/__tests__/StaticTokenAuthService.spec.ts
2025-08-28 11:18:45 -07:00

314 lines
10 KiB
TypeScript

import type { ExtensionContext } from "vscode"
import { StaticTokenAuthService } from "../StaticTokenAuthService.js"
vi.mock("vscode", () => ({
window: {
showInformationMessage: vi.fn(),
},
env: {
openExternal: vi.fn(),
uriScheme: "vscode",
},
Uri: {
parse: vi.fn(),
},
}))
describe("StaticTokenAuthService", () => {
let authService: StaticTokenAuthService
let mockContext: ExtensionContext
let mockLog: (...args: unknown[]) => void
const testToken = "test-static-token"
// Job token (t:'cj') with userId and orgId - sub is CloudJob ID
const jobTokenWithOrg =
"eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJyY2MiLCJzdWIiOiIzIiwiZXhwIjoxNzU2Mjc5NzU0LCJpYXQiOjE3NTYyNzU4NTQsIm5iZiI6MTc1NjI3NTgyNCwidiI6MSwiciI6eyJ1IjoidXNlcl8yeG1CaGVqTmVEVHdhbk04Q2dJT25NZ1Z4ekMiLCJvIjoib3JnXzEyM2FiYyIsInQiOiJjaiJ9fQ.k6VgV0cZUbx75kdedaeAsVYSRT7PzxDOCseLowq6moX92B4QuqtNkPRLKtQX7pJCxjuqRwEjJxmfTeXtQ82Pyg"
// Job token without orgId (orgId was null during creation)
const jobTokenNoOrg =
"eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJyY2MiLCJzdWIiOiI1IiwiZXhwIjoxNzU2Mjc5NzU0LCJpYXQiOjE3NTYyNzU4NTQsIm5iZiI6MTc1NjI3NTgyNCwidiI6MSwiciI6eyJ1IjoidXNlcl8yeG1CaGVqTmVEVHdhbk04Q2dJT25NZ1Z4ekMiLCJ0IjoiY2oifX0.signature"
// Auth token (t:'auth') - sub is User ID
const authToken =
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJyY2MiLCJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTc1NjI3OTc1NCwiaWF0IjoxNzU2Mjc1ODU0LCJuYmYiOjE3NTYyNzU4MjQsInYiOjEsInIiOnsidSI6InVzZXJfMTIzIiwidCI6ImF1dGgifX0.signature"
// JWT without the 'r' field (legacy format)
const legacyJWT =
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImlhdCI6MTUxNjIzOTAyMn0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
beforeEach(() => {
mockLog = vi.fn()
// Create a minimal mock that satisfies the constructor requirements
const mockContextPartial = {
extension: {
packageJSON: {
publisher: "TestPublisher",
name: "test-extension",
},
},
globalState: {
get: vi.fn(),
update: vi.fn(),
},
secrets: {
get: vi.fn(),
store: vi.fn(),
delete: vi.fn(),
onDidChange: vi.fn(),
},
subscriptions: [],
}
// Use type assertion for test mocking
mockContext = mockContextPartial as unknown as ExtensionContext
authService = new StaticTokenAuthService(mockContext, testToken, mockLog)
})
afterEach(() => {
vi.clearAllMocks()
})
describe("constructor", () => {
it("should create instance and log static token mode", () => {
expect(authService).toBeInstanceOf(StaticTokenAuthService)
expect(mockLog).toHaveBeenCalledWith("[auth] Using StaticTokenAuthService")
})
it("should use console.log as default logger", () => {
const serviceWithoutLog = new StaticTokenAuthService(mockContext as unknown as ExtensionContext, testToken)
// Can't directly test console.log usage, but constructor should not throw
expect(serviceWithoutLog).toBeInstanceOf(StaticTokenAuthService)
})
it("should parse job token with orgId and extract userId from r.u", () => {
const serviceWithJWT = new StaticTokenAuthService(mockContext, jobTokenWithOrg, mockLog)
const userInfo = serviceWithJWT.getUserInfo()
expect(userInfo?.id).toBe("user_2xmBhejNeDTwanM8CgIOnMgVxzC")
expect(userInfo?.organizationId).toBe("org_123abc")
expect(userInfo?.extensionBridgeEnabled).toBe(true)
})
it("should parse job token without orgId (null orgId case)", () => {
const serviceWithJWT = new StaticTokenAuthService(mockContext, jobTokenNoOrg, mockLog)
const userInfo = serviceWithJWT.getUserInfo()
expect(userInfo?.id).toBe("user_2xmBhejNeDTwanM8CgIOnMgVxzC")
expect(userInfo?.organizationId).toBeUndefined()
expect(userInfo?.extensionBridgeEnabled).toBe(true)
})
it("should parse auth token and extract userId from r.u", () => {
const serviceWithAuthToken = new StaticTokenAuthService(mockContext, authToken, mockLog)
const userInfo = serviceWithAuthToken.getUserInfo()
expect(userInfo?.id).toBe("user_123")
expect(userInfo?.organizationId).toBeUndefined()
expect(userInfo?.extensionBridgeEnabled).toBe(true)
})
it("should handle legacy JWT format with sub field", () => {
const serviceWithLegacyJWT = new StaticTokenAuthService(mockContext, legacyJWT, mockLog)
const userInfo = serviceWithLegacyJWT.getUserInfo()
expect(userInfo?.id).toBe("user_123")
expect(userInfo?.organizationId).toBeUndefined()
expect(userInfo?.extensionBridgeEnabled).toBe(true)
})
it("should handle invalid JWT gracefully", () => {
const serviceWithInvalidJWT = new StaticTokenAuthService(mockContext, "invalid-jwt-token", mockLog)
const userInfo = serviceWithInvalidJWT.getUserInfo()
expect(userInfo?.id).toBeUndefined()
expect(userInfo?.organizationId).toBeUndefined()
expect(userInfo?.extensionBridgeEnabled).toBe(true)
expect(mockLog).toHaveBeenCalledWith("[auth] Failed to parse JWT:", expect.any(Error))
})
it("should handle malformed JWT payload", () => {
// JWT with invalid base64 in payload
const malformedJWT = "header.!!!invalid-base64!!!.signature"
const serviceWithMalformedJWT = new StaticTokenAuthService(mockContext, malformedJWT, mockLog)
const userInfo = serviceWithMalformedJWT.getUserInfo()
expect(userInfo?.id).toBeUndefined()
expect(userInfo?.organizationId).toBeUndefined()
expect(mockLog).toHaveBeenCalledWith("[auth] Failed to parse JWT:", expect.any(Error))
})
})
describe("initialize", () => {
it("should start in active-session state", async () => {
await authService.initialize()
expect(authService.getState()).toBe("active-session")
})
it("should not emit events on initialize", async () => {
const authStateChangedSpy = vi.fn()
const userInfoSpy = vi.fn()
authService.on("auth-state-changed", authStateChangedSpy)
authService.on("user-info", userInfoSpy)
await authService.initialize()
expect(authStateChangedSpy).not.toHaveBeenCalled()
expect(userInfoSpy).not.toHaveBeenCalled()
})
})
describe("broadcast", () => {
it("should emit auth-state-changed event", () => {
const spy = vi.fn()
authService.on("auth-state-changed", spy)
authService.broadcast()
expect(spy).toHaveBeenCalledWith({
state: "active-session",
previousState: "initializing",
})
})
it("should emit user-info event", () => {
const spy = vi.fn()
authService.on("user-info", spy)
authService.broadcast()
expect(spy).toHaveBeenCalledWith({
userInfo: expect.objectContaining({
extensionBridgeEnabled: true,
}),
})
})
it("should emit user-info with parsed JWT data", () => {
const serviceWithJWT = new StaticTokenAuthService(mockContext, jobTokenWithOrg, mockLog)
const spy = vi.fn()
serviceWithJWT.on("user-info", spy)
serviceWithJWT.broadcast()
expect(spy).toHaveBeenCalledWith({
userInfo: {
extensionBridgeEnabled: true,
id: "user_2xmBhejNeDTwanM8CgIOnMgVxzC",
organizationId: "org_123abc",
},
})
})
})
describe("getSessionToken", () => {
it("should return the provided token", () => {
expect(authService.getSessionToken()).toBe(testToken)
})
it("should return different token when constructed with different token", () => {
const differentToken = "different-token"
const differentService = new StaticTokenAuthService(mockContext, differentToken, mockLog)
expect(differentService.getSessionToken()).toBe(differentToken)
})
})
describe("getUserInfo", () => {
it("should return object with extensionBridgeEnabled flag", () => {
const userInfo = authService.getUserInfo()
expect(userInfo).toHaveProperty("extensionBridgeEnabled")
expect(userInfo?.extensionBridgeEnabled).toBe(true)
})
})
describe("getStoredOrganizationId", () => {
it("should return null for non-JWT token", () => {
expect(authService.getStoredOrganizationId()).toBeNull()
})
it("should return organizationId from parsed JWT", () => {
const serviceWithJWT = new StaticTokenAuthService(mockContext, jobTokenWithOrg, mockLog)
expect(serviceWithJWT.getStoredOrganizationId()).toBe("org_123abc")
})
it("should return null when JWT has no organizationId", () => {
const serviceWithNoOrg = new StaticTokenAuthService(mockContext, jobTokenNoOrg, mockLog)
expect(serviceWithNoOrg.getStoredOrganizationId()).toBeNull()
})
it("should return null for legacy JWT format", () => {
const serviceWithLegacyJWT = new StaticTokenAuthService(mockContext, legacyJWT, mockLog)
expect(serviceWithLegacyJWT.getStoredOrganizationId()).toBeNull()
})
})
describe("authentication state methods", () => {
it("should always return true for isAuthenticated", () => {
expect(authService.isAuthenticated()).toBe(true)
})
it("should always return true for hasActiveSession", () => {
expect(authService.hasActiveSession()).toBe(true)
})
it("should always return true for hasOrIsAcquiringActiveSession", () => {
expect(authService.hasOrIsAcquiringActiveSession()).toBe(true)
})
it("should return active-session for getState", () => {
expect(authService.getState()).toBe("active-session")
})
})
describe("disabled authentication methods", () => {
const expectedErrorMessage = "Authentication methods are disabled in StaticTokenAuthService"
it("should throw error for login", async () => {
await expect(authService.login()).rejects.toThrow(expectedErrorMessage)
})
it("should throw error for logout", async () => {
await expect(authService.logout()).rejects.toThrow(expectedErrorMessage)
})
it("should throw error for handleCallback", async () => {
await expect(authService.handleCallback("code", "state")).rejects.toThrow(expectedErrorMessage)
})
it("should throw error for handleCallback with organization", async () => {
await expect(authService.handleCallback("code", "state", "org_123")).rejects.toThrow(expectedErrorMessage)
})
})
describe("event emission", () => {
it("should be able to register and emit events via broadcast", () => {
const authStateChangedSpy = vi.fn()
const userInfoSpy = vi.fn()
authService.on("auth-state-changed", authStateChangedSpy)
authService.on("user-info", userInfoSpy)
authService.broadcast()
expect(authStateChangedSpy).toHaveBeenCalledWith({
state: "active-session",
previousState: "initializing",
})
expect(userInfoSpy).toHaveBeenCalledWith({
userInfo: expect.objectContaining({
extensionBridgeEnabled: true,
}),
})
})
})
})