refactor, security updates, cv extraction upgrades
This commit is contained in:
@@ -52,8 +52,9 @@ describe('LoginPage', () => {
|
||||
consoleErrorSpy.mockRestore();
|
||||
});
|
||||
|
||||
it('stores auth token in session storage when remember me is unchecked', async () => {
|
||||
mockedApi.post.mockResolvedValueOnce({ data: { accessToken: 'header.payload.sig', tokenType: 'Bearer' } } as any);
|
||||
it('posts remember-me preference without storing an auth token in browser storage', async () => {
|
||||
mockedApi.post.mockResolvedValueOnce({ data: { authenticated: true, provider: 'local' } } as any);
|
||||
mockedApi.get.mockResolvedValueOnce({ data: { roles: [], email: 'person@example.com', userName: 'person' } } as any);
|
||||
|
||||
renderLoginPage();
|
||||
await screen.findByLabelText('Email');
|
||||
@@ -63,9 +64,10 @@ describe('LoginPage', () => {
|
||||
await userEvent.click(screen.getByLabelText('Remember me'));
|
||||
await userEvent.click(screen.getByRole('button', { name: 'Sign in' }));
|
||||
|
||||
await waitFor(() => expect(mockedApi.post).toHaveBeenCalledWith('/auth/login', { email: 'person@example.com', password: 'hunter2' }));
|
||||
await waitFor(() => expect(mockedApi.post).toHaveBeenCalledWith('/auth/login', { email: 'person@example.com', password: 'hunter2', rememberMe: false }));
|
||||
await waitFor(() => expect(mockedApi.get).toHaveBeenCalledWith('/auth/me'));
|
||||
|
||||
expect(window.sessionStorage.getItem('authToken')).toBe('header.payload.sig');
|
||||
expect(window.sessionStorage.getItem('authToken')).toBeNull();
|
||||
expect(window.localStorage.getItem('authToken')).toBeNull();
|
||||
expect(window.localStorage.getItem('authTokenPersistence')).toBe('session');
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user