alepha/src/security/__tests__/$serviceAccount.spec.ts

Easy-to-use modern TypeScript framework for building many kind of applications.

import { Alepha } from "alepha";
import { DateTimeProvider } from "alepha/datetime";
import { describe, expect, it } from "vitest";
import { $issuer, $serviceAccount } from "../index.ts";

class App {
  oauth2 = $serviceAccount({
    oauth2: {
      url: "https://example.com/oauth2/token",
      clientId: "your-client-id",
      clientSecret: "your-client-secret",
    },
  });

  signOptions = {
    expiresIn: 300, // 5 minutes
  };

  issuer = $issuer({
    secret: "your-issuer-secret",
  });

  jwt = $serviceAccount({
    issuer: this.issuer,
    user: {
      id: "service-account",
    },
  });
}

const alepha = Alepha.create();
const app = alepha.inject(App);
const time = alepha.inject(DateTimeProvider);

describe("$serviceAccount", () => {
  it("should generate and cache JWT tokens with expiration", async () => {
    const tk = await app.jwt.token();
    const parts = tk.split(".");
    expect(parts.length).toBe(3);
    const payload = JSON.parse(
      Buffer.from(parts[1], "base64").toString("utf-8"),
    );
    expect(payload).toEqual({
      sub: expect.any(String),
      aud: "issuer",
      iat: expect.any(Number),
      exp: expect.any(Number),
      sid: expect.any(String),
    });

    app.signOptions.expiresIn += 1; // ensure token won't be the same
    const tk2 = await app.jwt.token();
    expect(tk2).toBe(tk); // should return the same token if not expired

    await time.travel([20, "minutes"]);

    app.signOptions.expiresIn += 1; // ensure token won't be the same
    const tk3 = await app.jwt.token();
    expect(tk3).not.toBe(tk); // should return a new token after expiration
  });
});