sessions.test.js — astro Source File

Source Code

import assert from 'node:assert/strict';
import { after, before, describe, it } from 'node:test';
import * as devalue from 'devalue';
import testAdapter from './test-adapter.js';
import { loadFixture } from './test-utils.js';

describe('Astro.session', () => {
	describe('Production', () => {
		/** @type {import('./test-utils').Fixture} */
		let fixture;
		/** @type {import('../src/core/app/index').App} response */
		let app;

		before(async () => {
			fixture = await loadFixture({
				root: './fixtures/sessions/',
				output: 'server',
				adapter: testAdapter(),
				session: {
					driver: 'fs',
					ttl: 20,
				},
			});
			await fixture.build({});
			app = await fixture.loadTestAdapterApp();
		});

		async function fetchResponse(path, requestInit) {
			const request = new Request('http://example.com' + path, requestInit);
			const response = await app.render(request);
			return response;
		}

		it('can regenerate session cookies upon request', async () => {
			const firstResponse = await fetchResponse('/regenerate');
			const firstHeaders = Array.from(app.setCookieHeaders(firstResponse));
			const firstSessionId = firstHeaders[0].split(';')[0].split('=')[1];

			const secondResponse = await fetchResponse('/regenerate', {
				method: 'GET',
				headers: {
					cookie: `astro-session=${firstSessionId}`,
				},
			});
			const secondHeaders = Array.from(app.setCookieHeaders(secondResponse));
			const secondSessionId = secondHeaders[0].split(';')[0].split('=')[1];
			assert.notEqual(firstSessionId, secondSessionId);
		});

		it('defaults to secure cookies in production', async () => {
			const firstResponse = await fetchResponse('/regenerate');
			const firstHeaders = Array.from(app.setCookieHeaders(firstResponse));
			assert.ok(firstHeaders[0].includes('Secure'), 'Secure cookie not set in production');
			assert.ok(firstHeaders[0].includes('HttpOnly'), 'HttpOnly cookie not set in production');
		});

		it('can save session data by value', async () => {
			const firstResponse = await fetchResponse('/update');
			const firstValue = await firstResponse.json();
			assert.equal(firstValue.previousValue, 'none');
// ... (167 more lines)