import { beforeEach, describe, expect, it, vi } from "vitest"; const mockGet = vi.hoisted(() => vi.fn()); vi.mock("@/lib/services/site-settings", () => ({ siteSettings: { get: mockGet }, })); import { captchaConfig, verifyCaptcha } from "./captcha"; beforeEach(() => { vi.clearAllMocks(); vi.unstubAllGlobals(); }); describe("verifyCaptcha", () => { it("allows when provider is none", async () => { mockGet.mockImplementation(async (key: string, fallback?: string) => { if (key === "captcha_provider") return "none"; return fallback ?? ""; }); expect(await verifyCaptcha(null)).toBe(true); }); it("fails closed when provider set but secret missing", async () => { mockGet.mockImplementation(async (key: string, fallback?: string) => { if (key === "captcha_provider") return "turnstile"; if (key === "turnstile_site_key") return "site-key"; if (key === "turnstile_secret") return ""; return fallback ?? ""; }); expect(await verifyCaptcha("tok")).toBe(false); }); it("fails closed on provider API/network errors", async () => { mockGet.mockImplementation(async (key: string, fallback?: string) => { if (key === "captcha_provider") return "turnstile"; if (key === "turnstile_site_key") return "site-key"; if (key === "turnstile_secret") return "secret"; return fallback ?? ""; }); vi.stubGlobal( "fetch", vi.fn().mockRejectedValue(new Error("network down")), ); expect(await verifyCaptcha("tok", "1.2.3.4")).toBe(false); }); it("accepts a successful provider response", async () => { mockGet.mockImplementation(async (key: string, fallback?: string) => { if (key === "captcha_provider") return "recaptcha"; if (key === "recaptcha_site_key") return "site-key"; if (key === "recaptcha_secret") return "secret"; return fallback ?? ""; }); vi.stubGlobal( "fetch", vi.fn().mockResolvedValue({ ok: true, json: async () => ({ success: true }), }), ); expect(await verifyCaptcha("good-token")).toBe(true); }); }); describe("captchaConfig", () => { it("returns none by default", async () => { mockGet.mockImplementation(async (_key: string, fallback?: string) => { return fallback ?? "none"; }); const cfg = await captchaConfig(); expect(cfg.provider).toBe("none"); }); });