import { readFileSync } from "node:fs";
import { resolve } from "node:path";
import { describe, expect, it } from "vitest";

describe("admin CSRF wiring", () => {
	it("defaults CSRF on for mutating withAdmin handlers", () => {
		const source = readFileSync(
			resolve(process.cwd(), "src/lib/api-handler.ts"),
			"utf8",
		);
		expect(source).toContain("options.requireCsrf !== false");
	});

	it("issues a csrf meta tag from the admin layout", () => {
		const source = readFileSync(
			resolve(process.cwd(), "src/app/admin/layout.tsx"),
			"utf8",
		);
		expect(source).toContain("setCsrfCookie");
		expect(source).toContain('meta name="csrf-token"');
	});

	it("provides adminFetch helper that sets x-csrf-token", () => {
		const source = readFileSync(
			resolve(process.cwd(), "src/lib/admin-fetch.ts"),
			"utf8",
		);
		expect(source).toContain("x-csrf-token");
		expect(source).toContain("getCsrfToken");
	});
});