import { beforeEach, describe, expect, it, vi } from "vitest"; const insertValues = vi.hoisted(() => vi.fn()); const selectRows = vi.hoisted(() => vi.fn()); const selectCount = vi.hoisted(() => vi.fn()); const selectUsers = vi.hoisted(() => vi.fn()); vi.mock("@/lib/db", () => ({ db: { insert: vi.fn(() => ({ values: insertValues })), select: vi.fn((fields?: { value?: unknown; id?: unknown }) => { // count() query passes { value: count() }; user lookup passes { id, username } if (fields && "value" in fields && !("id" in fields)) { return { from: () => ({ where: () => selectCount(), }), }; } if (fields && "id" in fields && "username" in fields) { return { from: () => ({ where: () => selectUsers(), }), }; } // default: audit log rows return { from: () => ({ where: () => ({ orderBy: () => ({ limit: () => ({ offset: () => selectRows(), }), }), }), }), }; }), }, AdminAuditLog: { id: "id", userId: "userId", action: "action", target: "target", }, User: { id: "id", username: "username" }, })); vi.mock("@/env", () => ({ env: {} })); import { getAuditLogs, logAudit } from "./audit"; beforeEach(() => { vi.clearAllMocks(); }); describe("logAudit", () => { it("creates an audit entry", async () => { insertValues.mockResolvedValue({ id: 1 }); await logAudit({ userId: 1, action: "test_action", target: "user", targetId: 42, }); const data = insertValues.mock.calls[0][0]; expect(data.userId).toBe(1); expect(data.action).toBe("test_action"); expect(data.target).toBe("user"); expect(data.targetId).toBe(42); }); it("redacts sensitive keys in payload", async () => { insertValues.mockResolvedValue({ id: 1 }); await logAudit({ userId: 1, action: "update", target: "user", targetId: 1, before: { username: "foo", password: "secret123" }, after: { username: "bar", password: "newsecret" }, }); const data = insertValues.mock.calls[0][0]; expect(JSON.parse(data.before).password).toBe("[Redacted]"); expect(JSON.parse(data.after).password).toBe("[Redacted]"); expect(JSON.parse(data.diff).username).toEqual({ from: "foo", to: "bar" }); }); it("omits diff when only before or after is missing", async () => { insertValues.mockResolvedValue({ id: 1 }); await logAudit({ userId: 1, action: "delete", target: "user", before: { username: "foo" }, }); const data = insertValues.mock.calls[0][0]; expect(data.diff).toBeNull(); }); it("handles empty payloads", async () => { insertValues.mockResolvedValue({ id: 1 }); await logAudit({ userId: 1, action: "view", target: "page" }); expect(insertValues).toHaveBeenCalledOnce(); }); it("flattens nested objects", async () => { insertValues.mockResolvedValue({ id: 1 }); await logAudit({ userId: 1, action: "update_settings", target: "user", before: { nested: { key: "val" } }, after: {}, }); const data = insertValues.mock.calls[0][0]; expect(JSON.parse(data.before)).toEqual({ nested: { key: "val" } }); }); }); describe("getAuditLogs", () => { it("returns paginated logs with usernames", async () => { selectRows.mockResolvedValue([ { id: 1, userId: 1, action: "test", target: "user", targetId: null, before: null, after: null, diff: null, createdAt: "2024-01-01", }, { id: 2, userId: 2, action: "test2", target: "room", targetId: null, before: null, after: null, diff: null, createdAt: "2024-01-02", }, ]); selectCount.mockResolvedValue([{ value: 2 }]); selectUsers.mockResolvedValue([ { id: 1, username: "alice" }, { id: 2, username: "bob" }, ]); const result = await getAuditLogs({ page: 1, perPage: 20 }); expect(result.rows).toHaveLength(2); expect(result.rows[0].username).toBe("alice"); expect(result.rows[1].username).toBe("bob"); expect(result.total).toBe(2); expect(result.lastPage).toBe(1); }); it("filters by search term", async () => { selectRows.mockResolvedValue([]); selectCount.mockResolvedValue([{ value: 0 }]); await getAuditLogs({ search: "test" }); expect(selectRows).toHaveBeenCalled(); expect(selectCount).toHaveBeenCalled(); }); it("falls back to User #id for unknown users", async () => { selectRows.mockResolvedValue([ { id: 1, userId: 99, action: "x", target: "y", targetId: null, before: null, after: null, diff: null, createdAt: "2024-01-01", }, ]); selectCount.mockResolvedValue([{ value: 1 }]); selectUsers.mockResolvedValue([]); const result = await getAuditLogs(); expect(result.rows[0].username).toBe("User #99"); }); });