EpicNext-Cms/src/lib/services/captcha.test.ts

import { beforeEach, describe, expect, it, vi } from "vitest";

const mockGet = vi.hoisted(() => vi.fn());

vi.mock("@/lib/services/site-settings", () => ({
	siteSettings: { get: mockGet },
}));

import { captchaConfig, verifyCaptcha } from "./captcha";

beforeEach(() => {
	vi.clearAllMocks();
	vi.unstubAllGlobals();
});

describe("verifyCaptcha", () => {
	it("allows when provider is none", async () => {
		mockGet.mockImplementation(async (key: string, fallback?: string) => {
			if (key === "captcha_provider") return "none";
			return fallback ?? "";
		});
		expect(await verifyCaptcha(null)).toBe(true);
	});

	it("fails closed when provider set but secret missing", async () => {
		mockGet.mockImplementation(async (key: string, fallback?: string) => {
			if (key === "captcha_provider") return "turnstile";
			if (key === "turnstile_site_key") return "site-key";
			if (key === "turnstile_secret") return "";
			return fallback ?? "";
		});
		expect(await verifyCaptcha("tok")).toBe(false);
	});

	it("fails closed on provider API/network errors", async () => {
		mockGet.mockImplementation(async (key: string, fallback?: string) => {
			if (key === "captcha_provider") return "turnstile";
			if (key === "turnstile_site_key") return "site-key";
			if (key === "turnstile_secret") return "secret";
			return fallback ?? "";
		});
		vi.stubGlobal(
			"fetch",
			vi.fn().mockRejectedValue(new Error("network down")),
		);
		expect(await verifyCaptcha("tok", "1.2.3.4")).toBe(false);
	});

	it("accepts a successful provider response", async () => {
		mockGet.mockImplementation(async (key: string, fallback?: string) => {
			if (key === "captcha_provider") return "recaptcha";
			if (key === "recaptcha_site_key") return "site-key";
			if (key === "recaptcha_secret") return "secret";
			return fallback ?? "";
		});
		vi.stubGlobal(
			"fetch",
			vi.fn().mockResolvedValue({
				ok: true,
				json: async () => ({ success: true }),
			}),
		);
		expect(await verifyCaptcha("good-token")).toBe(true);
	});
});

describe("captchaConfig", () => {
	it("returns none by default", async () => {
		mockGet.mockImplementation(async (_key: string, fallback?: string) => {
			return fallback ?? "none";
		});
		const cfg = await captchaConfig();
		expect(cfg.provider).toBe("none");
	});
});