zitadel/apps/login/src/lib/deployment.test.ts

import { afterEach, beforeEach, describe, expect, test } from "vitest";
import { hasLoginClientKey, hasServiceUserToken, hasSystemUserCredentials } from "./deployment";

describe("Deployment utilities", () => {
  const originalEnv = process.env;

  beforeEach(() => {
    // Reset environment before each test
    process.env = { ...originalEnv };
  });

  afterEach(() => {
    process.env = originalEnv;
  });

  describe("hasSystemUserCredentials", () => {
    test("should return true when all system user credentials are present", () => {
      process.env.AUDIENCE = "https://api.zitadel.cloud";
      process.env.SYSTEM_USER_ID = "12345";
      process.env.SYSTEM_USER_PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----\n...";

      expect(hasSystemUserCredentials()).toBe(true);
    });

    test("should return false when AUDIENCE is missing", () => {
      process.env.AUDIENCE = undefined as any;
      process.env.SYSTEM_USER_ID = "12345";
      process.env.SYSTEM_USER_PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----\n...";

      expect(hasSystemUserCredentials()).toBe(false);
    });

    test("should return false when SYSTEM_USER_ID is missing", () => {
      process.env.AUDIENCE = "https://api.zitadel.cloud";
      process.env.SYSTEM_USER_ID = undefined as any;
      process.env.SYSTEM_USER_PRIVATE_KEY = "-----BEGIN PRIVATE KEY-----\n...";

      expect(hasSystemUserCredentials()).toBe(false);
    });

    test("should return false when SYSTEM_USER_PRIVATE_KEY is missing", () => {
      process.env.AUDIENCE = "https://api.zitadel.cloud";
      process.env.SYSTEM_USER_ID = "12345";
      process.env.SYSTEM_USER_PRIVATE_KEY = undefined as any;

      expect(hasSystemUserCredentials()).toBe(false);
    });

    test("should return false when all credentials are missing", () => {
      process.env.AUDIENCE = undefined as any;
      process.env.SYSTEM_USER_ID = undefined as any;
      process.env.SYSTEM_USER_PRIVATE_KEY = undefined as any;

      expect(hasSystemUserCredentials()).toBe(false);
    });
  });

  describe("hasLoginClientKey", () => {
    test("should return true when ZITADEL_LOGINCLIENT_KEYFILE is set", () => {
      process.env.ZITADEL_LOGINCLIENT_KEYFILE = "/path/to/key.pem";

      expect(hasLoginClientKey()).toBe(true);
    });

    test("should return false when ZITADEL_LOGINCLIENT_KEYFILE is missing", () => {
      process.env.ZITADEL_LOGINCLIENT_KEYFILE = undefined as any;

      expect(hasLoginClientKey()).toBe(false);
    });

    test("should return false when ZITADEL_LOGINCLIENT_KEYFILE is empty string", () => {
      process.env.ZITADEL_LOGINCLIENT_KEYFILE = "";

      expect(hasLoginClientKey()).toBe(false);
    });
  });

  describe("hasServiceUserToken", () => {
    test("should return true when ZITADEL_SERVICE_USER_TOKEN is present", () => {
      process.env.ZITADEL_SERVICE_USER_TOKEN = "token123";

      expect(hasServiceUserToken()).toBe(true);
    });

    test("should return false when ZITADEL_SERVICE_USER_TOKEN is not set", () => {
      process.env.ZITADEL_SERVICE_USER_TOKEN = undefined as any;

      expect(hasServiceUserToken()).toBe(false);
    });

    test("should return false when ZITADEL_SERVICE_USER_TOKEN is empty string", () => {
      process.env.ZITADEL_SERVICE_USER_TOKEN = "";

      expect(hasServiceUserToken()).toBe(false);
    });
  });
});