Files
k-mood/spa/tests/api/session.test.ts
Gabriel Kaszewski bf148902ab spa hardening, offline logging, rate limit fixes
server:
- backup exporter, auth extractors, error shapes, CONTEXT (prior work)
- spa assets served outside the rate limit via route_layer
- requests_per_second went to per_second(), which takes an interval not a
  rate: 50 meant one request per 50s once burst was spent. now converted
  properly. 15/s, burst 60

spa fixes:
- account delete cleared snake_case token keys that were never written
- refresh interceptor could retry forever
- date ranges used local day boundaries stamped +00:00
- "all" period trend plotted one page; calendar days fabricated mood 3
- chart grid invisible: hsl(var(--border)) against rgba tokens
- blob url leak, orphaned media on failed save, devtools in prod bundle
- pt-safe/safe-area-pb classes never existed

spa features:
- offline outbox: entries queue to IndexedDB, replay with backoff, only
  server refusals count against an entry
- drafts persist, quick-log sheet, diary infinite scroll + filters
- route error boundary, stale-chunk recovery, no service worker in dev

a11y + perf:
- mood picker is a radiogroup, activity picker keyboard-operable,
  text alternatives for colour/emoji, locale week start
- dark glass over the bright photo: worst case 1.4:1 -> 4.9-9.6:1
- initial payload 1095->769kB raw, 306->230kB gzip; 38 unused components
  and 5 deps dropped; fonts 218->133kB

53 tests added (43 spa, 10 server)
2026-08-28 15:00:30 +02:00

40 lines
1.0 KiB
TypeScript

import { beforeEach, describe, expect, it } from "vitest"
import {
accessToken,
forgetSession,
hasSession,
refreshToken,
rememberSession,
} from "@/api/session"
const TOKENS = { accessToken: "access-1", refreshToken: "refresh-1" }
describe("session", () => {
beforeEach(() => localStorage.clear())
it("has no session before anything is remembered", () => {
expect(hasSession()).toBe(false)
expect(accessToken()).toBeNull()
})
it("remembers and reads back both tokens", () => {
rememberSession(TOKENS)
expect(hasSession()).toBe(true)
expect(accessToken()).toBe("access-1")
expect(refreshToken()).toBe("refresh-1")
})
it("forgets every key it wrote", () => {
rememberSession(TOKENS)
forgetSession()
expect(hasSession()).toBe(false)
expect(accessToken()).toBeNull()
expect(refreshToken()).toBeNull()
// The bug this guards: deleting an account cleared snake_case keys that
// were never written, leaving a live token behind.
expect(localStorage.length).toBe(0)
})
})