アイヌ語追加 (#428) (#433)

Reviewed-on: #433
Co-authored-by: miteruzo <miteruzo@naver.com>

frontend/src/lib/users.session.test.ts

@@ -0,0 +1,69 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const api = vi.hoisted (() => ({ apiGet: vi.fn (), apiPost: vi.fn () }))
+
+vi.mock ('@/lib/api', () => ({ ...api,
+    isApiError: (error: { isAxiosError?: boolean }) => error.isAxiosError === true }))
+
+const user = { id: 1, name: 'Cookie user', role: 'guest', inheritanceCode: 'current-code' }
+const noSession = { isAxiosError: true, response: { status: 401 } }
+
+
+describe ('Cookie session initialisation', () => {
+  beforeEach (() => {
+    vi.resetModules ()
+    vi.clearAllMocks ()
+    api.apiGet.mockReset ()
+    api.apiPost.mockReset ()
+    localStorage.clear ()
+  })
+
+  it ('keeps Cookie identity and updates an older recovery code', async () => {
+    localStorage.setItem ('user_code', 'old-code')
+    api.apiGet.mockResolvedValueOnce (user)
+    const { initialiseUserSession } = await import ('@/lib/users')
+    await expect (initialiseUserSession ()).resolves.toEqual (user)
+    expect (api.apiGet).toHaveBeenCalledWith ('/users/me')
+    expect (api.apiPost).not.toHaveBeenCalled ()
+    expect (localStorage.getItem ('user_code')).toBe ('current-code')
+  })
+
+  it ('restores from storage only after Cookie authentication returns 401', async () => {
+    localStorage.setItem ('user_code', 'backup-code')
+    api.apiGet.mockRejectedValueOnce (noSession)
+    api.apiPost.mockResolvedValueOnce ({ valid: true, user })
+    const { initialiseUserSession } = await import ('@/lib/users')
+    await expect (initialiseUserSession ()).resolves.toEqual (user)
+    expect (api.apiPost).toHaveBeenCalledExactlyOnceWith (
+	'/users/verify', { code: 'backup-code', restore: true })
+  })
+
+  it ('creates an account after a recovery code is rejected', async () => {
+    localStorage.setItem ('user_code', 'expired-code')
+    api.apiGet.mockRejectedValueOnce (noSession)
+    api.apiPost.mockResolvedValueOnce ({ valid: false })
+    api.apiPost.mockResolvedValueOnce ({ code: user.inheritanceCode, user })
+    const { initialiseUserSession } = await import ('@/lib/users')
+    await expect (initialiseUserSession ()).resolves.toEqual (user)
+    expect (api.apiPost).toHaveBeenLastCalledWith ('/users')
+  })
+
+  it.each ([403, 503]) ('does not replace a session when the API returns %s', async status => {
+    localStorage.setItem ('user_code', 'backup-code')
+    const error = { isAxiosError: true, response: { status } }
+    api.apiGet.mockRejectedValueOnce (error)
+    const { initialiseUserSession } = await import ('@/lib/users')
+    await expect (initialiseUserSession ()).rejects.toBe (error)
+    expect (api.apiPost).not.toHaveBeenCalled ()
+    expect (localStorage.getItem ('user_code')).toBe ('backup-code')
+  })
+
+  it ('shares concurrent initialisation to avoid duplicate account creation', async () => {
+    api.apiGet.mockRejectedValueOnce (noSession)
+    api.apiPost.mockResolvedValueOnce ({ code: user.inheritanceCode, user })
+    const { initialiseUserSession } = await import ('@/lib/users')
+    await Promise.all ([initialiseUserSession (), initialiseUserSession ()])
+    expect (api.apiGet).toHaveBeenCalledTimes (1)
+    expect (api.apiPost).toHaveBeenCalledExactlyOnceWith ('/users')
+  })
+})