run prettier (#995)

src/shared/auth.test.ts

@@ -1,116 +1,111 @@
 import { describe, it, expect } from '@jest/globals';
-import {
-  SafeUrlSchema,
-  OAuthMetadataSchema,
-  OpenIdProviderMetadataSchema,
-  OAuthClientMetadataSchema,
-} from './auth.js';
+import { SafeUrlSchema, OAuthMetadataSchema, OpenIdProviderMetadataSchema, OAuthClientMetadataSchema } from './auth.js';
 
 describe('SafeUrlSchema', () => {
-  it('accepts valid HTTPS URLs', () => {
-    expect(SafeUrlSchema.parse('https://example.com')).toBe('https://example.com');
-    expect(SafeUrlSchema.parse('https://auth.example.com/oauth/authorize')).toBe('https://auth.example.com/oauth/authorize');
-  });
+    it('accepts valid HTTPS URLs', () => {
+        expect(SafeUrlSchema.parse('https://example.com')).toBe('https://example.com');
+        expect(SafeUrlSchema.parse('https://auth.example.com/oauth/authorize')).toBe('https://auth.example.com/oauth/authorize');
+    });
 
-  it('accepts valid HTTP URLs', () => {
-    expect(SafeUrlSchema.parse('http://localhost:3000')).toBe('http://localhost:3000');
-  });
+    it('accepts valid HTTP URLs', () => {
+        expect(SafeUrlSchema.parse('http://localhost:3000')).toBe('http://localhost:3000');
+    });
 
-  it('rejects javascript: scheme URLs', () => {
-    expect(() => SafeUrlSchema.parse('javascript:alert(1)')).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
-    expect(() => SafeUrlSchema.parse('JAVASCRIPT:alert(1)')).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
-  });
+    it('rejects javascript: scheme URLs', () => {
+        expect(() => SafeUrlSchema.parse('javascript:alert(1)')).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
+        expect(() => SafeUrlSchema.parse('JAVASCRIPT:alert(1)')).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
+    });
 
-  it('rejects invalid URLs', () => {
-    expect(() => SafeUrlSchema.parse('not-a-url')).toThrow();
-    expect(() => SafeUrlSchema.parse('')).toThrow();
-  });
+    it('rejects invalid URLs', () => {
+        expect(() => SafeUrlSchema.parse('not-a-url')).toThrow();
+        expect(() => SafeUrlSchema.parse('')).toThrow();
+    });
 
-  it('works with safeParse', () => {
-    expect(() => SafeUrlSchema.safeParse('not-a-url')).not.toThrow();
-  });
+    it('works with safeParse', () => {
+        expect(() => SafeUrlSchema.safeParse('not-a-url')).not.toThrow();
+    });
 });
 
 describe('OAuthMetadataSchema', () => {
-  it('validates complete OAuth metadata', () => {
-    const metadata = {
-      issuer: 'https://auth.example.com',
-      authorization_endpoint: 'https://auth.example.com/oauth/authorize',
-      token_endpoint: 'https://auth.example.com/oauth/token',
-      response_types_supported: ['code'],
-      scopes_supported: ['read', 'write'],
-    };
+    it('validates complete OAuth metadata', () => {
+        const metadata = {
+            issuer: 'https://auth.example.com',
+            authorization_endpoint: 'https://auth.example.com/oauth/authorize',
+            token_endpoint: 'https://auth.example.com/oauth/token',
+            response_types_supported: ['code'],
+            scopes_supported: ['read', 'write']
+        };
 
-    expect(() => OAuthMetadataSchema.parse(metadata)).not.toThrow();
-  });
+        expect(() => OAuthMetadataSchema.parse(metadata)).not.toThrow();
+    });
 
-  it('rejects metadata with javascript: URLs', () => {
-    const metadata = {
-      issuer: 'https://auth.example.com',
-      authorization_endpoint: 'javascript:alert(1)',
-      token_endpoint: 'https://auth.example.com/oauth/token',
-      response_types_supported: ['code'],
-    };
+    it('rejects metadata with javascript: URLs', () => {
+        const metadata = {
+            issuer: 'https://auth.example.com',
+            authorization_endpoint: 'javascript:alert(1)',
+            token_endpoint: 'https://auth.example.com/oauth/token',
+            response_types_supported: ['code']
+        };
 
-    expect(() => OAuthMetadataSchema.parse(metadata)).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
-  });
+        expect(() => OAuthMetadataSchema.parse(metadata)).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
+    });
 
-  it('requires mandatory fields', () => {
-    const incompleteMetadata = {
-      issuer: 'https://auth.example.com',
-    };
+    it('requires mandatory fields', () => {
+        const incompleteMetadata = {
+            issuer: 'https://auth.example.com'
+        };
 
-    expect(() => OAuthMetadataSchema.parse(incompleteMetadata)).toThrow();
-  });
+        expect(() => OAuthMetadataSchema.parse(incompleteMetadata)).toThrow();
+    });
 });
 
 describe('OpenIdProviderMetadataSchema', () => {
-  it('validates complete OpenID Provider metadata', () => {
-    const metadata = {
-      issuer: 'https://auth.example.com',
-      authorization_endpoint: 'https://auth.example.com/oauth/authorize',
-      token_endpoint: 'https://auth.example.com/oauth/token',
-      jwks_uri: 'https://auth.example.com/.well-known/jwks.json',
-      response_types_supported: ['code'],
-      subject_types_supported: ['public'],
-      id_token_signing_alg_values_supported: ['RS256'],
-    };
+    it('validates complete OpenID Provider metadata', () => {
+        const metadata = {
+            issuer: 'https://auth.example.com',
+            authorization_endpoint: 'https://auth.example.com/oauth/authorize',
+            token_endpoint: 'https://auth.example.com/oauth/token',
+            jwks_uri: 'https://auth.example.com/.well-known/jwks.json',
+            response_types_supported: ['code'],
+            subject_types_supported: ['public'],
+            id_token_signing_alg_values_supported: ['RS256']
+        };
 
-    expect(() => OpenIdProviderMetadataSchema.parse(metadata)).not.toThrow();
-  });
+        expect(() => OpenIdProviderMetadataSchema.parse(metadata)).not.toThrow();
+    });
 
-  it('rejects metadata with javascript: in jwks_uri', () => {
-    const metadata = {
-      issuer: 'https://auth.example.com',
-      authorization_endpoint: 'https://auth.example.com/oauth/authorize',
-      token_endpoint: 'https://auth.example.com/oauth/token',
-      jwks_uri: 'javascript:alert(1)',
-      response_types_supported: ['code'],
-      subject_types_supported: ['public'],
-      id_token_signing_alg_values_supported: ['RS256'],
-    };
+    it('rejects metadata with javascript: in jwks_uri', () => {
+        const metadata = {
+            issuer: 'https://auth.example.com',
+            authorization_endpoint: 'https://auth.example.com/oauth/authorize',
+            token_endpoint: 'https://auth.example.com/oauth/token',
+            jwks_uri: 'javascript:alert(1)',
+            response_types_supported: ['code'],
+            subject_types_supported: ['public'],
+            id_token_signing_alg_values_supported: ['RS256']
+        };
 
-    expect(() => OpenIdProviderMetadataSchema.parse(metadata)).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
-  });
+        expect(() => OpenIdProviderMetadataSchema.parse(metadata)).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
+    });
 });
 
 describe('OAuthClientMetadataSchema', () => {
-  it('validates client metadata with safe URLs', () => {
-    const metadata = {
-      redirect_uris: ['https://app.example.com/callback'],
-      client_name: 'Test App',
-      client_uri: 'https://app.example.com',
-    };
+    it('validates client metadata with safe URLs', () => {
+        const metadata = {
+            redirect_uris: ['https://app.example.com/callback'],
+            client_name: 'Test App',
+            client_uri: 'https://app.example.com'
+        };
 
-    expect(() => OAuthClientMetadataSchema.parse(metadata)).not.toThrow();
-  });
+        expect(() => OAuthClientMetadataSchema.parse(metadata)).not.toThrow();
+    });
 
-  it('rejects client metadata with javascript: redirect URIs', () => {
-    const metadata = {
-      redirect_uris: ['javascript:alert(1)'],
-      client_name: 'Test App',
-    };
+    it('rejects client metadata with javascript: redirect URIs', () => {
+        const metadata = {
+            redirect_uris: ['javascript:alert(1)'],
+            client_name: 'Test App'
+        };
 
-    expect(() => OAuthClientMetadataSchema.parse(metadata)).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
-  });
+        expect(() => OAuthClientMetadataSchema.parse(metadata)).toThrow('URL cannot use javascript:, data:, or vbscript: scheme');
+    });
 });