Relocate tests under /test (#1220)

test/helpers/oauth.ts

@@ -0,0 +1,87 @@
+import type { FetchLike } from '../../src/shared/transport.js';
+
+export interface MockOAuthFetchOptions {
+    resourceServerUrl: string;
+    authServerUrl: string;
+    /**
+     * Optional hook to inspect or override the token request.
+     */
+    onTokenRequest?: (url: URL, init: RequestInit | undefined) => void | Promise<void>;
+}
+
+/**
+ * Shared mock fetch implementation for OAuth flows used in client tests.
+ *
+ * It handles:
+ * - OAuth Protected Resource Metadata discovery
+ * - Authorization Server Metadata discovery
+ * - Token endpoint responses
+ */
+export function createMockOAuthFetch(options: MockOAuthFetchOptions): FetchLike {
+    const { resourceServerUrl, authServerUrl, onTokenRequest } = options;
+
+    return async (input: string | URL, init?: RequestInit): Promise<Response> => {
+        const url = input instanceof URL ? input : new URL(input);
+
+        // Protected resource metadata discovery
+        if (url.origin === resourceServerUrl.slice(0, -1) && url.pathname === '/.well-known/oauth-protected-resource') {
+            return new Response(
+                JSON.stringify({
+                    resource: resourceServerUrl,
+                    authorization_servers: [authServerUrl]
+                }),
+                {
+                    status: 200,
+                    headers: { 'Content-Type': 'application/json' }
+                }
+            );
+        }
+
+        // Authorization server metadata discovery
+        if (url.origin === authServerUrl && url.pathname === '/.well-known/oauth-authorization-server') {
+            return new Response(
+                JSON.stringify({
+                    issuer: authServerUrl,
+                    authorization_endpoint: `${authServerUrl}/authorize`,
+                    token_endpoint: `${authServerUrl}/token`,
+                    response_types_supported: ['code'],
+                    token_endpoint_auth_methods_supported: ['client_secret_basic', 'private_key_jwt']
+                }),
+                {
+                    status: 200,
+                    headers: { 'Content-Type': 'application/json' }
+                }
+            );
+        }
+
+        // Token endpoint
+        if (url.origin === authServerUrl && url.pathname === '/token') {
+            if (onTokenRequest) {
+                await onTokenRequest(url, init);
+            }
+
+            return new Response(
+                JSON.stringify({
+                    access_token: 'test-access-token',
+                    token_type: 'Bearer'
+                }),
+                {
+                    status: 200,
+                    headers: { 'Content-Type': 'application/json' }
+                }
+            );
+        }
+
+        throw new Error(`Unexpected URL in mock OAuth fetch: ${url.toString()}`);
+    };
+}
+
+/**
+ * Helper to install a vi.fn-based global.fetch mock for tests that rely on global fetch.
+ */
+export function mockGlobalFetch() {
+    const mockFetch = vi.fn();
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    (globalThis as any).fetch = mockFetch;
+    return mockFetch;
+}