ResCookie.mjs

'use strict'

import { describe, it } from 'node:test'
import express from '../lib/express.js'
import request from 'supertest'
import cookieParser from 'cookie-parser'
import merge from 'utils-merge'

describe('res', () => {
  describe('.cookie(name, object)', () => {
    it('should generate a JSON cookie', (t, done) => {
      const app = express()

      app.use((req, res) => {
        res.cookie('user', { name: 'tobi' }).end()
      })

      request(app)
      .get('/')
      .expect('Set-Cookie', 'user=j%3A%7B%22name%22%3A%22tobi%22%7D; Path=/')
      .expect(200, done)
    })
  })

  describe('.cookie(name, string)', () => {
    it('should set a cookie', (t, done) => {
      const app = express()

      app.use((req, res) => {
        res.cookie('name', 'tobi').end()
      })

      request(app)
      .get('/')
      .expect('Set-Cookie', 'name=tobi; Path=/')
      .expect(200, done)
    })

    it('should allow multiple calls', (t, done) => {
      const app = express()

      app.use((req, res) => {
        res.cookie('name', 'tobi')
        res.cookie('age', 1)
        res.cookie('gender', '?')
        res.end()
      })

      request(app)
        .get('/')
        .expect('Set-Cookie', 'name=tobi; Path=/,age=1; Path=/,gender=%3F; Path=/')
        .expect(200, done)
    })
  })

  describe('.cookie(name, string, options)', () => {
    it('should set params', (t, done) => {
      const app = express()

      app.use((req, res) => {
        res.cookie('name', 'tobi', { httpOnly: true, secure: true })
        res.end()
      })

      request(app)
      .get('/')
      .expect('Set-Cookie', 'name=tobi; Path=/; HttpOnly; Secure')
      .expect(200, done)
    })

    describe('maxAge', () => {
      it('should set relative expires', (t, done) => {
        const app = express()

        app.use((req, res) => {
          res.cookie('name', 'tobi', { maxAge: 1000 })
          res.end()
        })

        request(app)
          .get('/')
          .expect('Set-Cookie', /name=tobi; Max-Age=1; Path=\/; Expires=/)
          .expect(200, done)
      })

      it('should set max-age', (t, done) => {
        const app = express()

        app.use((req, res) => {
          res.cookie('name', 'tobi', { maxAge: 1000 })
          res.end()
        })

        request(app)
        .get('/')
        .expect('Set-Cookie', /Max-Age=1/, done)
      })

      it('should not mutate the options object', (t, done) => {
        const app = express()

        const options = { maxAge: 1000 }
        const optionsCopy = merge({}, options)

        app.use((req, res) => {
          res.cookie('name', 'tobi', options)
          res.json(options)
        })

        request(app)
        .get('/')
        .expect(200, optionsCopy, done)
      })

      it('should throw an error with invalid maxAge', (t, done) => {
        const app = express()

        app.use((req, res) => {
          res.cookie('name', 'tobi', { maxAge: 'foobar' })
          res.end()
        })

        request(app)
          .get('/')
          .expect(500, /option maxAge is invalid/, done)
      })
    })

    describe('signed', () => {
      it('should generate a signed JSON cookie', (t, done) => {
        const app = express()

        app.use(cookieParser('foo bar baz'))

        app.use((req, res) => {
          res.cookie('user', { name: 'tobi' }, { signed: true }).end()
        })

        request(app)
          .get('/')
          .expect('Set-Cookie', 'user=s%3Aj%3A%7B%22name%22%3A%22tobi%22%7D.K20xcwmDS%2BPb1rsD95o5Jm5SqWs1KteqdnynnB7jkTE; Path=/')
          .expect(200, done)
      })
    })

    describe('signed without secret', () => {
      it('should throw an error', (t, done) => {
        const app = express()

        app.use(cookieParser())

        app.use((req, res) => {
          res.cookie('name', 'tobi', { signed: true }).end()
        })

        request(app)
        .get('/')
        .expect(500, /secret\S+ required for signed cookies/, done)
      })
    })

    describe('.signedCookie(name, string)', () => {
      it('should set a signed cookie', (t, done) => {
        const app = express()

        app.use(cookieParser('foo bar baz'))

        app.use((req, res) => {
          res.cookie('name', 'tobi', { signed: true }).end()
        })

        request(app)
        .get('/')
        .expect('Set-Cookie', 'name=s%3Atobi.xJjV2iZ6EI7C8E5kzwbfA9PVLl1ZR07UTnuTgQQ4EnQ; Path=/')
        .expect(200, done)
      })
    })
  })
})