UDT-002: Logout + Refresh Token con rotación y chain revocation #3
@@ -0,0 +1,39 @@
|
|||||||
|
using NSubstitute;
|
||||||
|
using SIGCM2.Application.Abstractions.Persistence;
|
||||||
|
using SIGCM2.Application.Auth.Logout;
|
||||||
|
|
||||||
|
namespace SIGCM2.Application.Tests.Auth.Logout;
|
||||||
|
|
||||||
|
public class LogoutCommandHandlerTests
|
||||||
|
{
|
||||||
|
private readonly IRefreshTokenRepository _refreshRepo = Substitute.For<IRefreshTokenRepository>();
|
||||||
|
private readonly LogoutCommandHandler _handler;
|
||||||
|
|
||||||
|
public LogoutCommandHandlerTests()
|
||||||
|
{
|
||||||
|
_handler = new LogoutCommandHandler(_refreshRepo);
|
||||||
|
}
|
||||||
|
|
||||||
|
[Fact]
|
||||||
|
public async Task Handle_RevokesAllActiveForUser()
|
||||||
|
{
|
||||||
|
_refreshRepo.RevokeAllActiveForUserAsync(42, Arg.Any<DateTime>()).Returns(3);
|
||||||
|
|
||||||
|
var result = await _handler.Handle(new LogoutCommand(42));
|
||||||
|
|
||||||
|
Assert.True(result.Success);
|
||||||
|
Assert.False(string.IsNullOrWhiteSpace(result.Mensaje));
|
||||||
|
await _refreshRepo.Received(1).RevokeAllActiveForUserAsync(42, Arg.Any<DateTime>());
|
||||||
|
}
|
||||||
|
|
||||||
|
[Fact]
|
||||||
|
public async Task Handle_NoActiveTokens_StillReturnsSuccess()
|
||||||
|
{
|
||||||
|
// 0 rows affected = idempotent logout
|
||||||
|
_refreshRepo.RevokeAllActiveForUserAsync(Arg.Any<int>(), Arg.Any<DateTime>()).Returns(0);
|
||||||
|
|
||||||
|
var result = await _handler.Handle(new LogoutCommand(99));
|
||||||
|
|
||||||
|
Assert.True(result.Success);
|
||||||
|
}
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user