/**
* mysql-mcp - Scopes Unit Tests
*
* Tests for OAuth scope utilities.
*/
import { describe, it, expect } from 'vitest';
import {
SCOPES,
parseScopes,
hasScope,
hasAnyScope,
hasAllScopes,
getScopeForToolGroup,
hasDatabaseScope,
hasTableScope,
getScopeDisplayName
} from '../scopes.js';
describe('parseScopes', () => {
it('should parse space-delimited scope string', () => {
expect(parseScopes('read write admin')).toEqual(['read', 'write', 'admin']);
});
it('should return empty array for undefined', () => {
expect(parseScopes(undefined)).toEqual([]);
});
it('should return empty array for empty string', () => {
expect(parseScopes('')).toEqual([]);
});
it('should handle single scope', () => {
expect(parseScopes('read')).toEqual(['read']);
});
});
describe('hasScope', () => {
it('should return true for direct match', () => {
expect(hasScope(['read', 'write'], 'read')).toBe(true);
});
it('should return false when scope not present', () => {
expect(hasScope(['read'], 'write')).toBe(false);
});
it('should grant all scopes when full is present', () => {
expect(hasScope(['full'], 'read')).toBe(true);
expect(hasScope(['full'], 'write')).toBe(true);
expect(hasScope(['full'], 'admin')).toBe(true);
});
it('should grant read and write when admin is present', () => {
expect(hasScope(['admin'], 'read')).toBe(true);
expect(hasScope(['admin'], 'write')).toBe(true);
});
it('should grant read when write is present', () => {
expect(hasScope(['write'], 'read')).toBe(true);
});
it('should not grant write when only read is present', () => {
expect(hasScope(['read'], 'write')).toBe(false);
});
});
describe('hasAnyScope', () => {
it('should return true if any scope matches', () => {
expect(hasAnyScope(['read'], ['read', 'write'])).toBe(true);
});
it('should return false if no scopes match', () => {
expect(hasAnyScope(['read'], ['write', 'admin'])).toBe(false);
});
});
describe('hasAllScopes', () => {
it('should return true if all scopes match', () => {
expect(hasAllScopes(['read', 'write', 'admin'], ['read', 'write'])).toBe(true);
});
it('should return false if not all scopes match', () => {
expect(hasAllScopes(['read'], ['read', 'write'])).toBe(false);
});
});
describe('getScopeForToolGroup', () => {
it('should return read for query tools', () => {
expect(getScopeForToolGroup('core')).toBe(SCOPES.READ);
expect(getScopeForToolGroup('json')).toBe(SCOPES.READ);
expect(getScopeForToolGroup('text')).toBe(SCOPES.READ);
});
it('should return write for transaction tools', () => {
expect(getScopeForToolGroup('transactions')).toBe(SCOPES.WRITE);
});
it('should return admin for admin tools', () => {
expect(getScopeForToolGroup('admin')).toBe(SCOPES.ADMIN);
expect(getScopeForToolGroup('backup')).toBe(SCOPES.ADMIN);
expect(getScopeForToolGroup('shell')).toBe(SCOPES.ADMIN);
});
});
describe('hasDatabaseScope', () => {
it('should return true for full scope', () => {
expect(hasDatabaseScope(['full'], 'mydb')).toBe(true);
});
it('should return true for admin scope', () => {
expect(hasDatabaseScope(['admin'], 'mydb')).toBe(true);
});
it('should return true for matching db: pattern', () => {
expect(hasDatabaseScope(['db:mydb'], 'mydb')).toBe(true);
});
it('should return false for non-matching db: pattern', () => {
expect(hasDatabaseScope(['db:otherdb'], 'mydb')).toBe(false);
});
});
describe('hasTableScope', () => {
it('should return true for full scope', () => {
expect(hasTableScope(['full'], 'mydb', 'users')).toBe(true);
});
it('should return true for admin scope', () => {
expect(hasTableScope(['admin'], 'mydb', 'users')).toBe(true);
});
it('should return true for matching database scope', () => {
expect(hasTableScope(['db:mydb'], 'mydb', 'users')).toBe(true);
});
it('should return true for matching table: pattern', () => {
expect(hasTableScope(['table:mydb:users'], 'mydb', 'users')).toBe(true);
});
it('should return false for non-matching table: pattern', () => {
expect(hasTableScope(['table:mydb:products'], 'mydb', 'users')).toBe(false);
});
});
describe('getScopeDisplayName', () => {
it('should return display names for standard scopes', () => {
expect(getScopeDisplayName('read')).toBe('Read Only');
expect(getScopeDisplayName('write')).toBe('Read/Write');
expect(getScopeDisplayName('admin')).toBe('Administrative');
expect(getScopeDisplayName('full')).toBe('Full Access');
});
it('should format db: scopes', () => {
expect(getScopeDisplayName('db:mydb')).toBe('Database: mydb');
});
it('should format table: scopes', () => {
expect(getScopeDisplayName('table:mydb:users')).toBe('Table: mydb:users');
});
it('should return unknown scopes as-is', () => {
expect(getScopeDisplayName('custom_scope')).toBe('custom_scope');
});
});
