Add SaaS frontend code (#5879)

# Description of Changes Adds the code for the SaaS frontend as proprietary code to the OSS repo. This version of the code is adapted from 22/1/2026, which was the last SaaS version based on the 'V2' design. This will move us closer to being able to have the OSS products understand whether the user has a SaaS account, and provide the correct UI in those cases.
2026-07-15 19:10:47 +02:00 · 2026-03-11 11:53:54 +00:00
parent 8bc37bf5ae
commit fa8c52b2be
114 changed files with 12408 additions and 99 deletions
@@ -0,0 +1,237 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { supabase } from '@app/auth/supabase';
+
+// Mock supabase
+vi.mock('@app/auth/supabase', () => ({
+  supabase: {
+    auth: {
+      getSession: vi.fn(),
+      refreshSession: vi.fn(),
+    },
+  },
+}));
+
+describe('apiClient', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    // Reset modules to get fresh instance of apiClient
+    vi.resetModules();
+  });
+
+  it('should add JWT token to request headers when session exists', async () => {
+    const mockToken = 'test-jwt-token-12345';
+    const mockSession: any = {
+      access_token: mockToken,
+      refresh_token: 'refresh-token',
+      expires_in: 3600,
+      token_type: 'bearer',
+      user: { id: 'user-123' },
+    };
+
+    // Mock getSession to return a session with token
+    vi.mocked(supabase.auth.getSession).mockResolvedValue({
+      data: { session: mockSession },
+      error: null,
+    });
+
+    // Import apiClient after mocking
+    const { default: apiClient } = await import('@app/services/apiClient');
+
+    // Create a mock adapter to intercept the request
+    const mockAdapter = vi.fn((config) => {
+      // Verify the Authorization header is set correctly
+      expect(config.headers.Authorization).toBe(`Bearer ${mockToken}`);
+      return Promise.resolve({
+        data: { success: true },
+        status: 200,
+        statusText: 'OK',
+        headers: {},
+        config,
+      });
+    });
+
+    // Replace the adapter
+    apiClient.defaults.adapter = mockAdapter;
+
+    // Make a test request
+    await apiClient.get('/api/v1/test');
+
+    // Verify the request was made with the token
+    expect(mockAdapter).toHaveBeenCalled();
+    expect(supabase.auth.getSession).toHaveBeenCalled();
+  });
+
+  it('should handle requests when no session exists', async () => {
+    // Mock getSession to return no session
+    vi.mocked(supabase.auth.getSession).mockResolvedValue({
+      data: { session: null },
+      error: null,
+    });
+
+    // Import apiClient after mocking
+    const { default: apiClient } = await import('@app/services/apiClient');
+
+    // Create a mock adapter to intercept the request
+    const mockAdapter = vi.fn((config) => {
+      // Verify no Authorization header is set
+      expect(config.headers.Authorization).toBeUndefined();
+      return Promise.resolve({
+        data: { success: true },
+        status: 200,
+        statusText: 'OK',
+        headers: {},
+        config,
+      });
+    });
+
+    // Replace the adapter
+    apiClient.defaults.adapter = mockAdapter;
+
+    // Make a test request
+    await apiClient.get('/api/v1/test');
+
+    // Verify the request was made without a token
+    expect(mockAdapter).toHaveBeenCalled();
+    expect(supabase.auth.getSession).toHaveBeenCalled();
+  });
+
+  it('should refresh token on 401 response', async () => {
+    const oldToken = 'old-token';
+    const newToken = 'new-refreshed-token';
+
+    const oldSession: any = {
+      access_token: oldToken,
+      refresh_token: 'refresh-token',
+      expires_in: 3600,
+      token_type: 'bearer',
+      user: { id: 'user-123' },
+    };
+
+    const newSession: any = {
+      access_token: newToken,
+      refresh_token: 'new-refresh-token',
+      expires_in: 3600,
+      token_type: 'bearer',
+      user: { id: 'user-123' },
+    };
+
+    // Mock initial session for first request
+    let getSessionCallCount = 0;
+    vi.mocked(supabase.auth.getSession).mockImplementation(async () => {
+      getSessionCallCount++;
+      // First call returns old session, subsequent calls return new session
+      if (getSessionCallCount === 1) {
+        return { data: { session: oldSession }, error: null };
+      }
+      return { data: { session: newSession }, error: null };
+    });
+
+    // Mock refresh to return new session
+    vi.mocked(supabase.auth.refreshSession).mockResolvedValue({
+      data: { user: null, session: newSession },
+      error: null as any,
+    } as any);
+
+    // Import apiClient after mocking
+    const { default: apiClient } = await import('@app/services/apiClient');
+
+    let requestCount = 0;
+    const mockAdapter = vi.fn((config) => {
+      requestCount++;
+
+      // First request returns 401
+      if (requestCount === 1) {
+        // Verify first request has old token
+        expect(config.headers.Authorization).toBe(`Bearer ${oldToken}`);
+        const error: any = new Error('Unauthorized');
+        error.response = {
+          status: 401,
+          data: { error: 'Unauthorized' },
+        };
+        error.config = config;
+        return Promise.reject(error);
+      }
+
+      // Second request (after refresh) should have new token
+      // The interceptor will call getSession again, which now returns the new session
+      expect(config.headers.Authorization).toBe(`Bearer ${newToken}`);
+      return Promise.resolve({
+        data: { success: true },
+        status: 200,
+        statusText: 'OK',
+        headers: {},
+        config,
+      });
+    });
+
+    // Replace the adapter
+    apiClient.defaults.adapter = mockAdapter;
+
+    // Make a test request that will trigger 401 and retry
+    const response = await apiClient.get('/api/v1/test');
+
+    // Verify the token was refreshed and request retried
+    expect(response.data).toEqual({ success: true });
+    expect(supabase.auth.refreshSession).toHaveBeenCalled();
+    expect(mockAdapter).toHaveBeenCalledTimes(2);
+    expect(getSessionCallCount).toBe(3); // Called for initial request, for checking if refresh is possible, and for retry
+  });
+
+  it('should handle refresh token failure', async () => {
+    const oldToken = 'old-token';
+
+    const oldSession = {
+      access_token: oldToken,
+      user: { id: 'user-123' },
+    };
+
+    // Mock initial session
+    vi.mocked(supabase.auth.getSession).mockResolvedValue({
+      data: { session: oldSession },
+      error: null,
+    } as any);
+    vi.mocked(supabase.auth.getSession).mockResolvedValue({
+      data: { session: oldSession },
+      error: null,
+    } as any);
+
+    // Mock refresh to fail
+    vi.mocked(supabase.auth.refreshSession).mockResolvedValue({
+      data: { user: null, session: null },
+      error: { name: 'AuthError', message: 'Refresh failed', status: 400, code: 'auth_error', __isAuthError: true } as any,
+    } as any);
+
+    // Import apiClient after mocking
+    const { default: apiClient } = await import('@app/services/apiClient');
+
+    // Mock window.location for redirect test
+    delete (window as any).location;
+    window.location = { href: '' } as any;
+
+    const mockAdapter = vi.fn((config) => {
+      // Always return 401 to trigger refresh
+      const error: any = new Error('Unauthorized');
+      error.response = {
+        status: 401,
+        data: { error: 'Unauthorized' },
+      };
+      error.config = config;
+      return Promise.reject(error);
+    });
+
+    // Replace the adapter
+    apiClient.defaults.adapter = mockAdapter;
+
+    // Make a test request that will trigger 401
+    try {
+      await apiClient.get('/api/v1/test');
+      // Should not reach here
+      expect(true).toBe(false);
+    } catch (_) {
+      // Verify refresh was attempted
+      expect(supabase.auth.refreshSession).toHaveBeenCalled();
+      // Verify redirect to login
+      expect(window.location.href).toBe('/login');
+    }
+  });
+});