cofacts / rumors-api / 25278858971 / 1

82%

master: 82%

Pull #386

github

test(auth): update BFF tests for session isolation; add provider route coverage

- loginRouter tests now assert ctx.state.bffInfo (not ctx.session.redirectTo)
  and verify ctx.session is not touched for BFF flow.
- authRouter tests drive BFF flow via query.state (encoded BFF state) and
  user.id, replacing the old session.redirectTo / user.userId approach.
- 'clears session fields' test replaced with 'does not mutate legacy session
  fields during BFF redirect', asserting full isolation.
- New describe block: assert facebook/github/google provider routes pass the
  encoded composite state to passport.authenticate() when ctx.state.bffInfo
  is set, and omit state option in the legacy flow.

890 of 1160 branches covered (76.72%)

Branch coverage included in aggregate %.

1732 of 2029 relevant lines covered (85.36%)

17.2 hits per line