test: Add test coverage

Author: DanielRivers

lib/utils/exchangeAuthCode.test.ts

@@ -576,4 +576,46 @@ describe("exchangeAuthCode", () => {
       "refresh",
     );
   });
+
+  it("returns error when persisting tokens to secure storage fails", async () => {
+    const store = new MemoryStorage();
+    setActiveStorage(store);
+
+    await store.setItems({
+      [StorageKeys.state]: "state",
+      [StorageKeys.codeVerifier]: "verifier",
+    });
+
+    const urlParams = new URLSearchParams();
+    urlParams.append("code", "hello");
+    urlParams.append("state", "state");
+    urlParams.append("client_id", "test");
+
+    fetchMock.mockResponseOnce(
+      JSON.stringify({
+        access_token: "access_token",
+        refresh_token: "refresh_token",
+        id_token: "id_token",
+      }),
+    );
+
+    const setItemsSpy = vi
+      .spyOn(store, "setItems")
+      .mockRejectedValue(new Error("Persist failed"));
+
+    const result = await exchangeAuthCode({
+      urlParams,
+      domain: "http://test.kinde.com",
+      clientId: "test",
+      redirectURL: "http://test.kinde.com",
+    });
+
+    expect(setItemsSpy).toHaveBeenCalled();
+    expect(result).toStrictEqual({
+      success: false,
+      error: expect.stringContaining(
+        "Failed to persist tokens: Error: Persist failed",
+      ),
+    });
+  });
 });

lib/utils/token/getDecodedToken.test.ts

@@ -62,4 +62,13 @@ describe("getDecodedTokenSync", () => {
     const t = getDecodedTokenSync("accessToken");
     expect(t?.org_code).toBe("org_123456789");
   });
+
+  it("using an async storage in sync mode throws an error", () => {
+    const storage = new MemoryStorage();
+    storage.asyncStore = true;
+    setActiveStorage(storage);
+    expect(() => getDecodedTokenSync("accessToken")).toThrow(
+      "Active storage is async-only. Use the async helpers.",
+    );
+  });
 });

lib/utils/token/getRawToken.test.ts

@@ -1,7 +1,7 @@
 import { describe, expect, it, beforeEach } from "vitest";
 import { getRawToken, getRawTokenSync } from "./getRawToken";
 import { MemoryStorage, StorageKeys } from "../../sessionManager";
-import { setActiveStorage } from ".";
+import { clearActiveStorage, setActiveStorage } from ".";
 import { createMockAccessToken } from "./testUtils";
 
 describe("getRawToken", () => {
@@ -59,6 +59,7 @@ describe("getRawToken accessToken", () => {
 
 describe("getRawTokenSync", () => {
   it("returns null when no active storage is defined", () => {
+    clearActiveStorage();
     expect(getRawTokenSync("idToken")).toBe(null);
   });
 
@@ -69,4 +70,13 @@ describe("getRawTokenSync", () => {
     storage.setSessionItem(StorageKeys.accessToken, mockedToken);
     expect(getRawTokenSync("accessToken")).toBe(mockedToken);
   });
+
+  it("using an async storage in sync mode throws an error", () => {
+    const storage = new MemoryStorage();
+    storage.asyncStore = true;
+    setActiveStorage(storage);
+    expect(() => getRawTokenSync()).toThrow(
+      "Active storage is async-only. Use the async helpers.",
+    );
+  });
 });

lib/utils/token/getRoles.test.ts

@@ -381,4 +381,11 @@ describe("getRolesSync", () => {
     const roles = getRolesSync();
     expect(roles).toStrictEqual([{ id: "1", key: "admin", name: "Admin" }]);
   });
+
+  it("can't forceApi in in sync request", () => {
+    storage.setSessionItem(StorageKeys.accessToken, null);
+    expect(() => getRolesSync({ forceApi: true })).toThrow(
+      "forceApi cannot be used in sync mode",
+    );
+  });
 });