import { describe, expect, it } from 'vitest'
import { decodeJwtClaims } from './jwt'

function token(payload: string) {
  return `header.${Buffer.from(payload).toString('base64url')}.signature`
}

describe('JWT claim decoding', () => {
  it.each(['2110664514823360515', '"2110664514823360515"'])('preserves the exact account ID encoded as %s', userId => {
    const claims = decodeJwtClaims(token(`{"user_id":${userId},"app_code":"PLATFORM","exp":1792060000,"iat":1792058200}`))
    expect(claims.user_id).toBe('2110664514823360515')
    expect(claims.exp).toBe(1792060000)
    expect(claims).toHaveProperty('iat', 1792058200)
  })

  it('retains safe numeric IDs and ordinary claims', () => {
    expect(decodeJwtClaims(token('{"user_id":123,"username":"operator","roles":["ADMIN"],"exp":1}')))
      .toEqual({ user_id: 123, username: 'operator', roles: ['ADMIN'], exp: 1 })
  })

  it.each(['', 'header..signature'])('rejects a missing payload: %s', value => {
    expect(() => decodeJwtClaims(value)).toThrow('登录响应中的 accessToken 格式无效')
  })

  it.each(['header.%.signature', token('{"user_id":2110664514823360515,')])('rejects malformed encoding or JSON: %s', value => {
    expect(() => decodeJwtClaims(value)).toThrow('登录响应中的 accessToken 无法解析')
  })
})