import "../setup.ts";
import { assert, assertFalse } from "@std/assert";
import { isAuthPayload, isPasswordResetPayload } from "../../model/auth.ts";

Deno.test("isAuthPayload refuses purpose-scoped tokens", () => {
  const base = { userId: "u", username: "n", role: "user", exp: 1 };
  assert(isAuthPayload(base));
  assertFalse(isAuthPayload({ ...base, purpose: "media" }));
  assertFalse(isAuthPayload({ ...base, role: "root" }));
  assertFalse(isAuthPayload({ ...base, exp: "1" }));
  assert(isPasswordResetPayload({ purpose: "password-reset", userId: "u" }));
  assertFalse(isPasswordResetPayload({ purpose: "media", userId: "u" }));
});