test: add invalid CSRF token test case (#5488)

Signed-off-by: Peter Makowski <[email protected]>
canonical · Jun 26, 2024 · e665732 · e665732
1 parent f796cc5
commit e665732
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/src/app/api/base.test.ts b/src/app/api/base.test.ts
@@ -42,3 +42,19 @@ it("should handle errors", async () => {
     .mockResolvedValue({ ok: false, statusText: "Bad Request" });
   await expect(fetchWithAuth(url)).rejects.toThrow("Bad Request");
 });
+
+it("should handle invalid CSRF token", async () => {
+  (getCookie as Mock).mockReturnValue(null);
+
+  const mockResponse = {
+    ok: false,
+    status: 403,
+    statusText: "Forbidden",
+  };
+  global.fetch = vi.fn().mockResolvedValue(mockResponse);
+
+  await expect(fetchWithAuth(url)).rejects.toThrow("Forbidden");
+  expect(fetch).toHaveBeenCalledWith(url, {
+    headers: { ...DEFAULT_HEADERS, "X-CSRFToken": "" },
+  });
+});