admin-web/src/router/index.test.ts

import { describe, expect, it } from 'vitest'
import router from './index'

describe('admin router access metadata', () => {
  it('uses the root route only as a permission-aware entry point', () => {
    const home = router.getRoutes().find((route) => route.name === 'home')

    expect(home?.path).toBe('/')
    expect(home?.meta.permission).toBeUndefined()
    expect(router.getRoutes().some((route) => route.name === 'dashboard')).toBe(false)
  })

  it('protects warehouse management with its stable list permission', () => {
    const warehouseRoute = router.getRoutes().find((route) => route.name === 'warehouses')

    expect(warehouseRoute?.path).toBe('/warehouses')
    expect(warehouseRoute?.meta.permission).toBe('platform:warehouse:list')
  })

  it('protects express company records with a stable master-data permission', () => {
    const route = router.getRoutes().find((item) => item.name === 'express-companies')

    expect(route?.path).toBe('/master-data/express-companies')
    expect(route?.meta.permission).toBe('platform:express:list')
  })

  it('protects counterparty records with a stable master-data permission', () => {
    const route = router.getRoutes().find((item) => item.name === 'counterparties')
    expect(route?.path).toBe('/master-data/counterparties')
    expect(route?.meta.permission).toBe('platform:counterparty:list')
  })

  it('protects the download center with its stable list permission', () => {
    const route = router.getRoutes().find((item) => item.name === 'download-center')
    expect(route?.path).toBe('/downloads')
    expect(route?.meta.permission).toBe('platform:download:list')
  })

  it('protects enterprise reviews with the backend review menu permission', () => {
    const route = router.getRoutes().find((item) => item.name === 'enterprise-reviews')

    expect(route?.path).toBe('/customers/reviews')
    expect(route?.meta.permission).toBe('platform:customer:review')
  })

  it('keeps forbidden inside the authenticated layout without a business permission', () => {
    const authenticatedLayout = router.options.routes.find((route) => route.path === '/')
    const forbidden = authenticatedLayout?.children?.find((route) => route.name === 'forbidden')
    const resolved = router.resolve('/403')

    expect(authenticatedLayout?.meta?.requiresAuth).toBe(true)
    expect(forbidden?.path).toBe('403')
    expect(forbidden?.meta?.permission).toBeUndefined()
    expect(resolved.matched.some((record) => record.meta.requiresAuth)).toBe(true)
  })
})