Files
TREK/client/src/components/Settings/IntegrationsTab.test.tsx
T
Maurice 2efa843306 fix(test): the MCP endpoint cases find their own row again
FE-COMP-INTEGRATIONS-004, -015 and -016 took the first <code> and the first
Copy button on the tab and expected the MCP endpoint. Since the API keys card
shows the /api/v1 address with a copy button of its own (#2371), and it sits
above the MCP section, those queries landed on the API card: the URL read
/api/v1 and the click copied it. The cases now go through the endpoint's own
label.
2026-09-14 23:23:22 +02:00

968 lines
40 KiB
TypeScript
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
// FE-COMP-INTEGRATIONS-001 to FE-COMP-INTEGRATIONS-047
import { render, screen, waitFor } from '../../../tests/helpers/render';
import userEvent from '@testing-library/user-event';
import { http, HttpResponse } from 'msw';
import { server } from '../../../tests/helpers/msw/server';
import { useAuthStore } from '../../store/authStore';
import { useAddonStore } from '../../store/addonStore';
import { resetAllStores, seedStore } from '../../../tests/helpers/store';
import { buildUser } from '../../../tests/helpers/factories';
import { ToastContainer } from '../shared/Toast';
import IntegrationsTab from './IntegrationsTab';
function enableMcp() {
seedStore(useAddonStore, {
addons: [{ id: 'mcp', name: 'MCP', type: 'integration', icon: '', enabled: true }],
loaded: true,
loadAddons: vi.fn(),
});
}
/**
* The MCP endpoint row: the URL under its label and the copy button beside it.
*
* Found through its own label, not as "the first <code>" and "the first Copy
* button". The API keys card above it shows the /api/v1 address with a copy
* button of its own, and a positional query lands on that one instead.
*/
function mcpEndpointRow() {
const row = screen.getByText('MCP Endpoint').nextElementSibling as HTMLElement;
return { code: row.querySelector('code')!, copy: row.querySelector('button')! };
}
const clipboardWriteText = vi.fn().mockResolvedValue(undefined);
beforeAll(() => {
Object.defineProperty(navigator, 'clipboard', {
value: { writeText: clipboardWriteText },
configurable: true,
writable: true,
});
});
beforeEach(() => {
clipboardWriteText.mockClear();
resetAllStores();
vi.clearAllMocks();
seedStore(useAuthStore, { user: buildUser(), isAuthenticated: true });
seedStore(useAddonStore, {
addons: [],
loaded: true,
loadAddons: vi.fn(),
});
server.use(
http.get('/api/auth/mcp-tokens', () => HttpResponse.json({ tokens: [] })),
http.get('/api/addons', () => HttpResponse.json({ addons: [] })),
http.get('/api/oauth/clients', () => HttpResponse.json({ clients: [] })),
http.get('/api/oauth/sessions', () => HttpResponse.json({ sessions: [] })),
);
});
describe('IntegrationsTab', () => {
it('FE-COMP-INTEGRATIONS-001: renders without crashing (MCP disabled)', () => {
render(<IntegrationsTab />);
expect(document.body).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-002: MCP section is hidden when mcp addon is disabled', () => {
render(<IntegrationsTab />);
expect(screen.queryByText('MCP Configuration')).toBeNull();
});
it('FE-COMP-INTEGRATIONS-003: MCP section is visible when mcp addon is enabled', async () => {
enableMcp();
render(<IntegrationsTab />);
expect(await screen.findByText('MCP Configuration')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-004: MCP endpoint URL is displayed', async () => {
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
const { code } = mcpEndpointRow();
expect(code).not.toBeNull();
expect(code.textContent).toContain('/mcp');
});
it('FE-COMP-INTEGRATIONS-005: JSON config block is rendered when expanded', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
// Config is collapsed by default — no <pre> yet
expect(document.querySelector('pre')).toBeNull();
// Expand by clicking the "Client Configuration" toggle
await user.click(screen.getByRole('button', { name: /Client Configuration/i }));
const preEl = document.querySelector('pre');
expect(preEl).not.toBeNull();
expect(preEl!.textContent).toContain('mcpServers');
});
it('FE-COMP-INTEGRATIONS-006: "no tokens" message shown when token list is empty', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
expect(await screen.findByText('No tokens yet. Create one to connect MCP clients.')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-007: token list renders when tokens exist', async () => {
server.use(
http.get('/api/auth/mcp-tokens', () =>
HttpResponse.json({
tokens: [
{ id: 1, name: 'My Token', token_prefix: 'tk_aaa', created_at: '2025-01-01T00:00:00.000Z', last_used_at: null },
{ id: 2, name: 'Other Token', token_prefix: 'tk_bbb', created_at: '2025-01-01T00:00:00.000Z', last_used_at: null },
],
}),
),
);
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await screen.findByText('My Token');
expect(await screen.findByText('Other Token')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-008: clicking "Create New Token" button opens the modal', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
const createBtn = screen.getByRole('button', { name: /Create New Token/i });
await user.click(createBtn);
expect(await screen.findByText('Create API Token')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-009: Create button in modal is disabled when name is empty', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await screen.findByText('Create API Token');
const modalCreateBtn = screen.getByRole('button', { name: /^Create Token$/i });
expect(modalCreateBtn).toBeDisabled();
});
it('FE-COMP-INTEGRATIONS-010: Create button in modal becomes enabled when name is typed', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await screen.findByText('Create API Token');
const input = screen.getByPlaceholderText(/Claude Desktop/i);
await user.type(input, 'My API token');
const modalCreateBtn = screen.getByRole('button', { name: /^Create Token$/i });
expect(modalCreateBtn).not.toBeDisabled();
});
it('FE-COMP-INTEGRATIONS-011: creating a token calls the API and shows the raw token', async () => {
server.use(
http.post('/api/auth/mcp-tokens', () =>
HttpResponse.json({
token: {
id: 1,
name: 'test',
token_prefix: 'tk_abc',
created_at: '2025-01-01T00:00:00.000Z',
raw_token: 'tk_abc...full_secret_token',
},
}),
),
);
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await screen.findByText('Create API Token');
const input = screen.getByPlaceholderText(/Claude Desktop/i);
await user.type(input, 'test');
await user.click(screen.getByRole('button', { name: /^Create Token$/i }));
// Raw token should be displayed
await screen.findByText(/tk_abc\.\.\.full_secret_token/);
// Warning about one-time display
expect(screen.getByText(/only be shown once/i)).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-012: "Done" button closes the token-created modal', async () => {
server.use(
http.post('/api/auth/mcp-tokens', () =>
HttpResponse.json({
token: {
id: 1,
name: 'test',
token_prefix: 'tk_abc',
created_at: '2025-01-01T00:00:00.000Z',
raw_token: 'tk_abc...full_secret_token',
},
}),
),
);
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await screen.findByText('Create API Token');
await user.type(screen.getByPlaceholderText(/Claude Desktop/i), 'test');
await user.click(screen.getByRole('button', { name: /^Create Token$/i }));
await screen.findByText('Token Created');
await user.click(screen.getByRole('button', { name: /^Done$/i }));
await waitFor(() => {
expect(screen.queryByText('Token Created')).toBeNull();
});
});
it('FE-COMP-INTEGRATIONS-013: clicking the delete button next to a token opens the confirm modal', async () => {
server.use(
http.get('/api/auth/mcp-tokens', () =>
HttpResponse.json({
tokens: [
{ id: 1, name: 'Delete Me', token_prefix: 'tk_del', created_at: '2025-01-01T00:00:00.000Z', last_used_at: null },
],
}),
),
);
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await screen.findByText('Delete Me');
await user.click(screen.getByTitle('Delete Token'));
await screen.findByText('This token will stop working immediately. Any MCP client using it will lose access.');
expect(screen.getByRole('button', { name: /^Cancel$/i })).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-014: confirming deletion calls DELETE API and removes token from list', async () => {
let deleteCalled = false;
server.use(
http.get('/api/auth/mcp-tokens', () =>
HttpResponse.json({
tokens: [
{ id: 1, name: 'Delete Me', token_prefix: 'tk_del', created_at: '2025-01-01T00:00:00.000Z', last_used_at: null },
],
}),
),
http.delete('/api/auth/mcp-tokens/1', () => {
deleteCalled = true;
return HttpResponse.json({ success: true });
}),
);
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await screen.findByText('Delete Me');
await user.click(screen.getByTitle('Delete Token'));
// There are two "Delete Token" buttons: the trash icon (title) and the confirm button in modal
const deleteButtons = await screen.findAllByRole('button', { name: /^Delete Token$/i });
// Click the one in the modal (last one, or the standalone one without title attribute)
const confirmBtn = deleteButtons.find(btn => !btn.title);
await user.click(confirmBtn ?? deleteButtons[deleteButtons.length - 1]);
expect(deleteCalled).toBe(true);
await waitFor(() => {
expect(screen.queryByText('Delete Me')).toBeNull();
});
});
it('FE-COMP-INTEGRATIONS-015: copying endpoint URL calls clipboard.writeText', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
// Spy after userEvent.setup() may have replaced navigator.clipboard
const writeSpy = vi.spyOn(navigator.clipboard, 'writeText').mockResolvedValue(undefined);
await user.click(mcpEndpointRow().copy);
expect(writeSpy).toHaveBeenCalledWith(expect.stringContaining('/mcp'));
});
it('FE-COMP-INTEGRATIONS-016: copy button shows checkmark icon after copy', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
vi.spyOn(navigator.clipboard, 'writeText').mockResolvedValue(undefined);
const { copy } = mcpEndpointRow();
await user.click(copy);
await waitFor(() => {
// After copy, icon changes to Check (green). The button should contain an svg with text-green-500
const svg = copy.querySelector('svg');
expect(svg).toHaveClass('text-green-500');
});
});
it('FE-COMP-INTEGRATIONS-017: cancel button in delete confirm modal closes it without API call', async () => {
let deleteCalled = false;
server.use(
http.get('/api/auth/mcp-tokens', () =>
HttpResponse.json({
tokens: [
{ id: 1, name: 'Cancel Token', token_prefix: 'tk_can', created_at: '2025-01-01T00:00:00.000Z', last_used_at: null },
],
}),
),
http.delete('/api/auth/mcp-tokens/1', () => {
deleteCalled = true;
return HttpResponse.json({ success: true });
}),
);
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await screen.findByText('Cancel Token');
await user.click(screen.getByTitle('Delete Token'));
await screen.findByRole('button', { name: /^Cancel$/i });
await user.click(screen.getByRole('button', { name: /^Cancel$/i }));
await waitFor(() => {
expect(screen.queryByText('This token will stop working immediately. Any MCP client using it will lose access.')).toBeNull();
});
expect(deleteCalled).toBe(false);
});
it('FE-COMP-INTEGRATIONS-018: pressing Enter in the token name input triggers creation', async () => {
let postCalled = false;
server.use(
http.post('/api/auth/mcp-tokens', () => {
postCalled = true;
return HttpResponse.json({
token: {
id: 1,
name: 'enter-test',
token_prefix: 'tk_ent',
created_at: '2025-01-01T00:00:00.000Z',
raw_token: 'tk_ent...full',
},
});
}),
);
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await screen.findByText('Create API Token');
const input = screen.getByPlaceholderText(/Claude Desktop/i);
await user.type(input, 'enter-test');
await user.keyboard('{Enter}');
await waitFor(() => {
expect(postCalled).toBe(true);
});
});
it('FE-COMP-INTEGRATIONS-019: default tab is OAuth 2.1 Clients — OAuth hint visible, token list hidden', async () => {
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
// OAuth hint is visible on the default tab
expect(screen.getByText(/Register OAuth 2\.1 clients/i)).toBeInTheDocument();
// API Tokens "no tokens" message is not rendered
expect(screen.queryByText('No tokens yet. Create one to connect MCP clients.')).toBeNull();
});
it('FE-COMP-INTEGRATIONS-020: switching tabs toggles content visibility', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
// Default: OAuth hint visible, token list absent
expect(screen.getByText(/Register OAuth 2\.1 clients/i)).toBeInTheDocument();
expect(screen.queryByText('No tokens yet. Create one to connect MCP clients.')).toBeNull();
// Switch to API Tokens tab
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
await screen.findByText('No tokens yet. Create one to connect MCP clients.');
expect(screen.queryByText(/Register OAuth 2\.1 clients/i)).toBeNull();
// Switch back to OAuth tab
await user.click(screen.getByRole('button', { name: /OAuth 2\.1 Clients/i }));
await screen.findByText(/Register OAuth 2\.1 clients/i);
expect(screen.queryByText('No tokens yet. Create one to connect MCP clients.')).toBeNull();
});
it('FE-COMP-INTEGRATIONS-021: OAuth client list renders when clients exist', async () => {
server.use(
http.get('/api/oauth/clients', () =>
HttpResponse.json({
clients: [
{
id: 'client-1',
client_id: 'clid-abc',
name: 'My OAuth App',
redirect_uris: ['http://localhost'],
allowed_scopes: ['trips:read', 'places:read'],
created_at: '2025-01-01T00:00:00Z',
},
],
})
)
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('My OAuth App');
expect(screen.getByText(/clid-abc/)).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-022: scope expansion toggle shows more/fewer scopes', async () => {
const user = userEvent.setup();
const scopes = ['trips:read', 'trips:write', 'places:read', 'places:write', 'budget:read', 'budget:write', 'packing:read'];
server.use(
http.get('/api/oauth/clients', () =>
HttpResponse.json({
clients: [
{ id: 'c1', client_id: 'cid', name: 'Big App', redirect_uris: ['http://localhost'], allowed_scopes: scopes, created_at: '2025-01-01T00:00:00Z' },
],
})
)
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('Big App');
// "+2 more" button visible (7 scopes, 5 shown)
const moreBtn = screen.getByText(/^\+\d+$/);
await user.click(moreBtn);
// Show less / collapse button now visible
expect(screen.getByText('−')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-023: active OAuth sessions section renders when sessions exist', async () => {
server.use(
http.get('/api/oauth/sessions', () =>
HttpResponse.json({
sessions: [
{
id: 10,
client_name: 'Claude Desktop',
scopes: ['trips:read'],
access_token_expires_at: '2025-12-31T00:00:00Z',
},
],
})
)
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('Claude Desktop');
expect(screen.getByText(/trips:read/)).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-024: Create OAuth Client modal opens and shows presets', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
expect(screen.getByText('Claude.ai')).toBeInTheDocument();
expect(screen.getByText('Claude Desktop')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-025: clicking a preset fills form fields', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
// Presets render as buttons — click "Claude.ai" preset
const presetBtns = screen.getAllByRole('button', { name: /Claude\.ai/i });
await user.click(presetBtns[0]);
// Name field should be filled with 'Claude.ai'
const nameInput = screen.getByPlaceholderText(/Claude Web, My MCP App/i);
expect((nameInput as HTMLInputElement).value).toBe('Claude.ai');
});
it('FE-COMP-INTEGRATIONS-026: creating client shows success view with client_id and secret', async () => {
const user = userEvent.setup();
server.use(
http.post('/api/oauth/clients', () =>
HttpResponse.json({
client: {
id: 'new-id',
client_id: 'clid-new',
client_secret: 'secret-value',
name: 'Test Client',
redirect_uris: ['http://localhost'],
allowed_scopes: ['trips:read'],
created_at: '2025-01-01T00:00:00Z',
},
})
)
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
const nameInput = screen.getByPlaceholderText(/Claude Web, My MCP App/i);
await user.type(nameInput, 'Test Client');
const uriInput = screen.getByPlaceholderText(/https:\/\/your-app/i);
await user.type(uriInput, 'http://localhost');
await user.click(screen.getByRole('button', { name: /Register Client/i }));
// Success view shows client credentials (there may be multiple matches in list + modal)
await screen.findAllByText(/clid-new/);
const secretEls = await screen.findAllByText(/secret-value/);
expect(secretEls.length).toBeGreaterThan(0);
});
it('FE-COMP-INTEGRATIONS-027: Done button closes created-client modal', async () => {
const user = userEvent.setup();
server.use(
http.post('/api/oauth/clients', () =>
HttpResponse.json({
client: {
id: 'n2',
client_id: 'clid-n2',
client_secret: 'secret-n2',
name: 'TC2',
redirect_uris: ['http://localhost'],
allowed_scopes: ['trips:read'],
created_at: '2025-01-01T00:00:00Z',
},
})
)
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
await user.type(screen.getByPlaceholderText(/Claude Web, My MCP App/i), 'TC2');
await user.type(screen.getByPlaceholderText(/https:\/\/your-app/i), 'http://localhost');
await user.click(screen.getByRole('button', { name: /Register Client/i }));
await screen.findAllByText(/clid-n2/);
// Check the "Client Registered" modal title is visible before Done
expect(screen.getByText('Client Registered')).toBeInTheDocument();
await user.click(screen.getByRole('button', { name: /^Done$/i }));
await waitFor(() => {
expect(screen.queryByText('Client Registered')).toBeNull();
});
});
it('FE-COMP-INTEGRATIONS-028: delete OAuth client confirmation removes client from list', async () => {
const user = userEvent.setup();
server.use(
http.get('/api/oauth/clients', () =>
HttpResponse.json({
clients: [
{ id: 'del-1', client_id: 'cid-del', name: 'Delete Me', redirect_uris: ['http://localhost'], allowed_scopes: ['trips:read'], created_at: '2025-01-01T00:00:00Z' },
],
})
),
http.delete('/api/oauth/clients/del-1', () => HttpResponse.json({ success: true }))
);
enableMcp();
render(<><ToastContainer /><IntegrationsTab /></>);
await screen.findByText('Delete Me');
await user.click(screen.getByTitle('Delete Client'));
// Confirmation modal
await screen.findByRole('heading', { name: 'Delete Client' });
const confirmBtns = screen.getAllByRole('button', { name: /Delete Client/i });
// Modal confirm button is last in DOM (modal renders after list)
await user.click(confirmBtns[confirmBtns.length - 1]);
await waitFor(() => {
expect(screen.queryByText('Delete Me')).toBeNull();
});
});
it('FE-COMP-INTEGRATIONS-029: rotate secret confirmation shows new secret', async () => {
const user = userEvent.setup();
server.use(
http.get('/api/oauth/clients', () =>
HttpResponse.json({
clients: [
{ id: 'rot-1', client_id: 'cid-rot', name: 'Rotate Me', redirect_uris: ['http://localhost'], allowed_scopes: ['trips:read'], created_at: '2025-01-01T00:00:00Z' },
],
})
),
http.post('/api/oauth/clients/rot-1/rotate', () =>
HttpResponse.json({ client_secret: 'new-rotated-secret' })
)
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('Rotate Me');
await user.click(screen.getByTitle('Rotate Secret'));
await screen.findByText('Rotate Secret');
// Confirm — button text is 'Rotate'
const rotateBtns = screen.getAllByRole('button', { name: /^Rotate$/i });
await user.click(rotateBtns[rotateBtns.length - 1]);
expect(await screen.findByText(/new-rotated-secret/)).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-030: revoke OAuth session removes it from list', async () => {
const user = userEvent.setup();
server.use(
http.get('/api/oauth/sessions', () =>
HttpResponse.json({
sessions: [
{ id: 99, client_name: 'Revoke App', scopes: ['trips:read'], access_token_expires_at: '2025-12-31T00:00:00Z' },
],
})
),
http.delete('/api/oauth/sessions/99', () => HttpResponse.json({ success: true }))
);
enableMcp();
render(<><ToastContainer /><IntegrationsTab /></>);
await screen.findByText('Revoke App');
await user.click(screen.getByText('Revoke'));
// Confirmation modal
await screen.findByText('Revoke Session');
const revokeBtns = screen.getAllByRole('button', { name: /^Revoke$/i });
// Modal confirm button is last in DOM
await user.click(revokeBtns[revokeBtns.length - 1]);
await waitFor(() => {
expect(screen.queryByText('Revoke App')).toBeNull();
});
});
it('FE-COMP-INTEGRATIONS-031: Register Client button disabled when name or URI is empty', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
const createBtn = screen.getByRole('button', { name: /Register Client/i });
expect(createBtn).toBeDisabled();
// Type only name, not URI → still disabled
await user.type(screen.getByPlaceholderText(/Claude Web, My MCP App/i), 'Test');
expect(createBtn).toBeDisabled();
});
it('FE-COMP-INTEGRATIONS-032: error toast shown when create OAuth client fails', async () => {
const user = userEvent.setup();
server.use(
http.post('/api/oauth/clients', () =>
HttpResponse.json({ error: 'server error' }, { status: 500 })
)
);
enableMcp();
render(<><ToastContainer /><IntegrationsTab /></>);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
await user.type(screen.getByPlaceholderText(/Claude Web, My MCP App/i), 'Fail Client');
await user.type(screen.getByPlaceholderText(/https:\/\/your-app/i), 'http://localhost');
await user.click(screen.getByRole('button', { name: /Register Client/i }));
expect(await screen.findByText(/Failed to register/i)).toBeInTheDocument();
});
});
// ── Copy buttons, cancels and the remaining failure toasts (033–047) ──────────
const oneClient = [
{
id: 'c-1',
client_id: 'cid-1',
name: 'Existing Client',
redirect_uris: ['http://localhost'],
allowed_scopes: ['trips:read'],
created_at: '2025-01-01T00:00:00Z',
},
];
const oneSession = [
{ id: 42, client_name: 'Session App', scopes: ['trips:read'], access_token_expires_at: '2025-12-31T00:00:00Z' },
];
const oneToken = [
{ id: 1, name: 'Token One', token_prefix: 'tk_one', created_at: '2025-01-01T00:00:00.000Z', last_used_at: null },
];
async function openTokensTab(user: ReturnType<typeof userEvent.setup>) {
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /API Tokens/i }));
}
/** The copy button inside a config panel — labelled, unlike the icon-only ones. */
function labelledCopyButton(): HTMLElement {
return screen.getAllByRole('button', { name: /^Copy$/i })
.find(b => b.textContent?.trim() === 'Copy') as HTMLElement;
}
describe('IntegrationsTab – copy actions and cancels', () => {
it('FE-COMP-INTEGRATIONS-033: the OAuth client config can be expanded and copied', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
const writeSpy = vi.spyOn(navigator.clipboard, 'writeText').mockResolvedValue(undefined);
await user.click(screen.getByRole('button', { name: /Client Configuration/i }));
await user.click(labelledCopyButton());
expect(writeSpy).toHaveBeenCalledWith(expect.stringContaining('mcp'));
await screen.findByRole('button', { name: /Copied!/i });
});
it('FE-COMP-INTEGRATIONS-034: the API-token client config can be expanded and copied', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await openTokensTab(user);
const writeSpy = vi.spyOn(navigator.clipboard, 'writeText').mockResolvedValue(undefined);
await user.click(screen.getByRole('button', { name: /Client Configuration/i }));
await user.click(labelledCopyButton());
expect(writeSpy).toHaveBeenCalledWith(expect.stringContaining('mcp'));
await screen.findByRole('button', { name: /Copied!/i });
});
it('FE-COMP-INTEGRATIONS-035: Cancel closes the create-token modal', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await openTokensTab(user);
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await screen.findByText('Create API Token');
await user.click(screen.getByRole('button', { name: /^Cancel$/i }));
expect(screen.queryByText('Create API Token')).toBeNull();
});
it('FE-COMP-INTEGRATIONS-036: the freshly created token can be copied from the modal', async () => {
const user = userEvent.setup();
server.use(
http.post('/api/auth/mcp-tokens', () =>
HttpResponse.json({
token: { id: 7, name: 'Fresh', token_prefix: 'tk_fresh', raw_token: 'tk_fresh_raw_secret', created_at: '2025-01-01T00:00:00.000Z' },
}),
),
);
enableMcp();
render(<IntegrationsTab />);
await openTokensTab(user);
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await user.type(screen.getByPlaceholderText(/Claude Desktop/i), 'Fresh');
await user.click(screen.getByRole('button', { name: /^Create Token$/i }));
await screen.findByText('Token Created');
const writeSpy = vi.spyOn(navigator.clipboard, 'writeText').mockResolvedValue(undefined);
const copyBtns = screen.getAllByTitle('Copy');
await user.click(copyBtns[copyBtns.length - 1]);
expect(writeSpy).toHaveBeenCalledWith('tk_fresh_raw_secret');
});
it('FE-COMP-INTEGRATIONS-037: Cancel closes the register-client modal', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
await user.click(screen.getByRole('button', { name: /^Cancel$/i }));
expect(screen.queryByText('Register OAuth Client')).toBeNull();
});
it('FE-COMP-INTEGRATIONS-038: the machine-client checkbox drops the redirect-URI field', async () => {
const user = userEvent.setup();
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await screen.findByText('Register OAuth Client');
expect(screen.getByPlaceholderText(/https:\/\/your-app/i)).toBeInTheDocument();
await user.click(screen.getAllByRole('checkbox')[0]);
expect(screen.queryByPlaceholderText(/https:\/\/your-app/i)).toBeNull();
await user.type(screen.getByPlaceholderText(/Claude Web, My MCP App/i), 'Robot');
expect(screen.getByRole('button', { name: /Register Client/i })).toBeEnabled();
});
it('FE-COMP-INTEGRATIONS-039: the created client id and secret can both be copied', async () => {
const user = userEvent.setup();
server.use(
http.post('/api/oauth/clients', () =>
HttpResponse.json({
client: {
id: 'new-1',
client_id: 'cid-new',
client_secret: 'secret-new',
name: 'Copyable',
redirect_uris: ['http://localhost'],
allowed_scopes: ['trips:read'],
created_at: '2025-01-01T00:00:00Z',
},
}),
),
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('MCP Configuration');
await user.click(screen.getByRole('button', { name: /New Client/i }));
await user.type(screen.getByPlaceholderText(/Claude Web, My MCP App/i), 'Copyable');
await user.type(screen.getByPlaceholderText(/https:\/\/your-app/i), 'http://localhost');
await user.click(screen.getByRole('button', { name: /Register Client/i }));
await screen.findByText('cid-new');
const writeSpy = vi.spyOn(navigator.clipboard, 'writeText').mockResolvedValue(undefined);
const copyBtns = screen.getAllByRole('button').filter(b => b.querySelector('svg') && !b.textContent?.trim());
await user.click(copyBtns[copyBtns.length - 2]);
expect(writeSpy).toHaveBeenCalledWith('cid-new');
await user.click(copyBtns[copyBtns.length - 1]);
expect(writeSpy).toHaveBeenCalledWith('secret-new');
});
it('FE-COMP-INTEGRATIONS-040: Cancel keeps the OAuth client and closes the delete modal', async () => {
const user = userEvent.setup();
server.use(http.get('/api/oauth/clients', () => HttpResponse.json({ clients: oneClient })));
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('Existing Client');
await user.click(screen.getByTitle('Delete Client'));
await screen.findByRole('heading', { name: 'Delete Client' });
await user.click(screen.getByRole('button', { name: /^Cancel$/i }));
expect(screen.queryByRole('heading', { name: 'Delete Client' })).toBeNull();
expect(screen.getByText('Existing Client')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-041: Cancel closes the rotate-secret modal', async () => {
const user = userEvent.setup();
server.use(http.get('/api/oauth/clients', () => HttpResponse.json({ clients: oneClient })));
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('Existing Client');
await user.click(screen.getByTitle('Rotate Secret'));
await screen.findByRole('heading', { name: 'Rotate Secret' });
await user.click(screen.getByRole('button', { name: /^Cancel$/i }));
expect(screen.queryByRole('heading', { name: 'Rotate Secret' })).toBeNull();
});
it('FE-COMP-INTEGRATIONS-042: the rotated secret can be copied and dismissed', async () => {
const user = userEvent.setup();
server.use(
http.get('/api/oauth/clients', () => HttpResponse.json({ clients: oneClient })),
http.post('/api/oauth/clients/c-1/rotate', () => HttpResponse.json({ client_secret: 'rotated-xyz' })),
);
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('Existing Client');
await user.click(screen.getByTitle('Rotate Secret'));
const rotateBtns = await screen.findAllByRole('button', { name: /^Rotate$/i });
await user.click(rotateBtns[rotateBtns.length - 1]);
await screen.findByText('New Secret Generated');
const writeSpy = vi.spyOn(navigator.clipboard, 'writeText').mockResolvedValue(undefined);
const copyBtn = screen.getAllByRole('button').filter(b => b.querySelector('svg') && !b.textContent?.trim());
await user.click(copyBtn[copyBtn.length - 1]);
expect(writeSpy).toHaveBeenCalledWith('rotated-xyz');
await user.click(screen.getByRole('button', { name: /^Done$/i }));
expect(screen.queryByText('New Secret Generated')).toBeNull();
});
it('FE-COMP-INTEGRATIONS-043: Cancel keeps the session and closes the revoke modal', async () => {
const user = userEvent.setup();
server.use(http.get('/api/oauth/sessions', () => HttpResponse.json({ sessions: oneSession })));
enableMcp();
render(<IntegrationsTab />);
await screen.findByText('Session App');
await user.click(screen.getByText('Revoke'));
await screen.findByText('Revoke Session');
await user.click(screen.getByRole('button', { name: /^Cancel$/i }));
expect(screen.queryByText('Revoke Session')).toBeNull();
expect(screen.getByText('Session App')).toBeInTheDocument();
});
});
describe('IntegrationsTab – failure toasts', () => {
it('FE-COMP-INTEGRATIONS-044: a failing token creation toasts', async () => {
const user = userEvent.setup();
server.use(http.post('/api/auth/mcp-tokens', () => HttpResponse.json({ error: 'nope' }, { status: 500 })));
enableMcp();
render(<><ToastContainer /><IntegrationsTab /></>);
await openTokensTab(user);
await user.click(screen.getByRole('button', { name: /Create New Token/i }));
await user.type(screen.getByPlaceholderText(/Claude Desktop/i), 'Doomed');
await user.click(screen.getByRole('button', { name: /^Create Token$/i }));
expect(await screen.findByText('Failed to create token')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-045: a failing token deletion toasts and keeps the token', async () => {
const user = userEvent.setup();
server.use(
http.get('/api/auth/mcp-tokens', () => HttpResponse.json({ tokens: oneToken })),
http.delete('/api/auth/mcp-tokens/1', () => HttpResponse.json({ error: 'nope' }, { status: 500 })),
);
enableMcp();
render(<><ToastContainer /><IntegrationsTab /></>);
await openTokensTab(user);
await screen.findByText('Token One');
await user.click(screen.getByTitle('Delete Token'));
const confirmBtns = await screen.findAllByRole('button', { name: /^Delete Token$/i });
await user.click(confirmBtns.find(b => !b.title) ?? confirmBtns[confirmBtns.length - 1]);
await screen.findByText('Failed to delete token');
expect(screen.getByText('Token One')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-046: failing client deletion and rotation both toast', async () => {
const user = userEvent.setup();
server.use(
http.get('/api/oauth/clients', () => HttpResponse.json({ clients: oneClient })),
http.delete('/api/oauth/clients/c-1', () => HttpResponse.json({ error: 'nope' }, { status: 500 })),
http.post('/api/oauth/clients/c-1/rotate', () => HttpResponse.json({ error: 'nope' }, { status: 500 })),
);
enableMcp();
render(<><ToastContainer /><IntegrationsTab /></>);
await screen.findByText('Existing Client');
await user.click(screen.getByTitle('Delete Client'));
const deleteBtns = await screen.findAllByRole('button', { name: /^Delete Client$/i });
await user.click(deleteBtns[deleteBtns.length - 1]);
await screen.findByText('Failed to delete OAuth client');
await user.click(screen.getByTitle('Rotate Secret'));
const rotateBtns = await screen.findAllByRole('button', { name: /^Rotate$/i });
await user.click(rotateBtns[rotateBtns.length - 1]);
expect(await screen.findByText('Failed to rotate client secret')).toBeInTheDocument();
});
it('FE-COMP-INTEGRATIONS-047: a failing session revoke toasts and keeps the session', async () => {
const user = userEvent.setup();
server.use(
http.get('/api/oauth/sessions', () => HttpResponse.json({ sessions: oneSession })),
http.delete('/api/oauth/sessions/42', () => HttpResponse.json({ error: 'nope' }, { status: 500 })),
);
enableMcp();
render(<><ToastContainer /><IntegrationsTab /></>);
await screen.findByText('Session App');
await user.click(screen.getByText('Revoke'));
const revokeBtns = await screen.findAllByRole('button', { name: /^Revoke$/i });
await user.click(revokeBtns[revokeBtns.length - 1]);
await screen.findByText('Failed to revoke session');
expect(screen.getByText('Session App')).toBeInTheDocument();
});
});