import { describe, expect, it } from "vitest"; import { isAuthorizedAdmin, } from "./authorization"; const verified = { id: "admin", email: "admin@example.com", emailVerified: true, role: "admin", }; describe("admin authorization", () => { it("allows only verified admins", () => { expect(isAuthorizedAdmin(verified)).toBe(true); expect( isAuthorizedAdmin({ ...verified, emailVerified: false }), ).toBe(false); expect(isAuthorizedAdmin({ ...verified, role: "user" })).toBe(false); expect(isAuthorizedAdmin({ ...verified, role: null })).toBe(false); }); it("denies missing users", () => { expect(isAuthorizedAdmin(null)).toBe(false); }); });