import { describe, expect, it } from "vitest";

import { isAuthorizedAdmin } from "./authorization";

const verified = {
  id: "admin",
  email: "admin@example.com",
  emailVerified: true,
};

describe("admin authorization", () => {
  it("requires an exact verified email match", () => {
    expect(isAuthorizedAdmin(verified, "admin@example.com")).toBe(true);
    expect(isAuthorizedAdmin(verified, "ADMIN@example.com")).toBe(false);
    expect(
      isAuthorizedAdmin({ ...verified, emailVerified: false }, verified.email),
    ).toBe(false);
  });

  it("denies missing users and missing configuration", () => {
    expect(isAuthorizedAdmin(null, verified.email)).toBe(false);
    expect(isAuthorizedAdmin(verified, undefined)).toBe(false);
  });
});