Move auth-entry checks to router guard and simplify MainContainer route logic

Co-Authored-By: Codex <codex@openai.com>

tests/router/routerGuard.test.js

@@ -17,13 +17,17 @@ describe("router beforeEach guard logic", () => {
   });
 
   // Simulate the guard logic from router/index.ts
-  function runGuard(to) {
+  async function runGuard(to, options = {}) {
+    const { refreshSucceeds = true } = options;
     const hasLoginMarker = document.cookie
       .split(";")
       .some((c) => c.trim().startsWith("isLuciaLoggedIn="));
     const hasAccessToken = document.cookie
       .split(";")
       .some((c) => c.trim().startsWith("luciaToken="));
+    const hasRefreshToken = document.cookie
+      .split(";")
+      .some((c) => c.trim().startsWith("luciaRefreshToken="));
     const isAuthenticated = hasLoginMarker && hasAccessToken;
 
     if (to.name === "Login") {
@@ -32,6 +36,9 @@ describe("router beforeEach guard logic", () => {
 
     const requiresAuth = (to.matched || []).some((r) => r.meta?.requiresAuth);
     if (requiresAuth && !isAuthenticated) {
+      if (hasRefreshToken) {
+        if (refreshSucceeds) return undefined;
+      }
       return {
         path: "/login",
         query: {
@@ -46,15 +53,17 @@ describe("router beforeEach guard logic", () => {
   it("redirects logged-in user from Login to Files", () => {
     document.cookie = "isLuciaLoggedIn=true";
     document.cookie = "luciaToken=token";
-    expect(runGuard({ name: "Login" })).toEqual({ name: "Files" });
+    return expect(runGuard({ name: "Login" })).resolves.toEqual({
+      name: "Files",
+    });
   });
 
   it("allows unauthenticated user to visit Login", () => {
-    expect(runGuard({ name: "Login" })).toBeUndefined();
+    return expect(runGuard({ name: "Login" })).resolves.toBeUndefined();
   });
 
-  it("redirects unauthenticated user when route requiresAuth", () => {
-    const result = runGuard({
+  it("redirects unauthenticated user when route requiresAuth", async () => {
+    const result = await runGuard({
       name: "Files",
       path: "/files",
       fullPath: "/files",
@@ -64,16 +73,48 @@ describe("router beforeEach guard logic", () => {
     expect(atob(result.query["return-to"])).toBe("/files");
   });
 
+  it("allows requiresAuth route when refresh token can refresh session", () => {
+    document.cookie = "luciaRefreshToken=refresh-token";
+    return expect(
+      runGuard(
+        {
+          name: "Files",
+          path: "/files",
+          fullPath: "/files",
+          matched: [{ meta: { requiresAuth: true } }],
+        },
+        { refreshSucceeds: true },
+      ),
+    ).resolves.toBeUndefined();
+  });
+
+  it("redirects to login with return-to when refresh fails", async () => {
+    document.cookie = "luciaRefreshToken=refresh-token";
+    const result = await runGuard(
+      {
+        name: "Map",
+        path: "/discover/log/1/map",
+        fullPath: "/discover/log/1/map?view=summary#node-2",
+        matched: [{ meta: { requiresAuth: true } }],
+      },
+      { refreshSucceeds: false },
+    );
+    expect(result.path).toBe("/login");
+    expect(atob(result.query["return-to"])).toBe(
+      "/discover/log/1/map?view=summary#node-2",
+    );
+  });
+
   it("does not interfere with non-Login routes", () => {
     document.cookie = "isLuciaLoggedIn=true";
     document.cookie = "luciaToken=token";
-    expect(
+    return expect(
       runGuard({
         name: "Files",
         path: "/files",
         fullPath: "/files",
         matched: [{ meta: { requiresAuth: true } }],
       }),
-    ).toBeUndefined();
+    ).resolves.toBeUndefined();
   });
 });

tests/views/MainContainerGuard.test.js

@@ -1,120 +0,0 @@
-// The Lucia project.
-// Copyright 2026-2026 DSP, inc.  All rights reserved.
-// Authors:
-//   imacat.yang@dsp.im (imacat), 2026/03/06
-
-import { describe, it, expect, beforeEach, vi } from "vitest";
-import { setActivePinia, createPinia } from "pinia";
-
-// Mock all heavy imports that MainContainer.vue pulls in
-vi.mock("@/stores/loading", () => ({
-  useLoadingStore: () => ({ isLoading: false }),
-}));
-vi.mock("@/stores/allMapData", () => ({
-  useAllMapDataStore: () => ({}),
-}));
-vi.mock("@/stores/conformance", () => ({
-  useConformanceStore: () => ({}),
-}));
-vi.mock("@/stores/pageAdmin", () => ({
-  usePageAdminStore: () => ({}),
-}));
-vi.mock("@/module/alertModal.js", () => ({
-  leaveFilter: vi.fn(),
-  leaveConformance: vi.fn(),
-}));
-vi.mock("@/module/apiError.js", () => ({
-  default: vi.fn(),
-}));
-vi.mock("@/router/index.ts", () => ({
-  default: { push: vi.fn(), currentRoute: { value: { path: "/" } } },
-}));
-vi.mock("@/module/cytoscapeMap.js", () => ({}));
-
-import { useLoginStore } from "@/stores/login";
-import * as cookieUtil from "@/utils/cookieUtil.js";
-
-// Import the component definition to access beforeRouteEnter
-import MainContainer from "@/views/MainContainer.vue";
-
-describe("MainContainer beforeRouteEnter", () => {
-  let loginStore;
-  let next;
-
-  beforeEach(() => {
-    setActivePinia(createPinia());
-    loginStore = useLoginStore();
-    loginStore.$router = { push: vi.fn() };
-    next = vi.fn();
-    vi.clearAllMocks();
-    // Clear cookies
-    document.cookie.split(";").forEach((c) => {
-      const name = c.split("=")[0].trim();
-      if (name) {
-        document.cookie = name + "=; Max-Age=-99999999; path=/";
-      }
-    });
-  });
-
-  const callGuard = () => {
-    const guard = MainContainer.beforeRouteEnter;
-    return guard({}, {}, next);
-  };
-
-  it("calls next() after successful refreshToken", async () => {
-    // Not logged in, but has refresh token
-    document.cookie = "luciaRefreshToken=some-token";
-    vi.spyOn(loginStore, "refreshToken").mockResolvedValue();
-
-    await callGuard();
-
-    expect(loginStore.refreshToken).toHaveBeenCalled();
-    expect(next).toHaveBeenCalled();
-  });
-
-  it("redirects to login when refreshToken fails", async () => {
-    // Not logged in, has refresh token, but refresh fails
-    document.cookie = "luciaRefreshToken=some-token";
-    vi.spyOn(loginStore, "refreshToken").mockRejectedValue(new Error("401"));
-
-    await callGuard();
-
-    expect(next).toHaveBeenCalledWith(
-      expect.objectContaining({ path: "/login" }),
-    );
-  });
-
-  it("calls next() when logged-in marker and access token both exist", async () => {
-    document.cookie = "isLuciaLoggedIn=true";
-    document.cookie = "luciaToken=token";
-
-    await callGuard();
-
-    expect(next).toHaveBeenCalled();
-  });
-
-  it("redirects to login when logged-in marker exists without access token", async () => {
-    document.cookie = "isLuciaLoggedIn=true";
-
-    await callGuard();
-
-    expect(next).toHaveBeenCalledWith(
-      expect.objectContaining({ path: "/login" }),
-    );
-  });
-
-  it("stores a relative return-to path when redirecting to login", async () => {
-    window.history.replaceState(
-      {},
-      "",
-      "/discover/log/1/map?view=summary#node-2",
-    );
-
-    await callGuard();
-
-    const redirectArg = next.mock.calls[0][0];
-    const returnTo = redirectArg.query["return-to"];
-
-    expect(atob(returnTo)).toBe("/discover/log/1/map?view=summary#node-2");
-  });
-});