larksuite--cli/cmd/auth/login_result_test.go

// Copyright (c) 2026 Lark Technologies Pte. Ltd.
// SPDX-License-Identifier: MIT

package auth

import (
	"errors"
	"reflect"
	"testing"

	"github.com/larksuite/cli/errs"
	"github.com/larksuite/cli/internal/cmdutil"
)

// TestHandleLoginScopeIssue_FailedJSON_PreservesScopeTriple asserts that the
// failed-login JSON branch (loginSucceeded == false, opts.JSON == true) wires
// requested + granted + missing scopes into the typed *PermissionError
// envelope. Consumers need the full triple to render actionable diagnostics,
// not just the missing set.
func TestHandleLoginScopeIssue_FailedJSON_PreservesScopeTriple(t *testing.T) {
	t.Setenv("LARKSUITE_CLI_CONFIG_DIR", t.TempDir())
	f, _, _, _ := cmdutil.TestFactory(t, nil)

	requested := []string{"docx:document", "im:message:send"}
	granted := []string{"docx:document"}
	missing := []string{"im:message:send"}

	err := handleLoginScopeIssue(
		&LoginOptions{JSON: true},
		getLoginMsg("en"),
		f,
		&loginScopeIssue{
			Message: "scope insufficient",
			Hint:    "re-login with --scope im:message:send",
			Summary: &loginScopeSummary{
				Requested: requested,
				Granted:   granted,
				Missing:   missing,
			},
		},
		"", // openId empty -> loginSucceeded = false
		"tester",
	)

	if err == nil {
		t.Fatal("expected error, got nil")
	}
	var permErr *errs.PermissionError
	if !errors.As(err, &permErr) {
		t.Fatalf("expected *errs.PermissionError, got %T: %v", err, err)
	}
	if !reflect.DeepEqual(permErr.RequestedScopes, requested) {
		t.Errorf("RequestedScopes = %v, want %v", permErr.RequestedScopes, requested)
	}
	if !reflect.DeepEqual(permErr.GrantedScopes, granted) {
		t.Errorf("GrantedScopes = %v, want %v", permErr.GrantedScopes, granted)
	}
	if !reflect.DeepEqual(permErr.MissingScopes, missing) {
		t.Errorf("MissingScopes = %v, want %v", permErr.MissingScopes, missing)
	}
}