simstudioai--sim/apps/sim/lib/webhooks/providers/zoom.test.ts

import crypto from 'node:crypto'
import { NextRequest } from 'next/server'
import { describe, expect, it } from 'vitest'
import { validateZoomSignature, zoomHandler } from '@/lib/webhooks/providers/zoom'
import { isZoomEventMatch } from '@/triggers/zoom/utils'

function reqWithHeaders(headers: Record<string, string>): NextRequest {
  return new NextRequest('http://localhost/test', { headers })
}

describe('Zoom webhook provider', () => {
  it('isZoomEventMatch rejects empty event for specialized triggers', () => {
    expect(isZoomEventMatch('zoom_meeting_started', '')).toBe(false)
    expect(isZoomEventMatch('zoom_meeting_started', '   ')).toBe(false)
    expect(isZoomEventMatch('zoom_meeting_started', 'meeting.started')).toBe(true)
    expect(isZoomEventMatch('zoom_webhook', '')).toBe(true)
  })

  it('validateZoomSignature uses raw body bytes, not a re-serialized variant', () => {
    const secret = 'test-secret'
    const timestamp = String(Math.floor(Date.now() / 1000))
    const rawA = '{"a":1,"b":2}'
    const rawB = '{"b":2,"a":1}'
    const computed = crypto.createHmac('sha256', secret).update(`v0:${timestamp}:${rawA}`)
    const hashA = `v0=${computed.digest('hex')}`
    expect(validateZoomSignature(secret, hashA, timestamp, rawA)).toBe(true)
    expect(validateZoomSignature(secret, hashA, timestamp, rawB)).toBe(false)
  })

  it('does not implement extractIdempotencyId (x-zm-request-id handled at service level)', () => {
    expect(zoomHandler.extractIdempotencyId).toBeUndefined()
  })

  it('formatInput passes through the Zoom webhook envelope', async () => {
    const body = {
      event: 'meeting.started',
      event_ts: 1700000000000,
      payload: { account_id: 'acct', object: { id: 1 } },
    }
    const { input } = await zoomHandler.formatInput!({
      webhook: {},
      workflow: { id: 'wf', userId: 'u' },
      body,
      headers: {},
      requestId: 'zoom-format',
    })
    expect(input).toBe(body)
  })

  it('matchEvent never executes endpoint validation payloads', async () => {
    const result = await zoomHandler.matchEvent!({
      webhook: { id: 'w' },
      workflow: { id: 'wf' },
      body: { event: 'endpoint.url_validation' },
      request: reqWithHeaders({}),
      requestId: 't5',
      providerConfig: { triggerId: 'zoom_webhook' },
    })
    expect(result).toBe(false)
  })
})