fn_registry/functions/infra/http_session_cookie_set_test.go

package infra

import (
	"net/http/httptest"
	"strings"
	"testing"
	"time"
)

func TestSessionCookieSet(t *testing.T) {
	t.Run("cookie set con nombre y token correctos", func(t *testing.T) {
		w := httptest.NewRecorder()
		expires := time.Now().Add(24 * time.Hour).Unix()
		SessionCookieSet(w, "my_session", "tok_abc", expires)

		cookies := w.Result().Cookies()
		if len(cookies) != 1 {
			t.Fatalf("expected 1 cookie, got %d", len(cookies))
		}
		c := cookies[0]
		if c.Name != "my_session" {
			t.Errorf("Name: got %q, want %q", c.Name, "my_session")
		}
		if c.Value != "tok_abc" {
			t.Errorf("Value: got %q, want %q", c.Value, "tok_abc")
		}
		if c.Path != "/" {
			t.Errorf("Path: got %q, want %q", c.Path, "/")
		}
		if !c.HttpOnly {
			t.Errorf("expected HttpOnly=true")
		}
	})

	t.Run("header Set-Cookie contiene HttpOnly y SameSite=Lax", func(t *testing.T) {
		w := httptest.NewRecorder()
		SessionCookieSet(w, "s", "v", time.Now().Add(time.Hour).Unix())
		header := w.Header().Get("Set-Cookie")
		if !strings.Contains(header, "HttpOnly") {
			t.Errorf("Set-Cookie header missing HttpOnly: %s", header)
		}
		if !strings.Contains(header, "SameSite=Lax") {
			t.Errorf("Set-Cookie header missing SameSite=Lax: %s", header)
		}
	})
}