analytics/test/plausible_web/plugs/user_session_touch_test.exs

defmodule PlausibleWeb.Plugs.UserSessionTouchTest do
  use PlausibleWeb.ConnCase, async: true

  alias Plausible.Repo
  alias PlausibleWeb.AuthPlug
  alias PlausibleWeb.Plugs.UserSessionTouch

  setup [:create_user, :log_in]

  @moduletag :capture_log

  test "refreshes session", %{conn: conn, user: user} do
    now = NaiveDateTime.utc_now(:second)
    one_day_ago = NaiveDateTime.shift(now, day: -1)
    %{sessions: [user_session]} = Repo.preload(user, :sessions)

    user_session
    |> Plausible.Auth.UserSession.touch_session(one_day_ago)
    |> Repo.update!(allow_stale: true)

    assert %{assigns: %{current_user_session: user_session}} =
             conn
             |> AuthPlug.call([])
             |> UserSessionTouch.call([])

    assert NaiveDateTime.compare(user_session.last_used_at, now) in [:gt, :eq]
    assert NaiveDateTime.compare(user_session.timeout_at, user_session.last_used_at) == :gt
  end

  test "passes through when there's no authenticated session" do
    conn =
      build_conn()
      |> init_session()
      |> put_session(:login_dest, "/")
      |> UserSessionTouch.call([])

    refute conn.halted
    assert get_session(conn, :login_dest) == "/"
    refute get_session(conn, :current_user_id)
    refute get_session(conn, :user_token)
  end

  test "converts legacy session when present", %{user: user} do
    %{sessions: [other_session]} = Repo.preload(user, :sessions)

    conn =
      build_conn()
      |> init_session()
      |> put_session(:current_user_id, user.id)
      |> AuthPlug.call([])
      |> UserSessionTouch.call([])

    refute get_session(conn, :current_user_id)
    assert user_token = get_session(conn, :user_token)
    assert conn.assigns.current_user_session.id
    assert conn.assigns.current_user_session.id != other_session.id
    assert conn.assigns.current_user_session.token == user_token
  end
end