import { mkdtempSync } from "node:fs";import { tmpdir } from "node:os";import { join } from "node:path";import { expect, test } from "@effect/vitest";import { loadConfig } from "../config";// Keep generated secret/key files out of the repo (loadConfig persists them).process.env.EXECUTOR_DATA_DIR ??= mkdtempSync(join(tmpdir(), "origin-cfg-"));// The "Invalid origin" sign-up failure on a PaaS came from webBaseUrl defaulting// to localhost: Better Auth's trustedOrigins is [config.webBaseUrl], so the real// public origin never matched. The fix resolves webBaseUrl from the platform's// injected origin (Railway/Render/Fly/…) when EXECUTOR_WEB_BASE_URL is unset, so// a PaaS deploy is zero-config. These pin that resolution; the origin check that// consumes it is Better Auth's and unchanged.// Clear every origin source so each test starts from a known state (no// try/finally — these are the only env vars these cases read).const PLATFORM_VARS = [ "EXECUTOR_WEB_BASE_URL", "RAILWAY_PUBLIC_DOMAIN", "RENDER_EXTERNAL_URL", "RENDER_EXTERNAL_HOSTNAME", "FLY_APP_NAME", "VERCEL_URL",];const resetOriginEnv = (): void => { for (const key of PLATFORM_VARS) delete process.env[key]; process.env.PORT = "4788";};test("webBaseUrl falls back to localhost with no public origin", () => { resetOriginEnv(); expect(loadConfig().webBaseUrl).toBe("http://localhost:4788");});test("webBaseUrl auto-resolves from a platform host var (Railway, host only → https)", () => { resetOriginEnv(); process.env.RAILWAY_PUBLIC_DOMAIN = "demo-production.up.railway.app"; expect(loadConfig().webBaseUrl).toBe("https://demo-production.up.railway.app");});test("webBaseUrl auto-resolves from a platform URL var (Render, full URL, trailing slash trimmed)", () => { resetOriginEnv(); process.env.RENDER_EXTERNAL_URL = "https://demo.onrender.com/"; expect(loadConfig().webBaseUrl).toBe("https://demo.onrender.com");});test("Fly's app name becomes the .fly.dev origin", () => { resetOriginEnv(); process.env.FLY_APP_NAME = "demo-app"; expect(loadConfig().webBaseUrl).toBe("https://demo-app.fly.dev");});test("an explicit EXECUTOR_WEB_BASE_URL always wins over a platform var", () => { resetOriginEnv(); process.env.RAILWAY_PUBLIC_DOMAIN = "ignored.up.railway.app"; process.env.EXECUTOR_WEB_BASE_URL = "https://pinned.example.com"; expect(loadConfig().webBaseUrl).toBe("https://pinned.example.com");});
import { mkdtempSync } from "node:fs";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { expect, test } from "@effect/vitest";
import { loadConfig } from "../config";
// Keep generated secret/key files out of the repo (loadConfig persists them).
process.env.EXECUTOR_DATA_DIR ??= mkdtempSync(join(tmpdir(), "origin-cfg-"));
// The "Invalid origin" sign-up failure on a PaaS came from webBaseUrl defaulting
// to localhost: Better Auth's trustedOrigins is [config.webBaseUrl], so the real
// public origin never matched. The fix resolves webBaseUrl from the platform's
// injected origin (Railway/Render/Fly/…) when EXECUTOR_WEB_BASE_URL is unset, so
// a PaaS deploy is zero-config. These pin that resolution; the origin check that
// consumes it is Better Auth's and unchanged.
// Clear every origin source so each test starts from a known state (no
// try/finally — these are the only env vars these cases read).
const PLATFORM_VARS = [
"EXECUTOR_WEB_BASE_URL",
"RAILWAY_PUBLIC_DOMAIN",
"RENDER_EXTERNAL_URL",
"RENDER_EXTERNAL_HOSTNAME",
"FLY_APP_NAME",
"VERCEL_URL",
];
const resetOriginEnv = (): void => {
for (const key of PLATFORM_VARS) delete process.env[key];
process.env.PORT = "4788";
};
test("webBaseUrl falls back to localhost with no public origin", () => {
resetOriginEnv();
expect(loadConfig().webBaseUrl).toBe("http://localhost:4788");
});
test("webBaseUrl auto-resolves from a platform host var (Railway, host only → https)", () => {
resetOriginEnv();
process.env.RAILWAY_PUBLIC_DOMAIN = "demo-production.up.railway.app";
expect(loadConfig().webBaseUrl).toBe("https://demo-production.up.railway.app");
});
test("webBaseUrl auto-resolves from a platform URL var (Render, full URL, trailing slash trimmed)", () => {
resetOriginEnv();
process.env.RENDER_EXTERNAL_URL = "https://demo.onrender.com/";
expect(loadConfig().webBaseUrl).toBe("https://demo.onrender.com");
});
test("Fly's app name becomes the .fly.dev origin", () => {
resetOriginEnv();
process.env.FLY_APP_NAME = "demo-app";
expect(loadConfig().webBaseUrl).toBe("https://demo-app.fly.dev");
});
test("an explicit EXECUTOR_WEB_BASE_URL always wins over a platform var", () => {
resetOriginEnv();
process.env.RAILWAY_PUBLIC_DOMAIN = "ignored.up.railway.app";
process.env.EXECUTOR_WEB_BASE_URL = "https://pinned.example.com";
expect(loadConfig().webBaseUrl).toBe("https://pinned.example.com");
});