import { describe, it, expect } from 'vitest'
import { evaluateCookieStuffing } from './cookie-stuffing.js'

describe('evaluateCookieStuffing', () => {
  it('missing Sec-Fetch-Mode: allow (ambiguous)', () => {
    expect(
      evaluateCookieStuffing({
        secFetchMode: null,
        secFetchDest: null,
        secFetchSite: null,
      }),
    ).toEqual({ isSuspicious: false, codes: [], setCookie: true })
  })

  it('cors fetch mode: cookie stuffing block', () => {
    expect(
      evaluateCookieStuffing({
        secFetchMode: 'cors',
        secFetchDest: 'empty',
        secFetchSite: 'cross-site',
      }),
    ).toEqual({
      isSuspicious: true,
      codes: ['COOKIE_STUFFING'],
      setCookie: false,
    })
  })
})