otp: update docs on permissions, only require email driver if sendEmail is not false

2026-08-03 08:36:01 +00:00 · 2025-11-10 10:25:33 +01:00
parent c57f3e8070
commit b6717f0237
3 changed files with 48 additions and 3 deletions
@@ -24,6 +24,50 @@ describe("otp plugin", () => {
      expect(res.status).toBe(404);
   });

+   test("should require email driver if sendEmail is true", async () => {
+      const app = createApp({
+         config: {
+            auth: {
+               enabled: true,
+            },
+         },
+         options: {
+            plugins: [emailOTP()],
+         },
+      });
+      await app.build();
+      const res = await app.server.request("/api/auth/otp/login", {
+         method: "POST",
+         headers: {
+            "Content-Type": "application/json",
+         },
+         body: JSON.stringify({ email: "test@test.com" }),
+      });
+      expect(res.status).toBe(404);
+
+      {
+         const app = createApp({
+            config: {
+               auth: {
+                  enabled: true,
+               },
+            },
+            options: {
+               plugins: [emailOTP({ sendEmail: false })],
+            },
+         });
+         await app.build();
+         const res = await app.server.request("/api/auth/otp/register", {
+            method: "POST",
+            headers: {
+               "Content-Type": "application/json",
+            },
+            body: JSON.stringify({ email: "test@test.com" }),
+         });
+         expect(res.status).toBe(201);
+      }
+   });
+
   test("should prevent mutations of the OTP entity", async () => {
      const app = createApp({
         config: {