fix(test): cover token issuance and verification

test/entity/auth/TestToken.ts

@@ -1,11 +1,15 @@
 import { NotFoundError } from '@apextoaster/js-utils';
 import { expect } from 'chai';
 import { ineeda } from 'ineeda';
+import { JsonWebTokenError } from 'jsonwebtoken';
 
 import { Token, TokenOptions } from '../../../src/entity/auth/Token';
 import { User } from '../../../src/entity/auth/User';
 import { describeLeaks, itLeaks } from '../../helpers/async';
 
+const TEST_SECRET = 'test-secret';
+const TEST_BACKDATE = 1_000;
+
 describeLeaks('token entity', async () => {
   itLeaks('should copy options', async () => {
     const testProps = {
@@ -101,3 +105,39 @@ describeLeaks('token entity', async () => {
     expect(() => token.session()).to.throw(NotFoundError);
   });
 });
+
+describe('verify token static method', async () => {
+  it('should verify complete tokens', async () => {
+    const token = new Token({
+      audience: ['test'],
+      data: {},
+      expiresAt: new Date(Date.now() + TEST_BACKDATE),
+      grants: [],
+      issuer: 'test',
+      labels: {},
+      subject: 'test',
+    });
+    token.id = 'test';
+    const jwt = token.sign(TEST_SECRET);
+
+    expect(Token.verify(jwt, TEST_SECRET, {})).to.deep.include({
+      iss: 'test',
+    });
+  });
+
+  it('should reject expired tokens', async () => {
+    const token = new Token({
+      audience: ['test'],
+      data: {},
+      expiresAt: new Date(Date.now() - TEST_BACKDATE),
+      grants: [],
+      issuer: 'test',
+      labels: {},
+      subject: 'test',
+    });
+    token.id = 'test';
+    const jwt = token.sign(TEST_SECRET);
+
+    expect(() => Token.verify(jwt, TEST_SECRET, {})).to.throw(JsonWebTokenError);
+  });
+});