refactor: migrate tests to Vitest + TS

.github/workflows/dependency-review.yml

@@ -21,6 +21,6 @@ jobs:
         with:
           comment-summary-in-pr: always
           fail-on-severity: high
-          allow-licenses: MIT, MIT-0, Apache-2.0, BSD-3-Clause, BSD-3-Clause-Clear, ISC, BSD-2-Clause, Unlicense, CC0-1.0, 0BSD, X11, MPL-2.0, MPL-1.0, MPL-1.1, MPL-2.0, OFL-1.1, Zlib
+          allow-licenses: MIT, MIT-0, Apache-2.0, BSD-3-Clause, BSD-3-Clause-Clear, ISC, BSD-2-Clause, Unlicense, CC0-1.0, 0BSD, X11, MPL-2.0, MPL-1.0, MPL-1.1, MPL-2.0, OFL-1.1, Zlib, BlueOak-1.0.0
           fail-on-scopes: development, runtime
           allow-dependencies-licenses: 'pkg:npm/caniuse-lite'

.github/workflows/unused-dependencies.yml

@@ -21,7 +21,7 @@ jobs:
           node-version: '22.x'
       - name: 'Run depcheck'
         run: |
-          npx depcheck --skip-missing --ignores="tsx,@babel/*,@commitlint/*,eslint,eslint-*,husky,mocha,ts-mocha,ts-node,concurrently,nyc,prettier,typescript,tsconfig-paths,vite-tsconfig-paths,@types/sinon,quicktype,history,@types/domutils"
+          npx depcheck --skip-missing --ignores="tsx,@babel/*,@commitlint/*,eslint,eslint-*,husky,ts-node,concurrently,nyc,prettier,typescript,tsconfig-paths,vite-tsconfig-paths,quicktype,history,@types/domutils,@vitest/coverage-v8"
           echo $?
           if [[ $? == 1 ]]; then
             echo "Unused dependencies or devDependencies found"

config.schema.json

@@ -427,6 +427,10 @@
                 "password": {
                   "type": "string",
                   "description": "Password for the given `username`."
+                },
+                "searchBase": {
+                  "type": "string",
+                  "description": "Override baseDN to query for users in other OUs or sub-trees."
                 }
               },
               "required": ["url", "baseDN", "username", "password"]
@@ -466,7 +470,9 @@
               "description": "Additional JWT configuration.",
               "properties": {
                 "clientID": { "type": "string" },
-                "authorityURL": { "type": "string" }
+                "authorityURL": { "type": "string" },
+                "expectedAudience": { "type": "string" },
+                "roleMapping": { "$ref": "#/definitions/roleMapping" }
               },
               "required": ["clientID", "authorityURL"]
             }
@@ -482,6 +488,14 @@
         "adminOnly": { "type": "boolean" },
         "loginRequired": { "type": "boolean" }
       }
+    },
+    "roleMapping": {
+      "type": "object",
+      "description": "Mapping of application roles to JWT claims. Each key is a role name, and its value is an object mapping claim names to expected values.",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": { "type": "string" }
+      }
     }
   },
   "additionalProperties": false

eslint.config.mjs

@@ -149,6 +149,7 @@ export default defineConfig(
       ],
       // allow for chai `expect().to.xyz`
       '@typescript-eslint/no-unused-expressions': 'off',
+      'new-cap': ['error', { capIsNewExceptionPattern: '^express\\..*' }],
     },
   },