medcore-route-test

To generate Vitest unit tests for Express routes, scaffold a test file that uses hoisted Prisma mocks to avoid real database calls, then assert response shapes, RBAC permissions, Zod validation rejections, and audit-log side effects deterministically.

Mock-based RBAC testing extracts auth middleware ordering from your Express route file and uses hoisted mocks to simulate various user roles, allowing assertions for forbidden and unauthenticated response states without a real database connection.

Yes, you can test Zod validation rejections and audit-log side effects by extracting route schemas and Prisma calls, then using hoisted mocks to verify invalid payloads trigger correct error status codes and audit writes execute as expected.

The best way to cover state-machine and fraud guards is to extract these guards from your route file and generate behavior-driven test clusters validating idempotency and fraud prevention logic using deterministic mocked Prisma and auth middleware responses.

No, you do not need a real Postgres database because the unit tests use hoisted Prisma mocks to simulate database interactions, ensuring tests remain deterministic by validating route handler logic and response shapes without actual DB calls.

Express route unit tests fail without hoisted Prisma mocks because mock instances are unavailable during module initialization, preventing the test suite from intercepting database calls and validating state-machine guards or audit-log side effects correctly.