Test: Add crypto API check and improve rate limit error handling

Co-authored-by: justin.r.hall <justin.r.hall@gmail.com>

Author: cursoragent

src/__tests__/pwned-password.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect } from 'vitest';
+import { describe, it, expect, vi } from 'vitest';
 import { http } from 'msw';
 import { server } from '../../mocks/server.js';
 import { PASSWORD, SHA1_RESPONSE_BODY } from '../../test/fixtures.js';
@@ -89,4 +89,18 @@ describe('pwnedPassword', () => {
       return pwnedPassword(PASSWORD, { addPadding: true });
     });
   });
+
+  describe('environment', () => {
+    it('rejects when the Web Crypto API is unavailable', async () => {
+      expect.assertions(1);
+      vi.stubGlobal('crypto', undefined as unknown as Crypto);
+      try {
+        await expect(pwnedPassword('anything')).rejects.toThrow(
+          'The Web Crypto API is not available in this environment.',
+        );
+      } finally {
+        vi.unstubAllGlobals();
+      }
+    });
+  });
 });

src/api/haveibeenpwned/__tests__/fetch-from-api.test.ts

@@ -146,6 +146,28 @@ describe('internal (haveibeenpwned): fetchFromApi', () => {
         '[RateLimitError: Rate limit is exceeded. Try again in 2 seconds.]',
       );
     });
+
+    it('sets retryAfterSeconds to undefined when header is missing', async () => {
+      server.use(
+        http.get('*', () => {
+          return new Response(JSON.stringify(TOO_MANY_REQUESTS.body), {
+            status: TOO_MANY_REQUESTS.status,
+            // omit retry-after header
+          });
+        }),
+      );
+      let err;
+
+      try {
+        await fetchFromApi('/service/rate_limited', { apiKey });
+      } catch (e: unknown) {
+        err = e;
+      }
+
+      expect(err).toBeInstanceOf(Error);
+      expect((err as Error).name).toBe('RateLimitError');
+      expect((err as { retryAfterSeconds?: number }).retryAfterSeconds).toBeUndefined();
+    });
   });
 
   describe('unexpected HTTP error', () => {