feat(ai-character): 리소스 관리 기반 정비

src/shared/api/__tests__/client-auth.test.ts

@@ -1,7 +1,7 @@
 import { http, HttpResponse } from "msw";
 import { afterEach, describe, expect, test, vi } from "vitest";
 
-import { AccessDeniedError } from "../api-error";
+import { AccessDeniedError, ApiError, UNKNOWN_API_ERROR_MESSAGE } from "../api-error";
 import { createApiClient } from "../client";
 import { server } from "../../test/server";
 import { apiBaseUrl, createTestClient, valueSchema } from "./client-test-helpers";
@@ -147,6 +147,42 @@ describe("authenticated API requests", () => {
     expect(onAuthExpired).toHaveBeenCalledTimes(2);
   });
 
+  test.each([
+    ["malformed JSON", () => new HttpResponse("not-json", { status: 401 })],
+    ["empty body", () => new HttpResponse(null, { status: 401 })],
+    ["schema mismatch", () => HttpResponse.json({ success: false, data: null, errorProperty: null }, { status: 401 })],
+  ])("clears the session once for concurrent protected 401 responses with %s", async (_label, responseFactory) => {
+    // Given
+    vi.stubEnv("VITE_API_BASE_URL", apiBaseUrl);
+    const { client, clearSession, onAuthExpired } = createTestClient();
+    server.use(http.get(`${apiBaseUrl}/protected`, responseFactory));
+
+    // When
+    const results = await Promise.allSettled([
+      client.request({
+        path: "/protected",
+        responseSchema: valueSchema,
+        authentication: "required",
+      }),
+      client.request({
+        path: "/protected",
+        responseSchema: valueSchema,
+        authentication: "required",
+      }),
+    ]);
+
+    // Then
+    for (const result of results) {
+      expect(result.status).toBe("rejected");
+      if (result.status === "rejected") {
+        expect(result.reason).toBeInstanceOf(ApiError);
+        expect(result.reason).toMatchObject({ status: 401, message: UNKNOWN_API_ERROR_MESSAGE, errorProperty: null });
+      }
+    }
+    expect(clearSession).toHaveBeenCalledTimes(1);
+    expect(onAuthExpired).toHaveBeenCalledTimes(1);
+  });
+
   test("surfaces access denied without clearing the session", async () => {
     // Given
     vi.stubEnv("VITE_API_BASE_URL", apiBaseUrl);