feat: mock HIBP

package.json

@@ -134,6 +134,7 @@
     "jest-fail-on-console": "^3.3.0",
     "lint-staged": "^15.2.2",
     "mjml-browser": "^4.15.3",
+    "oauth2-mock-server": "^7.1.2",
     "prettier": "3.2.5",
     "react-intersection-observer": "^9.10.2",
     "sass": "^1.77.2",

src/app/api/mock/hibp/breachedaccount/range/[hashPrefix]/route.ts

@@ -0,0 +1,38 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+import { NextResponse } from "next/server";
+import { logger } from "../../../../../../functions/server/logging";
+import { getSha1 } from "../../../../../../../utils/fxa";
+import type { BinaryLike } from "crypto";
+type BreachedAccountResponse = {
+  hashSuffix: string;
+  websites: string[];
+}[];
+
+export function GET() {
+  const { APP_ENV } = process.env;
+
+  // Check if APP_ENV is set to production
+  if (APP_ENV === "production") {
+    return NextResponse.json(
+      { error: "Endpoint not available in production environment" },
+      { status: 403 },
+    );
+  }
+
+  // Mock data for test email, can be randomized
+  const userEmail = process.env.E2E_TEST_ACCOUNT_EMAIL;
+  const currentUserSha = getSha1(userEmail as BinaryLike);
+  logger.info("Mock endpoint: /breachedaccount/range/");
+
+  const data: BreachedAccountResponse = [
+    {
+      hashSuffix: currentUserSha.slice(6).toUpperCase(),
+      websites: ["Adobe"],
+    },
+  ];
+
+  return NextResponse.json(data);
+}