init

2026-08-22 02:59:16 +02:00
commit 6a5bb1d699
100 changed files with 17409 additions and 0 deletions
@@ -0,0 +1,56 @@
+package auth
+
+import (
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	appdb "github.com/example/sndit/backend/internal/db"
+)
+
+func TestRegisterLoginAndSession(t *testing.T) {
+	ctx := context.Background()
+	database, err := appdb.New(ctx, "sqlite", ":memory:")
+	if err != nil {
+		t.Fatalf("open sqlite database: %v", err)
+	}
+	defer database.Close()
+	if _, err := database.ExecContext(ctx, `
+		CREATE TABLE users (
+			id TEXT PRIMARY KEY NOT NULL,
+			email TEXT NOT NULL UNIQUE,
+			password_hash TEXT NOT NULL,
+			name TEXT NOT NULL,
+			created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+			updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+		)
+	`); err != nil {
+		t.Fatalf("create users table: %v", err)
+	}
+
+	service, err := NewService(NewRepository(database), "test-session-secret-that-is-long-enough", false)
+	if err != nil {
+		t.Fatalf("create auth service: %v", err)
+	}
+	user, err := service.Register(ctx, "Photographer@Example.com", "DemoPassword123!", "Northline Studio")
+	if err != nil {
+		t.Fatalf("register user: %v", err)
+	}
+	if user.Email != "photographer@example.com" {
+		t.Fatalf("email was not normalized: %q", user.Email)
+	}
+	loggedIn, err := service.Login(ctx, "PHOTOGRAPHER@example.com", "DemoPassword123!")
+	if err != nil || loggedIn.ID != user.ID {
+		t.Fatalf("login failed: user=%+v err=%v", loggedIn, err)
+	}
+
+	recorder := httptest.NewRecorder()
+	service.SetSession(recorder, user)
+	request := httptest.NewRequest(http.MethodGet, "/api/auth/me", nil)
+	request.AddCookie(recorder.Result().Cookies()[0])
+	fromSession, err := service.UserFromRequest(ctx, request)
+	if err != nil || fromSession.ID != user.ID {
+		t.Fatalf("session lookup failed: user=%+v err=%v", fromSession, err)
+	}
+}