Initial commit of Descrybe v2 without local scratch artifacts.

Drop one-shot tmp/axe scripts and agent i18n scratch so the Gitea tree is deployable.
2026-08-09 22:47:43 +02:00
commit 8580c996c3
1285 changed files with 325780 additions and 0 deletions
@@ -0,0 +1,50 @@
+package httpapi
+
+import (
+	"bytes"
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/descrybe/descrybe-v2/apps/api/internal/auth"
+	"github.com/go-chi/chi/v5"
+	"github.com/google/uuid"
+)
+
+func TestHandleAdminSetStaffRoleRejectsSelf(t *testing.T) {
+	t.Parallel()
+	uid := uuid.MustParse("aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa")
+	s := &Server{Auth: &auth.Service{}}
+	req := httptest.NewRequest(http.MethodPatch, "/api/admin/users/"+uid.String()+"/staff-role",
+		bytes.NewBufferString(`{"staff_role":"support_staff"}`))
+	ctx := context.WithValue(context.Background(), ctxUserID, uid)
+	rctx := chi.NewRouteContext()
+	rctx.URLParams.Add("id", uid.String())
+	ctx = context.WithValue(ctx, chi.RouteCtxKey, rctx)
+	req = req.WithContext(ctx)
+	rec := httptest.NewRecorder()
+	s.handleAdminSetStaffRole(rec, req)
+	if rec.Code != http.StatusForbidden {
+		t.Fatalf("status = %d body=%s, want 403", rec.Code, rec.Body.String())
+	}
+}
+
+func TestHandleAdminSetStaffRoleInvalidJSON(t *testing.T) {
+	t.Parallel()
+	actor := uuid.MustParse("aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa")
+	target := uuid.MustParse("bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb")
+	s := &Server{Auth: &auth.Service{}}
+	req := httptest.NewRequest(http.MethodPatch, "/api/admin/users/"+target.String()+"/staff-role",
+		bytes.NewBufferString(`{`))
+	ctx := context.WithValue(context.Background(), ctxUserID, actor)
+	rctx := chi.NewRouteContext()
+	rctx.URLParams.Add("id", target.String())
+	ctx = context.WithValue(ctx, chi.RouteCtxKey, rctx)
+	req = req.WithContext(ctx)
+	rec := httptest.NewRecorder()
+	s.handleAdminSetStaffRole(rec, req)
+	if rec.Code != http.StatusBadRequest {
+		t.Fatalf("status = %d, want 400", rec.Code)
+	}
+}