studio/services/admin/tests/middleware.test.ts

import { describe, it, expect, vi, beforeEach } from "vitest";

beforeEach(() => {
  vi.resetModules();
});

describe("middleware auth logic", () => {
  it("allows requests with tailscale-user-login header", () => {
    const headers = new Headers({ "tailscale-user-login": "ozan@tinqs.com" });
    const hasTsLogin = headers.get("tailscale-user-login");
    expect(hasTsLogin).toBe("ozan@tinqs.com");
  });

  it("rejects requests without any auth in production", () => {
    const headers = new Headers({});
    const hasTsLogin = headers.get("tailscale-user-login");
    const isDev = false;
    const allowBypass = false;
    expect(hasTsLogin || isDev || allowBypass).toBeFalsy();
  });

  it("allows dev mode bypass", () => {
    const headers = new Headers({});
    const hasTsLogin = headers.get("tailscale-user-login");
    const isDev = true;
    expect(hasTsLogin || isDev).toBeTruthy();
  });
});