SCRAPE-21: Add requireAuth + requireAdmin middleware verification #25

Merged
stephen merged 1 commits from scraper/auth-middleware into dev 2026-02-06 23:08:51 -07:00

1 Commits

Author SHA1 Message Date
2b20a59512 Add comprehensive auth middleware test coverage for scraper routes
All checks were successful
CI/CD Pipeline - Apartment API / Scan Dependencies (pull_request) Successful in 13s
CI/CD Pipeline - Apartment API / Lint & Test (pull_request) Successful in 41s
CI/CD Pipeline - Apartment API / Send Webhook Notification (pull_request) Successful in 2s
CI/CD Pipeline - Apartment API / Build & Push Image (pull_request) Has been skipped
CI/CD Pipeline - Apartment API / Deploy to Production (pull_request) Has been skipped
Add 29 new tests verifying requireAuth and requireAdmin middleware
behavior across all 3 scraper endpoints (POST /run, GET /status,
GET /history). Test coverage includes:

- Missing JWT token returns 401
- Invalid JWT token returns 401
- Expired JWT token returns 401
- Token signed with wrong secret returns 401
- Disabled user returns 401
- Non-existent user returns 401
- Non-admin user returns 403
- Valid admin user receives expected 200/202 responses
- Middleware ordering: auth failures return 401 before admin check

Total scraperRoutes tests: 81 (52 existing + 29 new)
2026-02-06 23:06:35 -07:00