add auth + remote nrepl

2026-09-19 07:21:19 -09:00
parent 3b0b608d7d
commit d9499594bf
21 changed files with 932 additions and 14 deletions
@@ -61,6 +61,13 @@ bb integration-test/integration_test.bb http://localhost:3000 --watch --interval
 | 8 | `GET /api-docs` | 200, `text/html` |
 | 9 | `GET /api/add?x=2&y=3` | 200, EDN `{:result 5}` |
 | 10 | `GET /api/add` with bad params | 400 for a missing or non-numeric param |
+| 11 | `GET /auth/login` | 302 to Gitea's authorize URL with the client id and a state; `HttpOnly` cookie |
+| 12 | `GET /auth/callback` with no login in progress | 400 |
+| 13 | `GET /auth/me` without a session | 401 |
+| 14 | `POST /nrepl` without a session | 401, even with an invalid body |
+
+The app container gets dummy Gitea settings from `docker-compose.yml`, so tests 11-14 cover the
+unauthenticated surface only; completing a login needs a real Gitea (the unit tests stub one).

 Test 4 needs the compiled UI, which the Docker image includes (`script/integration-test`
 builds it). Against a locally running server, run `script/ui-build` first.