- All 8 route test files destructure { db, userId } from createTestDb()
- All route test middleware sets c.set("userId", userId)
- MCP tools.test.ts passes userId to all registerXTools(db, userId) calls
- MCP tools.test.ts passes userId to getCollectionSummary(db, userId)
- Added 4 cross-user isolation tests for MCP tools (items, item by ID, threads, collection summary)
- OAuth test db type annotation updated for new createTestDb return shape
- Images test now uses createTestDb with userId context
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
34 lines
965 B
TypeScript
34 lines
965 B
TypeScript
import { describe, expect, test } from "bun:test";
|
|
import { Hono } from "hono";
|
|
import { imageRoutes } from "../../src/server/routes/images";
|
|
import { createTestDb } from "../helpers/db.ts";
|
|
|
|
const { db, userId } = createTestDb();
|
|
const app = new Hono();
|
|
app.use("*", async (c, next) => {
|
|
c.set("db", db);
|
|
c.set("userId", userId);
|
|
await next();
|
|
});
|
|
app.route("/api/images", imageRoutes);
|
|
|
|
describe("POST /api/images/from-url", () => {
|
|
test("returns 400 for missing URL", async () => {
|
|
const res = await app.request("/api/images/from-url", {
|
|
method: "POST",
|
|
headers: { "Content-Type": "application/json" },
|
|
body: JSON.stringify({}),
|
|
});
|
|
expect(res.status).toBe(400);
|
|
});
|
|
|
|
test("returns 400 for invalid URL", async () => {
|
|
const res = await app.request("/api/images/from-url", {
|
|
method: "POST",
|
|
headers: { "Content-Type": "application/json" },
|
|
body: JSON.stringify({ url: "not-a-url" }),
|
|
});
|
|
expect(res.status).toBe(400);
|
|
});
|
|
});
|