tests: minitest + rack-test suite, bin/test with ephemeral Postgres

test/admin_auth_test.rb

@@ -0,0 +1,40 @@
+require_relative 'test_helper'
+
+require 'base64'
+
+class AdminAuthTest < Minitest::Test
+  OK_APP = ->(_env) { [200, {}, ['ok']] }
+
+  def setup
+    @auth = AdminAuth.new(OK_APP)
+  end
+
+  def env_for(path, user: nil, pass: nil)
+    env = { 'PATH_INFO' => path }
+    if user
+      env['HTTP_AUTHORIZATION'] = "Basic #{Base64.strict_encode64("#{user}:#{pass}")}"
+    end
+    env
+  end
+
+  def test_correct_credentials_pass
+    assert_equal 200, @auth.call(env_for('/admin/invoices', user: 'admin', pass: 'test-password'))[0]
+  end
+
+  def test_wrong_password_rejected
+    assert_equal 401, @auth.call(env_for('/admin/invoices', user: 'admin', pass: 'nope'))[0]
+  end
+
+  def test_wrong_user_rejected
+    assert_equal 401, @auth.call(env_for('/admin/invoices', user: 'other', pass: 'test-password'))[0]
+  end
+
+  def test_missing_header_rejected
+    assert_equal 401, @auth.call(env_for('/admin'))[0]
+  end
+
+  def test_sibling_paths_not_gated
+    assert_equal 200, @auth.call(env_for('/'))[0]
+    assert_equal 200, @auth.call(env_for('/admin-invoice-form.js'))[0]
+  end
+end