Marc-André Bombeck 3d837cdd77 test(kit): call route handlers through the real API kit against Postgres ...

tests/kit/ holds typed fixture factories and callRoute(handler, options).
The factories write through the application's Prisma client, so a fixture has
the shape production stores and the compiler checks it; sessions and Bearer
tokens are minted by createSession and issueApiToken, so a fixture cannot
drift into a shape authentication no longer accepts.

callRoute builds a real NextRequest, fills the next/headers stand-in from the
auth fixture and runs the exported handler, apiHandler included. Every call is
also a contract check: the status must be declared for that path and method in
the OpenAPI registry, a JSON body must parse with the registered schema, and a
key the schema does not declare fails the call. The scope gate's generic 403,
documented on the shared 401, is the one answer accepted without its own
entry. kit-contract.test.ts proves each refusal can fire.

The token list and revoke move onto the kit. The mocked unit test asserted
the list's where clause and proved the API switch is not consulted by reading
api-handler.ts for a string; the kit test authenticates a Bearer token while
the switch is off, revokes it, and shows it refused on the next request.

2026-10-22 05:30:31 +02:00

..

fixtures

docs: publish the UI standards in docs/contributing

2026-10-21 19:37:22 +02:00

integration

test(kit): call route handlers through the real API kit against Postgres

2026-10-22 05:30:31 +02:00

kit

test(kit): call route handlers through the real API kit against Postgres

2026-10-22 05:30:31 +02:00