feat(03-01): add ServeMux groups, JWT verifier, and serve command

Named middleware resolves at boot, HS256 tokens are pinned with required
exp/sub, and both binaries expose a signal-aware serve command.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Jakub Zych
2026-09-17 20:04:13 +02:00
parent d0d845052b
commit 4ee4c4a2fc
18 changed files with 976 additions and 12 deletions

View File

@@ -3,6 +3,8 @@ package main
import (
"bytes"
"crypto/sha256"
"net/http"
"net/http/httptest"
"os"
"os/exec"
"strings"
@@ -13,6 +15,7 @@ import (
"git.golem15.com/golem15/summercms/compass"
"git.golem15.com/golem15/summercms/pact"
"git.golem15.com/golem15/summercms/party"
"git.golem15.com/golem15/summercms/surf"
)
func TestGreeterHelloPrintsLayeredConfig(t *testing.T) {
@@ -104,6 +107,42 @@ func TestBuiltBinaryGreeterHello(t *testing.T) {
assertGreeting(t, got, want)
}
func TestTypedItemRoute(t *testing.T) {
cfg, err := compass.Load("config")
if err != nil {
t.Fatal(err)
}
application := backpack.New(cfg)
plugins, err := party.Activate(application, PluginIDs)
if err != nil {
t.Fatal(err)
}
h, err := surf.Assemble(application, plugins)
if err != nil {
t.Fatal(err)
}
rec := httptest.NewRecorder()
h.ServeHTTP(rec, httptest.NewRequest(http.MethodGet, "/items/nope", nil))
if rec.Code != http.StatusNotFound {
t.Fatalf("malformed id status = %d", rec.Code)
}
rec = httptest.NewRecorder()
h.ServeHTTP(rec, httptest.NewRequest(http.MethodGet, "/items/12", nil))
if rec.Code != http.StatusOK || rec.Body.String() != `{"id":12}` {
t.Fatalf("got %d %s", rec.Code, rec.Body.String())
}
}
func TestHelpListsServe(t *testing.T) {
var buf bytes.Buffer
if err := run([]string{"--help"}, &buf); err != nil {
t.Fatal(err)
}
if !strings.Contains(buf.String(), "serve") {
t.Fatalf("help missing serve:\n%s", buf.String())
}
}
func TestMigrateWithoutDSNFailsLoudly(t *testing.T) {
var buf bytes.Buffer
err := run([]string{"migrate"}, &buf)