Merge pull request #706 from LabsCrypt/fix/main-ci-green-2

fix(backend): restore real auth.js exports in test mocks so suites load

Author: ogazboiz

backend/tests/integration/streams.test.ts

@@ -11,16 +11,22 @@ import request from 'supertest';
 // Bypass Stellar signature verification on POST /v1/streams. The route is
 // exercised here as a stand-in for the indexer worker, so we replace the auth
 // middleware with a stub that injects a deterministic wallet.
-// Simple factory — no importOriginal — reliable with pool:forks.
-vi.mock('../../src/middleware/auth.js', () => ({
-  requireAuth: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
-    next();
-  },
-  requireAdmin: (_req: any, res: any, _next: any) => {
-    res.status(403).json({ error: 'Forbidden' });
-  },
-}));
+// Preserve the module's real exports (issueChallenge, verifyChallenge,
+// verifyJwt) — auth.routes wires them up at app construction — while stubbing
+// only the middleware so requests bypass JWT verification.
+vi.mock('../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
+      next();
+    },
+    requireAdmin: (_req: any, res: any, _next: any) => {
+      res.status(403).json({ error: 'Forbidden' });
+    },
+  };
+});
 
 // ─── Mocks (using vi.hoisted to ensure they are available to vi.mock) ─────────
 

backend/tests/integration/streams/cancel.test.ts

@@ -39,15 +39,19 @@ vi.mock('../../../src/lib/prisma.js', () => {
 
 // Mock auth middleware to bypass real Stellar signature verification.
 // Uses a simple factory (no importOriginal) so it is reliable with pool:forks.
-vi.mock('../../../src/middleware/auth.js', () => ({
-  requireAuth: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: 'G_SENDER_123' };
-    next();
-  },
-  requireAdmin: (_req: any, res: any, _next: any) => {
-    res.status(403).json({ error: 'Forbidden' });
-  },
-}));
+vi.mock('../../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: 'G_SENDER_123' };
+      next();
+    },
+    requireAdmin: (_req: any, res: any, _next: any) => {
+      res.status(403).json({ error: 'Forbidden' });
+    },
+  };
+});
 
 // ─── App import (after mocks) ───────────────────────────────────────────────
 

backend/tests/integration/streams/withdraw.test.ts

@@ -33,15 +33,19 @@ vi.mock('../../../src/services/sorobanService.js', () => ({
 }));
 
 // Simple factory — no importOriginal — reliable with pool:forks.
-vi.mock('../../../src/middleware/auth.js', () => ({
-  requireAuth: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: currentUser.publicKey };
-    next();
-  },
-  requireAdmin: (_req: any, res: any, _next: any) => {
-    res.status(403).json({ error: 'Forbidden' });
-  },
-}));
+vi.mock('../../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: currentUser.publicKey };
+      next();
+    },
+    requireAdmin: (_req: any, res: any, _next: any) => {
+      res.status(403).json({ error: 'Forbidden' });
+    },
+  };
+});
 
 import app from '../../../src/app.js';
 

backend/tests/integration/top-up.test.ts

@@ -58,16 +58,22 @@ vi.mock('../../src/services/sorobanService.js', () => ({
   cancelStream: vi.fn(),
 }));
 
-// Simple factory — no importOriginal — reliable with pool:forks.
-vi.mock('../../src/middleware/auth.js', () => ({
-  requireAuth: vi.fn((req: any, _res: any, next: any) => {
-    req.user = { publicKey: req.headers['x-test-caller'] ?? SENDER };
-    next();
-  }),
-  requireAdmin: vi.fn((_req: any, res: any, _next: any) => {
-    res.status(403).json({ error: 'Forbidden' });
-  }),
-}));
+// Preserve the module's real exports (issueChallenge, verifyChallenge,
+// verifyJwt) — auth.routes wires them up at app construction — while stubbing
+// only the middleware so requests bypass JWT verification.
+vi.mock('../../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: vi.fn((req: any, _res: any, next: any) => {
+      req.user = { publicKey: req.headers['x-test-caller'] ?? SENDER };
+      next();
+    }),
+    requireAdmin: vi.fn((_req: any, res: any, _next: any) => {
+      res.status(403).json({ error: 'Forbidden' });
+    }),
+  };
+});
 
 // App import after mocks
 import app from '../../src/app.js';

backend/tests/stream.test.ts

@@ -1,16 +1,22 @@
 import { describe, it, expect, vi, beforeEach } from 'vitest';
 import request from 'supertest';
 
-// Simple factory — no importOriginal — reliable with pool:forks.
-vi.mock('../src/middleware/auth.js', () => ({
-  requireAuth: (req: any, _res: any, next: any) => {
-    req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
-    next();
-  },
-  requireAdmin: (_req: any, res: any, _next: any) => {
-    res.status(403).json({ error: 'Forbidden' });
-  },
-}));
+// Preserve the module's real exports (issueChallenge, verifyChallenge,
+// verifyJwt) — auth.routes wires them up at app construction — while stubbing
+// only the middleware so requests bypass JWT verification.
+vi.mock('../src/middleware/auth.js', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('../src/middleware/auth.js')>();
+  return {
+    ...actual,
+    requireAuth: (req: any, _res: any, next: any) => {
+      req.user = { publicKey: 'GTEST_USER_PUBLIC_KEY' };
+      next();
+    },
+    requireAdmin: (_req: any, res: any, _next: any) => {
+      res.status(403).json({ error: 'Forbidden' });
+    },
+  };
+});
 
 vi.mock('../src/middleware/stream-rate-limiter.middleware.js', () => ({
   streamCreationRateLimiter: (_req: any, _res: any, next: any) => next(),