@proteinjs/db 1.26.0 → 1.28.0

package/test/util/DbTestEnvironment.ts

@@ -1,4 +1,5 @@
 import { Table, DbDriver } from '@proteinjs/db';
+import { registerTestUser, clearTestUser } from './testUser';
 import { cascadeDeleteTestTables } from './tables/cascadeDeleteTestTables';
 import { columnTypesTestTables } from './tables/columnTypesTestTables';
 import { crudTestTables } from './tables/crudTestTables';
@@ -25,6 +26,9 @@ export class DbTestEnvironment {
   ) {}
 
   async beforeAll() {
+    // UserAuth is fail-closed; the suites run non-system Db paths, so they carry an explicit
+    // identity instead of leaning on an open gate.
+    registerTestUser();
     if (this.dbDriver.start) {
       await this.dbDriver.start();
     }
@@ -35,6 +39,7 @@ export class DbTestEnvironment {
   }
 
   async afterAll() {
+    clearTestUser();
     for (const table of TABLES.reverse()) {
       await this.dropTestTable(table);
     }

package/test/util/testUser.ts

@@ -0,0 +1,27 @@
+import { UserAuth } from '@proteinjs/user-auth';
+
+/**
+ * Explicit test identity for suites that exercise non-system `Db` paths.
+ *
+ * `UserAuth` is FAIL-CLOSED: with no registered `AuthenticatedUserRepo` every table gate denies.
+ * Test harnesses that run `Db` outside a server (driver suites, the reusable CRUD suites) must
+ * therefore say who they are instead of leaning on an open gate. Register in `beforeAll`, clear
+ * in `afterAll`; `DbTestEnvironment` does both for the reusable suites.
+ *
+ * The static is reached via a runtime cast per the test-harness convention — widening `UserAuth`
+ * with a setter only tests need would be the wrong trade.
+ *
+ * @internal This module is intended to be used only in tests. Do not use it in production code.
+ */
+
+type UserAuthInternals = { userRepo?: { getUser: () => { email: string; roles: string[] } } };
+
+/** Register an explicit identity on `UserAuth` (admin by default — the reusable suites test CRUD, not table doors). */
+export const registerTestUser = (roles: string[] = ['admin'], email = 'db-test-user@test.local') => {
+  (UserAuth as unknown as UserAuthInternals).userRepo = { getUser: () => ({ email, roles }) };
+};
+
+/** Remove the registered test identity, restoring the deny-everything unregistered state. */
+export const clearTestUser = () => {
+  (UserAuth as unknown as UserAuthInternals).userRepo = undefined;
+};