Initial Commit

packages/api-stack/api/api-auth-static-principal/tests/conformance/api-auth.test.ts

@@ -0,0 +1,32 @@
+/**
+ * §16 conformance proof at the package level — the static-principal
+ * resolver MUST pass `runAuthSessionConformance` from
+ * `@suaveplan/api-auth/testing` with both seed paths populated. Seeded
+ * with a known Principal so the harness exercises the "recognised request"
+ * scenario; `nullForPaths` lets the harness assert the "unrecognised"
+ * scenario without rewiring the factory.
+ */
+import { runAuthSessionConformance } from "@suaveplan/api-auth/testing";
+import type { Principal } from "@suaveplan/api-types/principal";
+import { createStaticPrincipalResolver } from "../../src/factory/create-static-principal-resolver.js";
+
+const P: Principal = {
+    id: "u_pkg_conf" as Principal["id"],
+    scopes: ["billing:write" as Principal["scopes"][number]],
+    tenantId: "acme" as Principal["tenantId"],
+    claims: { sub: "u_pkg_conf" },
+};
+
+runAuthSessionConformance({
+    label: "api-auth-static-principal",
+    factory: () =>
+        createStaticPrincipalResolver({
+            principal: P,
+            nullForPaths: ["/__public/*"],
+        }),
+    seedNull: () => new Request("https://example.test/__public/health"),
+    seedPrincipal: () => ({
+        request: new Request("https://example.test/api/billing/invoices"),
+        expected: P,
+    }),
+});