tercul-backend/internal/app/app.go
google-labs-jules[bot] f675c98e80 Fix: Correct authorization logic in integration tests
The integration tests for admin-only mutations were failing due to an authorization issue. The root cause was that the JWT token used in the tests did not reflect the user's admin role, which was being set directly in the database.

This commit fixes the issue by:
1.  Updating the `CreateAuthenticatedUser` test helper to generate a new JWT token after a user's role is changed. This ensures the token contains the correct, up-to-date role.
2.  Removing all uses of `auth.ContextWithAdminUser` from the integration tests, making the JWT token the single source of truth for authorization.

This change also removes unused imports and variables that were causing build failures after the refactoring. All integration tests now pass.
2025-10-04 23:48:44 +00:00

78 lines
2.6 KiB
Go

package app
import (
"tercul/internal/app/analytics"
"tercul/internal/app/author"
"tercul/internal/app/book"
"tercul/internal/app/bookmark"
"tercul/internal/app/category"
"tercul/internal/app/collection"
"tercul/internal/app/comment"
"tercul/internal/app/like"
"tercul/internal/app/localization"
"tercul/internal/app/tag"
"tercul/internal/app/translation"
"tercul/internal/app/user"
"tercul/internal/app/auth"
"tercul/internal/app/work"
"tercul/internal/data/sql"
"tercul/internal/domain/search"
platform_auth "tercul/internal/platform/auth"
)
import "tercul/internal/app/authz"
// Application is a container for all the application-layer services.
type Application struct {
Author *author.Service
Book *book.Service
Bookmark *bookmark.Service
Category *category.Service
Collection *collection.Service
Comment *comment.Service
Like *like.Service
Tag *tag.Service
Translation *translation.Service
User *user.Service
Localization *localization.Service
Auth *auth.Service
Authz *authz.Service
Work *work.Service
Analytics analytics.Service
}
func NewApplication(repos *sql.Repositories, searchClient search.SearchClient, analyticsService analytics.Service) *Application {
jwtManager := platform_auth.NewJWTManager()
authzService := authz.NewService(repos.Work, repos.Translation)
authorService := author.NewService(repos.Author)
bookService := book.NewService(repos.Book, authzService)
bookmarkService := bookmark.NewService(repos.Bookmark)
categoryService := category.NewService(repos.Category)
collectionService := collection.NewService(repos.Collection)
commentService := comment.NewService(repos.Comment, authzService)
likeService := like.NewService(repos.Like)
tagService := tag.NewService(repos.Tag)
translationService := translation.NewService(repos.Translation, authzService)
userService := user.NewService(repos.User, authzService)
localizationService := localization.NewService(repos.Localization)
authService := auth.NewService(repos.User, jwtManager)
workService := work.NewService(repos.Work, searchClient, authzService)
return &Application{
Author: authorService,
Book: bookService,
Bookmark: bookmarkService,
Category: categoryService,
Collection: collectionService,
Comment: commentService,
Like: likeService,
Tag: tagService,
Translation: translationService,
User: userService,
Localization: localizationService,
Auth: authService,
Authz: authzService,
Work: workService,
Analytics: analyticsService,
}
}