test(handlers/socket): add socket_test.go — 6 cases for Phase 30.1/30.2 auth gate #710

Closed
fullstack-engineer wants to merge 1 commits from test/699-socket-handler-coverage into staging

1 Commits

Author SHA1 Message Date
ceccfeafa8 test(handlers/socket): add socket_test.go — 6 cases for Phase 30.1/30.2 auth gate
All checks were successful
sop-tier-check / tier-check (pull_request) Successful in 17s
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 17s
audit-force-merge / audit (pull_request) Has been skipped
Tests SocketHandler.HandleConnect WebSocket upgrade auth logic:

1. Canvas client (no X-Workspace-ID) → bypasses auth, no DB calls
2. Agent with no live tokens → grandfathered through, no bearer check
3. DB error on HasAnyLiveToken → 500 Internal Server Error
4. Live token present, missing Bearer header → 401 Unauthorized
5. Live token present, invalid Bearer token → 401 Unauthorized

Uses sqlmock for DB expectations + miniredis for wsauth token subsystem.
Hub.Run() drains the Register channel so WS upgrade attempts don't block.

Issue: #699

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-12 09:15:17 +00:00