Lucas Berger 6d1d338a45 test(03-09): add RED OIDC path tests — resolveUserId must call upsertUser (CR-06) ...

- POST /create with valid OIDC session (devBypassInjectUser.active=false, getAuth
  returns valid iss/sub) must return 202 not 401
- POST /create with no session (getAuth=null) must return 401
- Refactor getAuth/devBypass mocks to use vi.hoisted configurable flags for
  per-test OIDC path isolation
- Mock upsertUser from auth/user.js so OIDC resolution can be verified

2026-06-05 20:40:09 -04:00

..

events.test.ts

test(03-09): add RED OIDC path tests — resolveUserId must call upsertUser (CR-06)

2026-06-05 20:40:09 -04:00

me.test.ts

fix(02): add regression tests for /api/me under dev-auth bypass

2026-06-05 13:48:05 -04:00