refactor(api): share Pagination across admin/public; cover get-by-id auth

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-02 21:53:21 +02:00
parent 0055616099
commit 1888e185f7
5 changed files with 40 additions and 43 deletions
@@ -97,7 +97,19 @@ async fn list_and_get_require_auth(pool: PgPool) {
        )
        .await
        .unwrap();
+
+    let get = app
+        .oneshot(
+            Request::builder()
+                .uri(format!("/api/admin/objects/{}", domain::ObjectId::new()))
+                .body(Body::empty())
+                .unwrap(),
+        )
+        .await
+        .unwrap();
+
    assert_eq!(list.status(), StatusCode::UNAUTHORIZED);
+    assert_eq!(get.status(), StatusCode::UNAUTHORIZED);
 }

 #[sqlx::test(migrations = "../db/migrations")]