Harden CMS security and theme contrast

src/lib/api-auth.test.ts

@@ -0,0 +1,11 @@
+import { describe, expect, it } from "vitest";
+import { personalTokenScope } from "@/lib/auth/personal-token-scope";
+
+describe("personalTokenScope", () => {
+  it("scopes token operations to the user model and owner id", () => {
+    expect(personalTokenScope(42)).toEqual({
+      tokenableId: 42n,
+      tokenableType: "App\\Models\\User",
+    });
+  });
+});