import { describe, expect, it } from "vitest"; import { shouldRedirectAdminRequest } from "./proxy-access"; describe("shouldRedirectAdminRequest", () => { it("redirects anonymous admin requests before rendering", () => { expect(shouldRedirectAdminRequest("/admin", null)).toBe(true); }); it("defers every authenticated rank to database authorization", () => { expect(shouldRedirectAdminRequest("/admin/permissions", { rank: 1 })).toBe( false, ); expect( shouldRedirectAdminRequest("/admin/permissions", { rank: 2000 }), ).toBe(false); expect(shouldRedirectAdminRequest("/news", null)).toBe(false); }); });