Function protectionServer

internal/httpapi/protection_test.go:16–56

protectionServer builds a server whose UpdateAgentProtection mutates a captured agent so the handler's re-read reflects the write — the full PUT → store → re-read → view round-trip over the real chi+Huma stack.

(t *testing.T)

// agent so the handler's re-read reflects the write — the full PUT → store →
// re-read → view round-trip over the real chi+Huma stack.
func protectionServer(t *testing.T) (*httptest.Server, *identity.AgentIdentity) {
	t.Helper()
	ag := sampleAgent()
	ag.InboundPolicy = "open"
	ag.InboundPolicyAction = "flag"
	ag.OutboundPolicy = "open"
	ag.OutboundPolicyAction = "flag"
	ag.InboundScanSensitivity = "off"
	ag.OutboundScanSensitivity = "off"
	deps := Deps{
		Authenticator: func(r *http.Request) (*identity.User, error) {
			if r.Header.Get("Authorization") == "Bearer good" {
				return &identity.User{ID: "u_1", Email: "owner@acme.com"}, nil
			}
			return nil, errors.New("unauthorized")
		},
		GetAgent: func(ctx context.Context, address string) (*identity.AgentIdentity, error) {
			if address == "support@acme.com" {
				a := ag
				return &a, nil
			}
			return nil, errors.New("not found")
		},
		UpdateAgentProtection: func(ctx context.Context, agentID, userID string, cfg identity.ProtectionConfig) error {
			ag.InboundPolicy = cfg.InboundGatePolicy
			ag.InboundAllowlist = cfg.InboundAllowlist
			ag.InboundPolicyAction = cfg.InboundGateAction
			ag.InboundScanSensitivity = cfg.InboundScanSensitivity
			ag.OutboundPolicy = cfg.OutboundGatePolicy
			ag.OutboundPolicyAction = cfg.OutboundGateAction
			ag.OutboundScanSensitivity = cfg.OutboundScanSensitivity
			ag.HITLTTLSeconds = cfg.HITLTTLSeconds
			ag.HITLExpirationAction = cfg.HITLExpirationAction
			return nil
		},
		Legacy: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { w.WriteHeader(http.StatusTeapot) }),
	}
	srv := httptest.NewServer(New(deps))
	t.Cleanup(srv.Close)
	return srv, &ag
}

// TestProtectionPutGetRoundTrip: PUT a posture, then confirm GET returns the
// nested shape with the written values.