Function TestLegacyKeyResolvesAccount

internal/identity/api_key_scope_test.go:119–150

TestLegacyKeyResolvesAccount: a pre-Slice-5a row with NULL scope resolves to account (the backfill guarantee — no key silently loses authority).

(t *testing.T)

// TestLegacyKeyResolvesAccount: a pre-Slice-5a row with NULL scope resolves to
// account (the backfill guarantee — no key silently loses authority).
func TestLegacyKeyResolvesAccount(t *testing.T) {
	pool := testutil.TestDB(t)
	store := identity.NewStore(pool)
	ctx := context.Background()
	user, err := store.CreateOrGetUser(ctx, "legacy@example.com", "Owner", "google-legacy")
	if err != nil {
		t.Fatalf("CreateOrGetUser: %v", err)
	}
	// Simulate a legacy key inserted the pre-Slice-5a way: the INSERT does not
	// mention the scope column at all, so migration 034's NOT NULL DEFAULT
	// 'account' backfills it — the guarantee that no existing key loses
	// authority on deploy. Hash the plaintext exactly as the store does.
	plaintext := "e2a_legacykey_deadbeef"
	if _, err := pool.Exec(ctx,
		`INSERT INTO api_keys (id, user_id, name, key_prefix, key_hash, created_at)
		 VALUES ($1, $2, $3, $4, encode(sha256($5::bytea), 'hex'), now())`,
		"apk_legacy", user.ID, "legacy", "e2a_legacy", plaintext,
	); err != nil {
		t.Fatalf("insert legacy key: %v", err)
	}

	p, err := store.GetPrincipalByAPIKey(ctx, plaintext)
	if err != nil {
		t.Fatalf("GetPrincipalByAPIKey(legacy): %v", err)
	}
	if p.Scope != identity.ScopeAccount {
		t.Errorf("legacy key scope = %q, want account (backfill)", p.Scope)
	}
	if p.User.ID != user.ID {
		t.Errorf("legacy key user = %s, want %s", p.User.ID, user.ID)
	}
}