test(admin): update tests for mandatory admin auth

Author: mahmut-Abi

internal/admin/resource_api_test.go

@@ -56,6 +56,10 @@ func newTestServerWithResourceManagerAndLoggerAndOptions(
 ) *Server {
 	t.Helper()
 
+	if !authConfigured(opts) {
+		opts.BearerToken = testAuthToken
+	}
+
 	store := ir.NewSnapshotStore(logger)
 	nodes := nodeinfo.NewRegistry(
 		ir.NewNodeStatusStore(),
@@ -325,6 +329,7 @@ func performRequestWithBody(
 	t.Helper()
 
 	req := httptest.NewRequest(method, path, bytes.NewReader(body))
+	req.Header.Set("Authorization", "Bearer "+testAuthToken)
 	recorder := httptest.NewRecorder()
 	server.server.Handler.ServeHTTP(recorder, req)
 

internal/admin/server_auth_metrics_test.go

@@ -154,6 +154,7 @@ func TestAdminRateLimiterUsesBurstAndRecords429Metrics(t *testing.T) {
 	})
 
 	req := httptest.NewRequest(http.MethodGet, "/v1/summary", nil)
+	req.Header.Set("Authorization", "Bearer "+testAuthToken)
 	req.RemoteAddr = "203.0.113.10:12345"
 	recorder := httptest.NewRecorder()
 	server.server.Handler.ServeHTTP(recorder, req)

internal/admin/server_backend_node_test.go

@@ -425,7 +425,7 @@ func TestNodeEndpointsFallbackToSharedLeaseState(t *testing.T) {
 		nodeinfo.NewRegistry(ir.NewNodeStatusStore(), nil, logger, nodeinfo.Options{PersistTimeout: time.Second}),
 		NewResourceManager(client, logger),
 		logger,
-		Options{},
+		Options{BearerToken: testAuthToken},
 	)
 
 	var nodes []ir.NodeStatus
@@ -516,7 +516,7 @@ func TestNodeEndpointsIgnoreStaleSharedLeaseState(t *testing.T) {
 		nodeinfo.NewRegistry(ir.NewNodeStatusStore(), nil, logger, nodeinfo.Options{PersistTimeout: time.Second}),
 		NewResourceManager(client, logger),
 		logger,
-		Options{},
+		Options{BearerToken: testAuthToken},
 	)
 
 	var nodes []ir.NodeStatus

internal/admin/server_chatbot_test.go

@@ -52,7 +52,7 @@ func newChatbotTestServer(t *testing.T, k8sObjects ...client.Object) *Server {
 		nodes,
 		NewResourceManager(k8sClient, logger),
 		logger,
-		Options{},
+		Options{BearerToken: testAuthToken},
 	)
 }
 

internal/admin/server_test.go

@@ -31,6 +31,8 @@ import (
 	"github.com/nantian-gw/gateway/internal/nodeinfo"
 )
 
+const testAuthToken = "test-admin-token"
+
 func TestNewServerAppliesRuntimeTimeouts(t *testing.T) {
 	t.Parallel()
 
@@ -251,6 +253,10 @@ func newTestServerWithOptions(t *testing.T, opts Options) *Server {
 func newTestServerWithRepository(t *testing.T, repo nodeinfo.Repository, opts Options) *Server {
 	t.Helper()
 
+	if !authConfigured(opts) {
+		opts.BearerToken = testAuthToken
+	}
+
 	logger := slog.New(slog.NewTextHandler(io.Discard, nil))
 	store := ir.NewSnapshotStore(logger)
 	nodes := nodeinfo.NewRegistry(
@@ -432,6 +438,7 @@ func performRequest(t *testing.T, server *Server, method, path string, target an
 	t.Helper()
 
 	req := httptest.NewRequest(method, path, nil)
+	req.Header.Set("Authorization", "Bearer "+testAuthToken)
 	recorder := httptest.NewRecorder()
 	server.server.Handler.ServeHTTP(recorder, req)